fff66fdec3
This commit includes: - Cleanup the duplicated functions for image overrides generation - Add missing image overrides in some charts to avoid pulling useless/uncessary images Verified on AIO-SX/AIO-DX/2+2+2: - config_controller --kubernetes - system application-upload/apply/remove/delete Story: 2004520 Task: 28730 Change-Id: Ibc4d3b5d3087547678c2786e44764e02f752c186 Signed-off-by: Angie Wang <angie.wang@windriver.com>
180 lines
6.1 KiB
Python
180 lines
6.1 KiB
Python
#
|
|
# Copyright (c) 2018 Wind River Systems, Inc.
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
#
|
|
|
|
from sysinv.common import constants
|
|
from sysinv.common import exception
|
|
from sysinv.openstack.common import log as logging
|
|
from sysinv.helm import common
|
|
from sysinv.helm import openstack
|
|
|
|
LOG = logging.getLogger(__name__)
|
|
|
|
|
|
class HorizonHelm(openstack.OpenstackBaseHelm):
|
|
"""Class to encapsulate helm operations for the horizon chart"""
|
|
|
|
CHART = constants.HELM_CHART_HORIZON
|
|
SUPPORTED_NAMESPACES = [
|
|
common.HELM_NS_OPENSTACK
|
|
]
|
|
|
|
SERVICE_NAME = 'horizon'
|
|
|
|
def get_namespaces(self):
|
|
return self.SUPPORTED_NAMESPACES
|
|
|
|
def get_overrides(self, namespace=None):
|
|
overrides = {
|
|
common.HELM_NS_OPENSTACK: {
|
|
'images': self._get_images_overrides(),
|
|
'network': {
|
|
'node_port': {
|
|
'enabled': 'true',
|
|
'port': 31000
|
|
}
|
|
},
|
|
'conf': {
|
|
'horizon': {
|
|
'local_settings': {
|
|
'config': self._get_local_settings_config_overrides(),
|
|
}
|
|
}
|
|
},
|
|
'pod': {
|
|
'mounts': {
|
|
'horizon': {
|
|
'horizon': {
|
|
# Branding directory mount
|
|
'volumeMounts': [{
|
|
'name': 'horizon-branding',
|
|
'mountPath': '/opt/branding',
|
|
}],
|
|
'volumes': [{
|
|
'name': 'horizon-branding',
|
|
'hostPath':
|
|
{
|
|
'path': '/opt/branding',
|
|
'type': 'Directory'
|
|
},
|
|
}],
|
|
}
|
|
}
|
|
}
|
|
},
|
|
'endpoints': self._get_endpoints_overrides()
|
|
}
|
|
}
|
|
|
|
if namespace in self.SUPPORTED_NAMESPACES:
|
|
return overrides[namespace]
|
|
elif namespace:
|
|
raise exception.InvalidHelmNamespace(chart=self.CHART,
|
|
namespace=namespace)
|
|
else:
|
|
return overrides
|
|
|
|
def _get_endpoints_overrides(self):
|
|
return {
|
|
'oslo_db': {
|
|
'auth': self._get_endpoints_oslo_db_overrides(
|
|
self.SERVICE_NAME, [self.SERVICE_NAME])
|
|
},
|
|
}
|
|
|
|
def _get_images_overrides(self):
|
|
heat_image = self._operator.chart_operators[
|
|
constants.HELM_CHART_HEAT].docker_image
|
|
return {
|
|
'tags': {
|
|
'db_drop': heat_image,
|
|
'db_init': heat_image,
|
|
'horizon': self.docker_image,
|
|
'horizon_db_sync': self.docker_image,
|
|
}
|
|
}
|
|
|
|
def _get_local_settings_config_overrides(self):
|
|
local_settings_config = {
|
|
# Region Modes
|
|
'ss_enabled': 'False',
|
|
'dc_mode': 'False',
|
|
|
|
# Security
|
|
'https_enabled': 'False',
|
|
'lockout_period_sec': '300',
|
|
'lockout_retries_num': '3',
|
|
'horizon_secret_key': self._get_or_generate_password(
|
|
self.SERVICE_NAME, common.HELM_NS_OPENSTACK,
|
|
'horizon_secret_key'),
|
|
|
|
# Optional Services
|
|
'enable_murano': 'False',
|
|
'enable_magnum': 'False',
|
|
|
|
# Turn off domain support as we aren't using it
|
|
'keystone_multidomain_support': 'False',
|
|
}
|
|
|
|
local_settings_config.update({'system_region_name': self._region_name()})
|
|
|
|
# Basic region config additions
|
|
if self._region_config():
|
|
openstack_host = 'controller' # TODO(tsmith) must evaluate region functionality
|
|
region_name = self._region_name()
|
|
|
|
local_settings_config.update({
|
|
'openstack_keystone_url': "http://%s:5000/v3" % openstack_host,
|
|
'region_name': region_name,
|
|
'available_regions': [("http://%s:5000/v3" % openstack_host, region_name), ],
|
|
'ss_enabled': 'True',
|
|
})
|
|
|
|
# Distributed cloud additions
|
|
if self._distributed_cloud_role() in [
|
|
constants.DISTRIBUTED_CLOUD_ROLE_SUBCLOUD,
|
|
constants.DISTRIBUTED_CLOUD_ROLE_SYSTEMCONTROLLER]:
|
|
|
|
local_settings_config.update({
|
|
'dc_mode': 'True',
|
|
})
|
|
|
|
# Https & security settings
|
|
if self._https_enabled():
|
|
local_settings_config.update({
|
|
'https_enabled': 'True',
|
|
})
|
|
|
|
lockout_retries = self._get_service_parameter('horizon', 'auth', 'lockout_retries')
|
|
lockout_seconds = self._get_service_parameter('horizon', 'auth', 'lockout_seconds')
|
|
if lockout_retries is not None and lockout_seconds is not None:
|
|
local_settings_config.update({
|
|
'lockout_retries_num': str(lockout_retries.value),
|
|
'lockout_period_sec': str(lockout_seconds.value),
|
|
})
|
|
|
|
# Optional services settings
|
|
service_config = self._get_service_config('murano')
|
|
if service_config is not None and service_config.enabled:
|
|
local_settings_config.update({
|
|
'enable_murano': 'True',
|
|
})
|
|
|
|
service_config = self._get_service_config('magnum')
|
|
if service_config is not None and service_config.enabled:
|
|
local_settings_config.update({
|
|
'enable_magnum': 'True',
|
|
})
|
|
|
|
return local_settings_config
|
|
|
|
def _region_config(self):
|
|
# A wrapper over the Base region_config check.
|
|
if (self._distributed_cloud_role() ==
|
|
constants.DISTRIBUTED_CLOUD_ROLE_SUBCLOUD):
|
|
return False
|
|
else:
|
|
return super(HorizonHelm, self)._region_config()
|