346 Commits

Author SHA1 Message Date
portdirect
97d60dcccd Elasticsearch Snapshot: Fix permisions for PVC
This PS fixes the permisions for the PVC backing the
Elasticsearch Snapshot

Change-Id: I7b9897a7e0f34096ce1f2a04aceab7796d3a89c5
2018-01-10 13:40:11 -05:00
portdirect
666f7de6a1 Prometheus-Alertmanager: Fix permisions for PVC
This PS fixes the permisions for the PVC backing
Prometheus-Alertmanager

Change-Id: I8cfb2b999c1f2add9c1647238603c3940ef0bc0a
2018-01-10 13:05:36 -05:00
portdirect
f59d3b0011 Prometheus: Fix permisions for PVC
This PS fixes the permisions for the PVC backing Prometheus

Change-Id: I19b96296fe3553df5b433c22c05cbdfff1b8402a
2018-01-10 12:43:06 -05:00
portdirect
3d633fca7a Gate: Increase timeouts for awating node to come back from reboot
This PS increases the timeout in waiting for the node to come back
online following a reboot.

Change-Id: I92d1e5b665006bf9693f56ad8272330c19e6ccfa
2018-01-10 10:48:02 -05:00
sungil
85011f9c48 Add Permission for k8s plugin in fluent-logging
This PS adds permissions for k8s plugin in fluent-logging.
The k8s plugin in fluentbit gets information per pod and adds it to the
message(log) before output. But the plugin cannot get the pod in current chart.
This PS fix this issue.

Change-Id: Icdce8a0a5ed0975c4d6e72ba50df8ef9a3b76ca6
2018-01-10 11:02:02 +09:00
portdirect
13852ceee4 Gate: Deploy HWE kernel on ubuntu hosts
This PS deploys the HWE kernel on Ubuntu Hosts, which is required
for CephFS:
 * https://github.com/kubernetes-incubator/external-storage/issues/345

Change-Id: I2ebd46eadf5a4c7a857d42302f388511691ab0db
2018-01-09 04:04:18 +00:00
portdirect
abd7e78c65 Fluentd: tidy rbac roles and bindings to live with appropriate rc
This PS brings Fluentd (&bit) inline with other charts by placing the
RBAC roles and bindings in the same template as the pod rc they are
assocated with.

Change-Id: I622a2adfc0dc9f5044202cd6318e3ed803088c5f
2018-01-08 02:17:38 +00:00
portdirect
2e0b57ad93 KubeADM-AIO: Drive basic CNI configuration via values
This PS drives basic CNI options via ansible playbook in the
KubeADM-AIO container and modifies the calico chart to support
configuration via values.

Change-Id: Iaf2f9807438c3a34e797c62c2c6913edb677997c
2018-01-07 12:32:40 -05:00
Zuul
227df8bf87 Merge "Gate: Harden helm serve playbook" 2018-01-07 06:19:32 +00:00
Zuul
604fb28fd3 Merge "Gate: Move pull images to its own playbook" 2018-01-07 03:57:20 +00:00
Zuul
b5553893a2 Merge "Calico: Expose CNI network config to values.yaml" 2018-01-07 01:57:45 +00:00
portdirect
f5ccebb791 Gate: Harden helm serve playbook
This PS make the helm server more robust by moving the server to be
managed via a systemd unit.

Change-Id: I651bf3b2670812ea255c3692bd933bb6092397f9
2018-01-06 20:14:19 -05:00
Zuul
f65ff5a994 Merge "RBAC: fix chart to be consistent with others" 2018-01-06 23:30:19 +00:00
Zuul
f41cec95a3 Merge "Fix elasticsearch repository configuration entry" 2018-01-06 23:30:18 +00:00
Zuul
8d14de64a4 Merge "Perserve env variables" 2018-01-06 23:30:18 +00:00
Zuul
77b817c335 Merge "ElasticSearch: tidy rbac roles and bindings to live with appropriate rc" 2018-01-06 23:30:17 +00:00
portdirect
229c5dd45c Gate: Move pull images to its own playbook
This PS moves build images to its own playbook, reduducing the time
taken to run the gates when not required.

Change-Id: I17203a6fa2e3c7898175389f13d680fe9347b920
2018-01-06 17:32:42 -05:00
portdirect
da7053ebd1 Calico: Expose CNI network config to values.yaml
This PS moves the CNI network config to be driven via the
values.yaml in the chart.

Change-Id: I72b05fe3bbe3506ee7d0560a5fe5011f6054d448
2018-01-06 17:06:42 -05:00
Zuul
91548a6648 Merge "Kubernetes: Move to version 1.9.1" 2018-01-06 17:01:07 +00:00
Steve Wilkerson
99ee859b66 Fix elasticsearch repository configuration entry
This dynamically adds the elasticsearch path.repo configuration
entry if it's not defined.  This solves issues arising when the
storage settings are disabled in favor of emptydirs for simpler
ES deployments.  If elasticsearch attempts to configure the repo
path with an invalid entry (inaccesible external or shared fs
path), the service will crash.

Change-Id: I089b77104107dfb1f8e6ea2d8a560384718e63f9
2018-01-05 10:54:00 -06:00
lamt
9c31548c9b Perserve env variables
This patch set adds in -E flag for ``sudo pip install`` so
any environment variable is preserved for the install.  This
allows for some proxy-related variables such as ``http_proxy``
to pass through for pip.

This mirrors the change in [0].

[0] https://review.openstack.org/#/c/531270/1

Change-Id: Ib513fce862f31d784634645ac6b038c6a35f4cd6
2018-01-05 08:57:25 -06:00
rakesh-patnaik
fc52cda24a Openstack metrics exporter for prometheus
This exporter provides a means for Prometheus to gather openstack
service metrics related to overlying openstack-helm deployments
Change-Id: I5f1789c62b4547add0c67edb51540f712bf43da8
2018-01-05 07:51:31 -06:00
portdirect
a8fe16cd42 ElasticSearch: tidy rbac roles and bindings to live with appropriate rc
This PS brings ElasticSearch inline with other charts by placing the
RBAC roles and bindings in the same template as the pod rc they are
assocated with.


Change-Id: I6d541a18d6750d42d31326f77a9aacb06195ddac
2018-01-05 06:52:49 +00:00
portdirect
7b6b2274ab Kubernetes: Move to version 1.9.1
This PS moves the version of kubernetes used in the gates to v1.9.1

Change-Id: Ida17cb20b0a5ce11e03ccfafddb0f58fadda76f1
2018-01-05 00:56:07 -05:00
Zuul
17b13c42d7 Merge "Add Grafana chart to OSH infra" 2018-01-05 04:59:51 +00:00
Steve Wilkerson
a1f608ed74 Add Grafana chart to OSH infra
Moves the grafana chart to OSH infra along with basic rbac rules
that may be tightened with future work.

Change-Id: Ie14627530a73d4b7b01eb93ca5f7174d99d9caec
2018-01-04 09:10:55 -06:00
Zuul
93103e8d87 Merge "Fix alertmanager serviceaccountname reference" 2018-01-04 08:49:06 +00:00
Steve Wilkerson
4ed181bc37 Include ingress entries in manifests key for kibana
Kibana was missing entries for enabling the ingress and ingress
service. This adds the entries in the manifests key for kibana

Change-Id: I12bdf0f2f82f7e666c8c058aacb798dbd22c3ff7
2018-01-03 12:22:33 -06:00
Steve Wilkerson
9a9796574c Fix alertmanager serviceaccountname reference
Alertmanager's serviceaccountname was hardcoded instead of using
the common definition used in other charts. This simply brings the
chart in line with the others

Change-Id: I81fa6814217f2e422617379d5e3bf3629f660407
2018-01-03 12:08:36 -06:00
Zuul
8b72c1f51a Merge "Images: remove kolla-toolbox image" 2018-01-02 22:24:45 +00:00
Zuul
5c380ebd5b Merge "Calico: bump version to 2.6" 2018-01-02 22:24:44 +00:00
Zuul
2e4b15f16e Merge "Docker: Run docker without iptables" 2018-01-02 21:42:03 +00:00
portdirect
ec6e3c4a88 Calico: bump version to 2.6
This PS moves the deployed version of calico to v2.6

Change-Id: I282bb8df1bd6a55f60a0548bdd64709beecea112
2017-12-31 13:30:43 -05:00
portdirect
77a704486e Images: remove kolla-toolbox image
This PS removes the remaining references to the kolla toolbox
image from OpenStack-Helm infra. By consolatating on the heat-engine
image for admin and basic scripting tasks we remove the requirement
to download an additional 752MB image for curl.

Change-Id: Ia403eb3208f2b2f5873b85d8f46c301f299663b6
2017-12-31 12:10:31 -05:00
Zuul
0d5a2a64a3 Merge "Add support for out of branch variables" 2017-12-31 03:14:59 +00:00
portdirect
bbf32935dc Docker: Run docker without iptables
This PS updates the docker daemon settings to run without
apply iptables rules. This simplifies host network management by
removing one of the actors interacting with iptables.

Change-Id: I335247afddf736b60212d199a3b860c3c792977f
2017-12-30 21:59:19 -05:00
Matt McEuen
134d7cab0c Add support for out of branch variables
This change allows users of the gate script to optionally
override the location of the ansible inventory and variables files,
so that they can live outside of the source tree.

Change-Id: Ibe7666ce366c7ad34e8ee6ff5ef3f23589aa10ce
2017-12-30 13:58:56 -06:00
Zuul
41c2a6e8f3 Merge "Gate: simplify helm release log gathering" 2017-12-29 18:28:08 +00:00
Zuul
233c624cb5 Merge "RBAC: Fix issue with inclusion of empty jobs or daemonsets" 2017-12-29 15:56:57 +00:00
Zuul
c1f7483257 Merge "Rename elasticsearch configmaps and provide config via toYaml" 2017-12-29 01:44:55 +00:00
Zuul
636f2c9812 Merge "Elasticsearch: Add curator snapshot action and PVC for fs repo" 2017-12-29 01:44:54 +00:00
Zuul
dfa9111ffb Merge "Move fluentbit and fluentd configs to values.yaml" 2017-12-29 01:27:16 +00:00
portdirect
6c3786aef3 Gate: simplify helm release log gathering
This PS simplifys the helm release log gathering, to collect logs
from all charts released into the cluster, and also adds a `logs`
sub-target to the dev-deploy target in the Makefile.

Change-Id: I016a5e08163eaccf13331db6faa45fab1e9cf4f2
2017-12-28 15:40:32 -05:00
Steve Wilkerson
9b32ba17f4 Rename elasticsearch configmaps and provide config via toYaml
This brings the elasticsearch configmaps, volume and mount names
inline with other charts by naming them after the service.

This also moves the configuration for elasticsearch to the values
file to bring it inline with other charts that do the same

Change-Id: I61f7c740d830a9a0567f8b72a0f815a09407b90c
2017-12-28 19:48:58 +00:00
Steve Wilkerson
45ba95a2de Elasticsearch: Add curator snapshot action and PVC for fs repo
This provides an example action in the curator config for taking
snapshots of the elasticsearch indexes. As the snapshot action
requires a repository registered with Elasticsearch, this also
adds a PVC for a filesystem repository backed with NFS and a job
for registering the repository with Elasticsearch.

Change-Id: I26b788c58f52844e997bde5002459bddc1bb685e
2017-12-28 13:42:47 -06:00
Steve Wilkerson
09939a04de Move fluentbit and fluentd configs to values.yaml
Defines configuration files for fluentbit and fluentd via the
values.yaml file for fluent-logging. This provides flexibility in
defining parsers and routes for log gathering and routing

This functionality is added via helm-toolkit helper functions for
both fluentd and fluentbit to make the values configuration
cleaner

Change-Id: I8a43f36e487e651561bec8abf7752c8fac68aefc
2017-12-28 10:37:00 -06:00
Tin Lam
e234e8d932 RBAC: Fix issue with inclusion of empty jobs or daemonsets
Currently, the rbac logic would allow for ``jobs`` or ``daemonsets``
if it is specified in the dependencies, even if they may just be empty
or null.  This patch set addresses this by checking the jobs or
daemonsets map in the value.yaml is non-empty before including it
in the Role.

Change-Id: I67f940e1e71c371b63d8d1e9b4f47af633a6bfa4
2017-12-28 04:28:11 -06:00
Zuul
2be5abec3d Merge "Move kibana to OSH infra" 2017-12-27 21:28:08 +00:00
Zuul
fee39facb6 Merge "Flannel: Fix RBAC definitions" 2017-12-27 21:28:07 +00:00
Zuul
a4a070efea Merge "Add prometheus annotations to calico-nodes for felix metrics" 2017-12-27 18:14:03 +00:00