In order to support running the galera arbitrator we need to add
it to the openstack-helm mariadb docker image. This means building
our own docker image for now.
I've talked with "jayahn" on the openstack-helm IRC channel, and they
said they had no objection to adding galera-arbitrator to their mariadb
image, so we should upstream it as soon as possible. Once it's
upstreamed we can remove this.
Change-Id: I6ab2607abcd8e0d130ef80fbd1979c62a20a6ff4
Story: 2004712
Task: 29053
Signed-off-by: Chris Friesen <chris.friesen@windriver.com>
By moving STX specific files from stx-ceph to stx-integ, we
decouple STX code from the upstream ceph repo. When making
changes in those STX files, we don't need to make "pull
request" in stx-ceph repo any more.
Change-Id: Ifaaae452798561ddfa7557cf59b072535bec7687
Story: 2002844
Task: 28993
Signed-off-by: Wei Zhou <wei.zhou@windriver.com>
Rather than storing a diff file of the spec file changes,
the original spec file is included for easier comparison.
Story: 2002843
Task: 28909
Change-Id: I11b327e292e9acdeee66d0869f2b159698e40706
Depends-On: Ifb2ca9f36ae2a2f69038f0aad05a4af93eaaa5ad
Signed-off-by: Al Bailey <Al.Bailey@windriver.com>
Issue titled 'NTP 100.14 alarm is not cleared' exposed
an issue where the NTP plugin alarm clear operation is
circumvented when its pre-curser fm_api.get_fault call
returns None if the fm process is not running.
From the callers point of view the None return suggests
that the alarm to be cleared does not exist so the code
skips the call to clear.
This update works around this by simply issuing the
clear without the query.
Change-Id: Idcc05bb0e7e1aa1082af1e8ecdcb1a5463b19440
Closes-Bug: 1812440
Signed-off-by: Eric MacDonald <eric.macdonald@windriver.com>
This change reworks the registry-token-server package spec with
go dependencies downloaded at mirror-download time, rather than
at build time. The dependencies (at fixed revisions) are
extracted into the package's build tree for compilation.
Story: 2002840
Task: 22783
Depends-On: https://review.openstack.org/#/c/631001/
Change-Id: Ib7d745c6469beacf029195c3e6eaa4935f398483
Signed-off-by: Jerry Sun <jerry.sun@windriver.com>
Signed-off-by: Jason McKenna <jason.mckenna@windriver.com>
Since we don't use systemd to manage Ceph and we have pmon monitoring we
have to make sure that:
1. Restarting is properly handled as "systemctl restart" will return
error and manifest will fail;
2. Pmon does not check ceph-mon status during restart. Otherwise we risk
getting into a race condition between the puppet restart and pmon
detecting that ceph is down and trying a restart.
Both are resolved when using /etc/init.d/ceph-init-wrapper restart.
Change-Id: Ie316bb611a006bbbc92ac22c52c3973cc9f15109
Co-Authored-By: Ovidiu Poncea <ovidiu.poncea@windriver.com>
Implements: containerization-2002844-CEPH-persistent-storage-backend-for-Kubernetes
Story: 2002844
Task: 28723
Signed-off-by: Ovidiu Poncea <Ovidiu.Poncea@windriver.com>
This updates the helm-upload to stop syncing charts to standby
controller as charts are changed to store in drbd fs.
Story: 2004520
Task: 28343
Depends-On: https://review.openstack.org/#/c/630763/
Change-Id: I12f17fae6124650d878ba7a560f94b7a8ed36e56
Signed-off-by: Angie Wang <angie.wang@windriver.com>
This update replaces the currently existing but disabled
ntpq.py plugin with one that does not rely on an external
query_ntp_servers.sh.
This new ntpq.py is an entirely new self contained
implementation of what rmon and query_ntp_servers.sh
was doing but now more efficiently all in one python
plugin file.
Story: 2002823
Task: 22859
Test Plan:
PASS: Verify handling of one and two unreachable NTP servers.
PASS: verify handling of pingable but not an NTP server.
PASS: Verify NTP server re-provisioning from unreachable to reachable server.
PASS: Verify NTP server re-provisioning from reachable to unreachable server.
PASS: Verify NTP server alarms suppressed while controller is locked.
PASS: Verify NTP asserted alarms show up on unlock until cleared.
PASS: Verify NTP server monitoring occurs on controller only.
PASS: Verify NTP unreachable server alarms are cleared over a collectd restart
PASS: Verify NTP minor IP alarms are cleared on process startup
PASS: Verify NTP minor IP alarm clear retries when FM call fails on process startup.
PASS: Verify NTP alarm assertion retry while FM call fails at runtime.
PASS: Verify NTP alarm clear retry while FM call fails at runtime.
PASS: Verify NTP monitoring after controller Swact.
PASS: Verify NTP monitoring cadence is every 10 minutes.
PASS: Verify NTP plugin logs are useful and assist debug without flooding.
Change-Id: I67c4c5518a6e5dec64b4e419ab7ee2ffcefb9bf3
Signed-off-by: Eric MacDonald <eric.macdonald@windriver.com>
Remove Docker Registry Token Server from build for now. Currently,
it needs network access to build, which doesn't work for some people.
Removing it from the build for now to decide how we want to rework
this.
Story: 2002840
Task: 22783
Change-Id: I7991f68288b45255ea850110ce24087297c185ca
Signed-off-by: Jerry Sun <jerry.sun@windriver.com>
The failing pylint warnings and errors are currently
suppressed. They will be fixed by subsequent commits.
Story: 2004515
Task: 28791
Change-Id: I93a89554bf2dfbd9d1cbd96728a7663c408a79b1
Signed-off-by: Al Bailey <Al.Bailey@windriver.com>
As part of setting up Keystone authentication with Docker registry,
a token server needs to be deployed and managed by SM. This commit
adds the source code and spec files to build the token server used by
Docker registry for authentication with Keystone. The token server is
a modified version of the example token server provided by Docker
Distribution. The changes uses the Gophercloud library to communicate
with Keystone as opposed to checking the user credentials against an
existing HTPASSWD file.
Story: 2002840
Task: 22783
Depends-On: https://review.openstack.org/#/c/625335/
Change-Id: I00f5aa1073d496aa0b08223c6fa1fcbaf9d5b89b
Signed-off-by: Jerry Sun <jerry.sun@windriver.com>
This commit upversions helm from v2.11.0 to v2.12.1.
This is necessary as support for kubernetes v1.12 support is only
introduced in helm v2.12.
Story: 2004520
Task: 28777
Depends-on: I2501cd1174f85810892e51ac8a44746302eeb120
Change-Id: I605f1ba2c7fda52d9e0bf84b6132314efad15b24
Signed-off-by: Joseph Richard <joseph.richard@windriver.com>
The management interface uses the loopback interface for AIO-SX.
For the containerized deployment, the cluster-host interface shares
the same interface with management by default. It would need to be
scoped to host instead of global as it is an alias to the loopback
interface.
The scope parameter is added for the ifup-aliases to set scope
to host if the parent device is the loopback interface.
Story: 2004273
Task: 28590
Change-Id: Iee62c825ed1650b6cfdb0d4e5eb43b4a635e819a
Signed-off-by: Teresa Ho <teresa.ho@windriver.com>
command 'collect' in worker node will be stuck since
node_type has been changed from 'compute' to 'worker'
Closes-bug: 1810478
Change-Id: I4547bae650b8bb56110eb145e0aca0d49496c793
Signed-off-by: Sun Austin <austin.sun@intel.com>
Starting collectd too early in the manifest apply is seen
to occasionally fail due to a dependency configuration on
hostname resolution in FQDNLookup not being complete.
Since influxdb is used by collectd and is a controller
only service this update moves it to the manifest apply
post stage as well and is filtered out from non
controller load types.
This issue is fixed by the following multi-git changes.
stx-metal:
Filter influxdb out of storage and compute only loads.
No real inter git merge dependency
stx-integ: This update.
Add startup Before=pmond dependency
stx-config:
Move collectd config and startup to manifest apply post stage
Move influxdb config and startup to manifest apply post stage
Test Plan:
PASS: Build iso
PASS: verify install storage system and collectd startup
PASS: Verify Storage system DOR
PASS: Verify influxdb and extensions excluded in non-controller loads
PASS: Verify collectd starts properly on all nodes (CC,DOR,UNLOCK)
PASS: Verify influxdb starts properly on controller nodes (CC,DOR,UNLOCK)
PASS: Verify collectd pmond process monitoring and recovery
PASS: Verify influxdb pmond process monitoring and recovery
PEND: Verify collectd statistics storage and fetch to/from influxdb
PEND: Install AIO DX and verify collectd and influxdb startup
Change-Id: I47d70b05bdbdd22f8fce2f56fcc287fac7371ace
Closes-Bug: 1797909
Signed-off-by: Eric MacDonald <eric.macdonald@windriver.com>
"compat-Statically-initialize-families.patch" is already contained in
the new version, so delete it.
Reset TIS_PATCH_VER to 0 since version is upgraded.
Depends-On: https://review.openstack.org/605292
Story: 2003597
Task: 26588
Change-Id: I628f5b0497df188ea9fa7b7860b56de78382c510
Signed-off-by: slin14 <shuicheng.lin@intel.com>
doc index.rst:
1. Update intro sentence to read as a complete sentence
2. Remove unused toctree
3. Correct heading levels (impacting side nav and correct rendering of content)
4. Remove "Indices and Tables" section: genindex page not used, search searches
only index (not useful here)
releasenotes index.rst:
1. Standardize page title reST markup
2. Remove search (make consistent with other openstack release note pages)
Change-Id: I42e5b160336baf8498a83a5414a6e353cc529c5c
Signed-off-by: Kristal Dale <kristal.dale@intel.com>
use proper absolute path to import modules
remove ignore case 'H301: one import per line'
Story: 2002909
Task: 24886
Change-Id: I1d72e68ead64492ff0c74f8c1bf1b460b573bc1e
Signed-off-by: Sun Austin <austin.sun@intel.com>
Replace map(func, data) with [func(item) for item in data]
Story: 2002909
Task: 24563
Change-Id: I83004eeba036908da483b247093818a6ac3f19c1
Signed-off-by: Sun Austin <austin.sun@intel.com>
3 source patches can be removed.
2 patches adds support for wrs_install_uuid in the dhclient script.
This added script part just copy the whole content of dhclient-enter-hooks.
Following this script part, it will call this hook script if the hook
exist under /etc/. However, our hook file existed in /etc/dhcp/ folder will
be called by sbin/dhclient-script as well. I'd like to use dhcp config
package to creat /etc/dhclient-enter-hooks soft linked to
/etc/dhcp/dhclient-enter-hooks, so that it can call dhclient script and
no need to add this 2 patches.
Support-disable-nsupdate.patch can be removed as we already fixed port
conflict issue in https://review.openstack.org/#/c/622711/
Deployment test pass and related script file check pass!
Story: 2004473
Task: 28164
Change-Id: If50ae697062a7d0c8a2831fbcc0f5641aaa41ec7
Signed-off-by: zhipengl <zhipengs.liu@intel.com>
The go compiler supports "go get" to download dependencies, but
it will download the latest version of dependencies from the git
repository of the dependency. This could lead to non-reproducable
builds, or the potential of dependency API changes (including
deprecated features) to break the build of packages.
The "dep" tool allows for a lockfile to be created, which captures
the git commit ID of dependencies, and can restore dependencies to
the captured state.
Since no binary package containing "dep" is currently available for
CentOS, this change adds the package and compiles it from source.
Depends-On: https://review.openstack.org/625333
Story: 2004617
Task: 28525
Change-Id: Ic3bfad6a419b344e7c147c3839d16956c432a99e
Signed-off-by: Jason McKenna <jason.mckenna@windriver.com>
According to analysis from Saul in task 26455, we can remove motd
patch for crontabs and then use RPM instead of SRPM for it.
We also need to remove usage of --without-progname in utilities/
update-motd/files/motd-update.
Story: 2003765
Task: 28181 & 28182
Depends-on: https://review.openstack.org/#/c/623385/
Change-Id: I4be7d47ee77ac07eb24f5b88cd707c29b595df7a
Signed-off-by: zhipengl <zhipengs.liu@intel.com>
Previous commit 01f5fdd made a required change to filter
infrastructure traffic on the management interface with an 802.1q
protocol in the case of a consolidated interface.
However, this has caused the remote logging tc script to have a
failure. The script tries to install 'ip' protocol filters at the
same priority as the 802.1q filters, which is rejected by the
kernel.
This commit detects a consolidated interface situation and bumps
the priority of the remote logging tc filter priority on the
management interface, similarly to what is done in the main
cgcs_tc_setup script.
The file has also been cleaned up to pass bashate.
Related-Bug: #1807055
Change-Id: Id11625c0f9bcbf109f574563ff284d4a36bc6377
Signed-off-by: Steven Webster <steven.webster@windriver.com>