Move to v0.3.1 of kubernetes-entrypoint which has 2 breaking changes to
pod dependencies, and also adds support for depending on jobs via
labels.
Change-Id: I2bafc2153ddd46b3833b253a2e7950bccbccf8ed
This updates the htk-manifests with the updates required to use
the updated dependency checking for dynamic dependencies
Change-Id: I696459ca8b29a80a3096a9d33c1a68b1543534c9
This ps proposes adding a common template for the image_repo_sync
jobs for consumption by the charts
Change-Id: I48476d1e4fd94bd1b08b13b46983e3d999f8d8ca
This moves all relevant charts in osh-infra to use the htk manifest
template for ingresses, bringing them in line with the charts in
openstack-helm
Change-Id: Ic9c3cc6f0051fa66b6f88ec2b2725698b36ce824
This PS simplify the logic for dyanmicly merging the image management
depenencies into pod deps when active.
Change-Id: I0cf6c93173bc5fbce697ac15be8697d3b1326d0a
This PS reduces the delta between OSH and OSH-Infra helm toolkits
to simply the image repo management functions.
Change-Id: I3addfbcda6a3c1d34c9f967be07eaceffb468f0e
Adds support for a new feature of kubernetes-entrypoint, pod
dependencies, that was added in v0.3.0.
Change-Id: I78d9e0545ca3b837cd2386783386a253f7f5a2d6
Adds "helm-toolkit.utils.merge" which is a replacement for the
upstream sprig "merge" function which didn't quite do what we
wanted, specifically it didn't merge slices, it just overrode
one with the other. This PS also updates existing callsites
of the sprig merge with "helm-toolkit.utils.merge".
Change-Id: I456349558d4cf941d1bcb07fc76d0688b0a10782
* Ingests the bird templates so that we can override them
to support things such as custom BGP ports (listen) and
neighbors (remote)
* Supports announcing addresses that are within the
.Values.networking.bgp.ipv4|6.additional_cidrs list
in support of ingress controllers that can create
dummy interfaces and assign addresses to be announced
* Introduces a new job to perform calicoctl manipulation to
support manipulating the mesh, adding peers, and changing the
ipPool settings which is value driven
* Support custom port binding and specific interface binding
to allow custom BGP port selection for IPv4 and IPv6
* Instantiates calicoctl as a utility on hosts
* Adds a new function to helm-toolkit to retrieve the http
or https prefix for an endpoint
* Supports https based etcd backends with new certificate
parameters
* Finally, introduces more strict bgp listening to allow
multiple hostNet bgp speakers to run in parallel
Change-Id: Ib4d00befddbd8498b9dcc693409b8b2577458497
This adds checks for the fields in the service annotations for
prometheus, similar to the checks made for the pod annotations.
It also moves prometheus annotations under a prometheus: key
under a top-level monitoring tree to allow for other monitoring
mechanisms independent of the endpoints tree
Change-Id: I4be6d6ad8e74e8ca52bd224ceddad785577bf6c7
Removes an unused context declaration from the prometheus service
annotation template in helm-toolkit, and removes all references to
it
Change-Id: I57612c1504cf046f367ee10d26ef3062ebe528d3
This PS drives basic CNI options via ansible playbook in the
KubeADM-AIO container and modifies the calico chart to support
configuration via values.
Change-Id: Iaf2f9807438c3a34e797c62c2c6913edb677997c
Currently, the rbac logic would allow for ``jobs`` or ``daemonsets``
if it is specified in the dependencies, even if they may just be empty
or null. This patch set addresses this by checking the jobs or
daemonsets map in the value.yaml is non-empty before including it
in the Role.
Change-Id: I67f940e1e71c371b63d8d1e9b4f47af633a6bfa4
This adds the prometheus annotations to the calico-node daemonset
to allow prometheus to create a scrape config for calico metrics.
This requires adding a annotation tree in the chart's values.yaml
file
Change-Id: I0e62fce34ea8de6d0241ea00aaae66187b808c81
This PS splits the `prometheus_pod_annotations.tpl` into seperate
files for each definition contained within it to be consistent
with other funstions in Helm-Toolkit, which can be located by path
from their name.
Change-Id: Ief9e31ead7eb1028cedd8e608d6b11e53e63e515
Currently, services have two serviceaccounts: one specified in the
chart that cannot read anything, and one injected via helm-toolkit
that can read everything. This patch set refactors the logic to:
- cleanup the roles and their binding automatically when the helm
chart is deleted;
- remove the need to separately mount a serviceaccount with secret;
- better handling of namespaces resource restriction.
Co-Authored-By: portdirect <pete@port.direct>
Change-Id: I47d41e0cad9b5b002f59fc9652bad2cc025538dc
This allows the keystone endpoint uri lookup function to
avoid adding a FQDN suffix to an IP address based host
entry.
Change-Id: I016e6512fb21182a8be9e3de1e4a2da59a20fb36
This will move prometheus to OSH-infra to be included as part of
the basic infrastructure deploy for openstack-helm. It includes
charts for Prometheus, Node Exporter, Kube-State-Metrics, and
Alertmanager. It provides a base for monitoring and alerting
for the underlying infrastructure
Partially Implements: blueprint osh-monitoring
Change-Id: Ie453373b54c5f1825339ce0566e4b5d0f74abc20
This PS introduces support for using a local docker repo to
store images if desired, and adds multiple namespace support
to the entrypoint lookup functions.
Change-Id: Ib51aa30d3cc033795fe13f6c40a57d46171ad586
This PS update the calico chart and deployment to use
Kubernetes entrypoint, and apply appropriate RBAC rules to
the pods.
Change-Id: I9d875f50c4767b6714a4931b9ade0a6f94b533c2
This PS adds the NFS provisioner and Docker Registry to the OSH-Infra Repo,
these are being used as initial candidates for moving as they are simple
charts and allow the chart runner logic to be developed in the gate
playbooks.
Change-Id: Ie80b8578aafd3fe7252d3dcb603ea6af7586776e
This PS removes the old helm toolkit in preperation for the repo to
be initialised with openstack-helm-infra and the zuul v3 gate.
Change-Id: I4fa3be6bc240c061620dc3b5533136107a99065c
Add helm-toolkit to OSH-infra to support using zuul-cloner in
the gates for openstack-helm. As infra is appropriate for charts
required to run openstack-helm, helm-toolkit should be centralized
here
Change-Id: I9d7f80a405f9fb2dec7e5fcdc8294a8c35154272