Repository for OpenStack Helm infrastructure-related code
Go to file
Matt McEuen 84333745e2 Add podsecuritypolicy test
This adds a test for the podsecuritypolicy chart, as well as a script
to reconfigure minikube with PodSecurityPolity enabled when appropriate.

This change doesn't add the PSP chart to the existing tests, because
the psp chart will have secure defaults in the future, which may
interfere with other charts by default; and it doesn't enable the
admission controller broadly, because turning the AC on without
providing a podsecuritypolicy will break k8s functionality.

Change-Id: I9fd14bb118189cd4ead177b79e39aadbc2096b4a
2019-02-28 16:40:24 -06:00
calico Updated missed daemonsets and deployments to apps/v1 2019-02-19 08:19:45 -06:00
ceph-client Merge "[CEPH] Enable iostat mgr module" 2019-02-04 09:45:13 +00:00
ceph-mon Ceph: Update default to use OSH image 2019-02-01 21:25:13 +00:00
ceph-osd Ceph-OSD: Restore bootstrap job 2019-02-05 21:54:06 -06:00
ceph-provisioners Ceph: Update default to use OSH image 2019-02-01 21:25:13 +00:00
ceph-rgw [CEPH] Use civetweb by default for RGW with keystone 2019-02-20 20:10:21 -06:00
doc Fix wrong indentation of multinode docs 2019-02-12 11:31:24 +00:00
elastic-apm-server Updated missed daemonsets and deployments to apps/v1 2019-02-19 08:19:45 -06:00
elastic-filebeat Updated missed daemonsets and deployments to apps/v1 2019-02-19 08:19:45 -06:00
elastic-metricbeat Updated missed daemonsets and deployments to apps/v1 2019-02-19 08:19:45 -06:00
elastic-packetbeat Updated missed daemonsets and deployments to apps/v1 2019-02-19 08:19:45 -06:00
elasticsearch Update logging format and config for apache reverse proxies 2019-02-25 09:21:41 -06:00
etcd Add release uuid to pods and rc objects 2018-09-13 05:35:35 +00:00
falco Adding Falco 2018-10-05 16:18:51 +00:00
flannel 'NOP' cleanup for more consistent white-space use in charts 2019-01-03 22:45:49 +00:00
fluent-logging Fluentd: Add type_name to default elasticsearch output 2019-02-13 12:49:57 -06:00
gnocchi Add cron job for Gnocchi to purge deleted resources 2019-02-25 04:54:44 +00:00
grafana Grafana: Add job to update admin password 2019-02-12 09:59:45 -06:00
helm-toolkit Remove set -x from exporter scripts and htk s3 user script 2019-02-19 14:42:17 -06:00
ingress readOnlyFilesystem: true for ingress chart 2019-02-26 09:21:57 -05:00
kibana Update logging format and config for apache reverse proxies 2019-02-25 09:21:41 -06:00
kube-dns Add release uuid to pods and rc objects 2018-09-13 05:35:35 +00:00
kubernetes-keystone-webhook k8s-keystone create cluster roles and tests 2018-12-01 19:14:31 +00:00
ldap Revert "Add Egress Helm-toolkit function & enforce the nework policy at OSH-INFRA" 2018-12-16 04:21:46 +00:00
libvirt Libvirt: Move ceph config to remain on host 2019-02-08 16:20:49 -06:00
lockdown Add network policy toolkit function 2018-10-15 13:50:50 +00:00
mariadb Remove set -x from exporter scripts and htk s3 user script 2019-02-19 14:42:17 -06:00
memcached readOnlyFilesystem: true for memcached chart 2019-02-27 00:24:14 +00:00
mongodb Add release uuid to pods and rc objects 2018-09-13 05:35:35 +00:00
nagios Update logging format and config for apache reverse proxies 2019-02-25 09:21:41 -06:00
nfs-provisioner 'NOP' cleanup for more consistent white-space use in charts 2019-01-03 22:45:49 +00:00
openvswitch ReadinessProbe for OVS-DB Pod 2019-02-09 03:16:16 +00:00
playbooks Add Armada job for testing update of chart passwords 2019-02-04 22:44:52 +00:00
podsecuritypolicy Add PodSecurityPolicy chart 2019-01-03 16:13:45 -06:00
postgresql Merge "Remove set -x from exporter scripts and htk s3 user script" 2019-02-23 03:05:31 +00:00
prometheus Update logging format and config for apache reverse proxies 2019-02-25 09:21:41 -06:00
prometheus-alertmanager [alertmanager] default to 1 replica, multinode gate uses 3 2019-01-30 08:43:18 +00:00
prometheus-kube-state-metrics Merge "Kube-State-Metrics: Add pod/container security context" 2019-01-05 03:14:11 +00:00
prometheus-node-exporter 'NOP' cleanup for more consistent white-space use in charts 2019-01-03 22:45:49 +00:00
prometheus-openstack-exporter Openstack exporter: Add security context for pod/container 2019-01-03 16:16:43 -06:00
prometheus-process-exporter Running agents on all nodes. 2019-01-10 05:46:53 -05:00
rabbitmq readOnlyFilesystem: true for rabbitmq chart 2019-02-27 00:24:19 +00:00
redis Create Helm test for redis chart 2019-02-15 07:55:07 -05:00
registry 'NOP' cleanup for more consistent white-space use in charts 2019-01-03 22:45:49 +00:00
roles Revert "Update kubeadm kubernetes version to 1.12.2" 2019-02-15 19:19:30 +00:00
tiller [tiller] Disable monitoring by default, enable in gate 2019-01-29 18:57:58 +00:00
tools Add podsecuritypolicy test 2019-02-28 16:40:24 -06:00
zuul.d Add podsecuritypolicy test 2019-02-28 16:40:24 -06:00
.gitignore HTK: update .gitignore to exclude htk development files 2019-01-28 10:56:35 -06:00
.gitreview Added .gitreview 2017-06-20 08:49:42 +00:00
Makefile Use supplied HELM variable for dep up in Makefile 2018-10-23 11:26:16 -05:00
README.rst fix bug link in readme 2018-08-28 09:39:41 -04:00
setup.cfg Change openstack-dev to openstack-discuss 2018-12-04 17:31:43 +00:00
setup.py Add docs to openstack-helm-infra 2018-05-15 13:04:28 -05:00
tox.ini fix tox python3 overrides 2018-10-05 16:19:35 +00:00

Openstack-Helm-Infra

Mission

The goal of OpenStack-Helm-Infra is to provide charts for services or integration of third-party solutions that are required to run OpenStack-Helm.

For more information, please refer to the OpenStack-Helm repository.

Communication

  • Join us on Slack - #openstack-helm
  • Join us on IRC: #openstack-helm on freenode
  • Community IRC Meetings: [Every Tuesday @ 3PM UTC], #openstack-meeting-5 on freenode
  • Meeting Agenda Items: Agenda

Launchpad

Bugs and blueprints are tracked via OpenStack-Helm's Launchpad. Any bugs or blueprints filed in the OpenStack-Helm-Infra Launchpad will be closed and requests will be made to file them in the appropriate location.