Correct params for the following functions when using kubernetes=9.0.0:
- delete_namespaced_pod
- delete_namespaced_service
- create_namespaced_deployment
Incease the timeout when waiting for the runtime created.
Change-Id: I74fd74a5a02811442c9eaff3f25fc03ee9312100
Story: #2006225
Task: #35824
executions, webhooks and jobs endpoints are able to
take function_alias as a parameter.
An alias point to a function and a specific version of
this one.
Change-Id: I2e28a4e08fa80109767c28f77da7887a8603f2ec
Currently the created_at and updated_at format is not
compliant with UTC.
"created_at": "2019-06-11 00:16:54",
"updated_at": "2019-06-11 00:17:33",
Should be:
"created_at": "2019-06-11T00:16:54Z",
"updated_at": "2019-06-11T00:17:33Z",
Change-Id: I000c67a542b52602927fd802d2e347847f8dcc12
Story: 2005854
Task: 33647
This commit add Dockerfile and Docker compose YAML
files to deploy Qinling wihtin Docker for testing
purpose.
RabbitMQ and MySQL are deployed and configured.
Change-Id: I086e5d1aaf5e467fb767b62c669232cb8364ee58
Story: 2004166
Task: 27643
Currently there is no way in Qinling configuration file
to configure the CORS.
oslo_middleware should be implemented to be able to
set [cors] section in qinling.conf.
Change-Id: Ib4664ba7cbda28a9dfda1c1dd9f0e7457c0ee7de
Story: 2005788
Task: 33515
Use the project_domain_name value returned by the
context instead of using a static value from the
qinling.conf configuration file.
Change-Id: Ic5943bc83e6aadd27d094e28bb60439ca2dbedbd
Story: 2005802
Task: 33537
Previously, the network policy(based on ipBlock) is created during k8s
orchestrator initialization to restrict the function pod access from
outside.
However, the network policy is actually designed to use inside the k8s
cluster, it doesn't make sense to define the network policy in order to
restrict the inbound traffic from outside. A typical example is when
Calico is used as network plugin in the k8s cluster, the source IP
address from the pod's perspective is coming from the worker node rather
than the original IP address of outside.
We need to remove the network policy creation for now and leave that
part of security concerns to the future design.
The config option `CONF.kubernetes.trusted_cidrs` is deprecated for
removal.
Change-Id: I91905ba36b36f152a987ce2b742de33e423ed2db
Story: #2005777
Task: #33500
Story: #2005710
Task: #31036
By default sidecar timeout to authenticate to Keystone
is set to 5 seconds.
In most of the cases 5 seconds is enough but depending
the environment, the authentication complexity, etc...
it could be too short.
Change-Id: I02146bc67ec783786aa280f7759623abeb84bd21
Story: 2005769
Task: 33486
Add file to the reno documentation build to show release notes for
stable/stein.
Use pbr instruction to increment the minor version number
automatically so that master versions are higher than the versions on
stable/stein.
Change-Id: I19a99c5cad325530ca167eea83a88f9e7eab16a1
Sem-Ver: feature
Add a new config option, an example:
[kubernetes]
trusted_cidrs = 127.0.0.1/32,198.72.124.109/32
If trusted_cidrs is empty list, the local IP CIDR will be used.
The pod in qinling namespace can only be accessed by the CIDRs
configured.
Change-Id: Iecc34c1be16851cc53afe2fca94c2bbf0fdf7988
Story: 2004206
Task: 27715
Provide the user the ability to skip k8s installation in case user
provides her own k8s and etcd deployment.
Change-Id: Ief36778801720d5eb1d73cefbd6b00297b7241f1
This commit adds the functionality of qinling-status CLI for performing
upgrade checks as part of the Stein cycle upgrade-checkers goal.
It only includes a sample check which must be replaced by real checks in
future.
Change-Id: I6dd3546be2e03288654c5c3e8dad0aaabfff06a2
Story: 2003657
Task: 26151