openstack/openstack-helm
Code Issues Proposed changes
f9dbba7043
openstack-helm/zuul.d/jobs-openstack-helm.yaml
Gage Hugo a1fc694ae9 Move apparmor to use feature gates 
This change refactors the apparmor job to utilize the feature
gates system instead of relying on separate scripts.

Also disabled barbican running in the apparmor job temporarily
until the correct profile gets used and it can deploy
succesfully.

Change-Id: Iadacd214de3fdb06e4acde4433c5fa86973371d5
2020-01-31 22:24:55 +00:00

459 lines
17 KiB
YAML
Raw Blame History

---
# Copyright 2017, AT&T
# Copyright 2018, SUSE LINUX GmbH.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# OpenStack Helm jobs
# These will move with their playbooks inside the
# openstack-helm-infra repository
- job:
name: openstack-helm-functional-temp
irrelevant-files:
- ^.*\.rst$
- ^doc/.*$
- ^releasenotes/.*$
- job:
name: openstack-helm-bandit
timeout: 3600
run: tools/gate/playbooks/osh-bandit.yaml
required-projects:
- openstack/openstack-helm-infra
files:
- ^.*\.py\.tpl$
- ^.*\.py$
nodeset: openstack-helm-single-node
- job:
name: openstack-helm-chart-deploy
parent: openstack-helm-functional-temp
roles:
- zuul: openstack/openstack-helm-infra
timeout: 7200
vars:
zuul_osh_infra_relative_path: ../openstack-helm-infra/
osh_openstack_release: stein
pre-run:
- tools/gate/playbooks/osh-infra-upgrade-host.yaml
- tools/gate/playbooks/osh-infra-setup-firewall.yaml
post-run: tools/gate/playbooks/osh-infra-collect-logs.yaml
required-projects:
- openstack/openstack-helm-infra
nodeset: openstack-helm-single-node
- job:
name: openstack-helm-keystone-ldap
parent: openstack-helm-chart-deploy
run: tools/gate/playbooks/osh-gate-runner.yaml
vars:
osh_params:
openstack_release: stein
container_distro_name: ubuntu
container_distro_version: bionic
feature_gates: ldap
gate_scripts:
- ./tools/deployment/common/install-packages.sh
- ./tools/deployment/common/deploy-k8s.sh
- ./tools/deployment/common/setup-client.sh
- ./tools/deployment/component/common/ingress.sh
- ./tools/deployment/component/common/mariadb.sh
- ./tools/deployment/component/common/memcached.sh
- ./tools/deployment/component/common/rabbitmq.sh
- ./tools/deployment/component/common/ldap.sh
- ./tools/deployment/component/keystone/keystone.sh
- job:
name: openstack-helm-cinder
parent: openstack-helm-chart-deploy
run: tools/gate/playbooks/osh-gate-runner.yaml
vars:
osh_params:
openstack_release: stein
container_distro_name: ubuntu
container_distro_version: bionic
gate_scripts:
- ./tools/deployment/common/install-packages.sh
- ./tools/deployment/common/deploy-k8s.sh
- ./tools/deployment/common/setup-client.sh
- ./tools/deployment/component/ceph/ceph.sh
- ./tools/deployment/component/ceph/ceph-ns-activate.sh
- ./tools/deployment/component/common/ingress.sh
- ./tools/deployment/component/common/mariadb.sh
- ./tools/deployment/component/common/memcached.sh
- ./tools/deployment/component/common/rabbitmq.sh
- ./tools/deployment/component/keystone/keystone.sh
- ./tools/deployment/component/cinder/cinder.sh
- job:
name: openstack-helm-cinder-pike-ubuntu_xenial
parent: openstack-helm-cinder
vars:
osh_params:
openstack_release: pike
container_distro_name: ubuntu
container_distro_version: xenial
- job:
name: openstack-helm-cinder-queens-ubuntu_xenial
parent: openstack-helm-cinder
vars:
osh_params:
openstack_release: queens
container_distro_name: ubuntu
container_distro_version: xenial
- job:
name: openstack-helm-cinder-rocky-ubuntu_xenial
parent: openstack-helm-cinder
vars:
osh_params:
openstack_release: rocky
container_distro_name: ubuntu
container_distro_version: xenial
- job:
name: openstack-helm-cinder-rocky-ubuntu_bionic
parent: openstack-helm-cinder
vars:
osh_params:
openstack_release: rocky
container_distro_name: ubuntu
container_distro_version: bionic
- job:
name: openstack-helm-cinder-rocky-opensuse_15
parent: openstack-helm-cinder
vars:
osh_params:
openstack_release: rocky
container_distro_name: opensuse
container_distro_version: '15'
- job:
name: openstack-helm-cinder-ocata-ubuntu_xenial
parent: openstack-helm-cinder
vars:
osh_params:
openstack_release: ocata
container_distro_name: ubuntu
container_distro_version: xenial
- job:
name: openstack-helm-compute-kit
parent: openstack-helm-chart-deploy
run: tools/gate/playbooks/osh-gate-runner.yaml
vars:
osh_params:
openstack_release: stein
container_distro_name: ubuntu
container_distro_version: bionic
gate_scripts:
- ./tools/deployment/common/install-packages.sh
- ./tools/deployment/common/deploy-k8s.sh
- ./tools/deployment/common/setup-client.sh
- ./tools/deployment/component/common/ingress.sh
- ./tools/deployment/component/common/mariadb.sh
- ./tools/deployment/component/common/memcached.sh
- ./tools/deployment/component/common/rabbitmq.sh
- ./tools/deployment/component/nfs-provisioner/nfs-provisioner.sh
- ./tools/deployment/component/keystone/keystone.sh
- ./tools/deployment/component/heat/heat.sh
- ./tools/deployment/component/glance/glance.sh
- ./tools/deployment/component/compute-kit/openvswitch.sh
- ./tools/deployment/component/compute-kit/libvirt.sh
- ./tools/deployment/component/compute-kit/compute-kit.sh
- ./tools/deployment/developer/common/170-setup-gateway.sh
- ./tools/deployment/developer/common/900-use-it.sh
- job:
name: openstack-helm-compute-kit-pike-ubuntu_xenial
parent: openstack-helm-compute-kit
vars:
osh_params:
openstack_release: pike
container_distro_name: ubuntu
container_distro_version: xenial
- job:
name: openstack-helm-compute-kit-queens-ubuntu_xenial
parent: openstack-helm-compute-kit
vars:
osh_params:
openstack_release: queens
container_distro_name: ubuntu
container_distro_version: xenial
- job:
name: openstack-helm-compute-kit-rocky-ubuntu_xenial
parent: openstack-helm-compute-kit
vars:
osh_params:
openstack_release: rocky
container_distro_name: ubuntu
container_distro_version: xenial
- job:
name: openstack-helm-compute-kit-rocky-ubuntu_bionic
parent: openstack-helm-compute-kit
vars:
osh_params:
openstack_release: rocky
container_distro_name: ubuntu
container_distro_version: bionic
- job:
name: openstack-helm-compute-kit-rocky-opensuse_15
parent: openstack-helm-compute-kit
vars:
osh_params:
openstack_release: rocky
container_distro_name: opensuse
container_distro_version: '15'
- job:
name: openstack-helm-compute-kit-ocata-ubuntu_xenial
parent: openstack-helm-compute-kit
vars:
osh_params:
openstack_release: ocata
container_distro_name: ubuntu
container_distro_version: xenial
- job:
name: openstack-helm-horizon
parent: openstack-helm-chart-deploy
run: tools/gate/playbooks/osh-gate-runner.yaml
vars:
osh_params:
openstack_release: stein
container_distro_name: ubuntu
container_distro_version: bionic
gate_scripts:
- ./tools/deployment/common/install-packages.sh
- ./tools/deployment/common/deploy-k8s.sh
- ./tools/deployment/common/setup-client.sh
- ./tools/deployment/component/common/ingress.sh
- ./tools/deployment/component/common/mariadb.sh
- ./tools/deployment/component/common/memcached.sh
- ./tools/deployment/component/common/rabbitmq.sh
- ./tools/deployment/component/keystone/keystone.sh
- ./tools/deployment/component/horizon/horizon.sh
- job:
name: openstack-helm-apparmor
parent: openstack-helm-chart-deploy
run: tools/gate/playbooks/osh-gate-runner.yaml
vars:
osh_params:
openstack_release: stein
container_distro_name: ubuntu
container_distro_version: bionic
feature_gates: apparmor
gate_scripts:
- ./tools/deployment/common/install-packages.sh
- ./tools/deployment/common/deploy-k8s.sh
- ./tools/deployment/common/setup-client.sh
- ./tools/deployment/component/common/ingress.sh
- ./tools/deployment/component/common/mariadb.sh
- ./tools/deployment/component/common/memcached.sh
- ./tools/deployment/component/common/rabbitmq.sh
- ./tools/deployment/component/nfs-provisioner/nfs-provisioner.sh
- ./tools/deployment/component/keystone/keystone.sh
- ./tools/deployment/component/heat/heat.sh
- ./tools/deployment/component/glance/glance.sh
- ./tools/deployment/component/compute-kit/openvswitch.sh
- ./tools/deployment/component/compute-kit/libvirt.sh
- ./tools/deployment/developer/nfs/160-compute-kit.sh
# NOTE: Re-enable barbican once the profile gets sorted out
#- ./tools/deployment/component/barbican/barbican.sh
- ./tools/deployment/developer/common/170-setup-gateway.sh
- ./tools/deployment/developer/common/900-use-it.sh
- job:
name: openstack-helm-netpol-compute-kit
parent: openstack-helm-chart-deploy
timeout: 7200
run: tools/gate/playbooks/osh-gate-runner.yaml
vars:
osh_params:
openstack_release: stein
container_distro_name: ubuntu
container_distro_version: bionic
feature_gates: netpol
gate_scripts:
- ./tools/deployment/common/install-packages.sh
- ./tools/deployment/common/deploy-k8s.sh
- ./tools/deployment/common/setup-client.sh
- ./tools/deployment/component/common/ingress.sh
- ./tools/deployment/common/lockdown-netpol.sh
- ./tools/deployment/component/common/mariadb.sh
- ./tools/deployment/component/common/memcached.sh
- ./tools/deployment/component/common/rabbitmq.sh
- ./tools/deployment/component/nfs-provisioner/nfs-provisioner.sh
- ./tools/deployment/component/keystone/keystone.sh
- ./tools/deployment/component/heat/heat.sh
- ./tools/deployment/component/glance/glance.sh
- ./tools/deployment/component/compute-kit/openvswitch.sh
- ./tools/deployment/component/compute-kit/libvirt.sh
- ./tools/deployment/component/compute-kit/compute-kit.sh
- ./tools/deployment/developer/common/170-setup-gateway.sh
- ./tools/deployment/component/horizon/horizon.sh
- ./tools/deployment/common/openstack-exporter.sh
- ./tools/deployment/developer/common/900-use-it.sh
- ./tools/deployment/common/test-networkpolicy.sh
- job:
name: openstack-helm-netpol-cinder
parent: openstack-helm-chart-deploy
timeout: 7200
run: tools/gate/playbooks/osh-gate-runner.yaml
vars:
osh_params:
openstack_release: stein
container_distro_name: ubuntu
container_distro_version: bionic
feature_gates: netpol
gate_scripts:
- ./tools/deployment/common/install-packages.sh
- ./tools/deployment/common/deploy-k8s.sh
- ./tools/deployment/common/setup-client.sh
- ./tools/deployment/component/ceph/ceph.sh
- ./tools/deployment/component/ceph/ceph-ns-activate.sh
- ./tools/deployment/common/lockdown-netpol.sh
- ./tools/deployment/component/common/ingress.sh
- ./tools/deployment/component/common/mariadb.sh
- ./tools/deployment/component/common/memcached.sh
- ./tools/deployment/component/common/rabbitmq.sh
- ./tools/deployment/component/keystone/keystone.sh
- ./tools/deployment/component/cinder/cinder.sh
- ./tools/deployment/component/horizon/horizon.sh
- ./tools/deployment/common/openstack-exporter.sh
- ./tools/deployment/common/test-networkpolicy.sh
- job:
name: openstack-helm-multinode-temp
parent: openstack-helm-functional-temp
roles:
- zuul: openstack/openstack-helm-infra
vars:
osh_openstack_release: stein
zuul_osh_infra_relative_path: ../openstack-helm-infra/
timeout: 7200
pre-run:
- tools/gate/playbooks/osh-infra-upgrade-host.yaml
- tools/gate/playbooks/osh-infra-deploy-docker.yaml
- tools/gate/playbooks/osh-infra-build.yaml
- tools/gate/playbooks/osh-infra-deploy-k8s.yaml
run: tools/gate/playbooks/multinode-deploy.yaml
post-run: tools/gate/playbooks/osh-infra-collect-logs.yaml
required-projects:
- openstack/openstack-helm-infra
- job:
timeout: 9600
name: openstack-helm-armada-deploy
parent: openstack-helm-functional-temp
nodeset: openstack-helm-five-node-ubuntu
roles:
- zuul: openstack/openstack-helm-infra
pre-run:
- tools/gate/playbooks/osh-infra-upgrade-host.yaml
- tools/gate/playbooks/osh-infra-deploy-docker.yaml
- tools/gate/playbooks/osh-infra-build.yaml
- tools/gate/playbooks/osh-infra-deploy-k8s.yaml
run: tools/gate/playbooks/osh-gate-runner.yaml
post-run:
- tools/gate/playbooks/osh-infra-collect-logs.yaml
- tools/gate/playbooks/gather-armada-manifests.yaml
required-projects:
- openstack/openstack-helm-infra
vars:
zuul_osh_infra_relative_path: ../openstack-helm-infra/
gate_scripts:
- ./tools/deployment/armada/010-armada-host-setup.sh
- ./tools/deployment/armada/015-armada-build.sh
- ./tools/deployment/armada/020-armada-render-manifests.sh
- ./tools/deployment/armada/025-armada-validate-manifests.sh
- ./tools/deployment/armada/030-armada-apply-manifests.sh
- job:
timeout: 9600
name: openstack-helm-armada-update-uuid
parent: openstack-helm-functional-temp
nodeset: openstack-helm-five-node-ubuntu
roles:
- zuul: openstack/openstack-helm-infra
pre-run:
- tools/gate/playbooks/osh-infra-upgrade-host.yaml
- tools/gate/playbooks/osh-infra-deploy-docker.yaml
- tools/gate/playbooks/osh-infra-build.yaml
- tools/gate/playbooks/osh-infra-deploy-k8s.yaml
run: tools/gate/playbooks/osh-gate-runner.yaml
post-run:
- tools/gate/playbooks/osh-infra-collect-logs.yaml
- tools/gate/playbooks/gather-armada-manifests.yaml
required-projects:
- openstack/openstack-helm-infra
vars:
zuul_osh_infra_relative_path: ../openstack-helm-infra/
gate_scripts:
- ./tools/deployment/armada/010-armada-host-setup.sh
- ./tools/deployment/armada/015-armada-build.sh
- ./tools/deployment/armada/020-armada-render-manifests.sh
- ./tools/deployment/armada/025-armada-validate-manifests.sh
- ./tools/deployment/armada/030-armada-apply-manifests.sh
- ./tools/deployment/armada/035-armada-update-uuid.sh
- job:
timeout: 10800
name: openstack-helm-armada-update-passwords
parent: openstack-helm-functional-temp
nodeset: openstack-helm-five-node-ubuntu
roles:
- zuul: openstack/openstack-helm-infra
pre-run:
- tools/gate/playbooks/osh-infra-upgrade-host.yaml
- tools/gate/playbooks/osh-infra-deploy-docker.yaml
- tools/gate/playbooks/osh-infra-build.yaml
- tools/gate/playbooks/osh-infra-deploy-k8s.yaml
run: tools/gate/playbooks/osh-gate-runner.yaml
post-run:
- tools/gate/playbooks/osh-infra-collect-logs.yaml
- tools/gate/playbooks/gather-armada-manifests.yaml
required-projects:
- openstack/openstack-helm-infra
vars:
zuul_osh_infra_relative_path: ../openstack-helm-infra/
gate_scripts:
- ./tools/deployment/armada/010-armada-host-setup.sh
- ./tools/deployment/armada/015-armada-build.sh
- ./tools/deployment/armada/020-armada-render-manifests.sh
- ./tools/deployment/armada/025-armada-validate-manifests.sh
- ./tools/deployment/armada/030-armada-apply-manifests.sh
- ./tools/deployment/armada/040-armada-update-passwords.sh
- job:
name: openstack-helm-multinode-temp-ubuntu
parent: openstack-helm-multinode-temp
nodeset: openstack-helm-five-node-ubuntu
- job:
name: openstack-helm-multinode-temp-centos
parent: openstack-helm-multinode-temp
nodeset: openstack-helm-five-node-centos
- job:
name: openstack-helm-multinode-temp-fedora
parent: openstack-helm-multinode-temp
nodeset: openstack-helm-five-node-fedora
- job:
name: openstack-helm-ironic-ubuntu
parent: openstack-helm-multinode-temp
nodeset: openstack-helm-ubuntu
run: tools/gate/playbooks/ironic-deploy.yaml
- job:
timeout: 10800
name: openstack-helm-multinode-temp-tempest
parent: openstack-helm-multinode-temp
nodeset: openstack-helm-five-node-ubuntu
run: tools/gate/playbooks/multinode-tempest-deploy.yaml
View Git Blame Copy Permalink