Commit Graph

7 Commits

Author SHA1 Message Date
KHIYANI, RAHUL (rk0850) 63f7783da2 Implement helm-toolkit snippet to drydock pods/containers
This updates the drydock chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: Ibeb60d0b88f3519730b5b76996ab137c5af4f4f5
2020-07-02 15:59:14 +00:00
DODDA, PRATEEK d862a5171f Enabling Apparmor for drydock init and test containers
Change-Id: I7aca8fd1dabc19603a33466175263c4a7f3fa36d
2020-05-26 18:11:39 -05:00
Dejaeger, Darren (dd118r) 73f6a2188b Add node selector to test pods
This PS looks to add a node selector into the test pod's spec.

Change-Id: I3eb549dbb48dba388896bf489a1a9151dfc56919
2019-06-20 10:37:06 -04:00
Matt McEuen d8f4a1fbe3 Add release uuid to pods and rc objects (drydock)
This PS adds the ability to attach a release uuid to pods and rc
objects as desired.  This can be used, for example, to force an
artificial manifest change in CICD scenarios, for upgradability
testing purposes.

Change-Id: I784c0ad26c34338c9acda3dbe271f2139ba3f1f9
2018-09-14 18:19:36 -05:00
Aaron Sheffield 69a6f80031 Add test pods labels.
- Uses helm toolkit to add labels to test pods.

Change-Id: I60009c3c502c76d77f9edbf64d93118079f94253
2018-07-11 08:05:10 -05:00
Scott Hussey 12650c7909 [398387] Resource limits for ks_service job
- Add resource limits to the Pod spec for the
  ks_service job

Change-Id: I107d8108298282431fe767d7e05aad7ae9486eec
2018-03-27 16:45:29 -05:00
Scott Hussey ae87cd1714 Update image and chart mgmt
NOTE: This has become a monolithic commit to get gate
      settings/scripts in place for CI

- Add Makefile with UCP standard entrypoints
- Move Dockerfile into images/drydock per UCP standards
- Add values.yaml entries for uWSGI threads and workers
- Add environment variables to chart Deployment manifest
  for uWSGI thread and workers
- Add threads and workers specification to uWSGI commandline
  in entrypoint
- Test that the Drydock API is responding
- Test that the Drydock API rejects noauth requests
- Fix Makefile utility script to work behind a proxy

Correct task success voting

Some tasks were incorrectly considered partial_success even when
no failure occurred.

- Network configuration erroneously marked messages as errors
- Update result propagation logic to only use the latest retry

The deploy_nodes task ended as incomplete due to a missing
subtask assignment

Also added a node check step to prepare_nodes so that nodes that
are already under provisioner control (MaaS) are not IPMI-rebooted.

Tangential changes:
- added config item to for leadership claim interval
- added some debug logging to bootaction_report task
- fix tasks list API endpoint to generate valid JSON

Improve task concurrency

When tasks are started with a scope of multiple nodes,
split the main task so each node is managed independently
to de-link the progression of nodes.

- Split the prepare_nodes task
- Begin reducing cyclomatic complexity to allow for
  better unit testing
- Improved tox testing to include coverage by default
- Include postgresql integration tests in coverage

Closes #73

Change-Id: I600c2a4db74dd42e809bc3ee499fb945ebdf31f6
2017-12-15 15:33:14 -06:00