38 Commits

Author SHA1 Message Date
Tin Lam
515b6697d3 Add apparmor annotation function
This patch set adds helm toolkit functions to annotate apparmor profile
in the container's metadata section.

Change-Id: Ib0ca04e8b8527194778afb8053046797abdfdb98
Signed-off-by: Tin Lam <tin@irrational.io>
2018-09-24 03:20:50 +00:00
Zuul
bc1afb87d7 Merge "Helm-Toolkit: Add snippet for kubernetes tolerations" 2018-09-23 01:13:57 +00:00
Pete Birley
b16b2707d8 Helm-Toolkit: Document kubernetes entrypoint macros
This PS adds documentation for the kubernetes entrypoint macros.

Change-Id: I1bec4d7a58878742462de624ebe0b77579759c09
Signed-off-by: Pete Birley <pete@port.direct>
2018-09-21 08:23:22 +00:00
Steve Wilkerson
a3f444299e HTK: Add s3 user/bucket scripts, snippets, manifests
This proposes adding the following:

Snippets for the environment variables for the s3 admin user and
service users for using rgw's s3 api

Scripts for creating s3 users for use by a particular service and
for creating and linking buckets to those users

Manifest templates for the jobs for creating the s3 users and for
creating and linking the buckets to those users

Change-Id: Ibd5ed0aac49d172c56faffdacd44bdd487978570
2018-09-19 15:52:36 -05:00
Steve Wilkerson
70afe83c16 Helm-Toolkit: Add snippet for kubernetes tolerations
This adds a helm-toolkit template for injecting pod tolerations
via values, similar to how container resources are handled. This
allows for custom definition of tolerations instead of defining
tolerations for pods directly into the pod templates

Change-Id: Ice520fcece425b14ae890ca5980fec9d7428a34d
2018-09-18 13:10:54 +00:00
Zuul
ef37b095b4 Merge "Helm-Toolkit: Add doc comments for keystone env snippets" 2018-09-17 17:11:29 +00:00
Pete Birley
26fd6bc04c Helm-Toolkit: Add doc comments for keystone env snippets
This PS adds doc comments for the keystone env snippets

Change-Id: Ia18b3101e639a713b7cc1c88146a2f91bbcb3984
Signed-off-by: Pete Birley <pete@port.direct>
2018-09-13 13:53:25 +00:00
Pete Birley
bb3ff98d53 Add release uuid to pods and rc objects
This PS adds the ability to attach a release uuid to pods and rc
objects as desired. A follow up ps will add the ability to add arbitary
annotations to the same objects.

Change-Id: Iceedba457a03387f6fc44eb763a00fd57f9d84a5
Signed-off-by: Pete Birley <pete@port.direct>
2018-09-13 05:35:35 +00:00
Jean-Philippe Evrard
bf069b2311 Revert "Update OSH Author copyrights to OSF"
This reverts commit 178aa271a44956e86f4e962bf815fa827d93c9af.

Change-Id: I38a52d866527dfff2689b618e055f439bc248c13
2018-08-28 17:25:54 +00:00
Matt McEuen
178aa271a4 Update OSH Author copyrights to OSF
This PS updates the "Openstack-Helm Authors" copyright attribution
to be the "OpenStack Foundation", as decided in the 2018-03-20
team meeting:
http://eavesdrop.openstack.org/meetings/openstack_helm/2018/openstack_helm.2018-03-20-15.00.log.html

No other copyright attributions were changed.

Change-Id: I1137dee2ae5728771835f4b33fcaff60fcc22ca9
2018-08-26 17:17:06 -05:00
Pete Birley
6186fb6675 Helm-Toolkit: Move sensitive config data to secrets.
This PS updates helm toolkit, and effected charts in
openstack-helm-infra to use Secrets rather than configmaps for
application configuration, as they in many cases contain sensitive data.

Change-Id: Idd17812437465368e92c9fec0d5b634bbf6dc23a
Signed-off-by: Pete Birley <pete@port.direct>
2018-08-23 10:55:07 -05:00
Pete Birley
548fd4445b Helm-Toolkit: update K8S resources function
This PS updates the K8s pod resources function to both include
basic documentation, and also allow null values to be used if
no resource request or limit is desired.

Change-Id: I9dee6af1167a12f0c22b368220ca6343a8c6dc73
Signed-off-by: Pete Birley <pete@port.direct>
2018-07-24 17:30:17 +00:00
Zuul
dd027838bd Merge "Helm-Toolkit: Add basic documentation for the metadata labels function" 2018-07-11 14:52:00 +00:00
Zuul
6200401f24 Merge "Image: Add basic documentation for the image function" 2018-07-10 02:47:17 +00:00
Pete Birley
07d90db1d7 Helm-Toolkit: Move template render to correct location
This PS moves the template renderer function to its correct
location in helm-toolkit.

Thanks to Sai Battina for noticing this.

Change-Id: I614ee33bc8c39007955a0e32cd34e881bd1cb3fe
Signed-off-by: Pete Birley <pete@port.direct>
2018-07-09 17:09:47 -05:00
Pete Birley
87b3b5b907 Helm-Toolkit: Add basic documentation for the metadata labels function
This PS adds basic documentation for the metadata labels function.

Change-Id: I8ef3093aafabb64c61396a721b6c6b66dc5de9e8
Signed-off-by: Pete Birley <pete@port.direct>
2018-07-09 20:57:32 +00:00
Pete Birley
fd242d2656 Image: Add basic documentation for the image function
This PS adds basic documentation for the image function.

Change-Id: I3ee6f44efc7252facb329bc6dae5be571de338bd
Signed-off-by: Pete Birley <pete@port.direct>
2018-07-09 14:18:50 -05:00
Pete Birley
654e78733d Keystone: use internal interface by default
This PS updates the openrc functions to use the internal interface by
default for keystone actions performed within the cluster.

Change-Id: I491618d9fd473917e2034a315f292db746f0d7cc
Signed-off-by: Pete Birley <pete@port.direct>
2018-06-19 08:34:34 -05:00
Pete Birley
0aace1705f Helm-Toolkit: Resolve final deltas between OSH and OSH-Infra
This PS removes the remaining deltas between OSH and OSH-Infra

Change-Id: Ia322b7b62a5b755674d1a244748266e36edcfb8c
2018-05-12 12:48:50 -05:00
Sean Eagan
f402171e42 Move to v0.3.1 of kubernetes-entrypoint
Move to v0.3.1 of kubernetes-entrypoint which has 2 breaking changes to
pod dependencies, and also adds support for depending on jobs via
labels.

Change-Id: I2bafc2153ddd46b3833b253a2e7950bccbccf8ed
2018-04-25 12:38:44 -05:00
Pete Birley
b9336ca613 Helm-Toolkit: Kubernetes Entrypoint, simplify image dependencies
This PS simplify the logic for dyanmicly merging the image management
depenencies into pod deps when active.

Change-Id: I0cf6c93173bc5fbce697ac15be8697d3b1326d0a
2018-04-13 08:42:37 -05:00
Sean Eagan
db15b5e30b Support pod dependencies
Adds support for a new feature of kubernetes-entrypoint, pod
dependencies, that was added in v0.3.0.

Change-Id: I78d9e0545ca3b837cd2386783386a253f7f5a2d6
2018-03-20 10:53:53 -05:00
Steve Wilkerson
9ffc748979 helm-toolkit prometheus service annotation clean up
This adds checks for the fields in the service annotations for
prometheus, similar to the checks made for the pod annotations.
It also moves prometheus annotations under a prometheus: key
under a top-level monitoring tree to allow for other monitoring
mechanisms independent of the endpoints tree

Change-Id: I4be6d6ad8e74e8ca52bd224ceddad785577bf6c7
2018-01-16 20:35:50 +00:00
Steve Wilkerson
182c0c5618 Remove unneeded context in prometheus service annotation
Removes an unused context declaration from the prometheus service
annotation template in helm-toolkit, and removes all references to
it

Change-Id: I57612c1504cf046f367ee10d26ef3062ebe528d3
2018-01-12 08:28:48 -06:00
Tin Lam
e234e8d932 RBAC: Fix issue with inclusion of empty jobs or daemonsets
Currently, the rbac logic would allow for ``jobs`` or ``daemonsets``
if it is specified in the dependencies, even if they may just be empty
or null.  This patch set addresses this by checking the jobs or
daemonsets map in the value.yaml is non-empty before including it
in the Role.

Change-Id: I67f940e1e71c371b63d8d1e9b4f47af633a6bfa4
2017-12-28 04:28:11 -06:00
Zuul
a4a070efea Merge "Add prometheus annotations to calico-nodes for felix metrics" 2017-12-27 18:14:03 +00:00
Steve Wilkerson
9eec1e2da3 Add prometheus annotations to calico-nodes for felix metrics
This adds the prometheus annotations to the calico-node daemonset
to allow prometheus to create a scrape config for calico metrics.
This requires adding a annotation tree in the chart's values.yaml
file

Change-Id: I0e62fce34ea8de6d0241ea00aaae66187b808c81
2017-12-26 10:21:20 -06:00
portdirect
69be9ced33 RBAC: make apiVersion consistent across all snippets
This PS makes the API version consistent across all snippets in
helm-toolkit for rbac.

Change-Id: I38f742cca407e60a5a0193d5e33a1d939e455124
2017-12-26 10:25:55 -05:00
Zuul
8673d55243 Merge "Helm-Toolkit: Split prom pod annotations templates into files" 2017-12-21 17:42:45 +00:00
portdirect
c11c45dda7 Helm-Toolkit: Split prom pod annotations templates into files
This PS splits the `prometheus_pod_annotations.tpl` into seperate
files for each definition contained within it to be consistent
with other funstions in Helm-Toolkit, which can be located by path
from their name.

Change-Id: Ief9e31ead7eb1028cedd8e608d6b11e53e63e515
2017-12-19 20:24:39 -05:00
Tin Lam
628fd3007d RBAC: Consolidate serviceaccounts and restrict rbac
Currently, services have two serviceaccounts: one specified in the
chart that cannot read anything, and one injected via helm-toolkit
that can read everything. This patch set refactors the logic to:

- cleanup the roles and their binding automatically when the helm
  chart is deleted;
- remove the need to separately mount a serviceaccount  with secret;
- better handling of namespaces resource restriction.

Co-Authored-By: portdirect <pete@port.direct>

Change-Id: I47d41e0cad9b5b002f59fc9652bad2cc025538dc
2017-12-19 20:22:57 -05:00
Steve Wilkerson
429a4edd86 Prometheus monitoring for OSH infra
This will move prometheus to OSH-infra to be included as part of
the basic infrastructure deploy for openstack-helm. It includes
charts for Prometheus, Node Exporter, Kube-State-Metrics, and
Alertmanager. It provides a base for monitoring and alerting
for the underlying infrastructure

Partially Implements: blueprint osh-monitoring

Change-Id: Ie453373b54c5f1825339ce0566e4b5d0f74abc20
2017-11-30 09:43:17 -06:00
intlabs
436845541b Image local repo jobs and multiple namespace support
This PS introduces support for using a local docker repo to
store images if desired, and adds multiple namespace support
to the entrypoint lookup functions.

Change-Id: Ib51aa30d3cc033795fe13f6c40a57d46171ad586
2017-11-02 16:23:32 -05:00
intlabs
308f8a2121 Calico: Add basic dependency checks and rbac support
This PS update the calico chart and deployment to use
Kubernetes entrypoint, and apply appropriate RBAC rules to
the pods.

Change-Id: I9d875f50c4767b6714a4931b9ade0a6f94b533c2
2017-11-01 16:52:52 +00:00
intlabs
fd683f4241 Chart Runner: Add NFS provisoner and Docker Registry
This PS adds the NFS provisioner and Docker Registry to the OSH-Infra Repo,
these are being used as initial candidates for moving as they are simple
charts and allow the chart runner logic to be developed in the gate
playbooks.

Change-Id: Ie80b8578aafd3fe7252d3dcb603ea6af7586776e
2017-11-01 11:40:09 -05:00
intlabs
8c9f70401a Helm-Toolkit: Import into infra repo from primary
This PS imports helm-toolkit into the Helm Infra repo

Change-Id: Ife3451f9af5a40dbd5aa2414fc6226b26f81ede1
2017-10-26 19:33:36 -05:00
intlabs
366a175447 Remove old helm-toolkit
This PS removes the old helm toolkit in preperation for the repo to
be initialised with openstack-helm-infra and the zuul v3 gate.

Change-Id: I4fa3be6bc240c061620dc3b5533136107a99065c
2017-10-24 17:42:50 -05:00
Steve Wilkerson
34a29bfac1 Add helm-toolkit to OSH-infra
Add helm-toolkit to OSH-infra to support using zuul-cloner in
the gates for openstack-helm. As infra is appropriate for charts
required to run openstack-helm, helm-toolkit should be centralized
here

Change-Id: I9d7f80a405f9fb2dec7e5fcdc8294a8c35154272
2017-07-05 09:13:29 -05:00