magnum merge requestshttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests2020-05-06T17:23:47+02:00https://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/105WIP: Add cern_metachart to magnum2020-05-06T17:23:47+02:00Diogo Filipe Tomas GuerraWIP: Add cern_metachart to magnumThis is still a preview as we use Git (non existent in the tiller pod)
to download the repo.
The ideal way would be to download the chart locally by means of a
helm repository.
* Add magnum labels cern_metachart_enabled and
cern_meta...This is still a preview as we use Git (non existent in the tiller pod)
to download the repo.
The ideal way would be to download the chart locally by means of a
helm repository.
* Add magnum labels cern_metachart_enabled and
cern_metachart_version to control CERN's magnum
meta-chart installation
* Add eosxd and kubemonkey enabled magnum labels to
enable/disable respective subchart installation
Ref. OS-9770Ricardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/135Labels2020-05-28T10:14:54+02:00Ricardo RochaLabelsRicardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/138[cern] Set containerRuntime for fluentd2020-07-18T00:20:52+02:00Spyridon Trigazis[cern] Set containerRuntime for fluentdWhile installing the fluentd helm chart set the
containerRuntime. This is needed to collect
logs containerd logs.
Change-Id: I276511de3d75ddaf834a3fccd4baab4d299f2b92
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>While installing the fluentd helm chart set the
containerRuntime. This is needed to collect
logs containerd logs.
Change-Id: I276511de3d75ddaf834a3fccd4baab4d299f2b92
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>Ricardo RochaSpyridon TrigazisRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/139add csi cinder2020-07-18T00:21:13+02:00Spyridon Trigazisadd csi cinderRicardo RochaSpyridon TrigazisRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/142cern-ussuri-prerelease2020-11-09T11:10:20+01:00Diogo Filipe Tomas Guerracern-ussuri-prereleaseMerged all magnum network patches together
(mainly relative to the HA changes done in CoreOS)
Several logging patches merged togetherMerged all magnum network patches together
(mainly relative to the HA changes done in CoreOS)
Several logging patches merged togetherRicardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/151OIDC support2021-03-02T16:20:39+01:00Stavros MoirasOIDC supportOpenID Connect support for kubernetes clusters at CERNOpenID Connect support for kubernetes clusters at CERNStavros MoirasStavros Moirashttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/170[cern] Pass CLUSTER_UUID to openstack-manila-csi Helm chart2021-07-14T18:06:51+02:00Robert Vasek[cern] Pass CLUSTER_UUID to openstack-manila-csi Helm chartThis MR passes `$CLUSTER_UUID` env var to openstack-manila-csi Helm chart values.
For reference:
* `CLUSTER_UUID`: https://gitlab.cern.ch/cloud-infrastructure/magnum/-/blob/7b913b5a310899e1a1aa0b0d2038ac223bf9701f/magnum/drivers/k8s_fed...This MR passes `$CLUSTER_UUID` env var to openstack-manila-csi Helm chart values.
For reference:
* `CLUSTER_UUID`: https://gitlab.cern.ch/cloud-infrastructure/magnum/-/blob/7b913b5a310899e1a1aa0b0d2038ac223bf9701f/magnum/drivers/k8s_fedora_coreos_v1/templates/kubemaster.yaml#L914
* `clusterID` in Helm chart: https://github.com/kubernetes/cloud-provider-openstack/blob/4d6ecb67ad4082a430333533b6644a86d64543ae/charts/manila-csi-plugin/values.yaml#L36-L38
OS-13830Ricardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/154CERN victoria prerelease2021-08-02T10:46:51+02:00Diogo Filipe Tomas GuerraCERN victoria prereleaseRelease for the CERN victoria magnum upgradeRelease for the CERN victoria magnum upgradeRicardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/183[Magnum] npd via helm2021-11-12T11:47:56+01:00Stavros Moiras[Magnum] npd via helmhttps://its.cern.ch/jira/browse/OS-13654https://its.cern.ch/jira/browse/OS-13654Stavros MoirasStavros Moirashttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/131[cern][k8s] Support configurable health polling interval2021-11-12T17:41:18+01:00Spyridon Trigazis[cern][k8s] Support configurable health polling intervalupstream https://review.opendev.org/#/c/728775/
The default 10 seconds health polling interval is too frequent for most of
the cases. Now it has been changed to 60s. A new config
`health_polling_interval` is added to make the interval c...upstream https://review.opendev.org/#/c/728775/
The default 10 seconds health polling interval is too frequent for most of
the cases. Now it has been changed to 60s. A new config
`health_polling_interval` is added to make the interval configurable.
Cloud admin can totally disable the health polling by set a negative value
for the config.
Task: 39795
Story: 2007683
Change-Id: Iad30487b8c119e94ee21d75f53fb86eb23dff365
(cherry picked from commit 8e9df14d2773a16c21d2c7c52e3e9d40dd0f84df)Ricardo RochaSpyridon TrigazisRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/145Install cvmfs-csi from CERN metachart2021-11-12T18:10:56+01:00Diogo Filipe Tomas GuerraInstall cvmfs-csi from CERN metachartWhen CERN_METACHART_ENABLED is true cvmfs-csi is installed from umbrella chart instead of the magnum existent scripts.
If this option is false and the user has set CVMFS_CSI_ENABLED the components are installed with the magnum scripts g...When CERN_METACHART_ENABLED is true cvmfs-csi is installed from umbrella chart instead of the magnum existent scripts.
If this option is false and the user has set CVMFS_CSI_ENABLED the components are installed with the magnum scripts guaranteeing that no backwards compatibility is lost.
Change-Id: Icaf8c24a54064e1ce06eddf42370e0e2735801b9Ricardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/185[Magnum] Cluster autoscaler via helm2022-05-24T20:26:50+02:00Stavros Moiras[Magnum] Cluster autoscaler via helmhttps://its.cern.ch/jira/browse/OS-10588https://its.cern.ch/jira/browse/OS-10588Stavros MoirasStavros Moirashttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/196enable coredns service dualstack2021-12-02T17:52:06+01:00Diogo Filipe Tomas Guerraenable coredns service dualstackSigned-off-by: Diogo Guerra <diogo.filipe.tomas.guerra@cern.ch>
Change-Id: I8ece71d21687dc9ade467effe808b1871a360edeSigned-off-by: Diogo Guerra <diogo.filipe.tomas.guerra@cern.ch>
Change-Id: I8ece71d21687dc9ade467effe808b1871a360edeRicardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/164Switch fluentd to upstream2022-05-25T13:21:55+02:00Diogo Filipe Tomas GuerraSwitch fluentd to upstreamSwitch helm chart origin to upstream fluentd helm chart.
This included the correct set-up of the helm values (still not tested)
This is WIP while we don't upgrade to magnum Victoria because
it depends on helmv3Switch helm chart origin to upstream fluentd helm chart.
This included the correct set-up of the helm values (still not tested)
This is WIP while we don't upgrade to magnum Victoria because
it depends on helmv3https://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/191Draft: [Magnum] Coredns via helm2022-05-24T20:27:30+02:00Stavros MoirasDraft: [Magnum] Coredns via helmhttps://its.cern.ch/jira/browse/OS-14231https://its.cern.ch/jira/browse/OS-14231Stavros MoirasStavros Moirashttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/189import upstream changes to kube-prometheus-stack2022-01-25T11:50:22+01:00Diogo Filipe Tomas Guerraimport upstream changes to kube-prometheus-stackdepends-on: https://gitlab.cern.ch/helm/releases/cern-magnum/-/merge_requests/52
Signed-off-by: Diogo Guerra <diogo.filipe.tomas.guerra@cern.ch>
Change-Id: Ic2a662f997a89347728e832eab1135f4d768f8b0depends-on: https://gitlab.cern.ch/helm/releases/cern-magnum/-/merge_requests/52
Signed-off-by: Diogo Guerra <diogo.filipe.tomas.guerra@cern.ch>
Change-Id: Ic2a662f997a89347728e832eab1135f4d768f8b0Diogo Filipe Tomas GuerraDiogo Filipe Tomas Guerrahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/201[cern] configure cvmfs csi via umbrella chart2022-01-25T11:50:33+01:00Ricardo Rocha[cern] configure cvmfs csi via umbrella chartRicardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/188Draft: [Magnum] openstack cloud provider via helm2022-05-24T20:27:03+02:00Stavros MoirasDraft: [Magnum] openstack cloud provider via helmhttps://its.cern.ch/jira/browse/OS-11503https://its.cern.ch/jira/browse/OS-11503Stavros MoirasStavros Moirashttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/203DRAFT: network policy to disable host metadata access2022-05-25T13:48:28+02:00Diogo Filipe Tomas GuerraDRAFT: network policy to disable host metadata accessCreate a network policy to drop all egress connections
to the host metadata cloud provider endpoint. The manifest is
installed as a configuration step on cluster create
Change-Id: I54a87fe87417e74b085eb436964be35e3c2ca91dCreate a network policy to drop all egress connections
to the host metadata cloud provider endpoint. The manifest is
installed as a configuration step on cluster create
Change-Id: I54a87fe87417e74b085eb436964be35e3c2ca91dhttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/213Use helm upgrade instead of install2022-09-12T15:46:43+02:00Diogo Filipe Tomas GuerraUse helm upgrade instead of installThis allows to skip the helm install error:
```
helm -n kube-system install cern-magnum releases/cern-magnum --wait --version 0.11.0 --values /opt/magnum/install-cern-magnum-values.yaml
Error: cannot re-use a name that is still in use
``...This allows to skip the helm install error:
```
helm -n kube-system install cern-magnum releases/cern-magnum --wait --version 0.11.0 --values /opt/magnum/install-cern-magnum-values.yaml
Error: cannot re-use a name that is still in use
```
Installation of the CERN helm chart occurs when cluster is created. https://gitlab.cern.ch/kubernetes/magnum/-/blob/cern/train/magnum/drivers/k8s_fedora_coreos_v1/templates/kubecluster.yaml#L1510
After a while if the job dosen't finish (due to heavy load on master node) the cern-metachart job will create a new install pod.
There is a chance that a new chart installation might be tried while there is a chart mid installation. So the release exists but is not complete.
By using `helm install` installations that might end up being successfull will fail subsequently, while `helm upgrade` will 'upgrade' and pick up any leftover to-dos.
Change-Id: I2c18624e343d109891b9d19b67b4961e917ebe37R-2022-Q3-1Diogo Filipe Tomas GuerraDiogo Filipe Tomas Guerra