Commit Graph

13 Commits

Author SHA1 Message Date
Sean Eagan 4ba85d2432 Helm 3: Fix Job labels
See the dependency below for details.

Depends-On: https://review.opendev.org/c/openstack/openstack-helm-infra/+/811826
Change-Id: I9f0d9d99b798a41f8d8ac841e3b00e7d8af40ff3
2021-10-01 11:28:22 -05:00
Zuul 033b278fd0 Merge "Add configmap-hash annotations for deckhand" 2020-07-17 16:10:30 +00:00
DODDA, PRATEEK REDDY 3a3657b6e5 Add configmap-hash annotations for deckhand
Adds configmap-hash annotations to the job-db-init and job-db-sync
for configmap-bin and configmap-etc.

These annotations ensure that if configmaps change, the pods
are redeployed according to their upgrade strategy.

Change-Id: I8ff282d8279c934590d5308e9c26efaf65685e2b
2020-07-06 10:41:28 -05:00
KHIYANI, RAHUL (rk0850) 2f9e0d7601 Implement helm-toolkit snippet to deckhand pods/containers
This updates the deckhand chart to include the pod
security context on the pod template.

This also adds the container security context to set
readOnlyRootFilesystem flag to true

Change-Id: I9bfd889b163e280cf17c4e7b49974a077e889f2f
2020-07-02 09:32:18 -05:00
DODDA, PRATEEK 897f596185 Enabling Apparmor profile to deckhand init containers
Remove OSH Authors copyright

The current copyright refers to a non-existent group
"openstack helm authors" with often out-of-date references that
are confusing when adding a new file to the repo.

This change removes all references to this copyright by the
non-existent group and any blank lines underneath.

Change-Id: Ib0b21b33d8bf91ea6da4c2421cc81355cf2b23b1
2020-06-26 11:08:56 -05:00
Matt McEuen 9b53244a10 Add release uuid to pods and rc objects (deckhand)
This PS adds the ability to attach a release uuid to pods and rc
objects as desired.  This can be used, for example, to force an
artificial manifest change in CICD scenarios, for upgradability
testing purposes.

Change-Id: I69d7dfebe457423c58dc297ec84d02ca62230020
2018-09-14 15:26:57 -05:00
Pete Birley 36c30d47bf Chart: Use k8s secret to store config
This PS moves the chart to use secrets to store potentially sensitive
config information.

Depends-On: https://review.openstack.org/#/c/593732

Change-Id: I884a68b379beefa3aa73018613ac37c0f3ee089d
Signed-off-by: Pete Birley <pete@port.direct>
2018-08-22 20:52:17 -05:00
Matt McEuen 07186243de Update Deckhand for latest HTK
This updates Deckhand to be compatible with the current
OpenStack-Helm Helm Toolkit.  This includes:
- Using HTK manifest templates
- Refactoring values.yaml structure
- Some other small cleanup

Change-Id: Ib7c2451b46fab20935edb1c768ac56cc6353aa16
2018-08-09 02:53:13 +00:00
Bryan Strassner 5f1fbbee3c [396582] Add alembic support to Deckhand
Updates Deckhand to use alembic to manage database upgrades.
Moves from creating tables at startup of Deckhand to the
db-sync job.

Change-Id: I6f4cb237fadc46fbee81d1c33096f48a720f589f
2018-04-06 23:30:16 -04:00
Anthony Lin 3bdebba4bb Update Deckhand Chart - Database Configurability
- Support configured Postgres admin password
- Use secrets for database job environment setup
- Remove superuser rights from deckhand user

Change-Id: I9d8eee1af864b0e99ee7c8a01a6bba84cfcb67f9
2018-01-29 05:20:08 +00:00
Tin Lam 9c91073ac1 RBAC: Update serviceaccount and k8s rbac for deckhand
This patch set brings the deckhand chart to be inline with OSH* RBAC
approach used in [0] and [1].

[0] https://review.openstack.org/#/c/526464/52
[1] https://review.openstack.org/#/c/529378/

Change-Id: I04dc1c8c0b9d675bd87ba3c968ecfb0d55a744c8
2017-12-24 13:39:49 -06:00
Anthony Lin d30e93e453 Update DeckHand Chart
There has been recent changes to the Helm Toolkit which broke
the DeckHand Chart

The changes in Helm Toolkit were made to the 'images' definition
in values.yaml to facilitate adding the option to prefix image
name etc

This P.S. updates the DeckHand Chart to align with the recent
changes in Helm Toolkit

Change-Id: I0c9ddfd8b06be7dedcd030d94e381bf4e3f1d210
2017-10-24 00:47:55 +00:00
Anthony Lin 46803b7e60 Move Deckhand Chart
This PS migrates the Deckhand Chart into this repo

Change-Id: I2f16697df2d909e01ce3c35a462474ee857c57e2
2017-10-20 11:20:01 -04:00