Commit Graph

769 Commits (master)

Author SHA1 Message Date
Zuul a3276fd53b Merge "docs: Change Storyboard links to Launchpad" 2023-10-04 06:48:41 +00:00
Michal Nasiadka 58a6bb69a4 docs: Change Storyboard links to Launchpad
Change-Id: I84d5a3b516f3e46b82e4a87b00013c5c942b96e8
2023-10-03 14:17:45 +02:00
Michal Nasiadka 5a495b65b7 docs: Remove references to wiki
Change-Id: Idfb2ffd3f008bdfdc4f317330ee9c6ba9d18900d
2023-10-03 14:13:10 +02:00
Jake Yip 8aff3120c3 Add k8s v1.26.8 and FCOS 38 to docs
Change-Id: I0a0c5414f8f5befbd8215e989306aba053125caa
2023-09-14 10:59:43 +10:00
Jake Yip d3897a749a [doc] Add supported labels and OS for Bobcat
Change-Id: I26fea98c5820027fefe15bf9691423cd20b8df85
2023-09-07 15:26:01 +10:00
Zuul 278d64acda Merge "[doc] Add supported labels kubernetes coe" 2023-09-03 08:46:00 +00:00
Diogo Guerra 11bcc17568 Drop bay and baymodel from magnum
- Drop bay and baymodel tests
- Drop bay and baymodel from controllers

Depends-On: Ib85e4fda8e4ac467bd49590dc72ba5913bb9a19d

Story: 2009104
Task: 42957
Task: 42959

Signed-off-by: Diogo Guerra <>
Change-Id: Ida2e42c86400438951d9804e3ce122c56a46b94f
2023-05-09 13:59:57 +00:00
Jake Yip df5bb49bf2 Remove Swarm documentation
Swarm is deprecated. Remove all documentation for swarm to reflect

Also fix up image used, from fedora-atomic to fedora-coreos

Change-Id: I67fa19bf5637e61464e682e7787b795b7604d569
2023-05-07 07:44:11 +00:00
Jake Yip 769484544f [doc] Add supported labels kubernetes coe
Add the tested labels to documentation. This will give users a sense of
what versions of containers they should use to have a working cluster.

Change-Id: I0e4e540738915dff7aec16f229e9d090f59f8f87
2023-04-28 18:45:46 +10:00
Jake Yip 58b4c8c296 [doc] Add FCOS version in Supported versions
Due to differences in different versions of FCOS 35 [1], users need to
know the exact version of FCOS 35 that are tested and supported.


Change-Id: Ia040e9f3b0861a57f70cd8397ee02ebe3d32a297
2023-04-16 20:14:04 +10:00
guilhermesteinmuller 6e8657912c Drop Mesos code
The coe mesos has not been maintained for quite some
time and hasn't got much attention from the community
in general. As discussed in the mailing list [1] we
are dropping for now.



Change-Id: Ie7de9a37bfad6214f52d0605409e74d62a51df47
2023-03-07 14:02:05 +11:00
Jake Yip ab9fe94d53 Remove user docs for Cluster Type Definition
ClusterType Template has been moved to Drivers since Change
I17ba94b0e2000486b5fcbf792991ad98183bd26c. There is no longer any need
to manage drivers since they are now loaded automatically now.

Also removed deprecated config option.

Change-Id: Ie72180b903c0c13b2291482516829bf7d340dd79
2023-03-01 10:34:27 +00:00
Jake Yip 4dad26bf53 Fix docs table formatting
Change-Id: Ie5db14ee07f20966a4f47df8d1ab46d0562a8846
2023-02-14 22:48:28 +11:00
Jake Yip 78a6ff0d03 Add supported Kubernetes version
As discussed in the PTG, Move the Compatibility Matrix from wiki[1] to
user docs.

The wiki will be retired after this.


Change-Id: I15dd799af58272577d53793417795bf793179598
2023-02-08 18:12:19 +11:00
Zuul e8522168da Merge "Minor fix for flannel default in docs" 2022-12-07 22:11:32 +00:00
Zuul 421ad9c9f5 Merge "remove unicode literal from code" 2022-11-09 11:33:37 +00:00
Jake Yip 0aedd208dd Minor fix for flannel default in docs
Flannel default is vxlan on fedora coreos[1] and udp on coreos.

However, since we are planning on dropping coreos, let's keep this


Change-Id: I7966ad70c00f20f4b051762efbfaec6700f5d141
2022-11-09 22:11:59 +11:00
Michal Nasiadka ac5702c406 Adapt Cinder CSI to upstream manifest
- Bump also components to upstream manifest versions.
- Add small tool to sync Cinder CSI manifests automatically

Change-Id: Icd19b41d03b7aa200965a3357a8ddf8b4b40794a
2022-09-26 13:28:37 +00:00
Jake Yip 80f830b938 Update package name for Ubuntu
Story: 2010156
Task: 45811
Change-Id: I7a8274a83e1f6240642b6ec5bc65c3e01fb3818e
2022-08-25 12:38:22 +10:00
niuke 7aae554f8b remove unicode literal from code
Change-Id: Iba762b3c1de4c0d7169299724285deba68fe7256
2022-07-30 15:20:41 +08:00
Jake Yip 9ed49d4845 Fix ingress-controller link in docs
Task: 45340
Change-Id: Ifaf5e707d5f3c257e17bd9540418c4284250cbb3
2022-06-01 20:20:29 +10:00
Zuul 53f5e804d1 Merge "Add support for choosing Octavia provider" 2022-05-11 10:12:48 +00:00
Michal Nasiadka 5af49aa2fa Add support for choosing Octavia provider
Story: 2008805

Add support for:
* choosing Octavia provider
* setting octavia_lb_algorithm
* disabling Octavia healthcheck

Change-Id: I2d424fc2e2f8967e4b3007faedbc089f37126968
2022-05-03 09:32:24 +00:00
Jake Yip 9ad849db7c Drop mesos documentation
Remove all mention of mesos in documentation prior to removing it in

Story: 2009873
Task: 44581

Change-Id: Ib3bc3ee578bd5e3fd8124ebd370a36ec2fd735c2
2022-04-28 00:17:26 +10:00
Michal Nasiadka a9ab65200c Fix ref in labels table
This fixes openstack-tox-docs gate

Change-Id: I9d8f7e1e4cdf3b7db344c0b6142b181820cafd15
2022-04-13 01:25:52 +00:00
Spyros e47f640f3f [k8s-coreos] Default hyperkube_prefix to rancher
Change the default of hyperkube_prefix to and kube_tag to v1.23.3-rancher1.

story: 2008609
task: 44568

Signed-off-by: Spyros Trigazis <>
Change-Id: I340f9569f517191d54bc492c82c631f485511b0f
2022-02-25 08:43:20 +00:00
Spyros c1c9942f8b fcos-k8s: Update to v1.22
* change to v1
  * update metrics-server
* change to v1
* drop kubelet-https
* update to FCOS 35

story: 2009828
task: 44416

Signed-off-by: Spyros <>
Change-Id: I24b89366a4a8e8bc4c90f6a85ef6de2ac77dae1d
2022-02-03 13:59:32 +00:00
Grzegorz Bialas 9643abc9ae Upgrade to calico_tag=v3.21.2
Additionally, use fixed subnet CIDR for IP_AUTODETECTION_METHOD
supported from v3.16.x onwards.

Story: 2007256
Task: 42017

Change-Id: Iaa25cd5054cec5482f01d90e2cd150bcd9700dbe
2022-01-21 08:50:15 +00:00
Piotr Parczewski a9b9ba2361 Fix docs
Change-Id: Ie25c2748eb2acb6f1ad6bf019a10562628a51010
2022-01-20 16:01:45 +01:00
Takashi Kajinami ce217a287c Deploy healthcheck middleware as app instead of filter
Using the healthcheck middleware as a filter is deprecated and
the middleware should be used as an application[1].
 [1] 6feaa13610c450c8486f969703768db5319b4846

This change updates definition and usage of the healthcheck middleware
accordingly to avoid the following deprecation warning.

DeprecationWarning: Using function/method 'Healthcheck.factory()' is
deprecated: The healthcheck middleware must now be configured as
an application, not as a filter.

Change-Id: Ie81140d3b03c315f0a057d2f59754ee14dac539c
2021-08-19 10:21:15 +09:00
Zuul 042d2ad144 Merge "Update traefik options" 2021-04-27 11:01:11 +00:00
Zuul bc6ec3ab63 Merge "[hca] Use wallaby-stable-1 as default HCA tag" 2021-04-09 20:24:43 +00:00
Zuul c07628bca6 Merge "Support hyperkube_prefix label" 2021-04-07 19:09:49 +00:00
Diogo Guerra b4016783d5 Update traefik options
* Traefik version updated from v1.7.19 to v1.7.28
* Force secure connections to use TLSv1.2 or greater

Change-Id: I65561358113952e3f60dc488b35ee8fa8f8da740
Signed-off-by: Diogo Guerra <>
2021-03-26 18:08:29 +01:00
Bharat Kunwar 1de9b140f4 Download correct cri-containerd-cni tarball
In I05cbd1ec62e9a68c68a1666ff62f20138bf8c731, fedora_coreos_v1 driver was
missed in version bump. This PS bumps it to 1.4.4 for both fedora_coreos_v1 and
fedora_atomic_v1 drivers.

Story: 2008451
Task: 42098

Change-Id: I22b698cd925dcf4f10805ae9493b77ddc9709f3f
2021-03-25 10:50:26 +01:00
Bharat Kunwar 7be7a5a123 [hca] Use wallaby-stable-1 as default HCA tag
- update syntax for compatibility with Ansible 2.9+.
- explicitly check for "not found" to prevent rebuild due to
  other types of errors, e.g. "pull rate limit".

Story: 2007264
Task: 42009

Change-Id: I68ca057e500ea293bde398288432a67eb758af25
2021-03-09 11:46:49 +00:00
Ghanshyam Mann 3b7a33eb64 [goal] Deprecate the JSON formatted policy file
As per the community goal of migrating the policy file
the format from JSON to YAML[1], we need to do two things:

1. Change the default value of '[oslo_policy] policy_file''
config option from 'policy.json' to 'policy.yaml' with
upgrade checks.

2. Deprecate the JSON formatted policy file on the project side
via warning in doc and releasenotes.

Also replace policy.json to policy.yaml ref from doc.


Change-Id: Icfd9e2a75d8fdfb24cbd1c850f498aadee91f543
2021-03-08 15:11:01 +00:00
Bharat Kunwar fc1f27a569 Support hyperkube_prefix label
Additionally for k8s_fedora_coreos_v1 driver:
* Introduce hyperkube_prefix which defaults to
* Bump default kube_tag to v1.18.16

Story: 1668998
Task: 41791

Change-Id: I38b8df45a00f1a2a1604059b8329d1dd762e05cd
2021-02-18 13:18:56 +00:00
Zuul 421269c476 Merge "[doc] Replace Atomic/CoreOS with Fedora CoreOS" 2021-02-10 10:00:42 +00:00
Dmitriy Rabotyagov afce5d9cb7 [doc] Replace Atomic/CoreOS with Fedora CoreOS
Story: 2008596
Task: 41767
Change-Id: I6ee02e49ba50676f9e7c5b06432b9c1d962734da
2021-02-07 11:40:31 +00:00
Diogo Guerra a3d8b4fe8d 4. Update cluster monitoring documentation
Change the User Documentation to introduce the new way of installing
the prometheus monitoring suite by using label monitoring_enabled.
Give a broad overview of the existent monitoring features available
out-of-the-box and which components exist and what they do.
Explain which FAQ can be solved with already existent integrations
by manipulating monitoring specific labels.

task: 39627
story: 2006765

Depends-On: Ie0e7000e0d94b2037f2c398fa67a2a2b7e256bc3
Change-Id: I5581650b15ce94e31a44de09f82aef1790013b54
Signed-off-by: Diogo Guerra <>
2021-02-05 16:00:33 +00:00
Diogo Guerra ea64468ab3 3. Configure monitoring apps path based endpoints
* Add monitoring_ingress_enabled magnum label to set up ingress with
path based routing for all the configured services
{alertmanager,grafana,prometheus}. When using this,
cluster_root_domain_name magnum label must be used to setup base path
where this services are available.
* Add cluster_basic_auth_secret magnum label to configure basic auth
on unprotected services {alertmanager and  prometheus}. This is only
in effect when app access is routed by ingress.
* Set services logFormat to json to enable easier machine log parsing.

task: 39477
story: 2006765

Depends-On: Ieb90605182626869528349a7fdeed65061914bcb
Change-Id: Ie0e7000e0d94b2037f2c398fa67a2a2b7e256bc3
Signed-off-by: Diogo Guerra <>
2021-02-05 15:52:52 +00:00
Diogo Guerra aec5d469be 2. Add persistency for grafana dashboards
When label monitoring_storage_class_name is specified
dashboards altered using the grafana UI are now
persisted if the pod is terminated.
It is still recommended that the user utilizes a
kubernetes configMap to persist the dashboard.

task: 39514
story: 2006765

Depends-On: I42117837e8e3cd03f3cb723df4d73692ead0d169
Change-Id: Ieb90605182626869528349a7fdeed65061914bcb
Signed-off-by: Diogo Guerra <>
2021-02-05 15:52:45 +00:00
Diogo Guerra 37497ccf5b 1. Configurable prometheus monitoring persistent storage
* Add metrics_retention_days magnum label allowing user to specify
prometheus server scraped metrics retention days (default: 14)
* Add metrics_retention_size magnum label allowing user to specify
prometheus server metrics storage maximum size in Gib (default: 14)
* Add metrics_scrape_interval allowing user to specify prometheus
scrape frequency in seconds (default: 30)
* Add metrics_storage_class_name allowing user to specify the
storageClass to use as external retention for pod fail-over data

task: 39509
story: 2006765

Change-Id: I42117837e8e3cd03f3cb723df4d73692ead0d169
Signed-off-by: Diogo Guerra <>
2021-02-05 15:52:33 +00:00
Simon Merrick f3e88ddba7 Fix syntax error in default rolesync configmap
Change-Id: I455ed0106dd257acbde58af408de0bf6e6abe7d3
2020-08-31 21:58:30 +12:00
Zuul 0640707cff Merge "Configure placeholder role-mapping Sync" 2020-08-25 10:24:41 +00:00
Zuul f2b97898c0 Merge "[k8s] Support CA certs rotate" 2020-08-24 09:11:48 +00:00
Feilong Wang 8020391e4a [k8s] Support CA certs rotate
Now k8s cluster owner can do CA cert rotate to re-generate CA of
the cluster, service account keys and the certs of all nodes will
be regenerated as well. Cluster user needs to get a new kubeconfig
to access kubernetes API. This function is only supported by
Fedora CoreOS driver.

To test this patch with python-magnumclient, you need this patch, otherwise, you will see
an error about "not enough values to unpack", though the CA cert
rotate request has been processed by Magnum server side correctly.

Task: 39580
Story: 2005201

Change-Id: I4ae12f928e4f49b99732fba097371692cb35d9ee
2020-08-24 16:31:58 +12:00
Zuul 5b8edcfe17 Merge "[k8s-atomic] Support master_lb_allowed_cidrs in template" 2020-08-21 10:29:38 +00:00
Bharat Kunwar ffed883959 [k8s-atomic] Support master_lb_allowed_cidrs in template
In I157a3b01d169e550e79b94316803fde8ddf77b03, support for
master_lb_allowed_cidrs  was introduced but only for the fedora coreos
driver. However, this parameter is also supplied to fedora atomic
clusters but the template does not expect this parameter. As a result,
cluster creation fails due to backward incompatibility. This PS
addresses this issue.

Task: 40632
Story: 2007478

Change-Id: Ia781288f7aa35146582b10d5762aa05e3b107dce
2020-08-07 15:26:24 +00:00