In Fedora Atomic 27 etcd and flanneld are removed from the base image.
Install them as a system containers.
* update docker-storage configuration
* add etcd and flannel tags as labels
Change-Id: I2103c7c3d50f4b68ddc11abff72bc9e3f22839f3
Closes-Bug: #1735381
After [1] jobs are return false(SUCCESS) status due
to wrong EXIT_CODE.
After [2] kubernetes client is updated to v4.0.0 and
no longer contains ConfiugrationObject so we need create
instance of Configuration class.
Also don't use local to create variable as local
can only be used in a function.
[1] https://review.openstack.org/#/c/526618/
[2] https://review.openstack.org/#/c/528406
Change-Id: Ida5aac40b234a358b2a13b2e51a41d0242031ebb
Use the heat-container-agent from a system container.
It means that the docker daemon can be started later.
Pass as a software deployment with the heat-agent the following
software-configurations:
* prometheus-monitoring
** pin prometheus to v1.8.2 since its config is not 2.0.0
compatible
Add heat-container-agent container image.
Implements: blueprint heat-agent
Related-Bug: #1680900
Change-Id: I084b7fe51eddb7b36c74f9fe76cda37e8b48f646
* It removes magnum tempest plugin reference in favour of using
newly magnum-tempest-plugin.
* We removed tempest tests resides under functional.api.v1.test-*
files as they are tempest tests and keeping the rest as they are
used by functional tests.
Depends-On: Ibdddd26da9cfb0d08c2977660320b2c052d7261b
Change-Id: Ida2fa1ef5880ebead787e3b27ac7ebf5aa498f62
Following up of https://review.openstack.org/#/c/487357
Depends-On: I22918c0b06ca34d96ee68ac43fabcd5c0b281950
Implements: blueprint run-kube-as-container
Change-Id: I9a7d00cddb456b885b6de28cfb3d33d2e16cc348
* Swarm-mode is the fastest cluster to deploy since it doesn't
require to pull anything from outside.
* Add the output nodes for swarm-mode too.
* Disable copy logs (I think a better practice is to copy logs
on demand).
* Don't run test_create_list_sign_delete_clusters, because it is
very unstable on the CI.
Partially-Implements: blueprint swarm-mode-support
2nd commit message:
Update to Fedora Atomic 26
This patch moves the current master to test against Fedora Atomic 26,
in addition, it switches to downloading from Fedora mirrors.
2nd-Change-Id: I9a97c0eb78b2c9d10e8be1501babb19e73ee70c1
3rd commit message:
Set default iptables FORWARD policy to ACCEPT
With the release of Docker 1.13 which is available in Fedora
Atomic 26, it no longer sets the policy of the FORWARD chain
to ACCEPT[1]. Therefore, CNI networking such as Flannel will
cease to work.
This patch sets the policy to ACCEPT so that traffic can work
once again for deployments which are based on Docker versions
which are newer than 1.13
[1]: https://github.com/moby/moby/pull/28257
3rd-Change-Id: I1457602748619f38f87542fc01a2996ee80e58b7
Closes-Bug: #1708454
Co-Authored-By: Mohammed Naser <mnaser@vexxhost.com>
Change-Id: I86d4dcc94fff622be4ee2acc8dd60ed81bc5d433
The patch https://review.openstack.org/#/c/437048/ changed the
permission of /etc/sysconfig/heat-params to 600, so non-file owners
would require use of 'sudo' in order to access the file. This patch
fixes it
Closes-Bug: #1704076
Change-Id: I8bb4a12deb92fa5035bbbb8fc6ce4736ed99ea78
Mitaka branch is EOLed. The Ironic team is going to proceed with
removal of SSH-based power and management drivers for virtualized
HW which were deprecated back in newton release.
http://lists.openstack.org/pipermail/openstack-dev/2017-July/119284.html
Change-Id: I7351573a20f3835f481ab1973b6439d8ca2b8f60
If the devstack vm supports nested virtualization we should
use it.
This can done using by setting: DEVSTACK_GATE_LIBVIRT_TYPE=kvm.
This will increase the performance in gate jobs.
Change-Id: I2439de036dfec2ada3c92c2d4b71c73b5f41a518
Post [1] we cannot use auth_uri/auth_url containing :5000, :35357.
Update keystone auth_uri and auth_url in magnum.conf to connect
with keystone using /identity/v3 and /identity_admin/v3.
[1] https://review.openstack.org/#/c/456344/
Change-Id: I5d69e7454cf8a5e8c92ff23b6c932184d82e8a98
devstack: Allow access to ports 80 and 443
So far, we were allowing access to port 5000 for keystone.
When devstack siwtched to uwsgi we couldn't access keystone
anymore.
Co-Authored-By: Spyros Trigazis <strigazi@gmail.com>
Change-Id: I4d3d482889fd9f6119ceec81757abac9d1251a97
New release of Fedora Atomic [1].
The new release of Fedora Ironic includes the same
packages.
Main changes:
Kubernetes 1.5.3
etcd 3.1.3
Plus several fixes and version bumps.
Add :Z when mounting certs in the swarm containers to set
selinux labels properly.
[1] http://www.projectatomic.io/blog/2017/03/fedora_atomic_mar28/
Closes-Bug: #1677664
Change-Id: I2539ae83401db5b34716ebd4bbdfbe288f5c768b
For multinode jobs a key with the default name id_rsa already
exists. Add a key for magnum named id_rsa_magnum.
Co-Authored-By: yatinkarel <yatin.karel@nectechnologies.in>
Change-Id: I343e27a6e7311d7d0033bc089293f945c3af2ef8
With this patch we will use glance v2 api's for interacting
with glance.
[1] I7f962a07317cdad917ee896d79e49ee18938d074
Closes-Bug: 1672535
Change-Id: Iedc25b55ad2751e14d3794b1cb80f724f1a735c4
Recent change in Infra [1] makes use of local.conf instead of
localrc. Use DEVSTACK_LOCAL_CONFIG to pass the MAGNUM_IMAGE_URL.
[1] https://review.openstack.org/#/c/326585/
Change-Id: I0426cd0aba64a3f4cc595a0919320adbbc86d5f0
After changes in the heat-agents [1] the auth calls of the nodes
to heat were failing. The mesos image that was used was missing
chnage [1].
Update to ubuntu-mesos daily builds.
[1] https://review.openstack.org/#/c/397232/1
Closes-Bug: #1662280
Change-Id: I06ab3f7a92f06a7eddf297c5ecd2bf2e35f3728b
Get the pod logs for controller-manager and scheduler.
The current copy logs from journalctl because controller-manager
and scheduler used to be managed by systemd.
Change-Id: I1e4e5a810f838cc59d4a4aaa4fc4478541872b0b
Atomic image contains:
kubernetes-1.5.2-2.fc25.x86_64
docker-1.12.6-5.git037a2f5.fc25.x86_64
flannel-0.5.5-8.fc25.x86_64
etcd-3.0.15-1.fc25.x86_64
The ironic image contains exactly the same packages.
* For this upgrade the upstream image is used, which is
uploaded here [1].
* Minor changes for flannel and docker-storage-setup
were needed.
* The image will be built in the CI and uploaded to
tarballs.openstack.org as soon as possible.
* Ironic image [2].
Notes:
* docker-storage-setup config changes were needed because in
the previous images it was disabled and it was started by us.
* We can have selinux enables in containers since the images
have kernel 4.9.x.
[1] https://fedorapeople.org/groups/magnum/fedora-atomic-25-latest.qcow2
[2] https://fedorapeople.org/groups/magnum/fedora-25-kubernetes-ironic.tar.gz
Change-Id: Iac6e30c530821a49a5c3978e335e0b1d56a576e0
One limitation that we might be facing when try to run large
containers like hyperkube is is the size of the master node
flavor. Increase the master flavor memory to 1024 mb.
Change-Id: Ie095d8de290343dc995fbcd88445509cc36579bc
Currently magnum CI tests(magnum/tests/contrib/post_test_hook.sh) uses
python clients(nova,neutron, glance) for openstack operations.
We should start using openstack client instead.
Closes-Bug: #1653875
Change-Id: I00aab79ccf3e267be77115a8847d72c8f6e32075
The new image includes:
kubernetes-1.2.0-0.26.git4a3f9c5.fc24.x86_64
docker-1.10.3-26.git1ecb834.fc24.x86_64
etcd-2.2.5-5.fc24.x86_64
flannel-0.5.5-6.fc24.x86_64
Change-Id: I5bf6c5ce775d937cc656d4da678ce2a2a33c9dab
If the services are disabled in the devstack/settings file, it disables
them for everyone who uses the magnum devstack plugin. Some people (like
shade) use both magnum and swift to test things. Putting this in the
gate hook means it's used in all of magnum's jobs, but not in other
people's jobs.
Change-Id: Icd82a4ab68533f39f967575c2125b0f61c70e0a6
Swift Ceilometer and horizon are not used. Disabling them
it will give us space.
Cleanup disabling of octavia and neutron/lbaas.
Closes-Bug: #1646870
Closes-Bug: #1648148
Change-Id: I4b177421f0eb0a058b8927b9d2dd12865d3c920e
For ironic driver functional testing on gate only a flavor named
"baremetal" is required which is already created by ironic devstack. So,
creation of flavors "m1.small" and "s1.small" should be skipped for
ironic driver functional testing.
Change-Id: Ia8643f9c041f91dcb08ab8b6011be7be1fdf0311
* Update functional_creds.conf.sample
* and functional_creds.conf in post_gate_hook
* Update python_client_base to use keystone v3 credentials
* Get magnum_url from magnum.conf
Closes-Bug: #1474152
Change-Id: If1ce6e77396857fef68c5c288f0b1c7fecb0b4d4
This patch fixes the issue when functional tests are run
against a deployment that has https based endpoints.
The insecure option is not being passed when initiating
magnumclient or keystoneclient as a result we get SSL
error.
Change-Id: I35525917b96b64e57c984924c72b3c696949f67f
Closes-Bug: #1640341
Update the gate and docs to use "ubuntu-mesos-latest" instead of
"ubuntu-14.04.3-mesos-0.25.0.qcow2". The intent is to make the
image upgrade easier (by using a static image name). In fedorapeople,
a soft link was created from "ubuntu-mesos-latest.qcow2" to
"ubuntu-14.04.3-mesos-0.25.0.qcow2"
Change-Id: I544773d184e5436843595dbfd9ab118b99870281
The order of enabling devstack plugin is important if project
has dependency of other projects.
Magnum has some dependency of projects, so this patch fixes
the order of enabling plugin.
Change-Id: I733e061fab4ed40fd00bfb017d9c2835c49f6a8f
Now that heat is available as a devstack plugin, we should
use it. In-tree devstack code for heat is planned to be
removed soon[1].
And also, this patch remove `update_heat_policy` function
in devstack plugin. Because fetching global stack list is
already option to use in Magnum.
[1] https://review.openstack.org/#/c/317618/
Change-Id: Iab675da5ea8d02b3f7e71f6169c81724a0066858
Co-Authored-By: OTSUKA, Yuanying <yuanying@fraction.jp>
Proper functionality with lbaas and ironic couldn't
be verified and the infra job was failing.
Disable lbaas on the ironic driver for now.
Change-Id: I2518bb57e44eb71bd26faad4a3af19fa0e9e75f4
Partially-Implements: blueprint magnum-lbaasv2-support
LBaaS v1 api is completely removed by neutron, so it
cannot be used now. Added Support of LBaaS v2 API.
Now all COE's uses LBaaS v2.
Co-Authored-By: yatin karel <yatin.karel@nectechnologies.in>
Change-Id: Idbccbe1065857449fc8e158115b7833b68c2da9f
Partially-Implements: blueprint magnum-lbaasv2-support
This is patch 3 of 3 to change the internal usage of the terms
Bay and BayModel. This patch updates Bay to Cluster in DB and
Object as well as all the usages. No functionality should be
changed by this patch, just naming and db updates.
Change-Id: Ife04b0f944ded03ca932d70e09e6766d09cf5d9f
Implements: blueprint rename-bay-to-cluster
Only fedora 24 is the default release used in the
fedora-minimal elements. [1]
[1] I0ac0d0767d4de9d28ae86d1344fd7c9d8876e5a1
Change-Id: I089baf0105b68bcd13aa86fb683c6d240e560107
The test needs a valid CSR which was created in the devstack post_test_hook
in a static way (always the same CSR).
This commit simplifies the process and just adds the CSR to the test itself
so that the CSR string can be used to check the CSR. That way there is no need
to provide a file with the CSR content and point the tempest configuration
via the "csr_location" parameter to that file.
So the "csr_location" parameter is now deprecated for removal.
Also remove the unused "invalid.csr" which was also created in the
post_test_hook.
Change-Id: I907130576cfb59267643b4639681331acfcfa07f
Spyros Trigazis
yatin