Commit Graph

11 Commits

Author SHA1 Message Date
Sean Eagan 983853de55 Helm 3: Fix Job labels
See the dependency below for details.

Depends-On: https://review.opendev.org/c/openstack/openstack-helm-infra/+/811826
Change-Id: I997313865002469f1916c5baa8ccaa26c37619b5
2021-10-01 13:40:45 -05:00
KHIYANI, RAHUL (rk0850) 20c6e525ea Implement helm-toolkit snippet to maas pods/containers
This updates the maas chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag

Change-Id: I1eba6ab3a7c27ddcb3e8ddc8e743b91dc5e521c3
2020-07-20 14:43:41 +00:00
KAVVA, JAGAN MOHAN REDDY (jk330k) b2e100f6ce Enable Docker default AppArmor profile to maas
This adds default Apparmor profile to maas.

Change-Id: I9c68fdb2be074c855085032dfe9ff0dbbeadcf7c
2020-04-02 15:24:40 +00:00
Nishant Kumar 20df4f6eaa Support for password rotation
- This PS adds support for password rotation for 'maas-region' password
  and 'maas-postgres-password'.

- This PS enables MAAS to use the newly created helm-toolkit
  script for postgreSQL DB initialization

Depends-On: https://review.openstack.org/#/c/635348/

Change-Id: Ibb36761351d8c34933a3bb71555bb23e8247a069
2019-03-05 18:45:22 +00:00
Matt McEuen 9c2686bea7 Add release uuid to pods and rc objects (maas)
This PS adds the ability to attach a release uuid to pods and rc
objects as desired.  This can be used, for example, to force an
artificial manifest change in CICD scenarios, for upgradability
testing purposes.

Change-Id: I994f9eb9cd75947ee36276a542fa23cc547065e0
2018-09-14 15:51:55 -05:00
Pete Birley 582c4d8b20 Chart: Modernise chart
This PS updates the maas chart to support modern helm toolkits.

Change-Id: Id70343afdec622dc84b89b0d7f496e9ef498ea6b
Signed-off-by: Pete Birley <pete@port.direct>
2018-08-22 21:53:33 -05:00
Scott Hussey 71582567f8 Support Postgres admin password
- Fully support Postgres configuration
  in the endpoints stanza
- Add RBAC support to the region and rack
  pods
- Add custom RBAC for export API key job
  to allow secret creation

Change-Id: I9d0b63ac329bb0b9539b14123c5e16ad3cd1c9f0
2018-01-29 13:59:06 -06:00
Anthony Lin b664579d57 RBAC: Update serviceaccount and k8s rbac for maas
This patch set brings the maas chart to be inline
with OSH* RBAC approach used in [0] and [1]

[0] https://review.openstack.org/#/c/526464/52
[1] https://review.openstack.org/#/c/529378/

Change-Id: I3138a0f6280ab7d8ca9c8088ae19ec0c2175292c
2018-01-22 17:08:12 +00:00
Anthony Lin 6fdcfe2f92 Update MAAS Chart
This patch set brings the maas chart to be inline with OSH* RBAC
approach used in [0] and [1].

[0] https://review.openstack.org/#/c/526464/52
[1] https://review.openstack.org/#/c/529378/

Change-Id: I22c43df55cfca307b7d2d8bb6d5a27945602732e
2017-12-28 16:13:14 +00:00
Scott Hussey a2e8188b81 Fix templates for new images structure
Update manifest templates to correctly use the new images
structure.

Change-Id: I1b88fc064069f0bf7d768df808caec923b58b8ce
2017-10-30 13:02:53 -05:00
Scott Hussey 668fd328d2 Move MaaS chart into maas repo
Change-Id: If1d9e92d9a691892b9a3afcef5b229d704b5dcbc
2017-10-25 14:02:38 -05:00