This specification describes the introduction of AppArmor into the StarlingX solution.
Story: 2010310
Task: 46355
Signed-off-by: jmishra <jagatguruprasad.mishra@windriver.com>
Change-Id: Id76a3da52c148c77bfd78cafbe583b94345e491a
oran-o2 service to make starlingx be compliant to O-RAN spec.
Story: 2010278
Task: 46231
Signed-off-by: Bin Yang <bin.yang@windriver.com>
Change-Id: Ib45ff3d6d3f0799d4e2ee730527d02d1aff2a4c8
Adjustments to allow the execution of StarlingX services in only one
core. Reducing StarlingX resource consumption to just one core allows
the system to use the remaining resources for a larger workload,
increasing the availability of resources for end user applications.
Story: 2010087
Task: 45594
Signed-off-by: Alyson Deives Pereira <alyson.deivespereira@windriver.com>
Change-Id: Ibd65aa80c3e0b9f12e67e857a54f070a525a9c20
This spec document covers the proposed changes to StarlingX to support
the configuration of SyncE features on Intel's Westport Channel NICs.
Signed-off-by: Cole Walker <cole.walker@windriver.com>
Change-Id: Ib9e58cb40f5f6e70fb1cfbc0ec398d85da8dfdb6
The spec document covers the proposed changes to the StarlingX PTP
configuration model in order to support multi-instance PTP and enable
more flexible configuration.
Story: 2009248
Task: 44860
Signed-off-by: Cole Walker <cole.walker@windriver.com>
Change-Id: I2957b70b6c9874e4750379f4bc7c7a77c3e0c5e2
This spec proposes the adoption of cert-manager for platform
certificate management since system bootstrap.
Story: 2009811
Task: 44373
Signed-off-by: Rei Oliveira <Reinildes.JoseMateusOliveira@windriver.com>
Change-Id: Icb7b6d1a6f53d018e353afb445435786d1c97794
This specification describes what configuration
is required to support a Secure Local OpenLDAP
for StarlingX.
Story: 2009834
Task: 44507
Signed-off-by: Carmen Rata <carmen.rata@windriver.com>
Change-Id: Iae87fe60323f10e2b5ac40b5650b36013d196ab2
This spec proposes the replacement of Armada with FluxCD.
Story: 2009138
Change-Id: I3bbe4c452a09915031029e4bc6a7080ef08e6167
Signed-off-by: Mihnea Saracin <Mihnea.Saracin@windriver.com>
Initial spec for adding support for full K8s to debian
build tools.
Story: 2009812
Task: 44374
Signed-off-by: Davlet Panech <davlet.panech@windriver.com>
Change-Id: I3e640b8c9a14592db8924e893488a908770a7bdd
Some minor adjustments to kubernetes root CA certficate update
spec based on implementation for accuracy.
Story: 2008675
Signed-off-by: Andy Ning <andy.ning@windriver.com>
Change-Id: I0eecee32e2ca17c64194151d8e96076c4754f7b6
This spec proposes the upgrade of Ceph from Mimic to Nautilus and its
related components as part of STX 6.0 release. The upgrade is required
since Mimic is already EOL.
Story: 2009074
Signed-off-by: Vinicius Lopes da Silva <vinicius.lopesdasilva@windriver.com>
Change-Id: If7ed1c55c26aa4501a5638036dfc16cd4aca1291
This spec proposes a mechanism to upgrade Kubernetes and related
components as part of the STX 6.0 release. The major problem is
how to jump three Kubernetes versions in one release without
unduly impacting security and other feature patches.
Story: 2008972
Change-Id: Ie854e473b9e8e01a624eeeedaedee74966e1df07
Signed-off-by: Chris Friesen <chris.friesen@windriver.com>
This spec proposes we uprev the kernel to version 5.10 LTS and move
from CentOS supplied kernel source to Yocto Project kernel
source. This change is proposed as part of the STX 6.0 release in
order to make the move before CentOS 8 updates end on December 31,
2021.
Story: 2008921
Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Change-Id: Ie1822c0bd39d4b33eb21b3dd5919de567efdb846
Initial spec submission for a new stx tool to be implemented as part
of the transition to Debian OS.
Story: 2008862
Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Change-Id: Ib9d0c02d8f1b3e3d64397dd141430da129e3289d
This specification describes a Linux Auditing System containerized
solution for StarlingX.
Story: 2008849
Task: 42362
Signed-off-by: Carmen Rata <carmen.rata@windriver.com>
Change-Id: I439f236b1ffbf9468cd06bfed65e15ee03cc727c
Initial spec submission for an updated build system to be implemented
as part of the transition to Debian OS.
Story: 2008846
Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
Change-Id: I4df12c60d4f3db8eca357d43d4b4c756e4b76665
Initial version of Alternative OS Specification due to CentOS
being early EOL'ed.
v2: mostly spelling and whitespace nits.
v3: Address comments & updates to Alternatves section
v4: Added more info about Oracle Linux and changed Update section
v5: updated security impact
Signed-off-by: Saul Wold <saul.wold@windriver.com>
Change-Id: Ieaa04f72ad4ddf588563259962c1c0210d80d448
Story: 2008675
Authored-By: Andy Ning <andy.ning@windriver.com>
Co-Authored-By: Joao Paulo Soubihe <joaopaulo.soubihe@windriver.com>
Signed-off-by: Andy Ning <andy.ning@windriver.com>
Change-Id: Ia09423afcf1762857a347d99f3cda8da2c4b1e77
This story also containerizes the StarlingX SNMP solution,
introducing a new snmp armada application, and changes the
configuration of SNMP from sysinv CLI/RESTAPIs to helm chart
overrides.
Story: 2008132
Task: 40856
Change-Id: I8dd3a8b7bf43ef0bf87df480cf79d9542d2a4d95
Signed-off-by: Gustavo Dobro <gustavo.dobro@windriver.com>
This story will add Vault as a mangaged app on StarlingX. This
will provide the ability to manage secrets for both platform
applications and user applications.
Story: 2007718
Task: 40107
Depends-On: https://review.opendev.org/736251
Change-Id: I420649216ef575dedc6f90b486e8dcd78981760a
Signed-off-by: Cole Walker <cole.walker@windriver.com>
Switch to openstackdocstheme 2.2.1 version. Using
this version will allow especially:
* Linking from HTML to PDF document
* Allow parallel building of documents
* Fix some rendering problems
Update Sphinx version as well.
Disable openstackdocs_auto_version to not auto-version the documents.
Disable openstackdocs_auto_name to use 'project' variable as name.
Change pygments_style to 'native' since old theme version always used
'native' and the theme now respects the setting and using 'sphinx' can
lead to some strange rendering.
openstackdocstheme renames some variables, so follow the renames
before the next release removes them. A couple of variables are also
not needed anymore, remove them.
See also
http://lists.openstack.org/pipermail/openstack-discuss/2020-May/014971.html
Change-Id: I45a4543ee3726071eb36b8addc7a0662070923ec
The overall scenario is that we have an administrator operating in a
central cloud, with hundreds or thousands of subclouds being managed
from the central cloud. In each subcloud there will be one or more
nodes with FPGA devices. These devices will need to be programmed
with a number of types of bitstreams but to ensure that service
standards are met they can't all be updated at the same time.
Instead, the admin will create policies which govern which subclouds
are updated when, and the orchestration framework will follow those
policies to update the various subclouds.
While initially intended to support the N3000 FPGA, we want to keep
it sufficiently generic to handle other FPGAs, or NICs, or other
hardware devices that might need firmware updates.
Change-Id: Ib7f62e1cfc3585219c52892130b76b583e603a7f
Signed-off-by: Chris Friesen <chris.friesen@windriver.com>
This story will provide a mechanism to upgrade the platform components
on a running StarlingX system. This is required to allow upgrades
between Starlingx versions.
The platform upgrade components includes the Host OS and StarlingX
components (e.g. flock services)
A maintenance release for stx3.x is required to upgrade to stx4.0
Change-Id: I0dc023e93a5ec08ac975e3594b50729f6c505c8c
Story: 2007403
Task: 39105
Signed-off-by: John Kung <john.kung@windriver.com>
This bp will support end user to configure host easier with ansible
playbook and customized value yml. And perform zero touch deployment
when adding subcloud.
Change-Id: I4146ffde686adee59e3f5417d00ecbb1affad447
Signed-off-by: zhangkunpeng <zhang.kunpeng@99cloud.net>
Greg Waines