This change corrects the vm-infra-bridge creation script to set
the iptable rule for masquerade to use the host oam vlan and
updates the vlans to match the multi-tenant site configuration.
Change-Id: If288ed63628658f4e461f512f853b384f0eaeba4
This PS is to update the Rook yaml files for version v1.6.2. Additionally, the version of Ceph is upgraded to v15.2.11 and Ceph-CSI is upgraded to v3.3.1.
v1.6 provides a few features the storage team wants:
* The operator supports upgrading multiple OSDs in parallel
* LVM no longer used to provision OSDs by default
* Monitor failover can be disabled if needed
* Operator support for Ceph Pacific (v16)
* Ceph 15.2.11 by default
* CephClient CRD standardized to controller-runtime library (kubebuilder)
https://github.com/kubernetes-sigs/controller-runtime
* Pod Disruption Budgets enabled by default.
https://github.com/rook/rook/blob/master/design/ceph/ceph-managed-disruptionbudgets.md
More notes:
* There are many indentation changes in common.yaml
* There is now a variable in operator.yaml for enabling host networking for the CSI pods. Default is to use host network.
* CSI image updates:
ROOK_CSI_CEPH_IMAGE: "quay.io/cephcsi/cephcsi:v3.3.1"
ROOK_CSI_SNAPSHOTTER_IMAGE: "k8s.gcr.io/sig-storage/csi-snapshotter:v4.0.0"
* There is a very large update to crds.yaml largely due to the controller-runtime being employed.
* Ceph 15.2.11 needed for CVE-2021-20288
Change-Id: I5cf0cf63bfcf4b0ea1d242d6eae2f53adda7be5e
1. Reflecting changes done in [1] to treasuremap.
2. Changing airshipctl ref to [1]
3. Making static validation work, since it was merged before [1]
4. Adding dex.ldap.bind_password to imported secrets
5. Adding dex.oidc.clientSecret to generated secrets
6. Due to the added new site - increasing the validation timeout
7. Adding replacement for [2]
[1]
https://review.opendev.org/c/airship/airshipctl/+/786286
[2]
https://review.opendev.org/c/airship/treasuremap/+/788991
Relates-To: #128
Change-Id: I473ace3d7aae85ebe76b73253108c6f1b6ca6e95
Some phase entrypoints were missing in the multi-tenant type when the
baremetal reference-multi-tenant-site was created. When the multi-tenant
type was disassociated from the airship-core type [0], those entrypoints
were created and added to all virtual sites; however, the reference
multi-tenant site was not updated. This change fixes those references in
the reference-multi-tenant site.
[0] https://review.opendev.org/c/airship/treasuremap/+/786888
Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: Icc346615a1a6de9cfd4a93e9b8a89a4cd0a640e0
This commit removes the relationship between the multi-tenant and
airship-core types. Since the airship-core type deploys LMA, adding an
LMA sub-cluster to the multi-tenant type would result in deployment of
the LMA stack twice if the inheritance is not removed.
Closes: #116
Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: Ie7dd236af3836d904e41df866e0c2351b7cb0558
- Added vm-infra-bridge/workers-capm3 function
for supporting kubeadmConfigTemplate
- Added k8scontrol-vm-bridge function dir
to house vm-infra-bridge (controlplane)
- Added a new VariableCatalogue to support
vm networking in multi-tenant/shared.
- Added a new systemd service vm-infra-bridge to
handle persistence of bridge and NATing info.
Relates-To: #122
Closes: #122
Change-Id: I5585b05be9e68976e402d025ddc8578870c137f1
This is to add support for creating storageclasses for pv/pvc.
- block-storage-sc
- cephfs-storage-sc
Change-Id: I30471d8d6515a22bcf7c9628c804e6c72191be7a
* cephcluster fails to bring up 3 mons with 2 nodes
* reducing the mon count to 1 for test-site
Error: "start 3 mons on 2 node(s) when allowMultiplePerNode is false"
Change-Id: I140252692c10307eb40f68d5fd18cafeb696cfa2
This patchset integrates the ControlPlane's API server, Dex and LDAP IdP.
The "oidc-apiserver-flags.json" JSON patch file is tailored to the
baremetal operator. It also uses a FQDN for "dex-aio" service that is
not resolvable by the DNS.
This patchset depends on https://review.opendev.org/c/airship/charts/+/785540
which is used to deploy Dex using the function dex-aio. See
treasuremap/manifest/function/dex-aio for implementation details.
Change-Id: I263a5370e6416a7ef7e2813ff362622f49ca4a3c
This change adds a reference site for the multi-tenant type, adapted
from the airship-core reference site.
Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: I7e1518f6fc960ba49d40af79e4bb052251ce749a
The current sub-cluster type implementation does not include any phases
to deliver the SIPCluster CR or the machine templates required for
provisioning a sub-cluster. This change adds the phases to the
sub-cluster type so they can be reused across sub-clusters.
Change-Id: I708cd087749474c2d73b8dca0318b09e86dca0c1
This change adds a basic storage configuration for the stl3 lab for
testing purposes.
Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: I8d16def2acb0df6aa0dc4302f22d99a7c7cbdbda
Additionally edited a few instructions of some existing NEWSUTE tag
Signed-off-by: James Gu <james.gu@att.com>
Change-Id: I6776f5e36ec16f307256362f8aa3720b6399246f
rook-ceph-operator is being deployed during initinfra-target and needs
to be scheduled on tainted node-role.kubernetes.io/master node.
Change-Id: I648a60f06cd615085ffd19bb6c1b5cebb974ef0f
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
This PatchSet adds phases and executor definitions for managing calico v3 network policies
using airshipctl phase run command.
Closes: #119
Change-Id: I7942548720c4b8037b7b0c2de348fe45df73b8f7
* Type catalog should contain only core services related to
the deployment of the ceph cluster (monitors, osds, mgrs, etc)
* Manifests to create pools, dashboards, cephfs - are moved to
the function catalog.
* Code related to the OpenStack deployment is removed
* Dashboard is disabled by default, ingress controller is removed
* Rook-operator version is upgraded to 1.5.9 to prevent incompatibility
with pool quota settings
* Fixed a minor bug in the site-level catalogue storage definition
and in the replacement function
* Added cleanup manifest for StorageCatalogue
* Added airshipctl phase to deploy rook-operator
* Implementation of the rook-ceph operator has been changed
* Added the configuration for the csi driver images
* Added overrides for ceph.conf
* Added configuration for rook-operator and ceph images
* Merge conflict resolution
* Code standartization
* Rename rook-ceph-crds -> rook-operator
Relates-to: [WIP] Expects to deliver Rook/Ceph via 2 phases
Relates-to: #30
Change-Id: I7ec7f756e742db1595143c2dfc6751b16fb25efb
Converts the base versions-treasuremap catalogue back to a
VersionsCatalogue CR and ensures it conforms to the defined
CRD schema. Updates the airshipctl reference to pull in schema
changes made in the airshipctl repo[0].
Also adds replacements for the following functions:
- dex-aio
- rook-operator
[0] https://review.opendev.org/c/airship/airshipctl/+/784620
Closes: #112
Change-Id: Ia755f07f6dc8a9344f0ed640a0f758af9d5368e8
This adds a new target cluster workload phase for deploying a ViNo CR to
the multi-tenant site type delivery.
Closes: #106
Change-Id: I62ab83e7a027f1daba2948159b72a4b23e5f347c
Changes to reflect [1] in treasuremap
Fixed issue in /tools/deployment/35_deploy_worker_node.sh
Aligned the tag of replacement pluging everywhere
[1]
https://review.opendev.org/c/airship/airshipctl/+/779829
Relates-To: #125
Change-Id: I24e3228e73714a14d42f28743b20f89d860f950e
The following construct in #94 fix using patchesJsonMerge
- op: add
path: "/spec/kubeadmConfigSpec/preKubeadmCommands/-"
value:
apt-get update && apt-get install -y bridge-utils keepalived ipset ipvsadm
systemctl enable --now keepalived
This leads to the prekubeadmcommand listed as a single line.
This PS fixes this issue. Also airshipctl #10 needs all system
updates/intall to be moved to Imagebuilder.
Closes: #212
Change-Id: I624de71d2009178670291dc82bd55824ce59e18d
This PS introduces a subcluster networking catalogue and combines all subcluster related networking
in one place so that it can be managed centrally.
A site level patch uses replacement rules defined at type/multi-tenant level to take data out of subcluster-networking catalogue
and inject into networking catalogue.
Relates-To: #103
Closes: #103
Change-Id: I732937a4b68ccb0d290356bed8dbbeae838bae79
This change updates the version of the replacement-transformer and
templater images to v2, the same version used in the airshipctl
repository. Breaking changes have been introduced to the latest versions
of the images, causing document rendering to fail.
Signed-off-by: Drew Walters <andrew.walters@att.com>
Change-Id: Id0411f6c221d9986a6dece4d5f9b91ac94430ecc
Allow ssh access to target and worker nodes on test site in treasuremap.
Signed-off-by: Sreejith Punnapuzha <Sreejith.Punnapuzha@outlook.com>
Change-Id: Id5ee27ec59bbbee85c169449a546c49d56885886
