4314 Commits

Author SHA1 Message Date
hailu
3620054def feat: Add public endpoints for the spiceproxy
Change-Id: I5e1d51931d7362359dfaac5b67eddba345ebe396
2024-01-11 10:35:14 +08:00
hailu
846ea09f24 feat: create 'vms' pool when 'conf.ceph.enabled = true'
Change-Id: I95a19d5a52ac88585d0f53a5349977e7c28ca361
2024-01-11 10:00:48 +08:00
Zuul
57a30e2317 Merge "Enable 2023.2 compute-kit-ovn job" 2024-01-04 21:03:27 +00:00
Vladimir Kozhukalov
d025c02ce6 Enable 2023.2 compute-kit-ovn job
Depends-On: I9f852ff54cfc42536387fa51a73f019b56070345
Change-Id: I80e98df09693dcf5e4666e2bf3209ee34d11eedf
2024-01-04 11:51:49 -06:00
okozachenko
48a59b1324 set startupProbe in nova compute
In environments where there is a large number of ports (100+) on a
hypervisor, the start up can take a long time, and eventually the
liveness test will fail because the process is stuck plugging ports
in.
No need initial delay for live/readiness probe and Startup probe
is enough

Change-Id: I54544a45a716fa4ff840019c0526343063ed1ac5
2024-01-04 08:12:59 -06:00
Zuul
465e7b94fd Merge "fix: ovn-metadata-agent '/run/netns' mountPropagation overrides by parent directory." 2024-01-04 13:25:10 +00:00
hailu
7b2766b9d2 fix: ovn-metadata-agent '/run/netns' mountPropagation overrides by parent directory.
mountPropagation:
`None`(default) - This volume mount will not receive any subsequent mounts that are mounted to this volume or any of its subdirectories by the host.

Change-Id: I51500c406a3cae879d01dfff92ca91f30bbcb29f
2024-01-03 08:07:58 -06:00
hailu
91bea58ee0 feat: getting LISTEN IP for CIDR
`CIDR` is easier to manage than `interface` on clusters with different hardware.

Change-Id: I1266eb37c1355b95f23efd33856a79f259020017
2023-12-29 15:16:25 +08:00
dengzhaosen
0be32dd415 Add log_dir option for placement
Change-Id: I1741558be57b60cfb90f9b36e653c09756933d1e
2023-12-18 11:02:47 +08:00
Zuul
65bd23fba8 Merge "Run 2023.2 umbrella job" 2023-12-13 22:24:06 +00:00
Vladimir Kozhukalov
3858d1d3a5 Bump Kubernetes version to 1.28.4
Depends-On: Ic6b3478e53504622804b6f003ca176a679573d5b
Change-Id: Ibfdc1b41b280f8a024d438e4bde6c3417925d6d5
2023-12-13 12:17:32 -06:00
Vladimir Kozhukalov
1ea7f30ea0 Run 2023.2 umbrella job
Also keystone-ldap and horizon jobs
are run with the 2023.2 release.

Change-Id: I79c7590a501ddb24e1bc6a88046edef5a70dbcec
2023-12-12 14:02:38 -06:00
Zuul
3f0cbaea1d Merge "Run 2023.2 tls job" 2023-12-12 18:15:18 +00:00
Vladimir Kozhukalov
67090246b7 Run 2023.2 tls job
Change-Id: I2d7d48b6e26e975a1eb91669b89672a8068e1038
2023-12-11 13:54:35 -06:00
Vladimir Kozhukalov
bb90283ffa Update ceph deployment doc
Change-Id: I41fef1726c675e55a21eb1cf5ecdaee3711831fb
2023-12-08 17:38:15 -06:00
Zuul
bbac51b6aa Merge "Use rook ceph for some cinder jobs" 2023-12-08 01:04:29 +00:00
Zuul
740a04fa3f Merge "Make barbican & keystone TLS configuration granular" 2023-12-07 21:17:23 +00:00
Vladimir Kozhukalov
444f1fd161 Use rook ceph for some cinder jobs
Change-Id: I2af04eb6ad313593fb25f9430a00b4e2c5d503fb
2023-12-07 14:37:33 -06:00
Anselme, Schubert (sa246v)
6ed9a4132e
Make barbican & keystone TLS configuration granular
Change-Id: Ibdcb202d8f813a248df3f0743b949e9befe18c7a
Signed-off-by: Anselme, Schubert (sa246v) <sa246v@att.com>
2023-12-07 10:37:40 -05:00
okozachenko
2ca488f8c1 neutron: fix auth_url for designate integration
Change-Id: Iffe385c710790892057a78538dcf8de2d32cf4c8
2023-12-06 23:45:27 +11:00
Zuul
c07ddc2c71 Merge "Add the conditional statement for log_config_append" 2023-12-06 05:40:56 +00:00
dengzhaosen
2dfccce221 Add the conditional statement for log_config_append
As the nova.DEFAULT.log_config_append is a aption
for the configuration of nova, we should be add
condtional statement here.

Change-Id: Ib9c50c9ccc0c93226fffccc997c232b0259dff0c
2023-12-01 16:17:36 +08:00
Vladimir Kozhukalov
b52ceef053 Use get-values-overrides.sh script from osh-infra
Depends-On: I5cfaad8ebfd08790ecabb3e8fa480a7bf2bb7e1e
Change-Id: I2a76a73974b874774d2ed5871d7280a2a0a9179c
2023-11-29 23:38:29 -06:00
Singh, Jasvinder (js581j)
b50501344f Fix indentation in heat chart
This commit is to fix the issue with heat chart, because of
indentation issue in annotations. The current chart is not allowing
the upgrade via helm if not fixed. Also bumping the chart version
and added release notes.

Change-Id: Ic22d2d20d00febc51bd410316522a85d2f7e582e
2023-11-22 10:51:40 -06:00
Anselme, Schubert (sa246v)
11eb3b2384
Add barbican certificate generation
This PS adds generation of certificate for barbican, when
tls connection is enabled (manifest.certificate=true), using
values from endpoints.key_manager.host_fqdn_override.default.tls
This PS also fixes tls connection to rabbitmq.

Change-Id: I6397ce934e33975b1d91795aaade498f3a71468a
Signed-off-by: Anselme, Schubert (sa246v) <sa246v@att.com>
2023-11-17 17:36:53 -05:00
Zuul
41d046c1b5 Merge "Use region option in keystone endpoint-update.py" 2023-11-15 23:05:22 +00:00
chung00-lee
5b596e39ba Use region option in keystone endpoint-update.py
In multi-region environment, endpoints of other regions are also changed.
So, if we add the region option to endpoint-update file,
it changes endpoints only for the current region.

story: 2010965
task: 49081
Change-Id: Ia678b6737871dec8f6979924de7f2ba53153e7bf
2023-11-13 13:45:17 +09:00
Keonwoo.kim
88688f9199 Use --region option to prevent OS_SWIFT_ENDPOINT_PREFIX is broken in storage-init.sh
If there are multi regions, OS_SWIFT_ENDPOINT_PREFIX has broken url. To prevent this problem, use --region option.

story: 2010964
task: 49071
Change-Id: I1bbd76616ab9c9ec7a8554c7f382642b2dbe0661
2023-11-10 01:15:47 +09:00
Ritchie, Frank (fr801x)
488481c332 Ability to add extra commands for service cleaner
This PS makes to possible to add extra commands to the nova service
cleaner job if needed.

Change-Id: Ic1dee3e15a5b56712128142e054e0ca2813944bf
2023-11-08 15:53:20 -05:00
Zuul
545a621ffc Merge "Remove test jobs for old Openstack releases" 2023-11-08 02:20:17 +00:00
Zuul
e08418ced7 Merge "Disable DVR for OVN floating ip" 2023-11-07 23:33:02 +00:00
Zuul
9dcd98e7e9 Merge "fix(ovn): enable dependency to handle slow envs" 2023-11-07 20:21:33 +00:00
Vladimir Kozhukalov
0f106414a5 Remove test jobs for old Openstack releases
The PR removes test jobs for:
- Victoria
- Wallaby
- Xena

Change-Id: I7f5623685b61435d6bfc7092915a35baa13fc8c1
2023-11-06 17:09:13 -06:00
ricolin
6ae4b98eec Disable DVR for OVN floating ip
DVR with OVN floating ip is currently unstable and caused us a lot
of network connectivity issues.

This propose disable it as the default value (False) for
`enable_distributed_floating_ip`.

Change-Id: Ibcf49c331482336e1cbae76dfc2bde86962e350e
2023-11-06 15:37:00 -06:00
ricolin
dbceca760a fix(ovn): enable dependency to handle slow envs
With these missing flags, the Helm deploy would finish
but the services would not be functional, causing the
jobs to fail.

Change-Id: If0f6447945552fe6aedace45562e27efcab9a534
2023-11-06 15:36:01 -06:00
Ritchie, Frank (fr801x)
e44c4749b4 Ability to define extra commands for cell setup
This PS makes to possible to add extra commands to the nova cell setup
job if needed.

Change-Id: I3b1f4e2ee58e60d3d830772cbb57c115dd712824
2023-11-06 16:16:39 -05:00
Vladimir Kozhukalov
52cd767c84 Cleanup unnecessary files
We recently re-worked all the deployment jobs
so they use `deploy-env` Ansible role which works
for both multi-node and single-node environments.
This means there is no need to have diffrent sets
of scripts for these two cases.

Also when we deploy Openstack components it is better
to have values overrides for different scenarios but
not different sets of scripts. Here we remove unused
deployment scripts which in many cases duplicated
the code base.

We will be cleaning up the code base even further to
provide excelent user experience.

Change-Id: Iacda03964a4dd0e60873593df9f590ce20504f2f
2023-11-02 16:12:27 -05:00
Zuul
0943a9f774 Merge "Fix: Allow multiple ovs opetions in ovs-vsctl" 2023-11-02 20:58:33 +00:00
Zuul
2551f89cff Merge "fix: ovs support member" 2023-11-02 20:48:01 +00:00
ricolin
45b44f74e5 Fix: Allow multiple ovs opetions in ovs-vsctl
story: 2010934

Change-Id: I15ac563a8bf0fd7a01a5f29317b23bdabd615ab2
2023-11-01 00:12:21 +08:00
ricolin
5a4ab112c8 fix: ovs support member
OVS 2.15 changed terminology slave to member.
This change reflect that change.

Change-Id: If100748f9dc7083406b8004d0066673b54159b2c
2023-11-01 00:12:21 +08:00
Vladimir Kozhukalov
2815d67688 Use osh-bandit role for the bandit job
Change-Id: I1ced9902237777683feb36e5a3a261b9c0d56c42
2023-10-30 14:54:26 -05:00
Vladimir Kozhukalov
c987d4a3a0 Update osh-selenium image used by default
Change-Id: I31dce9be26f0e36ac00ef8e359d2ad72d6e46272
2023-10-26 12:49:04 -05:00
ricolin
51235e8b03 Allow manila properly config network host
This allow manila to respect fqdn host config for share network host

Depends-On: https://review.opendev.org/c/openstack/manila/+/897077

Change-Id: I8393f2b130c8c8914d946a1772fff08ff8b58652
2023-10-24 14:45:20 +08:00
Vladimir Kozhukalov
1a885ddd1f Update deployment documentation
Recently we updated our test jobs so that all of them
use the `deploy-env` Ansible role which utilizes the
Kubeadm to deploy the test Kubernetes cluster.

The role works for both multi-node and single-node
environments. Although the deployment of Kubernetes itself
is out of scope of Openstack-Helm, we recommen using this
role to deploy test and development Kubernetes clusters.
So at the moment there is no need to provide
different sets of tools single-node and multi-node test envs.
Now this is a matter of the Ansible inventory file.

Also the deployment procedure of OpenStack on top of Kubernetes
using Helm is the same for multi-node and single-node clusters
because it only relies on the Kubernetes API.

We will be improving the `deploy-env` role even futher and
we will be cleaning up the deployment scripts and the documentation
so to provide a clear experience for the Openstack-Helm users.

Change-Id: I70236c4a2b870b52d2b01f65b1ef9b9518646964
2023-10-23 19:10:30 -05:00
Vladimir Kozhukalov
5500b2ae0b Remove unnecessary doc locales
Change-Id: Id2f101783973dd935b41403442f1f78533d7ac73
2023-10-18 20:52:08 -05:00
Vladimir Kozhukalov
82a6aa8ce9 Add 2023.2 (Bobcat) jobs
Change-Id: Iea2a16db8acaa94259aeb3e21097bb771b70c38e
2023-10-13 12:40:12 -05:00
Vladimir Kozhukalov
fc365b8dd5 Bump Cirros image version to 0.6.2
In Bobcat by default the ssh keypair is generated
with ed25519 algorithm which is incompatible with
Cirros 0.3.5. The Cirros 0.6.2 also requires minimum
128Mi of RAM

Change-Id: I0135c09a9ae5bc3171891576b29a450f7000f180
2023-10-12 13:45:53 -05:00
Ritchie, Frank (fr801x)
507ed30b95 Improve cinder authentication support
The current values specified in values.yaml along with the configmap-etc
template can make it very difficult for the end user to properly configure
a cinder authentication method other than password. These changes give the end
user the needed flexibility.

Change-Id: I99e75e1aa9ddd8378518b1291123a34d2881715f
2023-09-28 12:49:05 -04:00
Thales Elero Cervi
7189e6c916 Nova: Add IP addresses search control flag
Add options to nova to enable/disable the use of:
1. The vnc or spice server proxyclient address found by the console
   compute init container
2. The my_ip hypervisor address found by compute init container
3. The libvirt live_migration_inbound_addr used by nova compute to
   live-migrate instances

These options can be used to prevent cases where the found addresses
overwrite what has already been defined in nova.conf by per host nova
compute DaemonSet overrides.
It is important to allow the flexibility of using or not the default
ConfigMap - DaemonSet cluster level configuration, allowing the
possibility of having custom per host overrides definitions that will
not be overwrite by nova-compute-init.sh

One use case (live-migration) for this flexibility is the following:
Originally the nova-compute-init.sh script received the capability of
selection a target interface (by name, in a ConfigMap level) through
which the live-migration traffic should be handled [1], allowing the
possibility of selecting a separate network to handle live-migration
traffic. This was not assuming any interface/network IP if users did not
set .Values.conf.libvirt.live_migration_interface.
Later [2], same script was updated to fall-back to default gateway IP
resolution in case the live_migration_interface is not defined.
So, currently it is mandatory to define a "cluster level config" for the
interface name (i.e., through ConfigMap) or to rely on default gateway
IP resolution for live-migration addresses.
This can be problematic for use cases were:
* There are many networks defined for the cluster and a host default
  gateway might not resolve to the desired network IP;
* There is the need of having a per host definition of nova.conf, since
  nova-compute-init.sh will create a new .conf that will overwrite it.

[1] commit 31be86079d711c698b2560b4bed654e23373a596
[2] commit 8f0a15413839c92d6d527bf7cbc441380de6c2af

Change-Id: Iaf86e0a215802001f58d607a1a3a18acf83f5e81
Signed-off-by: Thales Elero Cervi <thaleselero.cervi@windriver.com>
Signed-off-by: Robert Church <robert.church@windriver.com>
2023-09-25 15:49:46 -03:00