72 Commits

Author SHA1 Message Date
Zuul
7c839c82b2 Merge "Gate: Move to K8s 1.10.8" 2018-10-06 06:30:08 +00:00
Pete Birley
f8880d27ad Libvirt: Fix image
This PS fixes the libvirt image, buy removing the ubuntu-cloud
archive repo and pinning to a good version.

Change-Id: I5097d8893b92d020f7a5a1cb5925dec0b01d4da2
Signed-off-by: Pete Birley <pete@port.direct>
2018-10-05 15:41:12 -05:00
Pete Birley
19376ee9e6 Gate: Move to K8s 1.10.8
This PS moves to use k8s 1.10.8, which includes a couple of fixes
for PVC mounts.

* https://github.com/kubernetes/kubernetes/pull/66863

Change-Id: Ica30950a8200f5755897b51fd2b4d24c69a10e61
Signed-off-by: Pete Birley <pete@port.direct>
2018-10-05 07:44:42 -05:00
Pete Birley
25985f7b43 Libvirt: escape kube cgroups and pid reaper
This PS moves to run the Libvirt process as a transient unit
on the host, free fom k8s controlled cgroups. In addition it
also uses the cloud archive provided libvirt/qemu packages.

Change-Id: Idfe9ae6f072acd86f877df0c3dfe3db4c20902d6
Signed-off-by: Pete Birley <pete@port.direct>
2018-10-03 19:11:00 +00:00
sai battina
e155c92f14 Helm: Update helm to 2.11.0
This helps to fix a bug when adding stable repos

Change-Id: I3eb28a037f7eb22016a29bc36e4a791a5bfda852
2018-09-25 18:14:49 +00:00
Pete Birley
101f58ae4b Gate/Dev: Fix perms for upstream-resolv.conf
This PS fixes the permissions for the upstream resolv.conf used by the
dns redirector.

Change-Id: Ieef113a6e7b72767318516c63cf48dcac202cf4d
Signed-off-by: Pete Birley <pete@port.direct>
2018-09-18 11:55:20 -05:00
Zuul
d208d55a46 Merge "Gate: only restart network manager if required" 2018-09-17 13:49:01 +00:00
Zuul
0f2dace4e8 Merge "Gate/Dev: Allow custom upstream dns servers to be preserved" 2018-09-15 16:59:22 +00:00
Pete Birley
620d374730 Gate: only restart network manager if required
We only need to restart network manager if disabling dns management.

Change-Id: Idfdf68678a68c2808527de4226ff91e9ea5f8d67
Signed-off-by: Pete Birley <pete@port.direct>
2018-09-15 14:39:17 +00:00
Pete Birley
79d11e4044 Gate/Dev: Allow custom upstream dns servers to be preserved
This PS updates the dns redirect pod deployment to support a persistant
set of customised upstream nameservers to be used.

Change-Id: Ib163f8ed9ceadca69b56cd5f146ffd194d98cdc3
Signed-off-by: Pete Birley <pete@port.direct>
2018-09-15 13:13:29 +00:00
Zuul
2fce7e8212 Merge "Correct the task name for tiller installed" 2018-09-14 21:03:16 +00:00
Zuul
accaf8aabf Merge "Update the env usage of docker_container module" 2018-09-13 13:53:54 +00:00
Pete Birley
e67f7bafd5 Gate: Update gate permit running on ubuntu 18.04
This PS updates the gate to permit running on the current LTS ubuntu
release.

Change-Id: I7e32a4ab0dc79e4b5f7a16f8a8cb5e9ee182ee08
Signed-off-by: Pete Birley <pete@port.direct>
2018-09-11 15:20:48 +00:00
Pete Birley
f8e8ff0082 Kube: Disable anon auth on kubelet
This PS disables anon auth on the kublets api.

Change-Id: I77127ae53d713edd815cd00e15acdf1492762efc
Signed-off-by: Pete Birley <pete@port.direct>
2018-08-28 22:37:26 +00:00
Zuul
b6fc24b996 Merge "Revert "Update OSH Author copyrights to OSF"" 2018-08-28 19:33:45 +00:00
Jean-Philippe Evrard
bf069b2311 Revert "Update OSH Author copyrights to OSF"
This reverts commit 178aa271a44956e86f4e962bf815fa827d93c9af.

Change-Id: I38a52d866527dfff2689b618e055f439bc248c13
2018-08-28 17:25:54 +00:00
Zuul
1a33c34cbd Merge "Update OSH Author copyrights to OSF" 2018-08-28 15:23:49 +00:00
Matt McEuen
178aa271a4 Update OSH Author copyrights to OSF
This PS updates the "Openstack-Helm Authors" copyright attribution
to be the "OpenStack Foundation", as decided in the 2018-03-20
team meeting:
http://eavesdrop.openstack.org/meetings/openstack_helm/2018/openstack_helm.2018-03-20-15.00.log.html

No other copyright attributions were changed.

Change-Id: I1137dee2ae5728771835f4b33fcaff60fcc22ca9
2018-08-26 17:17:06 -05:00
Pete Birley
c5feca82a3 K8S: Update to current 1.10.x release
This PS bumps the k8s version to that of the current release.

Change-Id: Ife6edac83f6e7639d6142d64aff458450a2e58ff
Signed-off-by: Pete Birley <pete@port.direct>
2018-08-23 12:28:22 -05:00
Pete Birley
e74dce4307 Helm: dont update the default stable repo on install
Helm now tries to update the stable repo when running helm init
by default. This ps adds the flag to prevent this, which is required
when running in airgapped, and some corporate, environments.

Change-Id: I38c487f88d17e9429c30cb03bf2d0f3652f1db99
Signed-off-by: Pete Birley <pete@port.direct>
2018-08-22 22:03:47 -05:00
Zuul
ba93bc11c4 Merge "Helm: Move to use 2.10 release" 2018-08-22 04:19:33 +00:00
Pete Birley
c62c5dcf88 Helm: Move to use 2.10 release
This PS moves to use the Helm 2.10 release, which brings in a version
of sprig that supports TLS certificate creation from defined CAs.

Change-Id: I80233f8f31727c80bcd667cfa0d851488da39588
Signed-off-by: Pete Birley <pete@port.direct>
2018-08-21 15:52:20 +00:00
Gupta, Sangeet (sg774j)
61584fdb9d kubernetes-keystone-webhook base64 encoding
Changing the chart to accept plain certificates rather than a base64
encoded string. The chart will handle the base64 encoding internally.

Change-Id: I3cd0710652b1b731fa4bcd9e92dd59ce2c436eb6
2018-08-10 15:54:49 -05:00
caoyuan
08641418a2 Update the env usage of docker_container module
env parameter should be dictionary of key,value pairs rather than
"=" due to ansible docs[0], this PS to update it.

[0]: https://docs.ansible.com/ansible/latest/modules/docker_container_module.html#id3

Change-Id: I79d20b101b56b6df7f2a9162868ec98214f183bf
2018-08-04 01:30:33 +00:00
caoyuan
ab9dca30a9 Correct the task name for tiller installed
Change-Id: Ibf146f3a4c377c9b6d58aceb0a572386fcbff3eb
2018-08-04 01:07:35 +00:00
Pete Birley
ac27096002 Gate: specify user for tiller image used for bootstrapping cluster
This PS updates the ansible roles to update the user used with
the tiller image used for bootstrapping to allow access to approprate
config files used. This is required for use with the current master
tiller image, which no longer deffaults to the root user.

Change-Id: I61f28a2ebeecb22eb66e0394417b0af3a9116483
Signed-off-by: Pete Birley <pete@port.direct>
2018-08-01 11:01:07 -05:00
Pete Birley
9e2d684188 K8s: update to 1.10.6 in OSH gates
This PS bumps the version of k8s used in the gates to 1.10.6

Change-Id: I396fe0c0e276d17eb52bfe289a464b7008b8d4d2
Signed-off-by: Pete Birley <pete@port.direct>
2018-07-30 18:30:59 -05:00
Pete Birley
9861d7a92f KubeADM: enable shared pid ns
This PS enables the pod shared pid feature gate in k8s, which allows
the puase container to reap processes when desired.

Change-Id: I01eac64bfa029027465d47c5036119cf5799a100
Signed-off-by: Pete Birley <pete@port.direct>
2018-07-25 16:18:23 +00:00
Zhangfei Gao
2481767744 Separate kubelet support packages
Debian has no libxtables11 package
Libxtables11 only for ubuntu while libxtables12 for debian

Change-Id: I258bea9869d2126295d080ef9d00800b83161cc3
2018-07-09 02:22:06 +00:00
Steve Wilkerson
80c1ff4071 Gate: Fix version of ansible deployed via dev-deploy
This pins the version of ansible deployed via the makefile
dev-deploy directives to the version used in zuul.  This was
causing issues with docker, as make dev-deploy setup-host was
deploying ansible 2.6. Ansible 2.6 introduces a new flag to the
docker_container module (init) that is incompatible with our
current roles, which resulted in observed failures in osh-infra
and osh

Change-Id: Ibc885b53bce77eb36817024b21efb0e99865f690
2018-06-29 15:39:58 +00:00
Zuul
e46b1b0c2b Merge "Add proxy environment" 2018-06-26 02:40:13 +00:00
Pete Birley
ce21f6e96d Gate: Add support for testing fqdn over-rides in zuul
This PS adds support for testing fqdn over-rides in zuul gates.
When enabled it will direct requests to a configurable domain to
the default ip of the primary node.

Change-Id: I3d9a4a0bf06532caf0f544d44027493622f4ae5b
Signed-off-by: Pete Birley <pete@port.direct>
2018-06-25 02:42:09 +00:00
Tin Lam
bb7842f39f Kubernetes: Bump version to 1.10.5
Upgrades the kubernetes version to v1.10.5 from v1.10.4.

Change-Id: Ic2a1f73c935136135e587945180e67ac928f8178
Signed-off-by: Tin Lam <tin@irrational.io>
2018-06-22 17:00:12 +00:00
Tin Lam
cef6dd5a19 Add proxy environment
This patch set loads the proxy environment variable when executing helm
init as it attempts to reach out to an external address to load the
stable repo. If this is executed with in a corporate environment that
requires a proxy, this would fail without the needed envvars.

Change-Id: I8b1b1efb15352934eb8f2a0b0214e486eea80d46
Signed-off-by: Tin Lam <tin@irrational.io>
2018-06-22 13:12:17 +00:00
Pete Birley
b6ee0e3da3 Kubernetes: Bump version to 1.10.4
This PS bumps the k8s version to v1.10.4

Change-Id: I1f07653a6f26a4796f30ce1f0df9937fb32c2b43
Signed-off-by: Pete Birley <pete@port.direct>
2018-06-10 02:59:09 +00:00
Pete Birley
39d93dbe23 Kube: Update to kubernetes 1.10.3
This PS updates the version of kubernetes deployed in the gates/dev
env to 1.10.3.

Change-Id: I4916a669ab0cb58760c0497b2264d4a7d0a9bffe
Signed-off-by: Pete Birley <pete@port.direct>
2018-06-04 09:35:26 -05:00
Tin Lam
b80d9146d1 Update helm to v2.9.1
This patchset updates helm version to v2.9.1.

Change-Id: I438142cd9649749933fbe7153d149e7d0b0a5537
Signed-off-by: Tin Lam <tin@irrational.io>
2018-05-19 14:56:20 +00:00
Pete Birley
ec58d6e133 Keystone-Webhook: fix gate boolean
This PS fixes the conditional for the keystone webhook deployment
in the gate.

Change-Id: I7a2c00d467df98903578123a089a934a8f68cd01
2018-05-18 16:39:56 -05:00
Pete Birley
39e1f7f9f3 KubeADM: Keystone Kubernetes Webhook
This PS adds the ability to deploy the Keystone Kubernetes Webhook
chart via kubeadm-aio

Change-Id: I18b0477a775de942f940e9c0984559089dca1cdb
Co-Authored-By: Tin Lam <tin@irrational.io>
Co-Authored-By: Gage Hugo <gagehugo@gmail.com>
Signed-off-by: Pete Birley <pete@port.direct>
2018-05-18 00:53:58 -05:00
Pete Birley
be3f300623 Gate: place role default vars within the role
This PS places the role default vars within the appropriate role,
in addition it exposes kubeadm's selfhosted param and deploys the
kubeadm binary to master nodes.

This PS exposes the selfhosted param, and deploys kubeadm to master
nodes.

Change-Id: I5ad1b593a711ffe353b012394d54044dede0691d
2018-05-14 03:28:31 +00:00
Pete Birley
dd92edfb58 Gate: use infra mirror when in infra for kubeadm aio image
This PS uses the infra mirrors in the kubeadm aio build when
running the gate in openstack-infra.

Change-Id: Id9a4bf2b13051dfcf5aea688511da24cd245de9c
2018-05-11 16:43:22 -05:00
portdirect
0d969910af Kube: Kubernetes v1.10.2 support
This Ps adds support for kubernetes v1.10.2

Change-Id: Ic1db020cc86fa9db78f3f3cfcda92e3291a889a8
2018-05-09 14:22:45 -05:00
Pete Birley
b9edac6148 Kubernetes: enable mount propagation
This PS enables the mount propogation feature gate.

Change-Id: I7a37f45ff6061b144c6f04233712cd84fccb3e83
2018-04-22 15:35:40 -05:00
Pete Birley
5750d2a01f Gate: update Ansible conventions
Using tests as filters is deprecated, and will be removed in 2.9.

Change-Id: I2bc31177cdb3d59319c4cb04f77db573f3217479
2018-04-18 23:32:35 -05:00
Pete Birley
a7da953e39 Helm: update helm version to v2.8.2
This PS updates the helm version in the gate to helm 2.8.2

Change-Id: Ied757f6d653255f198de524f41111cd2928a03dc
2018-04-18 21:55:00 +00:00
Pete Birley
6921006103 Gate: update paths for pip 10 installation
Pip>=10 moves the entrypoint to /usr/local/bin from /usr/bin, this
ps forces the shell to forget all locations following upgrade
to allow it to adapt to the new location.

Change-Id: I1ed92b75f689e982397cd4fc87ac262256e161e8
2018-04-15 16:54:56 +00:00
Tin Lam
391bbf69d7 Provide ability to specify proxy
This patch set provides ability to configure the proxy setting in
the ansible playbook used to run the gate.

Change-Id: I7ae66cb16fa6db7d46a0a3f23c289cc625e583c4
Signed-off-by: Tin Lam <tin@irrational.io>
2018-03-12 04:15:30 +00:00
Zuul
3a552b4200 Merge "KubeADM: force calico interface to match to same as kubelet" 2018-03-09 00:32:34 +00:00
Pete Birley
c9ffaea770 KubeADM: force calico interface to match to same as kubelet
This PS forces calico to use the same interface as the kubelet
for inter-node communication.

Change-Id: I7d03beec46cccba4a57e092bf108695e8e88996f
2018-03-08 22:20:56 +00:00
Hemanth Nakkina
5392ac810b Remove Api version requirement for CronJob Curator
Curator job in Elasticsearch helm chart has a condition on
api version batch/v2alpha1. Cronjob resource is deprecated
in batch/v2alpha1 from k8s 1.8 and batch/v1beta1 is enabled
by default.

Remove the condition on API version as it is no more required.

Closes-Bug: #1753524
Change-Id: Ia296b3742e655fae508e5d4402e7f3881db31688
2018-03-06 08:51:08 +05:30