To enable cold migration, need to update nova charts in openstack-helm
and helm-toolkit chart in openstack-helm-infra. These changes build
on existing upstream components which attempt to add a second container
to the nova-compute pod which creates a sshd process listening on port
8022.
Nova chart changes include:
- Fix bug in ssh-config mapping so config file is generated properly in
/root/.ssh/config in nova-compute container.
- Move private key from sshd container to nova-compute container.
- Map private and public ssh keys to new configmap-ssh which will
default to acceptable file permissions (400) for ssh. Keys will be
provided in overrides.
- Add additional config to /etc/ssh/sshd_config to allow passwordless
root logins over appropriate subnet passed in from overrides. This
is the same as what is done in nova puppet currently.
- Remove chmods from sshd bash script as they are failing. Function is
replaced by configmap-ssh.
To enable cold migration in nova helm chart, we need to allow multiple
containers within the same daemonset pod. This requires a patch to
the helm-toolkit _daemonset_overrides template to remove upstream
restriction. This issue is tracked upstream by storyboard 2003876.
These changes should be upstreamed but may require further refinement.
Story: 2003909
Task: 28927
Change-Id: Id789ba051cec019e8b7564c713cf1b5296ecf9f6
Signed-off-by: Gerry Kopec <Gerry.Kopec@windriver.com>
This update adds e2fsprogs to the pike and master docker
image build directives files for stx-nova, to provide the
mkfs utilities required for ephemeral storage support.
Change-Id: If9b901696169d7d157a37d6b96f7b8c4db0a24a5
Closes-Bug: 1812432
Signed-off-by: Don Penney <don.penney@windriver.com>
The keystone-api pod gets stuck in CrashLoopBackOff on
AIO-SX lock/unlock attempt.
When Kubernetes decides to kill the keystone-api pod due to readiness
probe failure or other reasons, it calls the preStop hook immediately
before the container is terminated. This hook starts a graceful
shutdown process which includes removing pid, shared memory segment
and wsgi sock files. If the container is not terminated within the
grace period, a SIGKILL is sent, and the container is forced to shut
down.
When the container was forced to terminate without clean up, the
stale files were left behind. On the restart, the application
detected the file existed, and treated it as configuration failure,
hence the exit. As a result, the pod went into a crash loop.
This update removes any stale files when the pod starts.
Story: 2004520
Task: 28392
Change-Id: I613a0db674de9578b3f9d1fa781a1612d9caf214
Signed-off-by: Tao Liu <tao.liu@windriver.com>
Until the ceph upgrade is complete, a forked gnocchi repo will
be used for the stx-gnocchi image to allow temporary changes
to the gnocchi source to support the older ceph version.
Change-Id: I370086ca01e95e8b4907951328f29d833847b6b7
Story: 2004520
Task: 28912
Signed-off-by: Don Penney <don.penney@windriver.com>
The spec files for openstack-helm-infra and openstack-helm
have been updated to not require networking, and therefore
can be built the same as other std targets rather than as
a container target.
helm init --client-only was using networking and DNS lookup.
This commit sets up helm without running that command.
Story: 2004005
Task: 28793
Change-Id: I35c9b547a98fac559793bc2ec00012f6eded8ffa
Signed-off-by: Al Bailey <Al.Bailey@windriver.com>
Update the stx-horizon.master image build directives file to include
starlingx-dashboard module in the image, and to add a customization
hook to copy the themes to a common location.
Depends-On: I5339c875ff7bec8a1b516b54819b7a7667895cee
Change-Id: I563a7bf68f9c125fffd35bc857c8853d5efaa3b9
Story: 2004520
Task: 28728
Signed-off-by: Don Penney <don.penney@windriver.com>
doc index.rst:
1. Update intro sentence to read as a complete sentence
2. Remove unused toctree
3. Correct heading levels (impacting side nav and correct rendering of content)
4. Remove "Indices and Tables" section: genindex page not used, search searches
only index (not useful here)
releasenotes index.rst:
1. Standardize page title reST markup
2. Remove search (make consistent with other openstack release note pages)
Change-Id: I4847f655f72c3ce4fe1f0d197b00167e499dd658
Signed-off-by: Kristal Dale <kristal.dale@intel.com>
Use rabbitmq-server-config package to package config files for
rabbitmq-server package. We can remove related patches of it.
Install custom ocf script and let SM call this one instead of
default one.
Deployment test and ping test between VMs pass
Config files check pass.
Story: 2003768
Task: 28042
Depends-on: https://review.openstack.org/#/c/621510
Change-Id: I64281b5601b7e457c724747f81e58cc1e42936dd
Signed-off-by: zhipengl <zhipengs.liu@intel.com>
Modify the python-django-openstack-auth spec to add steps
to build the python wheel, as well as include it in the pike
wheels tarball.
Change-Id: Idfe6de304b41d3a08cbfd8435f9191e9fefd8ed0
Story: 2004520
Task: 28587
Signed-off-by: Don Penney <don.penney@windriver.com>
Update the stx-horizon image build directives file to include
starlingx-dashboard module in the image, and to add a customization
hook to copy the themes to a common location.
Change-Id: I1684eebc31e977ee02c95d8ba7ec6cd11f3244cb
Story: 2004520
Task: 28588
Signed-off-by: Don Penney <don.penney@windriver.com>
Customizations to the pam package were refactored to
a new pam-config package. This update installs this
package in the stx-nova image.
Story: 2004520
Task: 28589
Change-Id: Ia21fdb30fa3bff6d123ebaa3d057190d05d4913d
Signed-off-by: Don Penney <don.penney@windriver.com>
Use openstack-panko-config package to package config file for
openstack-panko package.
The StarlingX common logrotate config file includes panko log files.
To avoid conflict with the logrotate config file from openstack-panko,
we're overwriting this file with just a comment to clear its config.
Deployment test pass and config file check pass!
Story: 2003768
Task: 28362
Change-Id: I09b0f6ae93b915e10ff3d8cdf6fc9cbd5fe9426e
Signed-off-by: zhipengl <zhipengs.liu@intel.com>
Update misc compute references to worker
Tests Performed:
Non-containerized deployment
AIO-SX: Sanity and Nightly automated test suite
AIO-DX: Sanity and Nightly automated test suite
2+2 System: Sanity and Nightly automated test suite
2+2 System: Horizon Patch Orchestration
Kubernetes deployment:
AIO-SX: Create, delete, reboot and rebuild instances
2+2+2 System: worker nodes are unlock enable and no alarms
Story: 2004022
Task: 27013
Depends-On: https://review.openstack.org/#/c/624452/
Change-Id: I158394e5fb37367a0ba11e2236fdea64db3cc186
Signed-off-by: Tao Liu <tao.liu@windriver.com>
Deleted the STX local_settings.py file. The generic
local_settings.py.example file will now be used and STX
customization will be located in stx-gui under
local_settings.d.
Story: 2004552
Task: 28394
Depends-On: https://review.openstack.org/#/c/624764
Change-Id: I092040eae3ca4c6f41026e2e98cea8a74ecdabff
Signed-off-by: Kristine Bujold <kristine.bujold@windriver.com>
Upstream master has some fixes for the mariadb chart that we hope will improve
behaviour under fault scenarios so import them into our load.
When we update the repo to the latest upstream we should pick these up and
the patches can be dropped.
Change-Id: I5bb367db76b6d00d9922a4b1bb32d87aaa37cf91
Story: 2004520
Task: 28388
Signed-off-by: Chris Friesen <chris.friesen@windriver.com>
IPMI device should be mounted from host to ceilometer-ipmi pod
in order to enable pulling of ipmi samples.
Change-Id: Ic8c31c825e406ab4f3fd7bdad5c9dd104120230c
Story: 2003909
Task: 27083
Signed-off-by: Angie Wang <angie.wang@windriver.com>
Moved themes/titanium/ and themes/starlingx/ folder from
stx-horizon into stx-gui. Renamed titanium to starlingx and
delete titanium.
Story: 2004552
Task: 28310
Change-Id: I1e9e8bcd41b6b5bb32e40da8dfce6c4804ce5d37
Signed-off-by: Kristine Bujold <kristine.bujold@windriver.com>
This change adds a cron job to purge deleted items from the heat
database every 24h.
Long running operations (for example autoscale stacks) can lead to heat
database growth over time. This will remove entries that have been soft
deleted from the heat database.
This change should be upstreamed.
Change-Id: I5f78e63ee4219525e82c5897e72d39e25aa166c4
Story: 2003909
Task: 27088
Signed-off-by: David Sullivan <david.sullivan@windriver.com>
Use openstack-aodh-config package to package service and script
files for openstack-aodh package.
Deployment test pass and service/script file check pass.
Story: 2003768
Task: 28044
Depends-on: https://review.openstack.org/#/c/620258/
Change-Id: I6cc7fd555fad2dc9278d15646fbd6811ba614d00
Signed-off-by: zhipengl <zhipengs.liu@intel.com>
This update adds ipmitool to the DIST_PACKAGES list to the
ceilometer docker image directives files. This triggers
installation of the package, and its dependencies, during
the build of the stx-ceilometer docker image.
Change-Id: I25d450e58d052bfd774fe6b0a9225404e0143b5c
Story: 2003907
Task: 28186
Signed-off-by: Don Penney <don.penney@windriver.com>
The horizon configuration file has a value set for
TIME_ZONE (set to UTC). This value is not available for users to
modify and takes precedence over the system settings.
The result is that the horizon GUI will show times in UTC
regardless of the system settings
This commit simple unsets the value so that the GUI
uses the system values by default.
Closes-Bug: #1806051
Change-Id: If24daaa97109d1020ec7f4ebdafebb5cda395ccb
Signed-off-by: Paul-Emile Element <Paul-Emile.Element@windriver.com>
This update defines the docker image directives file to support
building the service images with openstack master branch.
Change-Id: I3203cdd1e82ffbe518d7cefa76ce28f66df1bae0
Story: 2003907
Task: 28178
Signed-off-by: Don Penney <don.penney@windriver.com>
Create OCF scripts for controlling Barbican processes lifecycle.
There are three Barican proceses that needs to be managed:
barbican-api, barbican-keystone-listener and barbican-worker.
Change-Id: I2667d56a71b7d3881c03b6a5c1e5ed61d4f0b902
Story: 2003108
Task: 27700
Signed-off-by: Alex Kozyrev <alex.kozyrev@windriver.com>
This commit removes the HEAT templates involved with
the custom QoS extension.
Story: 2003948
Task: 26862
Change-Id: Ibec78b67fff5baa2d43d9e6ddb643b1e7ff5b2dd
Signed-off-by: Patrick Bonnell <patrick.bonnell@windriver.com>
Stale Apache2 pids will prevent Apache2 from starting and will leave
the POD in a crashed state.
Note: the pid file is somewhat confusingly called
/var/run/httpd/httpd.pid and /var/run/apache2 is just a symlink to
/var/run/httpd.
This is loosely based off the in-review upstream commit at
https://review.openstack.org/#/c/619747
Change-Id: Ifec8b58e4789edb1f858ef1a9d720045d8768701
Story: 2003909
Task: 27632
Signed-off-by: Chris Friesen <chris.friesen@windriver.com>
This story tracks the removal of the nova-local lvm backend for compute
hosts. The lvm backend is no longer required; nova-local storage will
continue to support settings of "image" or "remote" backends.
This story will remove custom code related to lvm nova-local storage:
- nova-clean-thinpool service and init script is removed
DocImpact
Story: 2004427
Task: 28085
Depends-On: https://review.openstack.org/620179
Change-Id: I28469730f959e000d39e46d13f4c68c2e967153b
Signed-off-by: Jim Gauld <james.gauld@windriver.com>
This commit is to add a cron job for gnocchi to periodically purge the
deleted openstack resources with its associated metrics.
Put all gnocchi chart updates in one patch.
Change-Id: Iab426887a7a997d72950674a7fc1a86a4bef480f
Story: 2003909
Task: 27083
Signed-off-by: Angie Wang <angie.wang@windriver.com>
Openstack-helm has been rebased to a current version of the upstream repo
which includes the feature that use secrets to store config information.
Aodh, panko and ceilometer charts should apply the same change in order to
deploy those services successfully.
Change-Id: I32424a01a0dc049989f67d14de94b645f8045e68
Story: 2004005
Task: 27947
Signed-off-by: Angie Wang <angie.wang@windriver.com>
Rebase to a current version of the upstream repos. This will retire the
reverted commits that we needed to enable per host overrides as this was
fixed upstream.
Change-Id: Iacbdd666687b8bc12053f9d3dd833f9896a508cd
Depends-On: Iedb814ce0c72a59ab0ce5e72e4601082b61f82b0
Story: 2003909
Task: 27632
Signed-off-by: Robert Church <robert.church@windriver.com>
This commit includes two patches for adding helm charts to
deloy Aodh and Panko services.
The charts are created based on the upstream unfinished ones:
https://review.openstack.org/#/c/468530/https://review.openstack.org/#/c/469180/
Change-Id: I7c012ea023481aa1be9b69657f58dd9f733a58ab
Story: 2004005
Task: 27947
Signed-off-by: Angie Wang <angie.wang@windriver.com>
