This project is mirrored from https://opendev.org/openstack/magnum.git. Pull mirroring updated .
  1. 15 Feb, 2017 1 commit
  2. 13 Feb, 2017 1 commit
    • Ricardo Rocha's avatar
      [cern] update dcos driver to cern setup · ba824b46
      Ricardo Rocha authored
      drop all neutron objects, replace _ with - in nova nodes, add
      cern-services false to instance metadata, replace first_address with
      resources.0.dcos_master_external_ip in dcoscluster apiaddress output.
      ba824b46
  3. 10 Feb, 2017 2 commits
  4. 06 Feb, 2017 1 commit
    • Bertrand NOEL's avatar
      [cern] K8S: Allows to specify admission control plugins to enable · 0eb96907
      Bertrand NOEL authored
      Cherry-pick: https://review.openstack.org/#/c/405374/
      
      If nothing is specified a set of recommended default plugins is used,
      which includes the ServiceAccount one.
      
      Change-Id: I1383aae09ba68f8e83b07e3eaae40ab071f7be94
      Closes-Bug: #1646489
      
      Conflicts:
      	doc/source/userguide.rst
      	magnum/drivers/common/k8s_template_def.py
      	magnum/drivers/common/templates/kubernetes/fragments/configure-kubernetes-master.sh
      	magnum/drivers/k8s_coreos_v1/templates/kubecluster.yaml
      	magnum/drivers/k8s_fedora_atomic_v1/templates/kubecluster.yaml
      	magnum/drivers/k8s_fedora_atomic_v1/templates/kubemaster.yaml
      	magnum/drivers/k8s_fedora_ironic_v1/templates/kubecluster.yaml
      	magnum/drivers/k8s_fedora_ironic_v1/templates/kubemaster.yaml
      	magnum/tests/functional/k8s/test_k8s_python_client.py
      	magnum/tests/unit/conductor/handlers/test_k8s_cluster_conductor.py
      	magnum/tests/unit/drivers/test_template_definition.py
      0eb96907
  5. 24 Jan, 2017 1 commit
  6. 23 Jan, 2017 1 commit
    • Ricardo Rocha's avatar
      [cern] add cvmfs container configuration · 1d1ad781
      Ricardo Rocha authored
      add systemd setup to configure cvmfs via docker-volume-cvmfs.
      
      add new labels to configure cvmfs:
      * cvmfs_enabled: if cvmfs configuration should be done (default true)
      * cvmfs_tag: which docker-volume-cvmfs tag to use (default latest)
      
      Implements OS-3825.
      1d1ad781
  7. 12 Jan, 2017 1 commit
    • Spyros Trigazis's avatar
      [cern] [k8s_fedora_atomic] Remove podmaster · decea7aa
      Spyros Trigazis authored
      Cherry-pick: https://review.openstack.org/#/c/404782/
      
      Podmaster is deprecated since k8s 1.2 and its docker
      image is v1, incompatible with docker >=1.12.
      
      * Remove podmaster pod
      * Update manifests of kube-controller-manager and kube-scheduler
      * Rename SoftwareConfig to reflect the new functionality
      
      Closes-Bug: #1646109
      Change-Id: Ibf4ce06cbf5b79a4241c58c67b13a7c68145d3ae
      
      Conflicts:
      	magnum/drivers/k8s_fedora_atomic_v1/templates/kubemaster.yaml
      decea7aa
  8. 10 Jan, 2017 2 commits
    • Spyros Trigazis's avatar
      [cern] Add docker-d options in sysconfig/docker · 29798308
      Spyros Trigazis authored
      Cherry-pick: https://review.openstack.org/#/c/404789/7
      
      Remove custom docker unit file and pass the necessary options
      through /etc/sysconfig/docker file.
      
      Change-Id: I6bf91843b9120b700d13aad54cef38342ae1f8bd
      Closes-Bug: #1646123
      
      Conflicts:
      	magnum/drivers/swarm_fedora_atomic_v1/templates/fragments/write-docker-service.sh
      	magnum/drivers/swarm_fedora_atomic_v1/templates/swarmmaster.yaml
      	magnum/drivers/swarm_fedora_atomic_v1/templates/swarmnode.yaml
      29798308
    • Spyros Trigazis's avatar
      [cern] Upgrade to Fedora Atomic 25 · 280096fc
      Spyros Trigazis authored
      Cherry-pick: https://review.openstack.org/#/c/417457/8
      
      Image contains:
      kubernetes-1.4.7-1.fc25.x86_64
      docker-1.12.5-4.git03508cc.fc25.x86_64
      flannel-0.5.5-8.fc25.x86_64
      etcd-3.0.15-1.fc25.x86_64
      
      * For this upgrade the upstream image is used, which is
        uploaded here [1].
      * Minor changes for flannel and docker-storage-setup
        were needed.
      * The image will be built in the CI and uploaded to
        tarballs.openstack.org as soon as possible.
      
      [1] https://fedorapeople.org/groups/magnum/fedora-atomic-25-20161221.qcow2
      
      Change-Id: Iac6e30c530821a49a5c3978e335e0b1d56a576e0
      
      Conflicts:
      	magnum/drivers/common/templates/fragments/configure_docker_storage_driver_atomic.sh
      	magnum/drivers/common/templates/kubernetes/fragments/write-network-config.sh
      	magnum/drivers/k8s_fedora_atomic_v1/version.py
      	magnum/drivers/swarm_fedora_atomic_v1/version.py
      	magnum/tests/contrib/gate_hook.sh
      280096fc
  9. 20 Dec, 2016 1 commit
    • yatin's avatar
      [cern] [k8s_fedora_atomic] Enable TLS in Etcd cluster · cbcf3909
      yatin authored
      Cherry-pick: https://review.openstack.org/#/c/407374/
      
      With this patch following are done:-
      - Configure Etcd with TLS support
      
      Configure Following to commuicate with TLS enabled Etcd:-
      - Flannel
      
      Etcd also listens at http://127.0.0.1:2379, so on master nodes
      etcdctl and kube apiserver can communicate without using
      certificates.
      
      if TLS_DISABLED="True" then TLS is not enabled for etcd.
      
      Change-Id: I2147b67c4e346a4415e1f76c19ac68e94cb0a0fa
      Partially-Implements: blueprint secure-etcd-cluster-coe
      
      Conflicts:
      	magnum/drivers/common/templates/kubernetes/fragments/configure-kubernetes-master.sh
      	magnum/drivers/common/templates/kubernetes/fragments/configure-kubernetes-minion.sh
      	magnum/drivers/common/templates/kubernetes/fragments/network-config-service.sh
      cbcf3909
  10. 16 Dec, 2016 1 commit
  11. 15 Dec, 2016 9 commits
    • Ricardo Rocha's avatar
      [cern] upgrade swarm to version 1.2.5 · aec3c023
      Ricardo Rocha authored
      Change-Id: I63098bc0e16e4c75961d0078345007aabc31db61
      aec3c023
    • Ricardo Rocha's avatar
      [cern] drop dependency on neutron objects · b077fbf6
      Ricardo Rocha authored
      drop dependency on neutron networks, subnets, routers, floating ips,
      security groups, load balancers.
      
      we don't currently have neutron enabled everywhere, and for several
      cases these concepts are not yet supported by our neutron setup
      (routers, floating ips, security groups, load balancers) or are
      not available to users (networks, subnets).
      
      for cases where the node ip is required, rely instead on the first_ip
      exposed by the heat resource.
      
      done for kubernetes, swarm and mesos.
      
      Change-Id: I9c37053b6b1f381873766b72b260bd6eba622429
      b077fbf6
    • Ricardo Rocha's avatar
      [cern] replace _ with - in all node names · 94edcf5a
      Ricardo Rocha authored
      nova integrates with cern dns, which does not allows '_' in device names.
      rename all magnum master and slave nodes on all drivers to use '-'
      instead.
      
      Change-Id: Ib2a05469e409f053e65a3d62b714fc5e263aae4c
      94edcf5a
    • Ricardo Rocha's avatar
      [cern] disable cern-services (no dns wait on boot) · b1519caf
      Ricardo Rocha authored
      set metadata property cern-services to false to all master and slave nodes
      in swarm, kubernetes and mesos. this prevents nova from waiting until the
      node appears in the cern dns before considering it active.
      
      we don't rely on dns for any part of the magnum installation.
      
      Change-Id: If9898b6386c8f753eb51d9fb04932d2238bd4791
      b1519caf
    • Ricardo Rocha's avatar
      [cern] add skydns for kubernetes cluster dns · 52cf5387
      Ricardo Rocha authored
      add by default an additional pod with skydns, and configure kubernetes
      to rely on it for the cluster internal dns resolve.
      
      Change-Id: I9af4a1ccc5e068090cf4cdcd7be7105015130bc9
      52cf5387
    • Ricardo Rocha's avatar
      [cern] install cern ca in swarm and k8s · ae2f9835
      Ricardo Rocha authored
      drop the cern ca certificates in the default location, so standard tools
      can do remote calls to CERN services without disable tls checks.
      
      Change-Id: I6ea9def9f1e75362c577d91995f5cf1a94c32e78
      ae2f9835
    • Spyros Trigazis's avatar
      [cern] Make cinder volume optional · 06851351
      Spyros Trigazis authored
      Cherry-Pick: https://review.openstack.org/#/c/391830/
      
      In the swarm_atomic and k8s_atomic drivers container images are
      stored in a dedicated cinder volume per cluster node. It is
      proven that this architecture can be a scalability bottleneck.
      
      Make the use of cinder volumes for container images and opt-in
      option.  If docker-volume-size is not specified no cinder
      volumes will be created. Before, if docker-volume-size wasn't
      specified the default value was 25.
      
      To use cinder volumes for container storage the user will
      interact with magnum as before, (meaning the valid values are
      integers starting from 1).
      
      Closes-Bug: #1638006
      Change-Id: I3394c62a43bbf950b7cf0b86a71b1d9b0481d68f
      
      Conflicts:
      * magnum/drivers/common/swarm_fedora_template_def.py
        [edited magnum/drivers/swarm_fedora_atomic_v1/template_def.py instead ]
      * magnum/tests/unit/conductor/handlers/test_k8s_cluster_conductor.py
        Removed the unit test for the empty docker_volume_size case.
        Fixed the new unit to not metnion the driver.
      06851351
    • Mathieu Velten's avatar
      [cern] disable neutron check on external network · 7ee9beab
      Mathieu Velten authored
      allow magnum usage with nova network by disabling the requirement for
      neutron.
      
      this won't go upstream as it's not generic enough, but can be dropped
      once we finish migrating all cells to neutron.
      
      Change-Id: Ie98beae6b97cd2cb7f43aaf66d4e03aa7dac79b1
      7ee9beab
    • Jaycen Grant's avatar
      [cern] Allow keypair to be added during cluster create · 693e46c2
      Jaycen Grant authored
      Cherry-Pick: https://review.openstack.org/#/c/381307/
      
      Keypair can now be added during Cluster create command. This allows
      Clusters to be created from the same ClusterTemplate but have
      different keypair values when created. If not specified on create
      then the value from the ClusterTemplate will be used. Adds keypair_id
      to Cluster object and uses of keypair_id will use the value from Cluster
      instead of ClusterTemplate.
      
      Change-Id: I177a5aa06f881156944a9f74c9ccc3cd2abac492
      Implements: blueprint keypair-override-on-create
      693e46c2
  12. 03 Nov, 2016 1 commit
  13. 06 Oct, 2016 1 commit
    • Jaycen Grant's avatar
      Allow keypair to be added during cluster create · a995db66
      Jaycen Grant authored
      Keypair can now be added during Cluster create command. This allows
      Clusters to be created from the same ClusterTemplate but have
      different keypair values when created. If not specified on create
      then the value from the ClusterTemplate will be used. Adds keypair_id
      to Cluster object and uses of keypair_id will use the value from Cluster
      instead of ClusterTemplate.
      
      Change-Id: I177a5aa06f881156944a9f74c9ccc3cd2abac492
      Implements: blueprint keypair-override-on-create
      a995db66
  14. 29 Sep, 2016 1 commit
  15. 28 Sep, 2016 1 commit
  16. 27 Sep, 2016 1 commit
    • Ton Ngo's avatar
      Backport fix for K8s load balancer with LBaaS v1 · a10b53fa
      Ton Ngo authored
      Fix node name and auth_url
      
      Backport to stable/newton.
      Update the url to Keystone v2 which has been changed.
      The name of the node registered in the kube-apiserver
      was also changed at some point to use the IP instead of the
      Nova instance name as was done originally, and this
      breaks the Kubernetes plugin code.  Change the node name
      back to the Nova instance name in the option
      --hostname-override for kubelet.
      
      Some update to the document.
      
      With this patch, the load balancer works with Magnum Newton
      and later, along with the image fedora-atomic-latest.
      Important notes:
      1. The current image has Kubernetes release 1.2 and this only
      works with neutron LBaaS v1.  Support for LBaaS v2 requires
      Kubernetes release 1.3 or later.  Magnum support for 1.3
      is still in development.
      2. LBaaS v1 has been removed in Newton and is only available
      in Mitaka or by custom installation (likely requires some hacking).
      This means to get the load balancer feature, you will want to
      install Openstack Mitaka and Magnum Newton.
      
      Change-Id: Iff51f4e667663c217b6365a75d502e64c9420629
      Closes-Bug: #1524025
      a10b53fa
  17. 26 Sep, 2016 1 commit
    • yatin's avatar
      [mesos]Fix output param: mesos_slaves_private · 1f4f0935
      yatin authored
      Output param is wrongly set in mesoscluster.yaml.
      Corrected as below:-
      mesos_slave_private --> mesos_slaves_private
      
      Change-Id: I2a456c2153945ebf1ded6bcdd537d194b0d3a9bb
      1f4f0935
  18. 25 Sep, 2016 1 commit
    • yatin's avatar
      Register master node but make it non schedulable · 52fd593e
      yatin authored
      master node is not registered in k8s_coreos, it should
      register but should be marked as non schedulable.
      This is done by adding following parameters to kubelet
      args:-
          --register-node=true
          --register-schedulable=false
      
      Change-Id: Ifc2d52dadc128f4e09cfe5b1bea924dae725cd7c
      Closes-Bug: #1625581
      (cherry picked from commit b8dd781f)
      52fd593e
  19. 23 Sep, 2016 1 commit
  20. 22 Sep, 2016 4 commits
  21. 20 Sep, 2016 3 commits
    • Hongbin Lu's avatar
      Use specific version of CoreOS image · f2887f1f
      Hongbin Lu authored
      Based on past experience, some failures are caused by using the
      stable branch with latest image. In CoreOS, we cut the newton release
      based on the image of version 1153.4.0, so newton branch should use
      with that image.
      
      Change-Id: I3af881946425c3a3bec41d4c61b8d6603bd77ba2
      f2887f1f
    • Hongbin Lu's avatar
      Update name of ubuntu-mesos image · 57fc3359
      Hongbin Lu authored
      Based on past experience, some failures are caused by using the
      stable branch with latest image. That is because the latest image
      are supposed to use with master branch.
      
      Let's make this clear by renaming the image from
      "ubuntu-14.04.3-mesos-0.25.0" to "ubuntu-mesos-newton" in this branch
      In fedorapeople, a soft link was created from
      "ubuntu-mesos-newton.qcow2" to "ubuntu-14.04.3-mesos-0.25.0.qcow2"
      
      Change-Id: Ib80e29312ebdb8c420875c9fe4bd1d4f2c28453e
      57fc3359
    • Hongbin Lu's avatar
      Update name of fedora-atomic image · 8d53c77c
      Hongbin Lu authored
      Based on past experience, some failures are caused by using the
      stable branch with latest image. That is because the latest image
      are supposed to use with master branch.
      
      Let's make this clear by renaming the image from
      "fedora-atomic-latest" to "fedora-atomic-newton" in this branch.
      In fedorapeople, a soft link was created from
      "fedora-atomic-newton.qcow2" to "fedora-23-atomic-20160405.qcow2"
      
      Change-Id: I10e5594b5c5a3ffb9483e7b49bf4325a3c066b1c
      8d53c77c
  22. 19 Sep, 2016 4 commits