Commit Graph

13 Commits

Author SHA1 Message Date
Ruslan Aliev b154334a20 Adjust kubectl get command for armada charts
Signed-off-by: Ruslan Aliev <raliev@mirantis.com>
Change-Id: Ic830568efb7589b46282ad3fd9293e4358929468
2024-02-08 21:03:58 -06:00
Ruslan Aliev 910b06e4ba Add complete support for operator-based bootstrap
* operator logs is now streaming to pipeline and to pod
 * printing status of armada chart objects
 * adjust armada container cmd parameters to support both
   golang and python based images

Signed-off-by: Ruslan Aliev <raliev@mirantis.com>
Change-Id: I6d8629a48c1b862db937ddc3cd68792220388b19
2024-01-10 10:27:07 -06:00
Sean Eagan 4168418719 Armada metric output for genesis
This change has passed the Promenade resiliency gate.

Armada recently added support for generating metric output [0] [1].
This adds support for capturing this output during genesis Armada runs,
and storing it in a configurable path on the genesis node, so that it
can later be consumed by for example by the node exporter text file
collector [2]. The number of Armada attempts to collect metrics for
is also configurable.

[0]: https://airship-armada.readthedocs.io/en/latest/operations/metrics.html#exporting
[1]: https://review.opendev.org/#/c/668980/
[2]: https://github.com/prometheus/node_exporter#textfile-collector

Change-Id: Ifd5b9d351204541595b1aadf1f06b16ab54308b0
2019-09-11 11:43:26 -05:00
Zuul 867da239b9 Merge "Revert "remove /etc/genesis post armada bootstrap"" 2019-04-11 14:54:06 +00:00
Matt McEuen 1a3ba289db Revert "remove /etc/genesis post armada bootstrap"
This reverts commit d856a0c8c5.

This is required because the contents of the /etc/genesis directory are needed until the control plane (etcd) has joined the cluster.

Change-Id: Iff890003dfe1dbc39efbf60037cbe33d9eb5e9a0
2019-04-10 20:53:36 +00:00
Sandeep Reddy Thumma 9628da8cf4 Set Least Previliage for .PEM files under directory /etc/genesis.
We don't have the ability to coordinate custom user ids in a safe way
across different container yet.this is a bandaid fix and will be 
addressed properly later


Change-Id: I5e211f80a9402c5fafbc614ec58e481106632681
2019-03-22 18:30:23 +00:00
Randeep Jalli d856a0c8c5 remove /etc/genesis post armada bootstrap
Change-Id: I5d4f43f637df91dae29b6292217ac8ae906bba7b
2019-03-13 16:36:41 +00:00
Marshall Margenau 850e379f04 Remove Armada timeout from genesis script.
- removing Promenade timeout to allow Armada to hit its own
  timeout(s) as specified in manifest

Change-Id: I1ecc934d0692698460fb2e9a2ae0a7a07bfbe54e
2018-06-04 13:18:25 -05:00
Scott Hussey a1640349d7 Update Deckhand commit
- Uplift deckhand commit to include fix for document replacement
- Add pod status polling to genesis bootstrap

Change-Id: I32d22110749b334d1fbf19f910e41ab0b7ff3a16
2018-05-25 11:28:13 -05:00
Mark Burnett cdf469dd56 Fix: regression shebang line of genesis.sh/join.sh
This also moves the common hostname validation logic into a common file.

Change-Id: I6b74496d741ceedf3ba0122549bacb2813dd0001
2018-01-24 15:13:47 -06:00
portdirect 4f9def0ebe Validate that node hostname matches the kube node name before join
This PS validates that the node hostname matches the kube node name
before attempting to join the cluster.

Change-Id: Ib8e0d4e91c29203e9d8a48f081c88991d513acef
Partial-Bug: https://github.com/att-comdev/promenade/issues/49
2018-01-18 21:45:22 -05:00
Mark Burnett 51df4ce078 Avoid insecure apiserver port for tiller
This allows us to replace the apiserver process during genesis with the
chart-managed version that is likely to only listen on a secure port.

* Bundle armada + tiller + insecure apiserver into a static pod
* Report aramda logs via host filesystem

NOTE: This is using an additional apiserver sidecar rather than a
`kubectl proxy` sidecar with a serviceaccount, because it's running as a
static pod.

Change-Id: I39c638020c0ad36db8d3b10c4ecb959a6642ad0e
2017-12-01 14:46:32 -06:00
Mark Burnett 95643147c5 Migrate to self hosted using charts
This change includes several interconnected features:

* Migration to Deckhand-based configuration.  This is integrated here,
  because new configuration data were needed, so it would have been
  wasted effort to either implement it in the old format or to update
  the old configuration data to Dechkand format.
* Failing faster with stronger validation.  Migration to Deckhand
  configuration was a good opportunity to add schema validation, which
  is a requirement in the near term anyway.  Additionally, rendering
  all templates up front adds an additional layer of "fail-fast".
* Separation of certificate generation and configuration assembly into
  different commands.  Combined with Deckhand substitution, this creates
  a much clearer distinction between Promenade configuration and
  deployable secrets.
* Migration of components to charts.  This is a key step that will
  enable support for dynamic node management.  Additionally, this paves
  the way for significant configurability in component deployment.
* Version of kubelet is configurable & controlled via download url.
* Restructuring templates to be more intuitive.  Many of the templates
  require changes or deletion due to the migration to charts.
* Installation of pre-configured useful tools on hosts, including calicoctl.
* DNS is now provided by coredns, which is highly configurable.

Change-Id: I9f2d8da6346f4308be5083a54764ce6035a2e10c
2017-10-17 13:29:46 -05:00