OSH: Add emptydirs for tmp

This PS adds emptydirs backing the /tmp directory in pods, which
is required in most cases for full operation when using a read only
filesystem backing the container.

Additionally some yaml indent issues are resolved.

Change-Id: I9df8f70e913b911ff755600fa2f669d9c5dcb928
Signed-off-by: Pete Birley <pete@port.direct>
This commit is contained in:
Pete Birley 2019-04-19 18:06:06 -05:00
parent 283f3a2d63
commit 623c131292
100 changed files with 999 additions and 487 deletions

View File

@ -54,31 +54,35 @@ spec:
command:
- /tmp/aodh-alarms-cleaner.sh
volumeMounts:
- name: aodh-bin
mountPath: /tmp/aodh-alarms-cleaner.sh
subPath: aodh-alarms-cleaner.sh
readOnly: true
- name: pod-etc-aodh
mountPath: /etc/aodh
- name: aodh-etc
mountPath: /etc/aodh/aodh.conf
subPath: aodh.conf
readOnly: true
- name: aodh-etc
mountPath: {{ .Values.conf.aodh.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.aodh.DEFAULT.log_config_append }}
readOnly: true
{{ if $mounts_aodh_alarms_cleaner.volumeMounts }}{{ toYaml $mounts_aodh_alarms_cleaner.volumeMounts | indent 14 }}{{ end }}
- name: pod-tmp
mountPath: /tmp
- name: aodh-bin
mountPath: /tmp/aodh-alarms-cleaner.sh
subPath: aodh-alarms-cleaner.sh
readOnly: true
- name: pod-etc-aodh
mountPath: /etc/aodh
- name: aodh-etc
mountPath: /etc/aodh/aodh.conf
subPath: aodh.conf
readOnly: true
- name: aodh-etc
mountPath: {{ .Values.conf.aodh.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.aodh.DEFAULT.log_config_append }}
readOnly: true
{{ if $mounts_aodh_alarms_cleaner.volumeMounts }}{{ toYaml $mounts_aodh_alarms_cleaner.volumeMounts | indent 16 }}{{ end }}
volumes:
- name: pod-etc-aodh
emptyDir: {}
- name: aodh-etc
secret:
secretName: aodh-etc
defaultMode: 0444
- name: aodh-bin
configMap:
name: aodh-bin
defaultMode: 0555
{{ if $mounts_aodh_alarms_cleaner.volumes }}{{ toYaml $mounts_aodh_alarms_cleaner.volumes | indent 10 }}{{ end }}
- name: pod-tmp
emptyDir: {}
- name: pod-etc-aodh
emptyDir: {}
- name: aodh-etc
secret:
secretName: aodh-etc
defaultMode: 0444
- name: aodh-bin
configMap:
name: aodh-bin
defaultMode: 0555
{{ if $mounts_aodh_alarms_cleaner.volumes }}{{ toYaml $mounts_aodh_alarms_cleaner.volumes | indent 12 }}{{ end }}
{{- end }}

View File

@ -76,6 +76,8 @@ spec:
tcpSocket:
port: {{ tuple "alarming" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: wsgi-aodh
mountPath: /var/www/cgi-bin/aodh
- name: pod-etc-aodh
@ -106,6 +108,8 @@ spec:
readOnly: true
{{ if $mounts_aodh_api.volumeMounts }}{{ toYaml $mounts_aodh_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: wsgi-aodh
emptyDir: {}
- name: pod-etc-aodh

View File

@ -69,6 +69,8 @@ spec:
- /tmp/aodh-evaluator.sh
- stop
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-aodh
mountPath: /etc/aodh
- name: aodh-etc
@ -89,6 +91,8 @@ spec:
readOnly: true
{{ if $mounts_aodh_evaluator.volumeMounts }}{{ toYaml $mounts_aodh_evaluator.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-aodh
emptyDir: {}
- name: aodh-etc

View File

@ -69,6 +69,8 @@ spec:
- /tmp/aodh-listener.sh
- stop
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-aodh
mountPath: /etc/aodh
- name: aodh-etc
@ -89,6 +91,8 @@ spec:
readOnly: true
{{ if $mounts_aodh_listener.volumeMounts }}{{ toYaml $mounts_aodh_listener.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-aodh
emptyDir: {}
- name: aodh-etc

View File

@ -69,6 +69,8 @@ spec:
- /tmp/aodh-notifier.sh
- stop
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-aodh
mountPath: /etc/aodh
- name: aodh-etc
@ -89,6 +91,8 @@ spec:
readOnly: true
{{ if $mounts_aodh_notifier.volumeMounts }}{{ toYaml $mounts_aodh_notifier.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-aodh
emptyDir: {}
- name: aodh-etc

View File

@ -50,6 +50,8 @@ spec:
command:
- /tmp/aodh-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: aodh-etc
mountPath: /etc/aodh/aodh.conf
subPath: aodh.conf
@ -60,6 +62,8 @@ spec:
readOnly: true
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: aodh-etc
secret:
secretName: aodh-etc

View File

@ -75,6 +75,8 @@ spec:
tcpSocket:
port: {{ tuple "key_manager" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcbarbican
mountPath: /etc/barbican
- name: barbican-etc
@ -107,6 +109,8 @@ spec:
readOnly: true
{{ if $mounts_barbican_api.volumeMounts }}{{ toYaml $mounts_barbican_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: etcbarbican
emptyDir: {}
- name: barbican-etc

View File

@ -50,12 +50,16 @@ spec:
command:
- /tmp/barbican-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: barbican-bin
mountPath: /tmp/barbican-test.sh
subPath: barbican-test.sh
readOnly: true
{{ if $mounts_barbican_tests.volumeMounts }}{{ toYaml $mounts_barbican_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: barbican-bin
configMap:
name: barbican-bin

View File

@ -62,6 +62,8 @@ spec:
command:
- /tmp/ceilometer-compute.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-ceilometer
mountPath: /etc/ceilometer
- name: ceilometer-etc
@ -113,6 +115,8 @@ spec:
readOnly: true
{{ if $mounts_ceilometer_compute.volumeMounts }}{{ toYaml $mounts_ceilometer_compute.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-ceilometer
emptyDir: {}
- name: ceilometer-etc

View File

@ -63,6 +63,8 @@ spec:
command:
- /tmp/ceilometer-ipmi.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-ceilometer
mountPath: /etc/ceilometer
- name: ceilometer-etc
@ -106,6 +108,8 @@ spec:
readOnly: true
{{ if $mounts_ceilometer_ipmi.volumeMounts }}{{ toYaml $mounts_ceilometer_ipmi.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-ceilometer
emptyDir: {}
- name: ceilometer-etc

View File

@ -74,6 +74,8 @@ spec:
tcpSocket:
port: {{ tuple "metering" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-ceilometer
mountPath: /etc/ceilometer
- name: ceilometer-etc
@ -124,6 +126,8 @@ spec:
readOnly: true
{{ if $mounts_ceilometer_api.volumeMounts }}{{ toYaml $mounts_ceilometer_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-ceilometer
emptyDir: {}
- name: ceilometer-etc

View File

@ -60,6 +60,8 @@ spec:
command:
- /tmp/ceilometer-central.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-ceilometer
mountPath: /etc/ceilometer
- name: ceilometer-etc
@ -100,6 +102,8 @@ spec:
readOnly: true
{{ if $mounts_ceilometer_central.volumeMounts }}{{ toYaml $mounts_ceilometer_central.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-ceilometer
emptyDir: {}
- name: ceilometer-etc

View File

@ -60,6 +60,8 @@ spec:
command:
- /tmp/ceilometer-collector.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-ceilometer
mountPath: /etc/ceilometer
- name: ceilometer-etc
@ -96,6 +98,8 @@ spec:
readOnly: true
{{ if $mounts_ceilometer_collector.volumeMounts }}{{ toYaml $mounts_ceilometer_collector.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-ceilometer
emptyDir: {}
- name: ceilometer-etc

View File

@ -60,6 +60,8 @@ spec:
command:
- /tmp/ceilometer-notification.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-ceilometer
mountPath: /etc/ceilometer
- name: ceilometer-etc
@ -102,6 +104,8 @@ spec:
readOnly: true
{{ if $mounts_ceilometer_notification.volumeMounts }}{{ toYaml $mounts_ceilometer_notification.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-ceilometer
emptyDir: {}
- name: etc-ceilometer-meters

View File

@ -53,11 +53,15 @@ spec:
command:
- /tmp/db-init-mongodb.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ceilometer-bin
mountPath: /tmp/db-init-mongodb.sh
subPath: db-init-mongodb.sh
readOnly: true
volumes:
- name: pod-tmp
emptyDir: {}
- name: ceilometer-bin
configMap:
name: ceilometer-bin

View File

@ -43,6 +43,8 @@ spec:
command:
- /tmp/ks-user.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ceilometer-bin
mountPath: /tmp/ks-user.sh
subPath: ks-user.sh
@ -74,6 +76,8 @@ spec:
command:
- /tmp/rally-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ceilometer-etc
mountPath: /etc/rally/rally_tests.yaml
subPath: rally_tests.yaml
@ -86,6 +90,8 @@ spec:
mountPath: /var/lib/rally
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: ceilometer-etc
secret:
secretName: ceilometer-etc

View File

@ -60,31 +60,35 @@ spec:
command:
- /tmp/volume-usage-audit.sh
volumeMounts:
- name: etccinder
mountPath: /etc/cinder
- name: cinder-etc
mountPath: /etc/cinder/cinder.conf
subPath: cinder.conf
readOnly: true
- name: cinder-etc
mountPath: {{ .Values.conf.cinder.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.cinder.DEFAULT.log_config_append }}
readOnly: true
- name: cinder-bin
mountPath: /tmp/volume-usage-audit.sh
subPath: volume-usage-audit.sh
readOnly: true
{{ if $mounts_cinder_volume_usage_audit.volumeMounts }}{{ toYaml $mounts_cinder_volume_usage_audit.volumeMounts | indent 14 }}{{ end }}
- name: pod-tmp
mountPath: /tmp
- name: etccinder
mountPath: /etc/cinder
- name: cinder-etc
mountPath: /etc/cinder/cinder.conf
subPath: cinder.conf
readOnly: true
- name: cinder-etc
mountPath: {{ .Values.conf.cinder.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.cinder.DEFAULT.log_config_append }}
readOnly: true
- name: cinder-bin
mountPath: /tmp/volume-usage-audit.sh
subPath: volume-usage-audit.sh
readOnly: true
{{ if $mounts_cinder_volume_usage_audit.volumeMounts }}{{ toYaml $mounts_cinder_volume_usage_audit.volumeMounts | indent 16 }}{{ end }}
volumes:
- name: etccinder
emptyDir: {}
- name: cinder-etc
secret:
secretName: cinder-etc
defaultMode: 0444
- name: cinder-bin
configMap:
name: cinder-bin
defaultMode: 0555
{{ if $mounts_cinder_volume_usage_audit.volumes }}{{ toYaml $mounts_cinder_volume_usage_audit.volumes | indent 10 }}{{ end }}
- name: pod-tmp
emptyDir: {}
- name: etccinder
emptyDir: {}
- name: cinder-etc
secret:
secretName: cinder-etc
defaultMode: 0444
- name: cinder-bin
configMap:
name: cinder-bin
defaultMode: 0555
{{ if $mounts_cinder_volume_usage_audit.volumes }}{{ toYaml $mounts_cinder_volume_usage_audit.volumes | indent 12 }}{{ end }}
{{- end }}

View File

@ -66,6 +66,8 @@ spec:
- "cinder:"
- {{ ( split "://" .Values.conf.cinder.coordination.backend_url )._1 }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-coordination
mountPath: {{ ( split "://" .Values.conf.cinder.coordination.backend_url )._1 }}
{{ end }}
@ -98,6 +100,8 @@ spec:
successThreshold: 1
timeoutSeconds: 1
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-bin
mountPath: /tmp/cinder-api.sh
subPath: cinder-api.sh
@ -132,6 +136,8 @@ spec:
{{- end }}
{{ if $mounts_cinder_api.volumeMounts }}{{ toYaml $mounts_cinder_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: cinder-bin
configMap:
name: cinder-bin

View File

@ -65,6 +65,8 @@ spec:
- name: RBD_USER
value: {{ .Values.conf.cinder.DEFAULT.backup_ceph_user | quote }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcceph
mountPath: /etc/ceph
- name: cinder-bin
@ -87,6 +89,8 @@ spec:
- name: RBD_USER
value: {{ index (index .Values.conf.backends (include "cinder.utils.ceph_volume_section_name" $envAll)) "rbd_user" | quote }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcceph
mountPath: /etc/ceph
- name: cinder-bin
@ -109,6 +113,8 @@ spec:
- "cinder:"
- {{ .Values.conf.cinder.DEFAULT.backup_posix_path }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-backup
mountPath: {{ .Values.conf.cinder.DEFAULT.backup_posix_path }}
{{ end }}
@ -123,6 +129,8 @@ spec:
- "cinder:"
- {{ ( split "://" .Values.conf.cinder.coordination.backend_url )._1 }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-coordination
mountPath: {{ ( split "://" .Values.conf.cinder.coordination.backend_url )._1 }}
{{ end }}
@ -138,6 +146,8 @@ spec:
command:
- /tmp/cinder-backup.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-bin
mountPath: /tmp/cinder-backup.sh
subPath: cinder-backup.sh
@ -205,6 +215,8 @@ spec:
readOnly: true
{{ if $mounts_cinder_backup.volumeMounts }}{{ toYaml $mounts_cinder_backup.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: cinder-etc
secret:
secretName: cinder-etc

View File

@ -65,6 +65,8 @@ spec:
- "cinder:"
- {{ ( split "://" .Values.conf.cinder.coordination.backend_url )._1 }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-coordination
mountPath: {{ ( split "://" .Values.conf.cinder.coordination.backend_url )._1 }}
{{ end }}
@ -76,6 +78,8 @@ spec:
command:
- /tmp/cinder-scheduler.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-bin
mountPath: /tmp/cinder-scheduler.sh
subPath: cinder-scheduler.sh
@ -102,6 +106,8 @@ spec:
{{- end }}
{{ if $mounts_cinder_scheduler.volumeMounts }}{{ toYaml $mounts_cinder_scheduler.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: cinder-bin
configMap:
name: cinder-bin

View File

@ -65,6 +65,8 @@ spec:
- name: RBD_USER
value: {{ index (index .Values.conf.backends (include "cinder.utils.ceph_volume_section_name" $envAll)) "rbd_user" | quote }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcceph
mountPath: /etc/ceph
- name: cinder-bin
@ -87,6 +89,8 @@ spec:
- "cinder:"
- {{ ( split "://" .Values.conf.cinder.coordination.backend_url )._1 }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-coordination
mountPath: {{ ( split "://" .Values.conf.cinder.coordination.backend_url )._1 }}
{{ end }}
@ -98,6 +102,8 @@ spec:
command:
- /tmp/retrieve-internal-tenant.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-bin
mountPath: /tmp/retrieve-internal-tenant.sh
subPath: retrieve-internal-tenant.sh
@ -125,6 +131,8 @@ spec:
command:
- /tmp/cinder-volume.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-bin
mountPath: /tmp/cinder-volume.sh
subPath: cinder-volume.sh
@ -186,6 +194,8 @@ spec:
{{- end }}
{{ if $mounts_cinder_volume.volumeMounts }}{{ toYaml $mounts_cinder_volume.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: cinder-bin
configMap:
name: cinder-bin

View File

@ -75,6 +75,8 @@ spec:
command:
- /tmp/ceph-admin-keyring.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcceph
mountPath: /etc/ceph
{{- if not .Values.backup.external_ceph_rbd.enabled }}
@ -123,6 +125,8 @@ spec:
command:
- /tmp/backup-storage-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-bin
mountPath: /tmp/backup-storage-init.sh
subPath: backup-storage-init.sh
@ -149,6 +153,8 @@ spec:
{{- end }}
{{- end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: cinder-bin
configMap:
name: cinder-bin

View File

@ -82,6 +82,8 @@ spec:
command:
- /tmp/clean-secrets.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-bin
mountPath: /tmp/clean-secrets.sh
subPath: clean-secrets.sh
@ -101,12 +103,16 @@ spec:
command:
- /tmp/clean-secrets.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-bin
mountPath: /tmp/clean-secrets.sh
subPath: clean-secrets.sh
readOnly: true
{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: cinder-bin
configMap:
name: cinder-bin

View File

@ -50,6 +50,8 @@ spec:
command:
- /tmp/create-internal-tenant.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: create-internal-tenant-sh
mountPath: /tmp/create-internal-tenant.sh
subPath: create-internal-tenant.sh
@ -76,6 +78,8 @@ spec:
value: {{ $serviceOsRoles | quote }}
{{- end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: create-internal-tenant-sh
configMap:
name: {{ $configMapBin | quote }}

View File

@ -73,6 +73,8 @@ spec:
command:
- /tmp/ceph-admin-keyring.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcceph
mountPath: /etc/ceph
- name: cinder-bin
@ -114,6 +116,8 @@ spec:
command:
- /tmp/storage-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-bin
mountPath: /tmp/storage-init.sh
subPath: storage-init.sh
@ -133,6 +137,8 @@ spec:
{{- end }}
{{- end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: cinder-bin
configMap:
name: cinder-bin

View File

@ -45,6 +45,8 @@ spec:
command:
- /tmp/ks-user.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-bin
mountPath: /tmp/ks-user.sh
subPath: ks-user.sh
@ -76,6 +78,8 @@ spec:
command:
- /tmp/rally-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cinder-etc
mountPath: /etc/rally/rally_tests.yaml
subPath: rally_tests.yaml
@ -88,6 +92,8 @@ spec:
mountPath: /var/lib/rally
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: cinder-etc
secret:
secretName: cinder-etc

View File

@ -65,6 +65,8 @@ spec:
tcpSocket:
port: {{ tuple "policy" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etccongress
mountPath: /etc/congress
- name: congress-bin
@ -88,6 +90,8 @@ spec:
subPath: policy.json
readOnly: true
volumes:
- name: pod-tmp
emptyDir: {}
- name: etccongress
emptyDir: {}
- name: congress-bin

View File

@ -59,6 +59,8 @@ spec:
- /tmp/congress-datasource.sh
- start
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etccongress
mountPath: /etc/congress
- name: congress-bin
@ -82,6 +84,8 @@ spec:
subPath: policy.json
readOnly: true
volumes:
- name: pod-tmp
emptyDir: {}
- name: etccongress
emptyDir: {}
- name: congress-bin

View File

@ -59,6 +59,8 @@ spec:
- /tmp/congress-policy-engine.sh
- start
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etccongress
mountPath: /etc/congress
- name: congress-bin
@ -82,6 +84,8 @@ spec:
subPath: policy.json
readOnly: true
volumes:
- name: pod-tmp
emptyDir: {}
- name: etccongress
emptyDir: {}
- name: congress-bin

View File

@ -45,6 +45,8 @@ spec:
command:
- /tmp/ds-create.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ds-create-sh
mountPath: /tmp/ds-create.sh
subPath: ds-create.sh
@ -56,6 +58,8 @@ spec:
- name: SERVICE_OS_SERVICE_NAME
value: "congress"
volumes:
- name: pod-tmp
emptyDir: {}
- name: ds-create-sh
configMap:
name: congress-bin

View File

@ -43,11 +43,15 @@ spec:
command:
- /tmp/congress-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: congress-bin
mountPath: /tmp/congress-test.sh
subPath: congress-test.sh
readOnly: true
volumes:
- name: pod-tmp
emptyDir: {}
- name: congress-bin
configMap:
name: congress-bin

View File

@ -66,6 +66,8 @@ spec:
- "glance:"
- {{ .Values.conf.glance.glance_store.filesystem_store_datadir }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: glance-images
mountPath: {{ .Values.conf.glance.glance_store.filesystem_store_datadir }}
{{ if eq .Values.storage "rbd" }}
@ -77,6 +79,8 @@ spec:
command:
- /tmp/ceph-keyring.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcceph
mountPath: /etc/ceph
- name: glance-bin
@ -113,6 +117,8 @@ spec:
port: {{ tuple "image" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
initialDelaySeconds: 30
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcglance
mountPath: /etc/glance
- name: glance-bin
@ -159,6 +165,8 @@ spec:
{{- end }}
{{ if $mounts_glance_api.volumeMounts }}{{ toYaml $mounts_glance_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: etcglance
emptyDir: {}
- name: glance-bin

View File

@ -80,6 +80,8 @@ spec:
port: {{ tuple "image_registry" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
initialDelaySeconds: 30
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcglance
mountPath: /etc/glance
- name: glance-bin
@ -108,6 +110,8 @@ spec:
readOnly: true
{{ if $mounts_glance_registry.volumeMounts }}{{ toYaml $mounts_glance_registry.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: etcglance
emptyDir: {}
- name: glance-bin

View File

@ -82,6 +82,8 @@ spec:
command:
- /tmp/clean-secrets.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: glance-bin
mountPath: /tmp/clean-secrets.sh
subPath: clean-secrets.sh
@ -97,11 +99,15 @@ spec:
command:
- /tmp/clean-image.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: glance-bin
mountPath: /tmp/clean-image.sh
subPath: clean-image.sh
readOnly: true
volumes:
- name: pod-tmp
emptyDir: {}
- name: glance-bin
configMap:
name: glance-bin

View File

@ -75,6 +75,8 @@ spec:
command:
- /tmp/ceph-admin-keyring.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcceph
mountPath: /etc/ceph
- name: glance-bin
@ -131,6 +133,8 @@ spec:
command:
- /tmp/storage-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: glance-bin
mountPath: /tmp/storage-init.sh
subPath: storage-init.sh
@ -154,6 +158,8 @@ spec:
mountPath: {{ .Values.conf.glance.glance_store.filesystem_store_datadir }}
{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: glance-bin
configMap:
name: glance-bin

View File

@ -44,6 +44,8 @@ spec:
command:
- /tmp/ks-user.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: glance-bin
mountPath: /tmp/ks-user.sh
subPath: ks-user.sh
@ -75,6 +77,8 @@ spec:
command:
- /tmp/rally-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: glance-etc
mountPath: /etc/rally/rally_tests.yaml
subPath: rally_tests.yaml
@ -87,6 +91,8 @@ spec:
mountPath: /var/lib/rally
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: glance-etc
secret:
secretName: glance-etc

View File

@ -60,6 +60,8 @@ spec:
command:
- /tmp/heat-engine-cleaner.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: heat-bin
mountPath: /tmp/heat-engine-cleaner.sh
subPath: heat-engine-cleaner.sh
@ -78,15 +80,17 @@ spec:
{{ end }}
{{ if $mounts_heat_engine_cleaner.volumeMounts }}{{ toYaml $mounts_heat_engine_cleaner.volumeMounts | indent 14 }}{{ end }}
volumes:
- name: etcheat
emptyDir: {}
- name: heat-etc
secret:
secretName: heat-etc
defaultMode: 0444
- name: heat-bin
configMap:
name: heat-bin
defaultMode: 0555
{{ if $mounts_heat_engine_cleaner.volumes }}{{ toYaml $mounts_heat_engine_cleaner.volumes | indent 10 }}{{ end }}
- name: pod-tmp
emptyDir: {}
- name: etcheat
emptyDir: {}
- name: heat-etc
secret:
secretName: heat-etc
defaultMode: 0444
- name: heat-bin
configMap:
name: heat-bin
defaultMode: 0555
{{ if $mounts_heat_engine_cleaner.volumes }}{{ toYaml $mounts_heat_engine_cleaner.volumes | indent 12 }}{{ end }}
{{- end }}

View File

@ -58,6 +58,8 @@ spec:
- /tmp/heat-purge-deleted-active.sh
- {{ quote .Values.jobs.purge_deleted.purge_age }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: heat-bin
mountPath: /tmp/heat-purge-deleted-active.sh
subPath: heat-purge-deleted-active.sh
@ -76,15 +78,17 @@ spec:
{{ end }}
{{ if $mounts_heat_purge_deleted.volumeMounts }}{{ toYaml $mounts_heat_purge_deleted.volumeMounts | indent 14 }}{{ end }}
volumes:
- name: etcheat
emptyDir: {}
- name: heat-etc
secret:
secretName: heat-etc
defaultMode: 0444
- name: heat-bin
configMap:
name: heat-bin
defaultMode: 0555
{{ if $mounts_heat_purge_deleted.volumes }}{{ toYaml $mounts_heat_purge_deleted.volumes | indent 10 }}{{ end }}
- name: pod-tmp
emptyDir: {}
- name: etcheat
emptyDir: {}
- name: heat-etc
secret:
secretName: heat-etc
defaultMode: 0444
- name: heat-bin
configMap:
name: heat-bin
defaultMode: 0555
{{ if $mounts_heat_purge_deleted.volumes }}{{ toYaml $mounts_heat_purge_deleted.volumes | indent 12 }}{{ end }}
{{- end }}

View File

@ -80,6 +80,8 @@ spec:
port: {{ tuple "orchestration" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
initialDelaySeconds: 30
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-heat
mountPath: /etc/heat
- name: heat-bin
@ -110,6 +112,8 @@ spec:
readOnly: true
{{ if $mounts_heat_api.volumeMounts }}{{ toYaml $mounts_heat_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-heat
emptyDir: {}
- name: heat-bin

View File

@ -80,6 +80,8 @@ spec:
port: {{ tuple "cloudformation" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
initialDelaySeconds: 30
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-heat
mountPath: /etc/heat
- name: heat-bin
@ -110,6 +112,8 @@ spec:
readOnly: true
{{ if $mounts_heat_cfn.volumeMounts }}{{ toYaml $mounts_heat_cfn.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-heat
emptyDir: {}
- name: heat-bin

View File

@ -76,6 +76,8 @@ spec:
tcpSocket:
port: {{ tuple "cloudwatch" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-heat
mountPath: /etc/heat
- name: heat-bin
@ -106,6 +108,8 @@ spec:
readOnly: true
{{ if $mounts_heat_cloudwatch.volumeMounts }}{{ toYaml $mounts_heat_cloudwatch.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-heat
emptyDir: {}
- name: heat-bin

View File

@ -78,6 +78,8 @@ spec:
- /tmp/heat-engine.sh
- stop
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-heat
mountPath: /etc/heat
- name: heat-bin
@ -100,6 +102,8 @@ spec:
readOnly: true
{{ if $mounts_heat_engine.volumeMounts }}{{ toYaml $mounts_heat_engine.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-heat
emptyDir: {}
- name: heat-bin

View File

@ -44,6 +44,8 @@ spec:
command:
- /tmp/ks-domain-user.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ks-user-sh
mountPath: /tmp/ks-domain-user.sh
subPath: ks-domain-user.sh
@ -77,6 +79,8 @@ spec:
- name: SERVICE_OS_ROLE
value: {{ .Values.endpoints.identity.auth.heat_stack_user.role | quote }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: ks-user-sh
configMap:
name: heat-bin

View File

@ -48,6 +48,8 @@ spec:
- bash
- /tmp/trusts.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: heat-bin
mountPath: /tmp/trusts.sh
subPath: trusts.sh
@ -64,6 +66,8 @@ spec:
- name: SERVICE_OS_TRUSTEE_DOMAIN
value: {{ .Values.endpoints.identity.auth.heat_trustee.user_domain_name }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: heat-bin
configMap:
name: heat-bin

View File

@ -45,6 +45,8 @@ spec:
command:
- /tmp/ks-user.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: heat-bin
mountPath: /tmp/ks-user.sh
subPath: ks-user.sh
@ -76,6 +78,8 @@ spec:
command:
- /tmp/rally-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: heat-etc
mountPath: /etc/rally/rally_tests.yaml
subPath: rally_tests.yaml
@ -94,6 +98,8 @@ spec:
{{- end }}
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: heat-etc
secret:
secretName: heat-etc

View File

@ -90,6 +90,8 @@ spec:
periodSeconds: 60
timeoutSeconds: 5
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: static-horizon
mountPath: /var/www/html/
- name: horizon-bin
@ -127,6 +129,8 @@ spec:
{{- end }}
{{ if $mounts_horizon.volumeMounts }}{{ toYaml $mounts_horizon.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: wsgi-horizon
emptyDir: {}
- name: static-horizon

View File

@ -67,6 +67,8 @@ spec:
command:
- /tmp/retreive-swift-config.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/retreive-swift-config.sh
subPath: retreive-swift-config.sh
@ -86,6 +88,8 @@ spec:
command:
- /tmp/retreive-cleaning-network.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/retreive-cleaning-network.sh
subPath: retreive-cleaning-network.sh
@ -112,6 +116,8 @@ spec:
tcpSocket:
port: {{ tuple "baremetal" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/ironic-api.sh
subPath: ironic-api.sh
@ -132,6 +138,8 @@ spec:
mountPath: /tmp/pod-shared
{{ if $mounts_ironic_api.volumeMounts }}{{ toYaml $mounts_ironic_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: ironic-bin
configMap:
name: ironic-bin

View File

@ -50,11 +50,15 @@ spec:
command:
- /tmp/manage-cleaning-network.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/manage-cleaning-network.sh
subPath: manage-cleaning-network.sh
readOnly: true
volumes:
- name: pod-tmp
emptyDir: {}
- name: ironic-bin
configMap:
name: ironic-bin

View File

@ -62,6 +62,8 @@ spec:
command:
- /tmp/ironic-conductor-pxe-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/ironic-conductor-pxe-init.sh
subPath: ironic-conductor-pxe-init.sh
@ -77,6 +79,8 @@ spec:
command:
- /tmp/ironic-conductor-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/ironic-conductor-init.sh
subPath: ironic-conductor-init.sh
@ -92,6 +96,8 @@ spec:
command:
- /tmp/ironic-conductor-http-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/ironic-conductor-http-init.sh
subPath: ironic-conductor-http-init.sh
@ -115,6 +121,8 @@ spec:
command:
- /tmp/retreive-swift-config.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/retreive-swift-config.sh
subPath: retreive-swift-config.sh
@ -134,6 +142,8 @@ spec:
command:
- /tmp/retreive-cleaning-network.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/retreive-cleaning-network.sh
subPath: retreive-cleaning-network.sh
@ -150,6 +160,8 @@ spec:
command:
- /tmp/ironic-conductor.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/ironic-conductor.sh
subPath: ironic-conductor.sh
@ -191,6 +203,8 @@ spec:
command:
- /tmp/ironic-conductor-pxe.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/ironic-conductor-pxe.sh
subPath: ironic-conductor-pxe.sh
@ -207,6 +221,8 @@ spec:
command:
- /tmp/ironic-conductor-http.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ironic-bin
mountPath: /tmp/ironic-conductor-http.sh
subPath: ironic-conductor-http.sh
@ -218,6 +234,8 @@ spec:
mountPath: /var/lib/openstack-helm
{{ if $mounts_ironic_conductor.volumeMounts }}{{ toYaml $mounts_ironic_conductor.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-shared
emptyDir: {}
- name: pod-var-cache-ironic

View File

@ -80,46 +80,50 @@ spec:
{{ tuple $envAll "keystone_credential_rotate" | include "helm-toolkit.snippets.image" | indent 14 }}
{{ tuple $envAll $envAll.Values.pod.resources.jobs.credential_rotate | include "helm-toolkit.snippets.kubernetes_resources" | indent 14 }}
env:
- name: KEYSTONE_USER
value: {{ .Values.jobs.credential_rotate.user | quote }}
- name: KEYSTONE_GROUP
value: {{ .Values.jobs.credential_rotate.group | quote }}
- name: KUBERNETES_NAMESPACE
value: {{ .Release.Namespace | quote }}
- name: KEYSTONE_KEYS_REPOSITORY
value: {{ .Values.conf.keystone.credential.key_repository | quote }}
- name: KEYSTONE_CREDENTIAL_MIGRATE_WAIT
value: {{ .Values.jobs.credential_rotate.migrate_wait | quote }}
- name: KEYSTONE_USER
value: {{ .Values.jobs.credential_rotate.user | quote }}
- name: KEYSTONE_GROUP
value: {{ .Values.jobs.credential_rotate.group | quote }}
- name: KUBERNETES_NAMESPACE
value: {{ .Release.Namespace | quote }}
- name: KEYSTONE_KEYS_REPOSITORY
value: {{ .Values.conf.keystone.credential.key_repository | quote }}
- name: KEYSTONE_CREDENTIAL_MIGRATE_WAIT
value: {{ .Values.jobs.credential_rotate.migrate_wait | quote }}
command:
- python
- /tmp/fernet-manage.py
- credential_rotate
volumeMounts:
- name: etckeystone
mountPath: /etc/keystone
- name: keystone-etc
mountPath: /etc/keystone/keystone.conf
subPath: keystone.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.keystone.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.keystone.DEFAULT.log_config_append }}
readOnly: true
- name: keystone-bin
mountPath: /tmp/fernet-manage.py
subPath: fernet-manage.py
readOnly: true
{{ if $mounts_keystone_credential_rotate.volumeMounts }}{{ toYaml $mounts_keystone_credential_rotate.volumeMounts | indent 14 }}{{ end }}
- name: pod-tmp
mountPath: /tmp
- name: etckeystone
mountPath: /etc/keystone
- name: keystone-etc
mountPath: /etc/keystone/keystone.conf
subPath: keystone.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.keystone.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.keystone.DEFAULT.log_config_append }}
readOnly: true
- name: keystone-bin
mountPath: /tmp/fernet-manage.py
subPath: fernet-manage.py
readOnly: true
{{ if $mounts_keystone_credential_rotate.volumeMounts }}{{ toYaml $mounts_keystone_credential_rotate.volumeMounts | indent 16 }}{{ end }}
volumes:
- name: etckeystone
emptyDir: {}
- name: keystone-etc
secret:
secretName: keystone-etc
defaultMode: 0444
- name: keystone-bin
configMap:
name: keystone-bin
defaultMode: 0555
{{ if $mounts_keystone_credential_rotate.volumes }}{{ toYaml $mounts_keystone_credential_rotate.volumes | indent 10 }}{{ end }}
- name: pod-tmp
emptyDir: {}
- name: etckeystone
emptyDir: {}
- name: keystone-etc
secret:
secretName: keystone-etc
defaultMode: 0444
- name: keystone-bin
configMap:
name: keystone-bin
defaultMode: 0555
{{ if $mounts_keystone_credential_rotate.volumes }}{{ toYaml $mounts_keystone_credential_rotate.volumes | indent 12 }}{{ end }}
{{- end }}

View File

@ -81,45 +81,49 @@ spec:
{{ tuple $envAll "keystone_fernet_rotate" | include "helm-toolkit.snippets.image" | indent 14 }}
{{ tuple $envAll $envAll.Values.pod.resources.jobs.fernet_rotate | include "helm-toolkit.snippets.kubernetes_resources" | indent 14 }}
env:
- name: KEYSTONE_USER
value: {{ .Values.jobs.fernet_rotate.user | quote }}
- name: KEYSTONE_GROUP
value: {{ .Values.jobs.fernet_rotate.group | quote }}
- name: KUBERNETES_NAMESPACE
value: {{ .Release.Namespace | quote }}
- name: KEYSTONE_KEYS_REPOSITORY
value: {{ .Values.conf.keystone.fernet_tokens.key_repository | quote }}
- name: KEYSTONE_USER
value: {{ .Values.jobs.fernet_rotate.user | quote }}
- name: KEYSTONE_GROUP
value: {{ .Values.jobs.fernet_rotate.group | quote }}
- name: KUBERNETES_NAMESPACE
value: {{ .Release.Namespace | quote }}
- name: KEYSTONE_KEYS_REPOSITORY
value: {{ .Values.conf.keystone.fernet_tokens.key_repository | quote }}
command:
- python
- /tmp/fernet-manage.py
- fernet_rotate
volumeMounts:
- name: etckeystone
mountPath: /etc/keystone
- name: keystone-etc
mountPath: /etc/keystone/keystone.conf
subPath: keystone.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.keystone.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.keystone.DEFAULT.log_config_append }}
readOnly: true
- name: keystone-bin
mountPath: /tmp/fernet-manage.py
subPath: fernet-manage.py
readOnly: true
{{ if $mounts_keystone_fernet_rotate.volumeMounts }}{{ toYaml $mounts_keystone_fernet_rotate.volumeMounts | indent 14 }}{{ end }}
- name: pod-tmp
mountPath: /tmp
- name: etckeystone
mountPath: /etc/keystone
- name: keystone-etc
mountPath: /etc/keystone/keystone.conf
subPath: keystone.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.keystone.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.keystone.DEFAULT.log_config_append }}
readOnly: true
- name: keystone-bin
mountPath: /tmp/fernet-manage.py
subPath: fernet-manage.py
readOnly: true
{{ if $mounts_keystone_fernet_rotate.volumeMounts }}{{ toYaml $mounts_keystone_fernet_rotate.volumeMounts | indent 16 }}{{ end }}
volumes:
- name: etckeystone
emptyDir: {}
- name: keystone-etc
secret:
secretName: keystone-etc
defaultMode: 0444
- name: keystone-bin
configMap:
name: keystone-bin
defaultMode: 0555
{{ if $mounts_keystone_fernet_rotate.volumes }}{{ toYaml $mounts_keystone_fernet_rotate.volumes | indent 10 }}{{ end }}
- name: pod-tmp
emptyDir: {}
- name: etckeystone
emptyDir: {}
- name: keystone-etc
secret:
secretName: keystone-etc
defaultMode: 0444
- name: keystone-bin
configMap:
name: keystone-bin
defaultMode: 0555
{{ if $mounts_keystone_fernet_rotate.volumes }}{{ toYaml $mounts_keystone_fernet_rotate.volumes | indent 12 }}{{ end }}
{{- end }}
{{- end }}

View File

@ -89,98 +89,102 @@ spec:
periodSeconds: 20
timeoutSeconds: 5
volumeMounts:
- name: etckeystone
mountPath: /etc/keystone
- name: logs-apache
mountPath: /var/log/apache2
- name: run-apache
mountPath: /var/run/apache2
- name: wsgi-keystone
mountPath: /var/www/cgi-bin/keystone
- name: keystone-etc
mountPath: /etc/keystone/keystone.conf
subPath: keystone.conf
readOnly: true
- name: keystone-etc
mountPath: /etc/apache2/ports.conf
subPath: ports.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.keystone.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.keystone.DEFAULT.log_config_append }}
readOnly: true
- name: keystone-etc
mountPath: /etc/keystone/keystone-paste.ini
subPath: keystone-paste.ini
readOnly: true
- name: keystone-etc
mountPath: /etc/keystone/policy.json
subPath: policy.json
readOnly: true
- name: keystone-etc
mountPath: /etc/keystone/sso_callback_template.html
subPath: sso_callback_template.html
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.software.apache2.conf_dir }}/wsgi-keystone.conf
subPath: wsgi-keystone.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.software.apache2.mods_dir }}/mpm_event.conf
subPath: mpm_event.conf
readOnly: true
- name: pod-tmp
mountPath: /tmp
- name: etckeystone
mountPath: /etc/keystone
- name: logs-apache
mountPath: /var/log/apache2
- name: run-apache
mountPath: /var/run/apache2
- name: wsgi-keystone
mountPath: /var/www/cgi-bin/keystone
- name: keystone-etc
mountPath: /etc/keystone/keystone.conf
subPath: keystone.conf
readOnly: true
- name: keystone-etc
mountPath: /etc/apache2/ports.conf
subPath: ports.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.keystone.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.keystone.DEFAULT.log_config_append }}
readOnly: true
- name: keystone-etc
mountPath: /etc/keystone/keystone-paste.ini
subPath: keystone-paste.ini
readOnly: true
- name: keystone-etc
mountPath: /etc/keystone/policy.json
subPath: policy.json
readOnly: true
- name: keystone-etc
mountPath: /etc/keystone/sso_callback_template.html
subPath: sso_callback_template.html
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.software.apache2.conf_dir }}/wsgi-keystone.conf
subPath: wsgi-keystone.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.software.apache2.mods_dir }}/mpm_event.conf
subPath: mpm_event.conf
readOnly: true
{{- if .Values.conf.security }}
- name: keystone-etc
mountPath: {{ .Values.conf.software.apache2.conf_dir }}/security.conf
subPath: security.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.software.apache2.conf_dir }}/security.conf
subPath: security.conf
readOnly: true
{{- end }}
- name: keystone-bin
mountPath: /tmp/keystone-api.sh
subPath: keystone-api.sh
readOnly: true
- name: keystone-bin
mountPath: /tmp/keystone-api.sh
subPath: keystone-api.sh
readOnly: true
{{- if .Values.endpoints.ldap.auth.client.tls.ca }}
- name: keystone-ldap-tls
mountPath: /etc/keystone/ldap/tls.ca
subPath: tls.ca
readOnly: true
- name: keystone-ldap-tls
mountPath: /etc/keystone/ldap/tls.ca
subPath: tls.ca
readOnly: true
{{- end }}
{{- if eq .Values.conf.keystone.token.provider "fernet" }}
- name: keystone-fernet-keys
mountPath: {{ .Values.conf.keystone.fernet_tokens.key_repository }}
- name: keystone-fernet-keys
mountPath: {{ .Values.conf.keystone.fernet_tokens.key_repository }}
{{- end }}
- name: keystone-credential-keys
mountPath: {{ .Values.conf.keystone.credential.key_repository }}
{{ if $mounts_keystone_api.volumeMounts }}{{ toYaml $mounts_keystone_api.volumeMounts | indent 10 }}{{ end }}
- name: keystone-credential-keys
mountPath: {{ .Values.conf.keystone.credential.key_repository }}
{{ if $mounts_keystone_api.volumeMounts }}{{ toYaml $mounts_keystone_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: etckeystone
emptyDir: {}
- name: wsgi-keystone
emptyDir: {}
- name: logs-apache
emptyDir: {}
- name: run-apache
emptyDir: {}
- name: keystone-etc
secret:
secretName: keystone-etc
defaultMode: 0444
- name: keystone-bin
configMap:
name: keystone-bin
defaultMode: 0555
- name: pod-tmp
emptyDir: {}
- name: etckeystone
emptyDir: {}
- name: wsgi-keystone
emptyDir: {}
- name: logs-apache
emptyDir: {}
- name: run-apache
emptyDir: {}
- name: keystone-etc
secret:
secretName: keystone-etc
defaultMode: 0444
- name: keystone-bin
configMap:
name: keystone-bin
defaultMode: 0555
{{- if .Values.endpoints.ldap.auth.client.tls.ca }}
- name: keystone-ldap-tls
secret:
secretName: keystone-ldap-tls
- name: keystone-ldap-tls
secret:
secretName: keystone-ldap-tls
{{- end }}
{{- if eq .Values.conf.keystone.token.provider "fernet" }}
- name: keystone-fernet-keys
secret:
secretName: keystone-fernet-keys
- name: keystone-fernet-keys
secret:
secretName: keystone-fernet-keys
{{- end }}
- name: keystone-credential-keys
secret:
secretName: keystone-credential-keys
{{ if $mounts_keystone_api.volumes }}{{ toYaml $mounts_keystone_api.volumes | indent 6 }}{{ end }}
- name: keystone-credential-keys
secret:
secretName: keystone-credential-keys
{{ if $mounts_keystone_api.volumes }}{{ toYaml $mounts_keystone_api.volumes | indent 8 }}{{ end }}
{{- end }}

View File

@ -69,6 +69,8 @@ spec:
- python
- /tmp/cred-clean.py
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: cred-clean-sh
mountPath: /tmp/cred-clean.py
subPath: cred-clean.py
@ -86,6 +88,8 @@ spec:
readOnly: true
{{- end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: cred-clean-sh
configMap:
name: "keystone-bin"

View File

@ -74,48 +74,52 @@ spec:
{{ tuple $envAll "keystone_credential_setup" | include "helm-toolkit.snippets.image" | indent 10 }}
{{ tuple $envAll $envAll.Values.pod.resources.jobs.credential_setup | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
env:
- name: KEYSTONE_USER
value: {{ .Values.jobs.credential_setup.user | quote }}
- name: KEYSTONE_GROUP
value: {{ .Values.jobs.credential_setup.group | quote }}
- name: KUBERNETES_NAMESPACE
value: {{ .Release.Namespace | quote }}
- name: KEYSTONE_KEYS_REPOSITORY
value: {{ .Values.conf.keystone.credential.key_repository | quote }}
- name: KEYSTONE_USER
value: {{ .Values.jobs.credential_setup.user | quote }}
- name: KEYSTONE_GROUP
value: {{ .Values.jobs.credential_setup.group | quote }}
- name: KUBERNETES_NAMESPACE
value: {{ .Release.Namespace | quote }}
- name: KEYSTONE_KEYS_REPOSITORY
value: {{ .Values.conf.keystone.credential.key_repository | quote }}
command:
- python
- /tmp/fernet-manage.py
- credential_setup
volumeMounts:
- name: etckeystone
mountPath: /etc/keystone
- name: credential-keys
mountPath: {{ .Values.conf.keystone.credential.key_repository | quote }}
- name: keystone-etc
mountPath: /etc/keystone/keystone.conf
subPath: keystone.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.keystone.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.keystone.DEFAULT.log_config_append }}
readOnly: true
- name: keystone-bin
mountPath: /tmp/fernet-manage.py
subPath: fernet-manage.py
readOnly: true
{{ if $mounts_keystone_credential_setup.volumeMounts }}{{ toYaml $mounts_keystone_credential_setup.volumeMounts | indent 10 }}{{ end }}
- name: pod-tmp
mountPath: /tmp
- name: etckeystone
mountPath: /etc/keystone
- name: credential-keys
mountPath: {{ .Values.conf.keystone.credential.key_repository | quote }}
- name: keystone-etc
mountPath: /etc/keystone/keystone.conf
subPath: keystone.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.keystone.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.keystone.DEFAULT.log_config_append }}
readOnly: true
- name: keystone-bin
mountPath: /tmp/fernet-manage.py
subPath: fernet-manage.py
readOnly: true
{{ if $mounts_keystone_credential_setup.volumeMounts }}{{ toYaml $mounts_keystone_credential_setup.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: etckeystone
emptyDir: {}
- name: credential-keys
emptyDir: {}
- name: keystone-etc
secret:
secretName: keystone-etc
defaultMode: 0444
- name: keystone-bin
configMap:
name: keystone-bin
defaultMode: 0555
{{ if $mounts_keystone_credential_setup.volumes }}{{ toYaml $mounts_keystone_credential_setup.volumes | indent 6 }}{{ end }}
- name: pod-tmp
emptyDir: {}
- name: etckeystone
emptyDir: {}
- name: credential-keys
emptyDir: {}
- name: keystone-etc
secret:
secretName: keystone-etc
defaultMode: 0444
- name: keystone-bin
configMap:
name: keystone-bin
defaultMode: 0555
{{ if $mounts_keystone_credential_setup.volumes }}{{ toYaml $mounts_keystone_credential_setup.volumes | indent 8 }}{{ end }}
{{- end }}

View File

@ -49,6 +49,8 @@ spec:
command:
- /tmp/domain-manage-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: keystone-bin
mountPath: /tmp/domain-manage-init.sh
subPath: domain-manage-init.sh
@ -64,6 +66,8 @@ spec:
command:
- /tmp/domain-manage.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etckeystonedomains
mountPath: {{ .Values.conf.keystone.identity.domain_config_dir | default "/etc/keystonedomains" }}
- name: etckeystone
@ -98,6 +102,8 @@ spec:
mountPath: {{ .Values.conf.keystone.credential.key_repository }}
{{ if $mounts_keystone_domain_manage.volumeMounts }}{{ toYaml $mounts_keystone_domain_manage.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: etckeystone
emptyDir: {}
- name: etckeystonedomains

View File

@ -73,49 +73,53 @@ spec:
{{ tuple $envAll "keystone_fernet_setup" | include "helm-toolkit.snippets.image" | indent 10 }}
{{ tuple $envAll $envAll.Values.pod.resources.jobs.fernet_setup | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
env:
- name: KEYSTONE_USER
value: {{ .Values.jobs.fernet_setup.user | quote }}
- name: KEYSTONE_GROUP
value: {{ .Values.jobs.fernet_setup.group | quote }}
- name: KUBERNETES_NAMESPACE
value: {{ .Release.Namespace | quote }}
- name: KEYSTONE_KEYS_REPOSITORY
value: {{ .Values.conf.keystone.fernet_tokens.key_repository | quote }}
- name: KEYSTONE_USER
value: {{ .Values.jobs.fernet_setup.user | quote }}
- name: KEYSTONE_GROUP
value: {{ .Values.jobs.fernet_setup.group | quote }}
- name: KUBERNETES_NAMESPACE
value: {{ .Release.Namespace | quote }}
- name: KEYSTONE_KEYS_REPOSITORY
value: {{ .Values.conf.keystone.fernet_tokens.key_repository | quote }}
command:
- python
- /tmp/fernet-manage.py
- fernet_setup
volumeMounts:
- name: etckeystone
mountPath: /etc/keystone
- name: fernet-keys
mountPath: {{ .Values.conf.keystone.fernet_tokens.key_repository | quote }}
- name: keystone-etc
mountPath: /etc/keystone/keystone.conf
subPath: keystone.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.keystone.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.keystone.DEFAULT.log_config_append }}
readOnly: true
- name: keystone-bin
mountPath: /tmp/fernet-manage.py
subPath: fernet-manage.py
readOnly: true
{{ if $mounts_keystone_fernet_setup.volumeMounts }}{{ toYaml $mounts_keystone_fernet_setup.volumeMounts | indent 10 }}{{ end }}
- name: pod-tmp
mountPath: /tmp
- name: etckeystone
mountPath: /etc/keystone
- name: fernet-keys
mountPath: {{ .Values.conf.keystone.fernet_tokens.key_repository | quote }}
- name: keystone-etc
mountPath: /etc/keystone/keystone.conf
subPath: keystone.conf
readOnly: true
- name: keystone-etc
mountPath: {{ .Values.conf.keystone.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.keystone.DEFAULT.log_config_append }}
readOnly: true
- name: keystone-bin
mountPath: /tmp/fernet-manage.py
subPath: fernet-manage.py
readOnly: true
{{ if $mounts_keystone_fernet_setup.volumeMounts }}{{ toYaml $mounts_keystone_fernet_setup.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: etckeystone
emptyDir: {}
- name: fernet-keys
emptyDir: {}
- name: keystone-etc
secret:
secretName: keystone-etc
defaultMode: 0444
- name: keystone-bin
configMap:
name: keystone-bin
defaultMode: 0555
{{ if $mounts_keystone_fernet_setup.volumes }}{{ toYaml $mounts_keystone_fernet_setup.volumes | indent 6 }}{{ end }}
- name: pod-tmp
emptyDir: {}
- name: etckeystone
emptyDir: {}
- name: fernet-keys
emptyDir: {}
- name: keystone-etc
secret:
secretName: keystone-etc
defaultMode: 0444
- name: keystone-bin
configMap:
name: keystone-bin
defaultMode: 0555
{{ if $mounts_keystone_fernet_setup.volumes }}{{ toYaml $mounts_keystone_fernet_setup.volumes | indent 8 }}{{ end }}
{{- end }}
{{- end }}

View File

@ -43,6 +43,8 @@ spec:
command:
- /tmp/ks-user.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: keystone-bin
mountPath: /tmp/ks-user.sh
subPath: ks-user.sh
@ -74,6 +76,8 @@ spec:
command:
- /tmp/rally-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: keystone-etc
mountPath: /etc/rally/rally_tests.yaml
subPath: rally_tests.yaml
@ -86,6 +90,8 @@ spec:
mountPath: /var/lib/rally
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: keystone-etc
secret:
secretName: keystone-etc

View File

@ -80,6 +80,8 @@ spec:
initialDelaySeconds: 15
periodSeconds: 10
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: magnum-bin
mountPath: /tmp/magnum-api.sh
subPath: magnum-api.sh
@ -108,6 +110,8 @@ spec:
mountPath: {{ .Values.conf.magnum.oslo_concurrency.lock_path }}
{{ if $mounts_magnum_api.volumeMounts }}{{ toYaml $mounts_magnum_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-magnum
emptyDir: {}
- name: pod-var-cache-magnum

View File

@ -44,6 +44,8 @@ spec:
command:
- /tmp/ks-domain-user.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ks-user-sh
mountPath: /tmp/ks-domain-user.sh
subPath: ks-domain-user.sh
@ -77,6 +79,8 @@ spec:
- name: SERVICE_OS_ROLE
value: {{ .Values.endpoints.identity.auth.magnum_stack_user.role | quote }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: ks-user-sh
configMap:
name: magnum-bin

View File

@ -65,6 +65,8 @@ spec:
command:
- /tmp/magnum-conductor-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: magnum-bin
mountPath: /tmp/magnum-conductor-init.sh
subPath: magnum-conductor-init.sh
@ -80,6 +82,8 @@ spec:
command:
- /tmp/magnum-conductor.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: magnum-bin
mountPath: /tmp/magnum-conductor.sh
subPath: magnum-conductor.sh
@ -104,6 +108,8 @@ spec:
mountPath: {{ .Values.conf.magnum.oslo_concurrency.lock_path }}
{{ if $mounts_magnum_conductor.volumeMounts }}{{ toYaml $mounts_magnum_conductor.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-magnum
emptyDir: {}
- name: pod-shared

View File

@ -76,6 +76,8 @@ spec:
tcpSocket:
port: {{ tuple "workflowv2" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-mistral
mountPath: /etc/mistral
- name: mistral-bin
@ -96,6 +98,8 @@ spec:
readOnly: true
{{ if $mounts_mistral_api.volumeMounts }}{{ toYaml $mounts_mistral_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-mistral
emptyDir: {}
- name: mistral-bin

View File

@ -62,6 +62,8 @@ spec:
command:
- /tmp/mistral-executor.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-mistral
mountPath: /etc/mistral
- name: mistral-bin
@ -78,6 +80,8 @@ spec:
readOnly: true
{{ if $mounts_mistral_executor.volumeMounts }}{{ toYaml $mounts_mistral_executor.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-mistral
emptyDir: {}
- name: mistral-bin

View File

@ -45,6 +45,8 @@ spec:
command:
- /tmp/ks-user.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: mistral-bin
mountPath: /tmp/ks-user.sh
subPath: ks-user.sh
@ -76,6 +78,8 @@ spec:
command:
- /tmp/rally-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: mistral-etc
mountPath: /etc/rally/rally_tests.yaml
subPath: rally_tests.yaml
@ -94,6 +98,8 @@ spec:
{{- end }}
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: mistral-etc
secret:
secretName: mistral-etc

View File

@ -60,6 +60,8 @@ spec:
command:
- /tmp/mistral-engine.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-mistral
mountPath: /etc/mistral
- name: mistral-bin
@ -76,6 +78,8 @@ spec:
readOnly: true
{{ if $mounts_mistral_engine.volumeMounts }}{{ toYaml $mounts_mistral_engine.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-mistral
emptyDir: {}
- name: mistral-bin

View File

@ -60,6 +60,8 @@ spec:
command:
- /tmp/mistral-event-engine.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: pod-etc-mistral
mountPath: /etc/mistral
- name: mistral-bin
@ -76,6 +78,8 @@ spec:
readOnly: true
{{ if $mounts_mistral_event_engine.volumeMounts }}{{ toYaml $mounts_mistral_event_engine.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-mistral
emptyDir: {}
- name: mistral-bin

View File

@ -69,35 +69,37 @@ spec:
readinessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/dhcp_agent.ini
- --agent-queue-name
- dhcp_agent
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/dhcp_agent.ini
- --agent-queue-name
- dhcp_agent
initialDelaySeconds: 30
periodSeconds: 15
timeoutSeconds: 65
livenessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/dhcp_agent.ini
- --agent-queue-name
- dhcp_agent
- --liveness-probe
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/dhcp_agent.ini
- --agent-queue-name
- dhcp_agent
- --liveness-probe
initialDelaySeconds: 120
periodSeconds: 90
timeoutSeconds: 70
command:
- /tmp/neutron-dhcp-agent.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-dhcp-agent.sh
subPath: neutron-dhcp-agent.sh
@ -166,6 +168,8 @@ spec:
{{- end }}
{{ if $mounts_neutron_dhcp_agent.volumeMounts }}{{ toYaml $mounts_neutron_dhcp_agent.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: neutron-bin
configMap:
name: neutron-bin

View File

@ -69,35 +69,37 @@ spec:
readinessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/l3_agent.ini
- --agent-queue-name
- l3_agent
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/l3_agent.ini
- --agent-queue-name
- l3_agent
initialDelaySeconds: 30
periodSeconds: 15
timeoutSeconds: 65
livenessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/l3_agent.ini
- --agent-queue-name
- l3_agent
- --liveness-probe
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/l3_agent.ini
- --agent-queue-name
- l3_agent
- --liveness-probe
initialDelaySeconds: 120
periodSeconds: 90
timeoutSeconds: 70
command:
- /tmp/neutron-l3-agent.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-l3-agent.sh
subPath: neutron-l3-agent.sh
@ -165,6 +167,8 @@ spec:
{{- end }}
{{ if $mounts_neutron_l3_agent.volumeMounts }}{{ toYaml $mounts_neutron_l3_agent.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: neutron-bin
configMap:
name: neutron-bin

View File

@ -86,6 +86,8 @@ spec:
command:
- /tmp/neutron-linuxbridge-agent-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-linuxbridge-agent-init.sh
subPath: neutron-linuxbridge-agent-init.sh
@ -147,6 +149,8 @@ spec:
- -c
- 'brctl show'
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-linuxbridge-agent.sh
subPath: neutron-linuxbridge-agent.sh
@ -194,6 +198,8 @@ spec:
mountPath: /run
{{ if $mounts_neutron_lb_agent.volumeMounts }}{{ toYaml $mounts_neutron_lb_agent.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-shared
emptyDir: {}
- name: neutron-bin

View File

@ -71,6 +71,8 @@ spec:
command:
- /tmp/neutron-metadata-agent-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-metadata-agent-init.sh
subPath: neutron-metadata-agent-init.sh
@ -90,31 +92,33 @@ spec:
readinessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/metadata_agent.ini
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/metadata_agent.ini
initialDelaySeconds: 30
periodSeconds: 15
timeoutSeconds: 35
livenessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/metadata_agent.ini
- --liveness-probe
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/metadata_agent.ini
- --liveness-probe
initialDelaySeconds: 90
periodSeconds: 60
timeoutSeconds: 45
command:
- /tmp/neutron-metadata-agent.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-metadata-agent.sh
subPath: neutron-metadata-agent.sh
@ -175,6 +179,8 @@ spec:
{{- end }}
{{ if $mounts_neutron_metadata_agent.volumeMounts }}{{ toYaml $mounts_neutron_metadata_agent.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: neutron-bin
configMap:
name: neutron-bin

View File

@ -70,6 +70,8 @@ spec:
command:
- /tmp/neutron-openvswitch-agent-init-modules.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-openvswitch-agent-init-modules.sh
subPath: neutron-openvswitch-agent-init-modules.sh
@ -86,6 +88,8 @@ spec:
command:
- /tmp/neutron-openvswitch-agent-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-openvswitch-agent-init.sh
subPath: neutron-openvswitch-agent-init.sh
@ -165,19 +169,21 @@ spec:
livenessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/plugins/ml2/openvswitch_agent.ini
- --agent-queue-name
- q-agent-notifier-tunnel-update
- --liveness-probe
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/plugins/ml2/openvswitch_agent.ini
- --agent-queue-name
- q-agent-notifier-tunnel-update
- --liveness-probe
initialDelaySeconds: 120
periodSeconds: 90
timeoutSeconds: 70
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-openvswitch-agent.sh
subPath: neutron-openvswitch-agent.sh
@ -239,6 +245,8 @@ spec:
mountPath: /run
{{ if $mounts_neutron_ovs_agent.volumeMounts }}{{ toYaml $mounts_neutron_ovs_agent.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: varlibopenvswitch
emptyDir: {}
- name: pod-shared

View File

@ -69,6 +69,8 @@ spec:
command:
- /tmp/neutron-sriov-agent-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-sriov-agent-init.sh
subPath: neutron-sriov-agent-init.sh
@ -132,16 +134,18 @@ spec:
readinessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/sriov_agent.ini
- python
- /tmp/health-probe.py
- --config-file
- /etc/neutron/neutron.conf
- --config-file
- /etc/neutron/sriov_agent.ini
initialDelaySeconds: 30
periodSeconds: 15
timeoutSeconds: 10
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-sriov-agent.sh
subPath: neutron-sriov-agent.sh
@ -203,6 +207,8 @@ spec:
mountPath: /run
{{ if $mounts_neutron_sriov_agent.volumeMounts }}{{ toYaml $mounts_neutron_sriov_agent.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-shared
emptyDir: {}
- name: neutron-bin

View File

@ -84,6 +84,8 @@ spec:
port: {{ tuple "network" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
initialDelaySeconds: 60
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/neutron-server.sh
subPath: neutron-server.sh
@ -126,6 +128,8 @@ spec:
readOnly: true
{{ if $mounts_neutron_server.volumeMounts }}{{ toYaml $mounts_neutron_server.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: neutron-bin
configMap:
name: neutron-bin

View File

@ -46,6 +46,8 @@ spec:
command:
- /tmp/ks-user.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-bin
mountPath: /tmp/ks-user.sh
subPath: ks-user.sh
@ -77,6 +79,8 @@ spec:
command:
- /tmp/rally-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: neutron-etc
mountPath: /etc/rally/rally_tests.yaml
subPath: rally_tests.yaml
@ -89,6 +93,8 @@ spec:
mountPath: /var/lib/rally
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: neutron-etc
secret:
secretName: neutron-etc

View File

@ -57,6 +57,8 @@ spec:
command:
- /tmp/cell-setup.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/cell-setup.sh
subPath: cell-setup.sh
@ -76,6 +78,8 @@ spec:
subPath: policy.yaml
readOnly: true
volumes:
- name: pod-tmp
emptyDir: {}
- name: etcnova
emptyDir: {}
- name: nova-etc

View File

@ -61,21 +61,25 @@ spec:
command:
- /tmp/nova-service-cleaner.sh
volumeMounts:
- name: nova-bin
mountPath: /tmp/nova-service-cleaner.sh
subPath: nova-service-cleaner.sh
readOnly: true
- name: etcnova
mountPath: /etc/nova
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-service-cleaner.sh
subPath: nova-service-cleaner.sh
readOnly: true
- name: etcnova
mountPath: /etc/nova
volumes:
- name: etcnova
emptyDir: {}
- name: nova-etc
secret:
secretName: nova-etc
defaultMode: 0444
- name: nova-bin
configMap:
name: nova-bin
defaultMode: 0555
- name: pod-tmp
emptyDir: {}
- name: etcnova
emptyDir: {}
- name: nova-etc
secret:
secretName: nova-etc
defaultMode: 0444
- name: nova-bin
configMap:
name: nova-bin
defaultMode: 0555
{{- end }}

View File

@ -66,6 +66,8 @@ spec:
command:
- /tmp/nova-compute-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-compute-init.sh
subPath: nova-compute-init.sh
@ -85,6 +87,8 @@ spec:
- "nova:"
- /etc/ceph
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcceph
mountPath: /etc/ceph
{{- if empty .Values.conf.ceph.cinder.keyring }}
@ -93,6 +97,8 @@ spec:
command:
- /tmp/ceph-admin-keyring.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcceph
mountPath: /etc/ceph
- name: nova-bin
@ -122,6 +128,8 @@ spec:
command:
- /tmp/ceph-keyring.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: etcceph
mountPath: /etc/ceph
- name: nova-bin
@ -141,6 +149,8 @@ spec:
command:
- /tmp/nova-console-compute-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-console-compute-init.sh
subPath: nova-console-compute-init.sh
@ -157,6 +167,8 @@ spec:
command:
- /tmp/nova-console-compute-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-console-compute-init.sh
subPath: nova-console-compute-init.sh
@ -184,31 +196,33 @@ spec:
readinessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- compute
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- compute
initialDelaySeconds: 80
periodSeconds: 90
timeoutSeconds: 70
livenessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- compute
- --liveness-probe
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- compute
- --liveness-probe
initialDelaySeconds: 120
periodSeconds: 90
timeoutSeconds: 70
command:
- /tmp/nova-compute.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-compute.sh
subPath: nova-compute.sh
@ -313,6 +327,8 @@ spec:
command:
- /tmp/ssh-start.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: varlibnova
mountPath: /var/lib/nova
- name: varliblibvirt
@ -328,6 +344,8 @@ spec:
subPath: ssh-start.sh
readOnly: true
volumes:
- name: pod-tmp
emptyDir: {}
- name: nova-bin
configMap:
name: nova-bin

View File

@ -63,6 +63,8 @@ spec:
command:
- /tmp/nova-api-metadata-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-api-metadata-init.sh
subPath: nova-api-metadata-init.sh
@ -98,6 +100,8 @@ spec:
port: {{ .Values.network.metadata.port }}
initialDelaySeconds: 30
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-api-metadata.sh
subPath: nova-api-metadata.sh
@ -160,6 +164,8 @@ spec:
readOnly: true
{{ if $mounts_nova_api_metadata.volumeMounts }}{{ toYaml $mounts_nova_api_metadata.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: nova-bin
configMap:
name: nova-bin

View File

@ -81,6 +81,8 @@ spec:
port: {{ tuple "compute" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
initialDelaySeconds: 30
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-api.sh
subPath: nova-api.sh
@ -107,6 +109,8 @@ spec:
readOnly: true
{{ if $mounts_nova_api_osapi.volumeMounts }}{{ toYaml $mounts_nova_api_osapi.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: nova-bin
configMap:
name: nova-bin

View File

@ -63,31 +63,33 @@ spec:
readinessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- conductor
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- conductor
initialDelaySeconds: 80
periodSeconds: 90
timeoutSeconds: 70
livenessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- conductor
- --liveness-probe
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- conductor
- --liveness-probe
initialDelaySeconds: 120
periodSeconds: 90
timeoutSeconds: 70
command:
- /tmp/nova-conductor.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-conductor.sh
subPath: nova-conductor.sh
@ -110,6 +112,8 @@ spec:
readOnly: true
{{ if $mounts_nova_conductor.volumeMounts }}{{ toYaml $mounts_nova_conductor.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: nova-bin
configMap:
name: nova-bin

View File

@ -63,31 +63,33 @@ spec:
readinessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- consoleauth
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- consoleauth
initialDelaySeconds: 80
periodSeconds: 90
timeoutSeconds: 70
livenessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- consoleauth
- --liveness-probe
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- consoleauth
- --liveness-probe
initialDelaySeconds: 120
periodSeconds: 90
timeoutSeconds: 70
command:
- /tmp/nova-consoleauth.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-consoleauth.sh
subPath: nova-consoleauth.sh
@ -110,6 +112,8 @@ spec:
readOnly: true
{{ if $mounts_nova_consoleauth.volumeMounts }}{{ toYaml $mounts_nova_consoleauth.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: nova-bin
configMap:
name: nova-bin

View File

@ -64,6 +64,8 @@ spec:
command:
- /tmp/nova-console-proxy-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-console-proxy-init.sh
subPath: nova-console-proxy-init.sh
@ -84,6 +86,8 @@ spec:
command:
- /tmp/nova-console-proxy-init-assets.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-console-proxy-init-assets.sh
subPath: nova-console-proxy-init-assets.sh
@ -108,6 +112,8 @@ spec:
- name: n-novnc
containerPort: {{ tuple "compute_novnc_proxy" "internal" "novnc_proxy" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-console-proxy.sh
subPath: nova-console-proxy.sh
@ -127,6 +133,8 @@ spec:
mountPath: /tmp/pod-shared
{{ if $mounts_nova_novncproxy.volumeMounts }}{{ toYaml $mounts_nova_novncproxy.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: nova-bin
configMap:
name: nova-bin

View File

@ -82,6 +82,8 @@ spec:
initialDelaySeconds: 50
periodSeconds: 10
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: wsgi-nova
mountPath: /var/www/cgi-bin/nova
- name: nova-bin
@ -116,6 +118,8 @@ spec:
{{- end }}
{{ if $mounts_nova_placement.volumeMounts }}{{ toYaml $mounts_nova_placement.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: wsgi-nova
emptyDir: {}
- name: nova-bin

View File

@ -63,33 +63,35 @@ spec:
readinessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- scheduler
- --check-all-pids
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- scheduler
- --check-all-pids
initialDelaySeconds: 80
periodSeconds: 90
timeoutSeconds: 70
livenessProbe:
exec:
command:
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- scheduler
- --liveness-probe
- --check-all-pids
- python
- /tmp/health-probe.py
- --config-file
- /etc/nova/nova.conf
- --service-queue-name
- scheduler
- --liveness-probe
- --check-all-pids
initialDelaySeconds: 120
periodSeconds: 90
timeoutSeconds: 70
command:
- /tmp/nova-scheduler.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-scheduler.sh
subPath: nova-scheduler.sh
@ -112,6 +114,8 @@ spec:
readOnly: true
{{ if $mounts_nova_scheduler.volumeMounts }}{{ toYaml $mounts_nova_scheduler.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: nova-bin
configMap:
name: nova-bin

View File

@ -64,6 +64,8 @@ spec:
command:
- /tmp/nova-console-proxy-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-console-proxy-init.sh
subPath: nova-console-proxy-init.sh
@ -84,6 +86,8 @@ spec:
command:
- /tmp/nova-console-proxy-init-assets.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-console-proxy-init-assets.sh
subPath: nova-console-proxy-init-assets.sh
@ -108,6 +112,8 @@ spec:
- name: n-spice
containerPort: {{ tuple "compute_spice_proxy" "internal" "spice_proxy" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-console-proxy.sh
subPath: nova-console-proxy.sh
@ -127,6 +133,8 @@ spec:
mountPath: /tmp/pod-shared
{{ if $mounts_nova_spiceproxy.volumeMounts }}{{ toYaml $mounts_nova_spiceproxy.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: nova-bin
configMap:
name: nova-bin

View File

@ -48,6 +48,8 @@ spec:
command:
- /tmp/cell-setup-init.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/cell-setup-init.sh
subPath: cell-setup-init.sh
@ -59,6 +61,8 @@ spec:
command:
- /tmp/cell-setup.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/cell-setup.sh
subPath: cell-setup.sh
@ -78,6 +82,8 @@ spec:
subPath: policy.yaml
readOnly: true
volumes:
- name: pod-tmp
emptyDir: {}
- name: etcnova
emptyDir: {}
- name: nova-etc

View File

@ -45,6 +45,8 @@ spec:
command:
- /tmp/ks-user.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/ks-user.sh
subPath: ks-user.sh
@ -76,6 +78,8 @@ spec:
command:
- /tmp/rally-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-etc
mountPath: /etc/rally/rally_tests.yaml
subPath: rally_tests.yaml
@ -88,6 +92,8 @@ spec:
mountPath: /var/lib/rally
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: nova-etc
secret:
secretName: nova-etc

View File

@ -67,6 +67,8 @@ spec:
command:
- /tmp/nova-compute-ironic.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: nova-bin
mountPath: /tmp/nova-compute-ironic.sh
subPath: nova-compute-ironic.sh
@ -95,6 +97,8 @@ spec:
mountPath: /var/lib/ironic
{{ if $mounts_nova_compute_ironic.volumeMounts }}{{ toYaml $mounts_nova_compute_ironic.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: nova-bin
configMap:
name: nova-bin

View File

@ -54,31 +54,35 @@ spec:
command:
- /tmp/panko-events-cleaner.sh
volumeMounts:
- name: panko-bin
mountPath: /tmp/panko-events-cleaner.sh
subPath: panko-events-cleaner.sh
readOnly: true
- name: etcpanko
mountPath: /etc/panko
- name: panko-etc
mountPath: /etc/panko/panko.conf
subPath: panko.conf
readOnly: true
- name: panko-etc
mountPath: {{ .Values.conf.panko.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.panko.DEFAULT.log_config_append }}
readOnly: true
{{ if $mounts_panko_events_cleaner.volumeMounts }}{{ toYaml $mounts_panko_events_cleaner.volumeMounts | indent 14 }}{{ end }}
- name: pod-tmp
mountPath: /tmp
- name: panko-bin
mountPath: /tmp/panko-events-cleaner.sh
subPath: panko-events-cleaner.sh
readOnly: true
- name: etcpanko
mountPath: /etc/panko
- name: panko-etc
mountPath: /etc/panko/panko.conf
subPath: panko.conf
readOnly: true
- name: panko-etc
mountPath: {{ .Values.conf.panko.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.panko.DEFAULT.log_config_append }}
readOnly: true
{{ if $mounts_panko_events_cleaner.volumeMounts }}{{ toYaml $mounts_panko_events_cleaner.volumeMounts | indent 16 }}{{ end }}
volumes:
- name: etcpanko
emptyDir: {}
- name: panko-etc
secret:
secretName: panko-etc
defaultMode: 0444
- name: panko-bin
configMap:
name: panko-bin
defaultMode: 0555
{{ if $mounts_panko_events_cleaner.volumes }}{{ toYaml $mounts_panko_events_cleaner.volumes | indent 10 }}{{ end }}
- name: pod-tmp
mountPath: /tmp
- name: etcpanko
emptyDir: {}
- name: panko-etc
secret:
secretName: panko-etc
defaultMode: 0444
- name: panko-bin
configMap:
name: panko-bin
defaultMode: 0555
{{ if $mounts_panko_events_cleaner.volumes }}{{ toYaml $mounts_panko_events_cleaner.volumes | indent 12 }}{{ end }}
{{- end }}

View File

@ -76,6 +76,8 @@ spec:
tcpSocket:
port: {{ tuple "event" "internal" "api" . | include "helm-toolkit.endpoints.endpoint_port_lookup" }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: wsgi-panko
mountPath: /var/www/cgi-bin/panko
- name: etcpanko
@ -110,6 +112,8 @@ spec:
readOnly: true
{{ if $mounts_panko_api.volumeMounts }}{{ toYaml $mounts_panko_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: wsgi-panko
emptyDir: {}
- name: etcpanko

View File

@ -45,6 +45,8 @@ spec:
command:
- /tmp/ks-user.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: panko-bin
mountPath: /tmp/ks-user.sh
subPath: ks-user.sh
@ -76,6 +78,8 @@ spec:
command:
- /tmp/rally-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: panko-etc
mountPath: /etc/rally/rally_tests.yaml
subPath: rally_tests.yaml
@ -88,6 +92,8 @@ spec:
mountPath: /var/lib/rally
{{ if $mounts_tests.volumeMounts }}{{ toYaml $mounts_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: panko-etc
secret:
secretName: panko-etc

View File

@ -53,12 +53,16 @@ spec:
command:
- /tmp/bootstrap.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: rally-bin
mountPath: /tmp/bootstrap.sh
subPath: bootstrap.sh
readOnly: true
{{ if $mounts_rally_bootstrap.volumeMounts }}{{ toYaml $mounts_rally_bootstrap.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: rally-bin
configMap:
name: rally-bin

View File

@ -47,6 +47,8 @@ spec:
command:
- /tmp/ks-endpoints.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ks-endpoints-sh
mountPath: /tmp/ks-endpoints.sh
subPath: ks-endpoints.sh
@ -66,6 +68,8 @@ spec:
{{- end }}
{{- end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: ks-endpoints-sh
configMap:
name: rally-bin

View File

@ -46,6 +46,8 @@ spec:
command:
- /tmp/ks-service.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: ks-service-sh
mountPath: /tmp/ks-service.sh
subPath: ks-service.sh
@ -60,6 +62,8 @@ spec:
value: {{ $osServiceType }}
{{- end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: ks-service-sh
configMap:
name: rally-bin

View File

@ -45,6 +45,8 @@ spec:
command:
- /tmp/manage-db.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: rally-bin
mountPath: /tmp/manage-db.sh
subPath: manage-db.sh
@ -56,6 +58,8 @@ spec:
subPath: rally.conf
readOnly: true
volumes:
- name: pod-tmp
emptyDir: {}
- name: etcrally
emptyDir: {}
- name: rally-etc

View File

@ -49,6 +49,8 @@ spec:
- "rally:"
- /var/lib/rally/data
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: rally-reports
mountPath: /var/lib/rally/data
containers:
@ -64,6 +66,8 @@ spec:
- name: ENABLED_TESTS
value: {{ include "helm-toolkit.utils.joinListWithComma" .Values.enabled_tasks }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: rally-bin
mountPath: /tmp/run-task.sh
subPath: run-task.sh
@ -83,6 +87,8 @@ spec:
- name: rally-reports
mountPath: /var/lib/rally/data
volumes:
- name: pod-tmp
emptyDir: {}
- name: etcrally
emptyDir: {}
- name: rally-etc

View File

@ -57,31 +57,35 @@ spec:
command:
- /tmp/senlin-engine-cleaner.sh
volumeMounts:
- name: senlin-bin
mountPath: /tmp/senlin-engine-cleaner.sh
subPath: senlin-engine-cleaner.sh
readOnly: true
- name: etcsenlin
mountPath: /etc/senlin
- name: senlin-etc
mountPath: /etc/senlin/senlin.conf
subPath: senlin.conf
readOnly: true
- name: senlin-etc
mountPath: {{ .Values.conf.senlin.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.senlin.DEFAULT.log_config_append }}
readOnly: true
{{ if $mounts_senlin_engine_cleaner.volumeMounts }}{{ toYaml $mounts_senlin_engine_cleaner.volumeMounts | indent 14 }}{{ end }}
- name: pod-tmp
mountPath: /tmp
- name: senlin-bin
mountPath: /tmp/senlin-engine-cleaner.sh
subPath: senlin-engine-cleaner.sh
readOnly: true
- name: etcsenlin
mountPath: /etc/senlin
- name: senlin-etc
mountPath: /etc/senlin/senlin.conf
subPath: senlin.conf
readOnly: true
- name: senlin-etc
mountPath: {{ .Values.conf.senlin.DEFAULT.log_config_append }}
subPath: {{ base .Values.conf.senlin.DEFAULT.log_config_append }}
readOnly: true
{{ if $mounts_senlin_engine_cleaner.volumeMounts }}{{ toYaml $mounts_senlin_engine_cleaner.volumeMounts | indent 16 }}{{ end }}
volumes:
- name: etcsenlin
emptyDir: {}
- name: senlin-etc
secret:
secretName: senlin-etc
defaultMode: 0444
- name: senlin-bin
configMap:
name: senlin-bin
defaultMode: 0555
{{ if $mounts_senlin_engine_cleaner.volumes }}{{ toYaml $mounts_senlin_engine_cleaner.volumes | indent 10 }}{{ end }}
- name: pod-tmp
emptyDir: {}
- name: etcsenlin
emptyDir: {}
- name: senlin-etc
secret:
secretName: senlin-etc
defaultMode: 0444
- name: senlin-bin
configMap:
name: senlin-bin
defaultMode: 0555
{{ if $mounts_senlin_engine_cleaner.volumes }}{{ toYaml $mounts_senlin_engine_cleaner.volumes | indent 12 }}{{ end }}
{{- end }}

View File

@ -80,6 +80,8 @@ spec:
initialDelaySeconds: 15
periodSeconds: 10
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: senlin-bin
mountPath: /tmp/senlin-api.sh
subPath: senlin-api.sh
@ -106,6 +108,8 @@ spec:
readOnly: true
{{ if $mounts_senlin_api.volumeMounts }}{{ toYaml $mounts_senlin_api.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-senlin
emptyDir: {}
- name: pod-var-cache-senlin

View File

@ -61,6 +61,8 @@ spec:
command:
- /tmp/senlin-engine.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: senlin-bin
mountPath: /tmp/senlin-engine.sh
subPath: senlin-engine.sh
@ -81,6 +83,8 @@ spec:
readOnly: true
{{ if $mounts_senlin_engine.volumeMounts }}{{ toYaml $mounts_senlin_engine.volumeMounts | indent 12 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: pod-etc-senlin
emptyDir: {}
- name: senlin-bin

View File

@ -49,12 +49,16 @@ spec:
command:
- /tmp/senlin-test.sh
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: senlin-bin
mountPath: /tmp/senlin-test.sh
subPath: senlin-test.sh
readOnly: true
{{ if $mounts_senlin_tests.volumeMounts }}{{ toYaml $mounts_senlin_tests.volumeMounts | indent 8 }}{{ end }}
volumes:
- name: pod-tmp
emptyDir: {}
- name: senlin-bin
configMap:
name: senlin-bin

View File

@ -50,6 +50,8 @@ spec:
- "root:"
- /var/lib/tempest/data
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: tempest-reports
mountPath: /var/lib/tempest/data
containers:
@ -63,6 +65,8 @@ spec:
{{- include "helm-toolkit.snippets.keystone_openrc_env_vars" $env | indent 12 }}
{{- end }}
volumeMounts:
- name: pod-tmp
mountPath: /tmp
- name: tempest-bin
mountPath: /tmp/run-tests.sh
subPath: run-tests.sh
@ -92,6 +96,8 @@ spec:
- name: tempest-reports
mountPath: /var/lib/tempest/data
volumes:
- name: pod-tmp
emptyDir: {}
- name: etctempest
emptyDir: {}
- name: tempest-etc