Commit Graph

224 Commits

Author SHA1 Message Date
OpenDev Sysadmins a35bebf0f8 OpenDev Migration Patch
This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.
2019-04-19 19:52:34 +00:00
Saul Wold 1443710d8f Merge remote-tracking branch 'gerrit/master' into f/centos76
Change-Id: Ib7dd42b5d0696422eec9d695358dccb075a0dcc4
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2019-03-04 17:46:22 -08:00
Don Penney 53cfbc9f06 Remove openstack images from pike build
Change-Id: Idd211511e42fa4c1290fdfa382ac579a1a8de91a
Story: 2004751
Task: 29788
Signed-off-by: Don Penney <don.penney@windriver.com>
2019-03-01 23:50:56 -05:00
Scott Little 367c689514 Merge remote-tracking branch 'starlingx/master' into HEAD
Change-Id: I975dfd4ec5a628a816008ecc3178ccfb4cf5516e
Signed-off-by: Scott Little <scott.little@windriver.com>
2019-03-01 12:53:45 -05:00
Zuul a0931da413 Merge "Setting the worker_rlimit_nofile minimum to 2048 for nginx" into f/stein 2019-02-21 17:15:31 +00:00
Zuul bf4567b7fc Merge "Fix the version string in cinder and glance clients" into f/stein 2019-02-21 16:46:54 +00:00
Al Bailey bcce8c810f Setting the worker_rlimit_nofile minimum to 2048 for nginx
In the docker image for mariadb-ingress if there are many cores
the calculated value for worker_rlimit_nofile ends up being 1024
which is too small.   This change sets the min to 2048.

Closes-Bug: 1816479
Change-Id: I4f198b703eda61d9a9531640ec01a2770f9ec172
Signed-off-by: Al Bailey <Al.Bailey@windriver.com>
2019-02-21 09:54:41 -06:00
Alex Kozyrev db10c94d9e Create Docker image for Barbican in StarlingX
In order to provide the secure management of secrets service
as a container in StarlingX we need to create Barbican Docker
image and include it into StarlingX repository.

Change-Id: I3b4483f74d233348ec49729deff11ba7776af01b
Story: 2003108
Task: 29579
Signed-off-by: Alex Kozyrev <alex.kozyrev@windriver.com>
2019-02-20 15:57:26 -05:00
Al Bailey b6e3badac6 Fix the version string in cinder and glance clients
cinderclient was showing 0.0.0 for cinder --version
Same problem for glance.

The pbr version needed to be set when building from
outside of a git tree.

All other clients had this set properly.

This bug was introduced when the new stein clients were
added.

The cinderclient also needed some BuildRequires updated.
These BuildRequires were for building wheels.

Closes-Bug: 1814573
Change-Id: I4afe783e25ab2172ae999787e6b0e3ec91f78419
Signed-off-by: Al Bailey <Al.Bailey@windriver.com>
2019-02-20 09:42:21 -06:00
Saul Wold fd4305388d Merge branch 'master' into f/centos76
Change-Id: I910db52dd7ab9c42d6059b58949a22d0f9859a00
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2019-02-20 06:16:56 -08:00
Gerry Kopec cb921ff934 Update nova helm chart to fix console addressing
Upstream nova helm chart attempts to figure out the address for VM
consoles by running an init container that checks for ip routes and
addresses on a compute host.  It then sets the appropriate nova config
options in a config file which it passes to nova-compute.  However this
effectively overwrites the same config option that stx has already
set in nova.conf via per host overrides causing us to communicate over
the wrong network or not to connect at all.

This fix introduces an option to enable/disable passing of this
additional config file to nova-compute.  Default upstream behaviour is
unchanged, but we will disable it in our overrides.

Partial-Bug: #1815490
Change-Id: I86eb80578b23fd89b7f9643b943ee759f26a15be
Signed-off-by: Gerry Kopec <gerry.kopec@windriver.com>
2019-02-15 19:34:40 -05:00
Scott Little 1a1dddffe4 Merge remote-tracking branch starlingx/master into HEAD
Change-Id: Ic869bb108d7870fe73eb8c3ca13c4d602e39174d
Signed-off-by: Scott Little <scott.little@windriver.com>
2019-02-13 12:42:13 -05:00
Saul Wold e0ae063497 Merge remote-tracking branch 'gerrit/master' into f/centos76
Change-Id: I8ae344db96e98d9b1e12af99a469ee66f11c1127
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2019-02-12 08:08:33 -08:00
Angie Wang 4a3b8ff654 Add imagePullSecrets in service account template
The functionality of local docker registry authentication will be
enabled in commit https://review.openstack.org/#/c/626355/. However,
the OSH doesn't support a way to pass credentials to kubernetes to
pull images from a registry with authentication turned on.

This commit adds a "imagePullSecrets" field in service account template
resource and references the well-known secret "default-registry-key"
which created in sysinv during application apply. With this change,
kubernetes will pull images from local registry using this secret.

Note:
- This is short-term solution. The long-term solution is to implement
  the BP https://blueprints.launchpad.net/openstack-helm/+spec/support
  -docker-registry-with-authentication-turned-on which creates the
  secret in chart and pass the secret in service account conditionally.
- It works with an unauthed registry and non-existent or existent
  secret "default-registry-key" as well.

Change-Id: Icdff8b385cee7f8b0311086ae892b3b1edacea37
Story: 2002840
Task: 28945
Signed-off-by: Angie Wang <angie.wang@windriver.com>
2019-02-12 10:27:28 -05:00
Zuul f7b0a677a5 Merge "TEMPORARY: Patch openstackclient until upstream commit merged" into f/stein 2019-02-11 20:37:10 +00:00
Scott Little d92670cb27 Merge remote-tracking branch starlingx/master into HEAD
Change-Id: I8d92254d50994cf68f477c287d15a8342c548db2
Signed-off-by: Scott Little <scott.little@windriver.com>
2019-02-11 14:42:27 -05:00
Don Penney aceb7fecba TEMPORARY: Patch openstackclient until upstream commit merged
This update must be reverted once the following commit
is merged upstream:
https://review.openstack.org/#/c/625544/11

Until then, this update includes it as a patch against the
python-openstackclient source.

Change-Id: I527f889e797259a5cf816e71f2ca2a7f5fd949a3
Story: 2004751
Task: 29417
Signed-off-by: Don Penney <don.penney@windriver.com>
2019-02-11 15:07:20 +00:00
Robert Church 314e07a8f8 Remove problematic upstream mariadb commit
When removing the mariadb release from the cluster, this upstream commit
produces mariadb-ingress pods that are stuck in the "Terminating" state
with the associated containers becoming hung. This ultimately impacts
certain docker operations leading to PLEG health issues in the cluster.

The root cause of this is that the ingress pod uses dumb-init to start
the nginx-ingress-controller process. When the mariadb-ingress pod
terminates (via kill -TERM 1) all child processes are terminated but the
docker-containerd-shim remains causing the hung container condition.

Temporarily reverting this commit. A fix will be introduced upstream
dealing with dumb-init and this commit will be pick up again on the next
full chart rebase.

Change-Id: I25ad9bc3213468a9060e741917d96d9ac5c01b40
Story: 2004520
Task: 29420
Signed-off-by: Robert Church <robert.church@windriver.com>
2019-02-10 00:11:48 +00:00
Zuul 65e0ccf50a Merge "Configurable Host HTTP/HTTPS Port Binding" 2019-02-07 19:21:16 +00:00
Don Penney 98fa120243 Update stx-neutron.master to use forked neutron repo
This update temporarily points the stx-neutron master build
to a forked neutron repo.  This is necessary to pull in specific
commits that have not yet merged upstream.  Once all required
commits are merged, this can revert back to the upstream repo.

Story: 2004751
Task: 29396
Change-Id: I7453ffe943ff735338a06246a08399f79d6918b7
Signed-off-by: Don Penney <don.penney@windriver.com>
2019-02-07 10:55:55 -05:00
Zuul 73ac9b4d12 Merge "fix type error to streamline single-replica mariadb startup" 2019-02-07 15:03:52 +00:00
Chris Friesen ab3945fcc7 fix type error to streamline single-replica mariadb startup
The mariadb startup script was trying to optimize the single-replica
case but missed the fact that the variable it was checking was a
string rather than an int.

Converting it to an int before doing the comparison makes it work
as expected.

Change-Id: I0f920b52c5cc92672a71ee3db3d7f8e5700fb709
Signed-off-by: Chris Friesen <chris.friesen@windriver.com>
Story: 2004712
Task: 29385
2019-02-06 17:50:30 -06:00
Zuul 9d1e40f6f4 Merge "Glance chart: add images pool replication" 2019-02-06 22:21:15 +00:00
Irina Mihai aac168b398 Glance chart: add images pool replication
- pass new pool replication parameter to the storage init script
- set images pool replication in the storage init script

Change-Id: If0ecaeb12afd78caacdbb9b85cda8d6cfda00dea
Story: 2004520
Task: 29324
Depends-on: I120e196ec3acca1f57b717cc4548c7c549fac738
Signed-off-by: Irina Mihai <irina.mihai@windriver.com>
2019-02-06 20:04:08 +00:00
Scott Little de3ac48d20 Merge remote-tracking branch 'starlingx/master' into HEAD
Change-Id: I6d72010996018dbd9f153d2d92800210b93f3635
Signed-off-by: Scott Little <scott.little@windriver.com>
2019-02-06 11:34:47 -05:00
Kristal Dale 185708cded Update config for release notes to include project name
Update conf.py for release notes to include the project
variable, set to the project name. This is so the string
above the left nav renders the project name.

Story: 2004900
Task: 29234

Change-Id: Id6b86d8c14628c0e04729e3e54b1718a51fe178b
Signed-off-by: Kristal Dale <kristal.dale@intel.com>
2019-02-05 14:27:48 -08:00
Al Bailey 793b3e0ae9 Fix horizon imports related to stein novaclient
The pike novaclient contains wrs extensions were being
imported by horizon during startup.

Those imports fail with a stein novaclient, and so the
horizon code will no longer import those files.

When Horizon is moved to Stein (story 2004765)
this change will end up being removed.

Story: 2004751
Task: 29356
Change-Id: Ia51e8b592c58eab0df09bf9b345cbae9dbf0a319
Signed-off-by: Al Bailey <Al.Bailey@windriver.com>
2019-02-05 14:58:58 -06:00
Al Bailey e936d8acec Adding ceilometerclient to the ISO
Platform horizon (pike) needs ceilometerclient
to satisy python imports.

When Horizon is moved to Stein (story 2004765)
this can be reverted.

Story: 2004751
Task: 29288
Change-Id: I636296966f1c293fe8d3bbd1b3b1a335fb6a863a
Depends-On: Iee76e932383493aea7d9fa0d18425f01e2f6a65d
Signed-off-by: Al Bailey <Al.Bailey@windriver.com>
2019-02-01 13:24:02 -06:00
Tao Liu ff598b27e1 Configurable Host HTTP/HTTPS Port Binding
change platform horizon to bind to port 8008

Story: 2004642
Task: 29265
Depends-On: https://review.openstack.org/#/c/634237/

Change-Id: Id6890c8e62d31225969e4c0bb23c78ccb66a3517
Signed-off-by: Tao Liu <tao.liu@windriver.com>
2019-01-31 10:05:21 -06:00
Scott Little 679b884c76 Merge remote-tracking branch 'starlingx/master' into HEAD
Change-Id: Iaf611b4be300467ed0c3bee5ba1af4a06bb98230
Signed-off-by: Scott Little <scott.little@windriver.com>
2019-01-23 16:10:26 -05:00
Robert Church 7856f0ab35 Stein: Update neutron's daemonset-ovs-agent.yaml
neutron-sanity-check command triggers privsep code and produces the
following:

WARNING oslo.privsep.daemon [-] privsep log:
oslo_log.log.LogConfigError: Error loading logging config
/etc/neutron/logging.conf: [Errno 2] No such file or directory:
'/etc/neutron/logging.conf'

This will add log_config_append to neutron-etc and allow ovs-agent to
successfully deploy

Change-Id: I82dd56dc686e2efbd10921b248497955c37279f1
Story: 2004751
Task: 28894
Signed-off-by: Robert Church <robert.church@windriver.com>
2019-01-23 13:59:38 -05:00
Robert Church 564e23702b Stein: Update Cinder to include resource_filters.json
During Stein the deprecated query_volume_filters config option was
removed. As a result, /etc/cinder/resource_filters.json is required to
allow volume display operations to function.

This adds the file to the configmap and provides the default values for
the filters.

Change-Id: I5b21949160430c72eb63db20475efa9f098e809f
Story: 2004751
Task: 28894
Signed-off-by: Robert Church <robert.church@windriver.com>
2019-01-23 13:59:38 -05:00
Robert Church 536fd15055 Stein: Remove ceilometer-upgrade option
This removes the --skip-metering-database option from _db-sync.sh.tpl.
This option was removed with the deprecated storage drivers in
Queens.

Change-Id: I6c88f882c9e54841c9eeb97c5010cf0691804a62
Story: 2004751
Task: 28894
Signed-off-by: Robert Church <robert.church@windriver.com>
2019-01-23 16:50:01 +00:00
Don Penney cf67244052 Update master stx-ceilometer to use panko-5.0.0
This commit updates the master docker image file for
ceilometer to specify install of panko-5.0.0 explicitly.

Depends-On: I854b75577b6dbc3f0a8171190f5a1aa839412dc8
Change-Id: I4db80c4bcaaa09046285e9ee0af34db1be54a606
Story: 2004520
Task: 29047
Signed-off-by: Don Penney <don.penney@windriver.com>
2019-01-23 11:47:26 -05:00
Zuul 54f965cff5 Merge "Add e2fsprogs to stx-nova package list" 2019-01-23 15:34:20 +00:00
Saul Wold b2a3c20808 Merge remote-tracking branch 'gerrit/master' into f/centos76
Change-Id: Ie61d5660be65a9faa80265c72db5b23a97dcfe2f
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2019-01-22 08:31:15 -08:00
Gerry Kopec 6e74844f72 Update helm charts to support cold migration
To enable cold migration, need to update nova charts in openstack-helm
and helm-toolkit chart in openstack-helm-infra.  These changes build
on existing upstream components which attempt to add a second container
to the nova-compute pod which creates a sshd process listening on port
8022.

Nova chart changes include:
- Fix bug in ssh-config mapping so config file is generated properly in
  /root/.ssh/config in nova-compute container.
- Move private key from sshd container to nova-compute container.
- Map private and public ssh keys to new configmap-ssh which will
  default to acceptable file permissions (400) for ssh.  Keys will be
  provided in overrides.
- Add additional config to /etc/ssh/sshd_config to allow passwordless
  root logins over appropriate subnet passed in from overrides.  This
  is the same as what is done in nova puppet currently.
- Remove chmods from sshd bash script as they are failing.  Function is
  replaced by configmap-ssh.

To enable cold migration in nova helm chart, we need to allow multiple
containers within the same daemonset pod.  This requires a patch to
the helm-toolkit _daemonset_overrides template to remove upstream
restriction.  This issue is tracked upstream by storyboard 2003876.

These changes should be upstreamed but may require further refinement.

Story: 2003909
Task: 28927
Change-Id: Id789ba051cec019e8b7564c713cf1b5296ecf9f6
Signed-off-by: Gerry Kopec <Gerry.Kopec@windriver.com>
2019-01-22 11:15:58 -05:00
Don Penney 9e649fabd8 Add e2fsprogs to stx-nova package list
This update adds e2fsprogs to the pike and master docker
image build directives files for stx-nova, to provide the
mkfs utilities required for ephemeral storage support.

Change-Id: If9b901696169d7d157a37d6b96f7b8c4db0a24a5
Closes-Bug: 1812432
Signed-off-by: Don Penney <don.penney@windriver.com>
2019-01-18 16:06:07 -05:00
Al Bailey d7964a17fb Update openstack clients to stein/master
python-aodhclient spec file is based off 1.1.1 (rocky)
python-barbicanclient spec file is based off 4.7.1 (rocky)
python-cinderclient spec file is based off 4.0.1 (rocky)
python-glanceclient spec file is based off 2.13.1 (rocky)
 - docs disabled
python-gnocchiclient spec file is based off 7.0.4 (rocky)
python-heatclient spec file is based off 1.16.1 (rocky)
 - docs disabled
python-ironicclient spec file is based off 2.5.0 (rocky)
python-keystoneclient spec file is based off 3.17.0 (rocky)
python-magnumclient spec file is based off 2.10.0 (rocky)
python-muranoclient spec file is based off 1.1.1 (rocky)
python-neutronclient spec file is based off 6.9.1 (rocky)
python-novaclient spec file is based off 11.0.0 (rocky)
 - docs disabled
python-openstackclient spec file is based off 3.16.2 (rocky)
 - docs disabled
 - unit tests disabled
python-openstacksdk spec file is based of 0.17.2 (rocky)
 - unit tests disabled
python-pankoclient spec file is based off 0.5.0 (rocky)

The primary changes to each spec files are
1) version has tis extension
2) sdk package added
3) wheels package added

Disable building:
 - openstack-aodh
 - python-osc-lib

ceilometerclient no longer exists.
openstack-heat no longer requires ceilometerclient

Story: 2004751
Task: 28864
Change-Id: Ifa905bea2e95ded72a327f8ff43667c8c5429363
Depends-On: Iea58cb9484c75cf757397d53d7d1576a2f436d81
Signed-off-by: Al Bailey <Al.Bailey@windriver.com>
2019-01-17 08:51:19 -06:00
Zuul 83353f1518 Merge "Clean up the stale files" 2019-01-16 20:58:10 +00:00
Scott Little 7713430481 Merge remote-tracking branch 'starlingx/master' into HEAD
Change-Id: I15feef554d76a92fe0400e2c5eeda625954c9994
Signed-off-by: Scott Little <scott.little@windriver.com>
2019-01-16 15:02:54 -05:00
Scott Little 9bc218f147 Merge remote-tracking branch 'starlingx/master' into HEAD
Change-Id: I476cc90018cc2ad0b52aa1d7afcda35a4a91c396
Signed-off-by: Scott Little <scott.little@windriver.com>
2019-01-16 10:54:12 -05:00
Zuul 6fb812a713 Merge "Updating helm build process to not require networking" 2019-01-16 15:40:52 +00:00
Tao Liu 2462f3015a Clean up the stale files
The keystone-api pod gets stuck in CrashLoopBackOff on
AIO-SX lock/unlock attempt.

When Kubernetes decides to kill the keystone-api pod due to readiness
probe failure or other reasons, it calls the preStop hook immediately
before the container is terminated. This hook starts a graceful
shutdown process which includes removing pid, shared memory segment
and wsgi sock files. If the container is not terminated within the
grace period, a SIGKILL is sent, and the container is forced to shut
down.

When the container was forced to terminate without clean up, the
stale files were left behind. On the restart, the application
detected the file existed, and treated it as configuration failure,
hence the exit. As a result, the pod went into a crash loop.

This update removes any stale files when the pod starts.

Story: 2004520
Task: 28392

Change-Id: I613a0db674de9578b3f9d1fa781a1612d9caf214
Signed-off-by: Tao Liu <tao.liu@windriver.com>
2019-01-16 10:04:52 -05:00
Don Penney 4171f83a8c Update stx-gnocchi.master to use forked gnocchi repo
Until the ceph upgrade is complete, a forked gnocchi repo will
be used for the stx-gnocchi image to allow temporary changes
to the gnocchi source to support the older ceph version.

Change-Id: I370086ca01e95e8b4907951328f29d833847b6b7
Story: 2004520
Task: 28912
Signed-off-by: Don Penney <don.penney@windriver.com>
2019-01-15 15:00:39 -05:00
Zuul 7cc7d881f7 Merge "upgrade srpm openstack-panko to CentOS 7.6" into f/centos76 2019-01-15 18:16:36 +00:00
Shuicheng Lin 852d63c2f0 Fix build failure with python-django-openstack-auth
Story: 2004522
Task: 28420

Change-Id: I7f06994f9e32bb4cdfbd547b065f4f55fb43c40c
Signed-off-by: Shuicheng Lin <shuicheng.lin@intel.com>
2019-01-14 23:09:00 +08:00
Saul Wold 3bce40ed76 Merge remote-tracking branch 'gerrit/master' into f/centos76
Change-Id: I2931f1e8b80e246ed5284142f45fb3186f7b031f
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2019-01-11 08:55:47 -08:00
SidneyAn e8e046eba6 upgrade srpm openstack-panko to CentOS 7.6
[Patch 2/3]
update to version 3.1.0

Story: 2004522
Task: 28423

Depends-On: https://review.openstack.org/#/c/628814/
Change-Id: I68be8f88f75272704c4dd1550b624db9d82c8f8a
Signed-off-by: SidneyAn <ran1.an@intel.com>
2019-01-11 03:18:35 +00:00
SidneyAn 00c3b8b420 upgrade srpm python-openstackclient to CentOS 7.6
[Patch 2/3]
upgrade to version 3.12.1

Story: 2004522
Task: 28412

Depends-On: https://review.openstack.org/#/c/628328/
Change-Id: I81787fa5fa6a835637628fd44239b9174ab0d407
Signed-off-by: SidneyAn <ran1.an@intel.com>
2019-01-11 03:18:00 +00:00