Merge "Add gateway API overrides for all charts"

This commit is contained in:
Zuul
2026-03-24 20:07:30 +00:00
committed by Gerrit Code Review
48 changed files with 1157 additions and 107 deletions

View File

@@ -81,18 +81,7 @@
--keep-in-foreground
--no-hosts
--bind-interfaces
--address="/keystone.openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--address="/placement.openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--address="/glance.openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--address="/nova.openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--address="/metadata.openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--address="/novncproxy.openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--address="/serialproxy.openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--address="/spiceproxy.openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--address="/neutron.openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--address="/heat.openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--address="/cloudformation.openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--address="/openstack.svc.cluster.local/{{ tcpproxy_ingress_openstack_cidr | ipaddr('address') }}"
--address="/openstack-helm.org/{{ tcpproxy_gatewayapi_cidr | ipaddr('address') }}"
--listen-address="{{ floating_network_gateway_cidr | ipaddr('address') }}"
--no-resolv
--server={{ dnsmasq_dns_server }}

View File

@@ -162,19 +162,7 @@
--keep-in-foreground
--no-hosts
--bind-interfaces
--address="/keystone.openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--address="/placement.openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--address="/glance.openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--address="/nova.openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--address="/metadata.openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--address="/novncproxy.openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--address="/serialproxy.openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--address="/spiceproxy.openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--address="/neutron.openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--address="/heat.openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--address="/cloudformation.openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--address="/openstack.svc.cluster.local/{{ metallb_ingress_openstack_endpoint_cidr | ipaddr('address') }}"
--address="/osh-infra.svc.cluster.local/{{ metallb_ingress_osh_infra_endpoint_cidr | ipaddr('address') }}"
--address="/openstack-helm.org/{{ metallb_gatewayapi_endpoint_cidr | ipaddr('address') }}"
--listen-address="{{ nameserver_ip }}"
--no-resolv
--server={{ dnsmasq_dns_server }}

View File

@@ -30,7 +30,6 @@ fi
#NOTE: Deploy placement
helm upgrade --install placement ${OSH_HELM_REPO}/placement --namespace=openstack \
--values=${OSH_VALUES_OVERRIDES_PATH}/placement/gateway.yaml \
${OSH_EXTRA_HELM_ARGS:=} \
${OSH_EXTRA_HELM_ARGS_PLACEMENT}
@@ -51,7 +50,6 @@ EOF
helm upgrade --install nova ${OSH_HELM_REPO}/nova \
--namespace=openstack \
--values=/tmp/nova.yaml \
--values=${OSH_VALUES_OVERRIDES_PATH}/nova/gateway.yaml \
${OSH_EXTRA_HELM_ARGS:=} \
${OSH_EXTRA_HELM_ARGS_NOVA}
@@ -95,7 +93,6 @@ EOF
helm upgrade --install neutron ${OSH_HELM_REPO}/neutron \
--namespace=openstack \
--values=/tmp/neutron.yaml \
--values=${OSH_VALUES_OVERRIDES_PATH}/neutron/gateway.yaml \
${OSH_EXTRA_HELM_ARGS:=} \
${OSH_EXTRA_HELM_ARGS_NEUTRON}

View File

@@ -29,7 +29,6 @@ EOF
helm upgrade --install glance ${OSH_HELM_REPO}/glance \
--namespace=openstack \
--values=/tmp/glance.yaml \
--values=${OSH_VALUES_OVERRIDES_PATH}/glance/gateway.yaml \
--timeout=800s \
${OSH_EXTRA_HELM_ARGS:=} \
${OSH_EXTRA_HELM_ARGS_GLANCE}

View File

@@ -21,7 +21,6 @@ set -xe
#NOTE: Deploy command
helm upgrade --install heat ${OSH_HELM_REPO}/heat \
--namespace=openstack \
--values=${OSH_VALUES_OVERRIDES_PATH}/heat/gateway.yaml \
${OSH_EXTRA_HELM_ARGS:=} \
${OSH_EXTRA_HELM_ARGS_HEAT}

View File

@@ -23,7 +23,6 @@ set -xe
#NOTE: Deploy command
helm upgrade --install keystone ${OSH_HELM_REPO}/keystone \
--namespace=openstack \
--values=${OSH_VALUES_OVERRIDES_PATH}/keystone/gateway.yaml \
${OSH_EXTRA_HELM_ARGS:=} \
${OSH_EXTRA_HELM_ARGS_KEYSTONE}

View File

@@ -7,6 +7,6 @@ export ARTIFACTS_DIR="${ARTIFACTS_DIR:="/tmp/artifacts/"}"
export SKYLINE_USER="admin"
export SKYLINE_PASSWORD="password"
export SKYLINE_URI="skyline.openstack.svc.cluster.local"
export SKYLINE_URI="skyline.openstack-helm.org"
python3 $(readlink -f $(dirname $0))/skylineSelenium.py

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Aodh.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
alarming:
host_fqdn_override:
public:
host: aodh.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: aodh-route
namespace: openstack
spec:
hostnames:
- "aodh.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: aodh-api
port: 8042
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Barbican.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
key_manager:
host_fqdn_override:
public:
host: barbican.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: barbican-route
namespace: openstack
spec:
hostnames:
- "barbican.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: barbican-api
port: 9311
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Blazar.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
reservation:
host_fqdn_override:
public:
host: blazar.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: blazar-route
namespace: openstack
spec:
hostnames:
- "blazar.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: blazar-api
port: 1234
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Ceph RGW.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
ceph_object_store:
host_fqdn_override:
public:
host: ceph-rgw.openstack-helm.org
manifests:
ingress_rgw: false
service_ingress_rgw: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: ceph-rgw-route
namespace: openstack
spec:
hostnames:
- "ceph-rgw.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: ceph-rgw
port: 8088
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Cinder.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
volumev3:
host_fqdn_override:
public:
host: cinder.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: cinder-route
namespace: openstack
spec:
hostnames:
- "cinder.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: cinder-api
port: 8776
...

View File

@@ -0,0 +1,36 @@
# Gateway API overrides for CloudKitty.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
rating:
host_fqdn_override:
public:
host: cloudkitty.openstack-helm.org
manifests:
ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: cloudkitty-route
namespace: openstack
spec:
hostnames:
- "cloudkitty.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: cloudkitty-api
port: 8089
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Cyborg.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
accelerator:
host_fqdn_override:
public:
host: cyborg.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: cyborg-route
namespace: openstack
spec:
hostnames:
- "cyborg.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: cyborg-api
port: 6666
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Designate.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
dns:
host_fqdn_override:
public:
host: designate.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: designate-route
namespace: openstack
spec:
hostnames:
- "designate.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: designate-api
port: 9001
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Elasticsearch.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
elasticsearch:
host_fqdn_override:
public:
host: elasticsearch.openstack-helm.org
manifests:
ingress: false
service_ingress: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: elasticsearch-route
namespace: openstack
spec:
hostnames:
- "elasticsearch.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: elasticsearch-logging
port: 9200
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Freezer.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
backup:
host_fqdn_override:
public:
host: freezer.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: freezer-route
namespace: openstack
spec:
hostnames:
- "freezer.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: freezer-api
port: 9090
...

View File

@@ -22,9 +22,6 @@ extraObjects:
namespace: openstack
spec:
hostnames:
- "glance"
- "glance.openstack"
- "glance.openstack.svc.cluster.local"
- "glance.openstack-helm.org"
parentRefs:
- name: gateway-default

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Gnocchi.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
metric:
host_fqdn_override:
public:
host: gnocchi.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: gnocchi-route
namespace: openstack
spec:
hostnames:
- "gnocchi.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: gnocchi-api
port: 8041
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Grafana.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
grafana:
host_fqdn_override:
public:
host: grafana.openstack-helm.org
manifests:
ingress: false
service_ingress: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: grafana-route
namespace: openstack
spec:
hostnames:
- "grafana.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: grafana-dashboard
port: 3000
...

View File

@@ -28,9 +28,6 @@ extraObjects:
namespace: openstack
spec:
hostnames:
- "heat"
- "heat.openstack"
- "heat.openstack.svc.cluster.local"
- "heat.openstack-helm.org"
parentRefs:
- name: gateway-default
@@ -50,9 +47,6 @@ extraObjects:
namespace: openstack
spec:
hostnames:
- "heat-cfn"
- "heat-cfn.openstack"
- "heat-cfn.openstack.svc.cluster.local"
- "cloudformation.openstack-helm.org"
parentRefs:
- name: gateway-default

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Horizon.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
dashboard:
host_fqdn_override:
public:
host: horizon.openstack-helm.org
manifests:
ingress_api: false
service_ingress: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: horizon-route
namespace: openstack
spec:
hostnames:
- "horizon.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: horizon-int
port: 80
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Ironic.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
baremetal:
host_fqdn_override:
public:
host: ironic.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: ironic-route
namespace: openstack
spec:
hostnames:
- "ironic.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: ironic-api
port: 6385
...

View File

@@ -25,9 +25,6 @@ extraObjects:
- name: gateway-default
namespace: envoy-gateway-system
hostnames:
- "keystone"
- "keystone.openstack"
- "keystone.openstack.svc.cluster.local"
- "keystone.openstack-helm.org"
rules:
- matches:

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Kibana.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
kibana:
host_fqdn_override:
public:
host: kibana.openstack-helm.org
manifests:
ingress: false
service_ingress: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: kibana-route
namespace: openstack
spec:
hostnames:
- "kibana.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: kibana-dash
port: 5601
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Kubernetes Keystone Webhook.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
kubernetes_keystone_webhook:
host_fqdn_override:
public:
host: k8sksauth.openstack-helm.org
manifests:
ingress_webhook: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: k8sksauth-route
namespace: openstack
spec:
hostnames:
- "k8sksauth.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: k8sksauth-api
port: 8443
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Magnum.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
container_infra:
host_fqdn_override:
public:
host: magnum.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: magnum-route
namespace: openstack
spec:
hostnames:
- "magnum.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: magnum-api
port: 9511
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Manila.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
sharev2:
host_fqdn_override:
public:
host: manila.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: manila-route
namespace: openstack
spec:
hostnames:
- "manila.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: manila-api
port: 8786
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Mistral.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
workflowv2:
host_fqdn_override:
public:
host: mistral.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: mistral-route
namespace: openstack
spec:
hostnames:
- "mistral.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: mistral-api
port: 8989
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Nagios.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
nagios:
host_fqdn_override:
public:
host: nagios.openstack-helm.org
manifests:
ingress: false
service_ingress: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: nagios-route
namespace: openstack
spec:
hostnames:
- "nagios.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: nagios-metrics
port: 8000
...

View File

@@ -22,9 +22,6 @@ extraObjects:
namespace: openstack
spec:
hostnames:
- "neutron"
- "neutron.openstack"
- "neutron.openstack.svc.cluster.local"
- "neutron.openstack-helm.org"
parentRefs:
- name: gateway-default

View File

@@ -46,9 +46,6 @@ extraObjects:
namespace: openstack
spec:
hostnames:
- "nova"
- "nova.openstack"
- "nova.openstack.svc.cluster.local"
- "nova.openstack-helm.org"
parentRefs:
- name: gateway-default
@@ -69,9 +66,6 @@ extraObjects:
namespace: openstack
spec:
hostnames:
- "metadata"
- "metadata.openstack"
- "metadata.openstack.svc.cluster.local"
- "metadata.openstack-helm.org"
parentRefs:
- name: gateway-default
@@ -92,9 +86,6 @@ extraObjects:
namespace: openstack
spec:
hostnames:
- "novncproxy"
- "novncproxy.openstack"
- "novncproxy.openstack.svc.cluster.local"
- "novncproxy.openstack-helm.org"
parentRefs:
- name: gateway-default
@@ -115,9 +106,6 @@ extraObjects:
namespace: openstack
spec:
hostnames:
- "serialproxy"
- "serialproxy.openstack"
- "serialproxy.openstack.svc.cluster.local"
- "serialproxy.openstack-helm.org"
parentRefs:
- name: gateway-default
@@ -138,9 +126,6 @@ extraObjects:
namespace: openstack
spec:
hostnames:
- "spiceproxy"
- "spiceproxy.openstack"
- "spiceproxy.openstack.svc.cluster.local"
- "spiceproxy.openstack-helm.org"
parentRefs:
- name: gateway-default

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Octavia.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
load_balancer:
host_fqdn_override:
public:
host: octavia.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: octavia-route
namespace: openstack
spec:
hostnames:
- "octavia.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: octavia-api
port: 9876
...

View File

@@ -22,9 +22,6 @@ extraObjects:
namespace: openstack
spec:
hostnames:
- "placement"
- "placement.openstack"
- "placement.openstack.svc.cluster.local"
- "placement.openstack-helm.org"
parentRefs:
- name: gateway-default

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Prometheus Alertmanager.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
alertmanager:
host_fqdn_override:
public:
host: alertmanager.openstack-helm.org
manifests:
ingress: false
service_ingress: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: alertmanager-route
namespace: openstack
spec:
hostnames:
- "alertmanager.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: alerts-engine
port: 9093
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Prometheus.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
monitoring:
host_fqdn_override:
public:
host: prometheus.openstack-helm.org
manifests:
ingress: false
service_ingress: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: prometheus-route
namespace: openstack
spec:
hostnames:
- "prometheus.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: prom-metrics
port: 9090
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for RabbitMQ.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
oslo_messaging:
host_fqdn_override:
public:
host: rabbitmq.openstack-helm.org
manifests:
ingress_management: false
service_ingress_management: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: rabbitmq-route
namespace: openstack
spec:
hostnames:
- "rabbitmq.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: rabbitmq
port: 15672
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Skyline.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
skyline:
host_fqdn_override:
public:
host: skyline.openstack-helm.org
manifests:
ingress: false
service_ingress: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: skyline-route
namespace: openstack
spec:
hostnames:
- "skyline.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: skyline-api
port: 9999
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Swift.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
object_store:
host_fqdn_override:
public:
host: swift.openstack-helm.org
manifests:
ingress_proxy: false
service_ingress_proxy: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: swift-route
namespace: openstack
spec:
hostnames:
- "swift.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: swift-proxy
port: 8080
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Tacker.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
nfv_orchestration:
host_fqdn_override:
public:
host: tacker.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: tacker-route
namespace: openstack
spec:
hostnames:
- "tacker.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: tacker-api
port: 9890
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Trove.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
database:
host_fqdn_override:
public:
host: trove.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: trove-route
namespace: openstack
spec:
hostnames:
- "trove.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: trove-api
port: 8779
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Watcher.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
infra_optim:
host_fqdn_override:
public:
host: watcher.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: watcher-route
namespace: openstack
spec:
hostnames:
- "watcher.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: watcher-api
port: 9322
...

View File

@@ -0,0 +1,37 @@
# Gateway API overrides for Zaqar.
#
# Public endpoints use *.openstack-helm.org FQDNs which are resolved by
# dnsmasq to the MetalLB Gateway VIP. In-cluster pods reach the Gateway
# through this DNS path so no ExternalName services are needed.
---
endpoints:
messaging:
host_fqdn_override:
public:
host: zaqar.openstack-helm.org
manifests:
ingress_api: false
service_ingress_api: false
extraObjects:
- apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: zaqar-route
namespace: openstack
spec:
hostnames:
- "zaqar.openstack-helm.org"
parentRefs:
- name: gateway-default
namespace: envoy-gateway-system
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- name: zaqar-api
port: 8888
...

View File

@@ -19,6 +19,7 @@
openstack_release: "2024.2"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-trove-2024-2-ubuntu_jammy
@@ -29,17 +30,18 @@
openstack_release: "2024.2"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-2024-2-ubuntu_jammy
parent: openstack-helm-compute-kit
nodeset: openstack-helm-3nodes-ubuntu_jammy
timeout: 10800
vars:
osh_params:
openstack_release: "2024.2"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-cilium-2024-2-ubuntu_jammy
@@ -52,6 +54,7 @@
openstack_release: "2024.2"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-flannel-2024-2-ubuntu_jammy
@@ -64,6 +67,7 @@
openstack_release: "2024.2"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-helm-repo-public-2024-2-ubuntu_jammy
@@ -74,6 +78,7 @@
openstack_release: "2024.2"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-ovn-2024-2-ubuntu_jammy
@@ -84,17 +89,7 @@
openstack_release: "2024.2"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: ovn
- job:
name: openstack-helm-tls-2024-2-ubuntu_jammy
parent: openstack-helm-tls
vars:
osh_params:
openstack_release: "2024.2"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: tls
feature_gates: ovn,gateway
- job:
name: openstack-helm-tacker-2024-2-ubuntu_jammy
@@ -105,4 +100,5 @@
openstack_release: "2024.2"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
...

View File

@@ -20,6 +20,7 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-trove-2025-1-ubuntu_jammy
@@ -30,40 +31,40 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-2025-1-ubuntu_jammy
parent: openstack-helm-compute-kit
nodeset: openstack-helm-3nodes-ubuntu_jammy
timeout: 10800
vars:
osh_params:
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-ovn-2025-1-ubuntu_jammy
parent: openstack-helm-compute-kit-ovn
nodeset: openstack-helm-3nodes-ubuntu_jammy
timeout: 10800
vars:
osh_params:
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: ovn
feature_gates: ovn,gateway
- job:
name: openstack-helm-skyline-2025-1-ubuntu_jammy
parent: openstack-helm-skyline
nodeset: openstack-helm-3nodes-ubuntu_jammy
timeout: 10800
vars:
osh_params:
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-cinder-2025-1-ubuntu_noble
@@ -74,6 +75,7 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: gateway
- job:
name: openstack-helm-cinder-2025-1-ubuntu_noble_uv
@@ -84,7 +86,7 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: uv
feature_gates: uv,gateway
- job:
name: openstack-helm-trove-2025-1-ubuntu_noble
@@ -95,95 +97,95 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-2025-1-ubuntu_noble
parent: openstack-helm-compute-kit
nodeset: openstack-helm-3nodes-ubuntu_noble
timeout: 10800
vars:
osh_params:
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-2025-1-ubuntu_noble_uv
parent: openstack-helm-compute-kit
nodeset: openstack-helm-3nodes-ubuntu_noble
timeout: 10800
vars:
osh_params:
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: uv
feature_gates: uv,gateway
- job:
name: openstack-helm-octavia-2025-1-ubuntu_jammy
parent: openstack-helm-octavia
nodeset: openstack-helm-4nodes-ubuntu_jammy
timeout: 10800
vars:
osh_params:
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-watcher-2025-1-ubuntu_jammy
parent: openstack-helm-watcher
nodeset: openstack-helm-3nodes-ubuntu_jammy
timeout: 10800
vars:
osh_params:
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-blazar-2025-1-ubuntu_jammy
parent: openstack-helm-blazar
nodeset: openstack-helm-3nodes-ubuntu_jammy
timeout: 10800
vars:
osh_params:
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-cloudkitty-2025-1-ubuntu_jammy
parent: openstack-helm-cloudkitty
nodeset: openstack-helm-3nodes-ubuntu_jammy
timeout: 10800
vars:
osh_params:
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-freezer-2025-1-ubuntu_jammy
parent: openstack-helm-freezer
nodeset: openstack-helm-3nodes-ubuntu_jammy
timeout: 10800
vars:
osh_params:
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-zaqar-2025-1-ubuntu_jammy
parent: openstack-helm-zaqar
nodeset: openstack-helm-3nodes-ubuntu_jammy
timeout: 10800
vars:
osh_params:
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-dpdk-2025-1-ubuntu_jammy
@@ -206,7 +208,7 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: dpdk
feature_gates: dpdk,gateway
files:
- ^roles/.*
- ^openvswitch/.*
@@ -222,7 +224,7 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: logo
feature_gates: logo,gateway
- job:
name: openstack-helm-compute-kit-cilium-2025-1-ubuntu_jammy
@@ -235,6 +237,7 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-helm-repo-public-2025-1-ubuntu_jammy
@@ -245,6 +248,7 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
- job:
name: openstack-helm-tacker-2025-1-ubuntu_jammy
@@ -255,4 +259,5 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
...

View File

@@ -20,6 +20,7 @@
openstack_release: "2025.2"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: gateway
- job:
name: openstack-helm-cinder-2025-2-ubuntu_noble_uv
@@ -30,84 +31,82 @@
openstack_release: "2025.2"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: uv
feature_gates: uv,gateway
- job:
name: openstack-helm-trove-2025-2-ubuntu_noble
parent: openstack-helm-trove
nodeset: openstack-helm-5nodes-ubuntu_noble
timeout: 10800
vars:
osh_params:
openstack_release: "2025.2"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-2025-2-ubuntu_noble
parent: openstack-helm-compute-kit
nodeset: openstack-helm-3nodes-ubuntu_noble
timeout: 10800
vars:
osh_params:
openstack_release: "2025.2"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: gateway
- job:
name: openstack-helm-compute-kit-2025-2-ubuntu_noble_uv
parent: openstack-helm-compute-kit
nodeset: openstack-helm-3nodes-ubuntu_noble
timeout: 10800
vars:
osh_params:
openstack_release: "2025.2"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: uv
feature_gates: uv,gateway
- job:
name: openstack-helm-compute-kit-ovn-2025-2-ubuntu_noble
parent: openstack-helm-compute-kit-ovn
nodeset: openstack-helm-3nodes-ubuntu_noble
timeout: 10800
vars:
osh_params:
openstack_release: "2025.2"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: ovn
feature_gates: ovn,gateway
- job:
name: openstack-helm-octavia-2025-2-ubuntu_noble
parent: openstack-helm-octavia
nodeset: openstack-helm-4nodes-ubuntu_noble
timeout: 10800
vars:
osh_params:
openstack_release: "2025.2"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: gateway
- job:
name: openstack-helm-skyline-2025-2-ubuntu_noble
parent: openstack-helm-skyline
nodeset: openstack-helm-3nodes-ubuntu_noble
timeout: 10800
vars:
osh_params:
openstack_release: "2025.2"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: gateway
- job:
name: openstack-helm-swift-2025-2-ubuntu_noble
parent: openstack-helm-swift
nodeset: openstack-helm-3nodes-ubuntu_noble
timeout: 10800
vars:
osh_params:
openstack_release: "2025.2"
container_distro_name: ubuntu
container_distro_version: noble
feature_gates: gateway
...

View File

@@ -112,7 +112,7 @@
metallb_setup: true
metallb_version: "0.15.3"
coredns_resolver_setup: false
ingress_setup: true
ingress_setup: false
ingress_implementation: "haproxy"
gatewayapi_setup: true
gatewayapi_implementation: "envoy"

View File

@@ -22,6 +22,7 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
gate_scripts:
- ./tools/deployment/common/prepare-k8s.sh
- ./tools/deployment/common/prepare-charts.sh
@@ -44,6 +45,7 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
gate_scripts:
- ./tools/deployment/common/prepare-k8s.sh
- ./tools/deployment/common/prepare-charts.sh
@@ -73,7 +75,7 @@
osh_params:
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: apparmor
feature_gates: apparmor,gateway
ingress_setup: false
gate_scripts:
- ./tools/deployment/common/prepare-k8s.sh
@@ -90,7 +92,7 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: "ldap,prometheus,backups"
feature_gates: "ldap,prometheus,backups,gateway"
gate_scripts:
- ./tools/deployment/common/prepare-k8s.sh
- ./tools/deployment/common/prepare-charts.sh
@@ -117,7 +119,7 @@
parent: openstack-helm-compute-kit-2025-1-ubuntu_jammy
vars:
osh_params:
feature_gates: "ingress-service"
feature_gates: "ingress-service,gateway"
files:
- ^helm-toolkit/.*
- ^roles/.*
@@ -150,6 +152,7 @@
openstack_release: "2025.1"
container_distro_name: ubuntu
container_distro_version: jammy
feature_gates: gateway
gate_scripts:
- ./tools/deployment/common/prepare-k8s.sh
- ./tools/deployment/common/prepare-charts.sh