3419 Commits

Author SHA1 Message Date
Zuul
b0de771314 Merge "Remove delete port commands in ovs agent init" 2020-08-11 20:23:31 +00:00
Zuul
031c54cc04 Merge "Fix Indentation for Apparmor in cinder-volume Cron Job" 2020-08-11 08:52:10 +00:00
rajesh.kudaka
d2deb2b2dc Remove delete port commands in ovs agent init
This commit removes 'del-port' commands in neutron ovs
agent init script. Since, 'add-bond' command allows
modification of the existing options, the commands
being removed are not required. This also allows to
avoid disruptions in ovs caused by deleting ports on
restart.

Change-Id: I7201b87da7b20e1ca8efedf5d86a23123ccfa150
2020-08-11 08:26:44 +00:00
diwakar thyagaraj
f0d3ad522b Fix Indentation for Apparmor in cinder-volume Cron Job
Change-Id: Ib0b0cfb46300eeb451b462bc37781e850361d63b
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-08-11 02:16:59 +00:00
Chinasubbareddy Mallavarapu
ab10fde533 [CEPH] update ceph installation script to skip loopback device creation
This is to update installation script to enable option to skip the
loopback device creation as this gives flexibility to use exisitng
block devices for ceph.

Change-Id: I2e05cfa627dad5d32e882af3ba82bcde21e2ad70
2020-08-10 17:20:44 -05:00
Zuul
7d4208a1f3 Merge "fix tempest conf" 2020-08-08 02:24:46 +00:00
Zuul
59d0bfaef1 Merge "remove tempest deprecated config" 2020-08-08 02:24:44 +00:00
Zuul
e52ccb14c5 Merge "Switch from 32GB to 16GB nodes for jobs requiring more ram" 2020-08-08 02:24:43 +00:00
Zuul
ed0a62bfc4 Merge "Adds apparmor profile to Placement pods" 2020-08-07 23:45:14 +00:00
Andrii Ostapenko
d996fde657
Switch from 32GB to 16GB nodes for jobs requiring more ram
Also use osh-infra-gate-runner for tls job instead of non-existent
osh-gate-runner.

Change-Id: I3c1105422307fda5b014fc17bcdfe24999ce97eb
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-08-07 18:39:36 -05:00
Hemachandra Reddy
610159a4fd Adds apparmor profile to Placement pods
Change-Id: I075ec8351faa44b3d133b4bc1182213bd6527588
2020-08-07 19:49:10 +00:00
terrysong
8c846a06d5 remove tempest deprecated config
dns_servers in openstack-helm/temepst/values.yaml is deprecated,
this config option is no longer used anywhere,
so it can be removed.

Change-Id: Ic1a83fbc7a25716fd082f4896355ce1014c4134d
2020-08-07 19:31:27 +00:00
Zuul
4f1e1329ad Merge "Do no recreate fernet tokens on setup" 2020-08-07 19:21:17 +00:00
Zuul
8c3988682a Merge "Add Application Armor to cinder-Job" 2020-08-07 16:34:18 +00:00
Zuul
c1365308e6 Merge "Parallelize helm test run for compute-kit" 2020-08-07 14:50:12 +00:00
Zuul
795d8722dd Merge "Parallelize osh-gate-runner for gate jobs" 2020-08-07 05:08:10 +00:00
diwakar thyagaraj
a892707f41 Add Application Armor to cinder-Job
Change-Id: Icab982b9168381a7795719a6348a5d1c85b71453
Signed-off-by: diwakar thyagaraj <diwakar.chitoor.thyagaraj@att.com>
2020-08-06 18:40:52 +00:00
Zuul
b6365afc93 Merge "Add missing security context to Nova pods/containers" 2020-08-06 05:39:50 +00:00
Zuul
a88833d27f Merge "Add missing security context to Keystone pods/containers" 2020-08-06 05:39:49 +00:00
Andrii Ostapenko
f3ed377cbc Parallelize helm test run for compute-kit
Depends-On: https://review.opendev.org/742499
Change-Id: Iebc74280f5fd6302723caa325603645a2f9755dc
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-08-06 00:51:29 +00:00
Andrii Ostapenko
fa0b3d3ebe Parallelize osh-gate-runner for gate jobs
Depends-On: https://review.opendev.org/739659
Change-Id: I925773d9e93ec3cc90fbd14cffa7c8d8738ce8d5
Signed-off-by: Andrii Ostapenko <andrii.ostapenko@att.com>
2020-08-06 00:51:23 +00:00
PrateekDodda
27dac1d2c1 Add missing security context to Nova pods/containers
This updates the Nova chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I10b12db8019beb42005764430711694a61c8d17b
2020-08-05 20:07:15 +00:00
Gupta, Sangeet (sg774j)
2c031b882b feat(tls): added mariadb certs to nova-placement
This patchset add maraibd certs to the nova-placement for it
to connect securley with mariadb.

Change-Id: Icece0c108cb8bacfaae187d183afa56a8cdfc492
2020-08-05 19:18:27 +00:00
PrateekDodda
fc5712909e Add missing security context to Keystone pods/containers
This updates the Keystone chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I0e00571d4060cca914d1bdb4f36e736fa8501130
2020-08-05 13:37:33 -05:00
Zuul
f1f8261851 Merge "tls(feat): glance tls overrides" 2020-08-05 18:23:58 +00:00
Gupta, Sangeet (sg774j)
93508f6e16 tls(feat): glance tls overrides
Added paramater to pass ca cert to glance store

Change-Id: I410d5a18dc5a30de5b84f8eada4b051b28adae5a
2020-08-05 15:50:33 +00:00
Tin Lam
7956310ead fix(horizon and neutron): adds tls to test pod
This patch set puts in the missing certificates to the test-pod.
It also corrects the path of sriov_agent.ini file

Change-Id: Ice2124f92a36d545726243fff60db25fbb2ea9c0
2020-08-04 20:56:26 +00:00
Zuul
fa91a256e1 Merge "Revert "Remove ctl socket ownership"" 2020-08-03 20:53:39 +00:00
Zuul
0b79db10a9 Merge "fix(tls): mounts missing secret" 2020-08-03 20:37:18 +00:00
Zuul
300bc18949 Merge "Correct limits and os-availability-zone's policy setting" 2020-08-03 20:14:35 +00:00
Tin Lam
945d0828c7 fix(tls): mounts missing secret
This patch set adds the missing secret mount for nova-service-cleaner.

Change-Id: Ide9be4875c22bfd2a65a42ac8c0a6c6682f49f4d
Signed-off-by: Tin Lam <tin@irrational.io>
2020-08-03 16:38:37 +00:00
Gupta, Sangeet (sg774j)
b7667a5507 neutron: pass rps server .ini for enabled plugins
This patch set passes .ini config file to the rpc-server
for the enabled plugins.

Change-Id: I3d84fd67367c68d38541c6f8b5a38ab8a906d454
2020-08-03 15:07:13 +00:00
Kudaka Poorna Rajesh
c3fe19f259 Revert "Remove ctl socket ownership"
OVS_CTL file is required by other parts of the init
script.

This reverts commit a9693843d77525decefc8a0ba0528624f9e11350.

Change-Id: Ia11dc18e0b13d5fe01918a4c7febb82b19303527
2020-08-03 15:05:38 +00:00
OpenStack Proposal Bot
35f6ea99f1 Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I70917fa161cbf2fe0734310b69a0336e779c7298
2020-08-03 09:29:25 +00:00
Shuicheng Lin
67eefcf381 Correct limits and os-availability-zone's policy setting
In nova latest code, limits and os-availability-zone have been
updated to could be listed as any user by below patches:
limits: 4d37ffc111ae8bb43bd33fe995bc3686b065131b
os-availability-zone: b8c2de86ed46caf7768027e82519c2418989c36b
And target project id is set to {}. So user cannot be matched as
"owner", and lead to API access failure.
Update policy to be the same as latest nova code to avoid the error.

Change-Id: I3621be0fa42388180a7ac3e4bc7f7683a0c15b68
Signed-off-by: Shuicheng Lin <shuicheng.lin@intel.com>
2020-08-03 13:48:58 +08:00
Zuul
dffc936932 Merge "Update xrally version to 2.0.0" 2020-08-01 22:50:24 +00:00
Gage Hugo
44882d60e2 Update xrally version to 2.0.0
This change updates the xrally image from 1.3.0 to 2.0.0
in order to better match the current versions of openstack
we are running in the gate.

Change-Id: I3f417a20e0f6d34b9e7ed569207a3df90c6ddfd2
2020-07-31 20:00:24 +00:00
Gupta, Sangeet (sg774j)
dd62dacdef feat(tls): add database certificate to cinder-pai
Change-Id: Ifab2eb8c345ce8ea110dbab044a2675f011e1ef3
2020-07-30 22:52:27 +00:00
Zuul
848c443f35 Merge "feat(tls): Add CA cert to glance storage init" 2020-07-30 17:04:03 +00:00
Zuul
6f32a7636f Merge "fix(registry): corrects glance registry ingress" 2020-07-30 15:20:46 +00:00
Gupta, Sangeet (sg774j)
5e16918fe8 feat(tls): Add CA cert to glance storage init
This patch set add CA certificate to glance storage init and also
converts the nginx.sh script to shell script.

Change-Id: If3e0cd194af7ed3e15668df799b2b9026e0135d8
2020-07-30 14:24:54 +00:00
Zuul
3310d39223 Merge "Imported Translations from Zanata" 2020-07-30 05:11:59 +00:00
Tin Lam
9d1c46c67d fix(registry): corrects glance registry ingress
This corrects an issue with glance registry ingress failing due to a
name mismatch. This also provides a proper glance registry public secret that was
missing.

Change-Id: Ibe3d5ca774365b7f4df01940884953fc0181394f
Signed-off-by: Tin Lam <tin@irrational.io>
2020-07-29 23:51:22 -05:00
Zuul
639f15a069 Merge "[CEPH] Update ceph scripts to create loopback devices" 2020-07-29 20:07:24 +00:00
Zuul
af5fbe9530 Merge "feat(tls): keystone domain manage script to pass cert" 2020-07-29 15:56:21 +00:00
Zuul
a1a9874f24 Merge "Use default stein OPENSTACK_RELEASE for client setup" 2020-07-29 15:24:56 +00:00
Chinasubbareddy Mallavarapu
59dac81fd4 [CEPH] Update ceph scripts to create loopback devices
This is to update ceph scripts to create loopback devices
in single script and also to update gate scripts.

Change-Id: I937ae79512ffc998d8dbd0b277a611347550044b
2020-07-29 09:51:31 -05:00
Gupta, Sangeet (sg774j)
c12ada7224 feat(tls): keystone domain manage script to pass cert
This patch add capability to pass certificate in request method.

Change-Id: I2e431bf3a34f40f58254e4f2b61554453471e0de
2020-07-29 13:21:48 +00:00
OpenStack Proposal Bot
102bd0deef Imported Translations from Zanata
For more information about this automatic import see:
https://docs.openstack.org/i18n/latest/reviewing-translation-import.html

Change-Id: I8473e5ff10545ece87a5a2bc389949af85817d69
2020-07-29 08:50:32 +00:00
Gupta, Sangeet (sg774j)
74dfea1ce9 keystone: Fix indentation
Change-Id: If25cabc5e70897337dfef7e5401936a79878443b
2020-07-28 23:39:00 +00:00