We have implicit branch matchers, so there's no need to add a check for
not-ocata, this job is only run for the branch it's on - like master
now.
Remove it to not confuse Zuul when multiple branches matches and the job
is different.
Also fix heat-container-agent to make linking of /usr/bin/python to python3
conditional on whether it already exists.
Change-Id: I1fec9d19cd14cf2fe2473b7610870e8d669021b9
The output of heat-container-agent has become unreadable. This patch
aims to address this in order to make debugging easier.
Additionally, this patch also adds missing dependencies in the most
recent fedora:rawhide (32) image.
Task: 36392
Story: 2006463
Change-Id: I54180b96357f6fa6d4044d818740ae70e036e435
At the moment, the Python locale module expects `en_US.utf8` to be
present. More recent fedora rawhides only come with `C`, `C.utf8` and
`POSIX` locale options unlike the older rawhides. The workaround is to
build the Dockerfile with environment variable `LC_ALL` set to `C`. See
https://storyboard.openstack.org/#!/story/2006381#comment-141003 for a
longer description of the problem.
Change-Id: I412dd84f09dc217f2c9d974fe203c296b0710ef0
Story: 2006381
Task: 36184
The heat-container-agent is currently failing to build due to misconfigured
upstream fedora:rawhide image. We can revert this change later.
Change-Id: I66723ae4329985c84a4549e44a4a7624927b3045
Story: 2006381
Task: 36184
Now the default python version of rawhide has been upgraded to
python 3.7.4, this patch fixes those py2->py3 issues which followed
from the origin heat-agent commits[1][2].
[1] 25cd394bbe
[2] 73e2125532
Task: 35989
Story: 2006283
Change-Id: I23056513dcc6f0cb0c7d41aa529f6a2e77679db9
In a recent version of fedora base and
python/pip that comes with it, pip installed
pkgs put their binaries in /usr/local/bin
instead of /usr/bin. Since the lanuch script is
a bash script we do not have to use the absolute
path.
Change-Id: I9f31d047fe538114136d2199b447e3fe8248aa8c
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>
There are cases where systemd fails to restart kubernetes services.
This change fixes that by inceasing the restart interval in the
service templates.
Change-Id: I305644a78cee80db43b561e71a532feb414d8322
story: 2006265
task: 35956
In [0] we added a build-arg for the deprecaeted
--allow-priv option. This arg needs to be defined
after the FROM line in the dockerfile.
Note, other systems like podman can use the
arg even before the FROM statement. Docker needs
it after.
[0] I2935d34ace08800c805028f1673bc515f2f577e6
story: 2005124
Change-Id: I34af2451e92962b835ac0f1a1e49dfcbfd477830
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>
Without this, the service fails to start with
runc[1150]: error: unable to find suitable network address.error='no
default routes found in "/proc/net/route" or "/proc/net/ipv6_route"'.
Try to set the AdvertiseAddress directly or provide a valid BindAddress
to fix this
Story: 2005698
Task: 31019
Change-Id: I0da4381cdc06f15815bd5ae51417aaf93d36b2c1
Add enable_tiller label to install tiller in k8s_fedora_atomic
clusters. Defaults to false.
Add tiller_tag label to select the version of tiller. If the
tag is not set the tag that matches the helm client version in
the heat-agent will be picked. The tiller image can be stored
in a private registry and the cluster can pull it using the
container_infra_prefix label.
Install tiller securely using helper container.
TODO:
*add instructions on how RBAC is designed
https://docs.helm.sh/using_helm/#example-deploy-tiller-in-a-namespace-restricted-to-deploying-resources-in-another-namespace
* add docs on how to install addon in the cluster using this tiller
* how users can get the creds to talk to tiller
NOTE:
The main goal of this tiller is internal usage!
Users can still deploy other tillers in other namespaces.
story: 2003902
task: 26780
Change-Id: I99d3a78085ba10030200f12bbfe58a72964e2326
Signed-off-by: dioguerra <dy090.guerra@gmail.com>
Add openssh-client to the heat-agent to act on the
host.
story: 2002210
task: 29142
Change-Id: I6e52291e4fc750418c70a22cc386034fa729d765
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>
* do not log the login command
* change dockerhub creds
* fix reference of tag in the push images task
* add retries
* remove repository parameter
* pull fedora from docker.io
* name docker_image tasks for each kubernetes and magnum images
* drop async logs
Change-Id: Iead202bdf9d7d42d0b7e21bea73a298678be714b
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>
Andreas Jaeger
Bharat Kunwar
Feilong Wang
Spyros Trigazis
Theodoros Tsioutsias
Jake Yip