airship
/
maas
Code Issues Proposed changes
222 Commits 1 Branch 0 Tags 3.4 MiB
Commit Graph

25 Commits

Author SHA1 Message Date
Anselme, Schubert (sa246v) 736c936394
Parametrise readiness probe 
Change-Id: I358ae8307799fff0674a428c42b90381d6d3a631
Signed-off-by: Anselme, Schubert (sa246v) <sa246v@att.com>
 2023-08-23 14:42:59 -04:00
Sean Eagan 983853de55 Helm 3: Fix Job labels 
See the dependency below for details.

Depends-On: https://review.opendev.org/c/openstack/openstack-helm-infra/+/811826
Change-Id: I997313865002469f1916c5baa8ccaa26c37619b5
 2021-10-01 13:40:45 -05:00
Phil Sphicas b648edfe40 Deploy MAAS 2.8 on Ubuntu bionic 
Image changes:
* base image ubuntu:18.04
* MAAS version 2.8.6-8602-g.07cdffcaa-0ubuntu1~18.04.1 from ppa/2.8
* default contents of /var/lib/maas are archived in /opt/maas
* updated patches:
  - 2.3_bios_grub_partition.patch, changed in maas [0]
  - 2.3_partitiontable_does_not_exist.patch, changed in maas [1] [2]
  - 2.3_secure_headers.patch, updated for twisted 17.9.0 [3]
* removed patches:
  - 2.3_bios_grub_preseed.patch, changed in maas, now N/A [0]
  - 2.3_hostheader.patch, fixed in maas [4]
  - 2.3_maas_enlist.patch, fixed in maas [5]
  - 2.3_mac_address.patch, fixed in maas [6]
* new patches:
  - 2.8_maas_ipmi_autodetect_tool.patch, enlistment reliability
* reformatted patches due to blackening change [1]:
  - 2.3_configure_ipmi_user.patch
  - 2.3_ipmi_error.patch
  - 2.3_kernel_package.patch, custom req to specify kernel package
  - 2.3_nic_filter.patch, custom req to ignore cali* interfaces
  - 2.3_region_secret_rotate.patch
  - 2.3_route.patch

Chart changes:
* maas-region podport is 5240
* maas config option http_boot is no longer configurable [7]
* start script restores some default files into /var/lib/maas
* register-rack-controller script removes old files in /etc/maas
* enlist userdata now matches commissioning/curtin userdata [8]
* force_gpt option is removed [9], as GPT is now the default
* update to configure remote_syslog in import resources job [10]
* enlist_commissioning is disabled for backwards compatibility [11]

0: d8e234eb09
1: db30bb39fa
2: 665feb7575
3: https://github.com/twisted/twisted/blob/twisted-17.9.0/src/twisted/web/server.py
4: 573da69729
5: d390a1da6a
6: 34631c2fe5
7: 0e94c26a53
8: 22641cffcc
9: 97c25a0486
10: d67c359c7b
11: 51b9712c20

Change-Id: I0685d76cf083ff5aa33c8db552059721289d5c53
 2021-08-03 21:56:23 +00:00
KHIYANI, RAHUL (rk0850) 20c6e525ea Implement helm-toolkit snippet to maas pods/containers 
This updates the maas chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag

Change-Id: I1eba6ab3a7c27ddcb3e8ddc8e743b91dc5e521c3
 2020-07-20 14:43:41 +00:00
KAVVA, JAGAN MOHAN REDDY (jk330k) b2e100f6ce Enable Docker default AppArmor profile to maas 
This adds default Apparmor profile to maas.

Change-Id: I9c68fdb2be074c855085032dfe9ff0dbbeadcf7c
 2020-04-02 15:24:40 +00:00
Kaspars Skels f6844a5987 Support for MAAS URL overrides 
Change-Id: I64af23c11f1717b6f0c2d52ec49edda8c31dff78
 2019-04-23 15:42:44 -05:00
Zuul 9b527b4b99 Merge "Support YAML sequence for DNS and NTP servers" 2018-11-21 15:35:59 +00:00
Scott Hussey 74af40376b MAAS support for pod mobility 
Upgrades to the MAAS chart to allow for the Pods
running the rack and region services to work across
all control plane hosts.

Change-Id: I84c856599a1122a2b4a64242a7cea357887b0462
 2018-10-23 08:19:53 -05:00
Scott Hussey 56cc46f9f0 Support YAML sequence for DNS and NTP servers 
- When specifying the list of upstream DNS or NTP servers
  to configure MAAS with, use YAML sequences rather than
  forcing a string

Change-Id: If0da29c0ad2c7299250ecba120bca54920e54052
 2018-10-22 14:35:55 -05:00
Scott Hussey d1d5b88d3d (fix) Missing quotes for env variable 
- The MAAS proxy port env variable for the import job was
  missing quotes causing a chart failure

Change-Id: I8310978e94f9916c0625040115a8a96f7c2b4199
 2018-10-19 14:40:42 -05:00
Kaspars Skels e53cb2d237 Set MAAS internal proxy to 31800 
Looks like new version of MAAS has fixed long standing bug
https://bugs.launchpad.net/maas/+bug/1779712

This will match internal MAAS ports to NodePort.

Change-Id: I639a4c492eb80545c69fd132d3b2dc4cca524933
 2018-10-19 09:06:28 -05:00
Matt McEuen 9c2686bea7 Add release uuid to pods and rc objects (maas) 
This PS adds the ability to attach a release uuid to pods and rc
objects as desired.  This can be used, for example, to force an
artificial manifest change in CICD scenarios, for upgradability
testing purposes.

Change-Id: I994f9eb9cd75947ee36276a542fa23cc547065e0
 2018-09-14 15:51:55 -05:00
Pete Birley 582c4d8b20 Chart: Modernise chart 
This PS updates the maas chart to support modern helm toolkits.

Change-Id: Id70343afdec622dc84b89b0d7f496e9ef498ea6b
Signed-off-by: Pete Birley <pete@port.direct>
 2018-08-22 21:53:33 -05:00
Scott Hussey fced4bd1d2 Fix - Job robustness 
- Fix bash conditional error causing the export
  key job to fail for any chart upgrade
- Enhance the image import/configuration job to
  be more robust with additional retrying and better
  failure detection

Change-Id: I874a98587a56b03905d740cd53cdd70a8419a04e
 2018-03-09 22:50:21 -05:00
Scott Hussey 88099da448 Configurable default images 
- Allow overrides to configure the default operating
  system, distribution and kernel to use in MAAS
- The defaults will be used for node enlistment and
  commissioning and for deployment if per node overrides
  are not used

Change-Id: I872df1c7b7741ec5e599a7a1d05c2707afd6d99e
 2018-02-13 16:13:20 -06:00
Scott Hussey 71582567f8 Support Postgres admin password 
- Fully support Postgres configuration
  in the endpoints stanza
- Add RBAC support to the region and rack
  pods
- Add custom RBAC for export API key job
  to allow secret creation

Change-Id: I9d0b63ac329bb0b9539b14123c5e16ad3cd1c9f0
 2018-01-29 13:59:06 -06:00
Scott Hussey 2ad09ad90a Use secrets for admin user bs 
For better security use Kubernetes secrets
to set environmental variables for the
bootstrapping job

- Create secret manifest for the MaaS admin user
- Update job-bootstrap-admin-user to use secret for environment
  setup
- Update job-export-api-key to source admin username
  from secret
- Update job-import to source admin username
  from secret

Change-Id: I0ea5a5517c5a90f481c459e836f081f3d2744dad
 2018-01-29 09:55:58 -06:00
Scott Hussey 5cb7936b40 Support HTTP boot 
MaaS 2.3 now supports serving ephemeral
images via HTTP instead of iSCSI

Change-Id: I6c8d4d2c89cfc40f5352edc04bffa5b27ec785df
 2018-01-29 09:55:58 -06:00
Anthony Lin b664579d57 RBAC: Update serviceaccount and k8s rbac for maas 
This patch set brings the maas chart to be inline
with OSH* RBAC approach used in [0] and [1]

[0] https://review.openstack.org/#/c/526464/52
[1] https://review.openstack.org/#/c/529378/

Change-Id: I3138a0f6280ab7d8ca9c8088ae19ec0c2175292c
 2018-01-22 17:08:12 +00:00
Mark Burnett 350895454f Merge "Update chart for MaaS 2.3" 2018-01-08 14:56:23 -05:00
Scott Hussey fa06f61461 Update chart for MaaS 2.3 
- Default images to MaaS 2.3
- Add Peer Proxy support (double proxy)

Change-Id: I2d064a96f0e551b3514c841056bdda5c4571e4a7
 2018-01-04 21:13:24 -06:00
Anthony Lin 6fdcfe2f92 Update MAAS Chart 
This patch set brings the maas chart to be inline with OSH* RBAC
approach used in [0] and [1].

[0] https://review.openstack.org/#/c/526464/52
[1] https://review.openstack.org/#/c/529378/

Change-Id: I22c43df55cfca307b7d2d8bb6d5a27945602732e
 2017-12-28 16:13:14 +00:00
Scott Hussey 08c1da5be1 Add image cache sidecar 
- If conf.cache.enabled is true, deploy a sidecar container
  in the region pod with a simplestreams repo populated w/ a Ubuntu image
- If conf.cache.enabled is true, configure MaaS to source the image
  from the sidecar
- Update README

Closes #1

Change-Id: I968614d6fb7ca86589dc6e2efd1f66ae920d03a8
 2017-12-04 12:50:30 -06:00
Scott Hussey a2e8188b81 Fix templates for new images structure 
Update manifest templates to correctly use the new images
structure.

Change-Id: I1b88fc064069f0bf7d768df808caec923b58b8ce
 2017-10-30 13:02:53 -05:00
Scott Hussey 668fd328d2 Move MaaS chart into maas repo 
Change-Id: If1d9e92d9a691892b9a3afcef5b229d704b5dcbc
 2017-10-25 14:02:38 -05:00