magnum merge requestshttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests2021-07-15T10:07:15+02:00https://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/179[cern] Manually mount /etc/hosts in kubelet2021-07-15T10:07:15+02:00Thomas George Hartland[cern] Manually mount /etc/hosts in kubeletOn FCOS 34 podman is injecting an extra line into
/etc/hosts in the kubelet container that the kubelet
then passes into hostNetwork pods, which is causing issues.
https://its.cern.ch/jira/browse/OS-14303On FCOS 34 podman is injecting an extra line into
/etc/hosts in the kubelet container that the kubelet
then passes into hostNetwork pods, which is causing issues.
https://its.cern.ch/jira/browse/OS-14303Ricardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/178[cern] Move calico CRD version to v12021-07-15T10:08:00+02:00Spyridon Trigazis[cern] Move calico CRD version to v11.22 drops apiextensions.k8s.io/v1beta1 and moves to apiextensions.k8s.io/v1
https://github.com/kubernetes/kubernetes/pull/102197
Change-Id: I8131d59b9983fb88bcbed7dfe4b9ff938f2a7545
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cer...1.22 drops apiextensions.k8s.io/v1beta1 and moves to apiextensions.k8s.io/v1
https://github.com/kubernetes/kubernetes/pull/102197
Change-Id: I8131d59b9983fb88bcbed7dfe4b9ff938f2a7545
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>
OS-14194Spyridon TrigazisSpyridon Trigazishttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/177[cern] Add cern_chart_values label2022-05-25T13:22:01+02:00Spyridon Trigazis[cern] Add cern_chart_values labelcern_chart_values is a bsae64 --wrap=0 encoded string
that stores the helm values of the cern metachart.
https://gitlab.cern.ch/helm/releases/cern-magnum/-/blob/f60ddc94c7264d3968b07f62048a17d8cbbfdeea/values.yaml
If the values exist la...cern_chart_values is a bsae64 --wrap=0 encoded string
that stores the helm values of the cern metachart.
https://gitlab.cern.ch/helm/releases/cern-magnum/-/blob/f60ddc94c7264d3968b07f62048a17d8cbbfdeea/values.yaml
If the values exist labels like monitoring_enabled, logging_producer
will have no effect since they should be defined in the values file.
The values will be decoded, indented and writen in the ConfigMap of the
install-cern-chart job.
If cern_chart_values is "" (the default value), the cern_chart will be
installed with the values already in helm/cern-chart.sh.
Change-Id: I93319d2a42fc52fe3d9966e04008eac34eb7e927
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>
OS-13581Spyridon TrigazisSpyridon Trigazishttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/176[cern][k8s] Fix docker storage of Fedora CoreOS2021-07-15T10:08:16+02:00Spyridon Trigazis[cern][k8s] Fix docker storage of Fedora CoreOSupstream: https://review.opendev.org/c/openstack/magnum/+/718296
In commit I1a75f1bf12747508a3497293650d3cc668202de6 the worker node
is missed to add the docker storage support. And the current systemd
unit is not really working. So thi...upstream: https://review.opendev.org/c/openstack/magnum/+/718296
In commit I1a75f1bf12747508a3497293650d3cc668202de6 the worker node
is missed to add the docker storage support. And the current systemd
unit is not really working. So this patch fixes it by removing the
hardcode for /dev/vdb and using xfs instead of ext4 (the same way
for Fedora Atomic) to make it simpler and solid.
Task: 39331
Story: 2005201
Change-Id: I4c465664eb19f1992df95750dd7b2d99688c6cae
(cherry picked from commit c2439ca10aed0dbfa25a7e613a8105d93536db87)
OS-14200Spyridon TrigazisSpyridon Trigazishttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/175[cern] check csi cephfs install cern chart version2021-06-25T13:50:23+02:00Ricardo Rocha[cern] check csi cephfs install cern chart versionRicardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/174[cern] Add ignition_version label2021-06-24T11:40:23+02:00Spyridon Trigazis[cern] Add ignition_version labelFCOS 34 enables cgroupsv2 by default and comes with an
updated ingition that supports kernelArguments.
https://github.com/coreos/fedora-coreos-docs/blob/main/modules/ROOT/pages/kernel-args.adoc
Added in igntion 2.10.x
https://github.com...FCOS 34 enables cgroupsv2 by default and comes with an
updated ingition that supports kernelArguments.
https://github.com/coreos/fedora-coreos-docs/blob/main/modules/ROOT/pages/kernel-args.adoc
Added in igntion 2.10.x
https://github.com/coreos/ignition/releases/tag/v2.10.1
Add a label to set the igntion payload version.
* 3.3.0-experimental for FCOS34
* 3.0.0 for FCOS31
* We will see a warning with ignition ignoring the kernelArguments
section.
Change-Id: I49257389ca19bf40de9231cc98e3503b8c9bd7ea
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>Spyridon TrigazisSpyridon Trigazishttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/173[cern] Add missing manila_csi_ in heat params2021-06-22T16:39:09+02:00Ricardo Rocha[cern] Add missing manila_csi_ in heat paramsRicardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/172[cern] Drop ubelet-https from kube-apiserver2021-06-22T14:15:53+02:00Spyridon Trigazis[cern] Drop ubelet-https from kube-apiserverOS-13829OS-13829Spyridon TrigazisSpyridon Trigazishttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/171[cern] Set cgroups v1 explicitly in ignition2021-06-22T14:16:19+02:00Ricardo Rocha[cern] Set cgroups v1 explicitly in ignitionRequired for Fedora CoreOS 34 which defaults to v2.Required for Fedora CoreOS 34 which defaults to v2.Ricardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/169[cern] Retry when requesting discovery url fails2021-07-15T10:08:36+02:00Thomas George Hartland[cern] Retry when requesting discovery url failshttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/168[cern] Added ceph-csi-cephfs.enabled Helm binding2021-07-30T19:28:10+02:00Robert Vasek[cern] Added ceph-csi-cephfs.enabled Helm bindingThis MR adds `ceph-csi-cephfs.enabled: $CEPHFS_CSI_ENABLED` to the generated Helm values for the umbrella chart.
OS-13799This MR adds `ceph-csi-cephfs.enabled: $CEPHFS_CSI_ENABLED` to the generated Helm values for the umbrella chart.
OS-13799Ricardo RochaSpyridon TrigazisRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/167[cern] Added labels for Manila CSI2021-05-11T15:03:23+02:00Robert Vasek[cern] Added labels for Manila CSIAdded labels manila_csi_enabled and manila_csi_version.
OS-13794Added labels manila_csi_enabled and manila_csi_version.
OS-13794Ricardo RochaSpyridon TrigazisRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/166[cern] Update traefik options2021-04-29T18:04:05+02:00Diogo Filipe Tomas Guerra[cern] Update traefik optionsUpstream: https://review.opendev.org/c/openstack/magnum/+/783390
* Traefik version updated from v1.7.19 to v1.7.28
* Force secure connections to use TLSv1.2 or greater
Change-Id: I65561358113952e3f60dc488b35ee8fa8f8da740
Signed-off-by:...Upstream: https://review.opendev.org/c/openstack/magnum/+/783390
* Traefik version updated from v1.7.19 to v1.7.28
* Force secure connections to use TLSv1.2 or greater
Change-Id: I65561358113952e3f60dc488b35ee8fa8f8da740
Signed-off-by: Diogo Guerra <diogo.filipe.tomas.guerra@cern.ch>Ricardo RochaDiogo Filipe Tomas GuerraRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/165[cern] Add ExtendedResourceToleration to default admission control2022-05-24T20:20:14+02:00Ricardo Rocha[cern] Add ExtendedResourceToleration to default admission controlOS-13584
cc @strigaziOS-13584
cc @strigaziRicardo RochaRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/163[cern] Make deploying manila-external-provisioner conditional2021-04-26T14:39:20+02:00Robert Vasek[cern] Make deploying manila-external-provisioner conditionalThis MR is in preparation for the upcoming manila-csi integration into the umbrella Helm chart.
It now deploys the manila-external-provisioner only under these conditions:
* MANILA_ENABLED is true, and
* MANILA_CSI_ENABLED is f...This MR is in preparation for the upcoming manila-csi integration into the umbrella Helm chart.
It now deploys the manila-external-provisioner only under these conditions:
* MANILA_ENABLED is true, and
* MANILA_CSI_ENABLED is false
OS-13506Ricardo RochaSpyridon TrigazisRicardo Rochahttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/162OS-13122 9.2.0 1.212021-03-29T13:58:03+02:00Spyridon TrigazisOS-13122 9.2.0 1.21Spyridon TrigazisSpyridon Trigazishttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/161[cern] k8s: Use ClusterFirstWithHostNet with hostNetwork2021-03-16T10:48:40+01:00Spyridon Trigazis[cern] k8s: Use ClusterFirstWithHostNet with hostNetworkupstream: https://review.opendev.org/c/openstack/magnum/+/780255
To not overload the cloud DNS, ClusterFirstWithHostNet
is recommended when using hostNetwork.
story: 2008711
task: 42045
Change-Id: Ifc87980dd7e501dbd0fb1d457b3955f6fa34...upstream: https://review.opendev.org/c/openstack/magnum/+/780255
To not overload the cloud DNS, ClusterFirstWithHostNet
is recommended when using hostNetwork.
story: 2008711
task: 42045
Change-Id: Ifc87980dd7e501dbd0fb1d457b3955f6fa34989b
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>https://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/160[cern] Fix oidc_enabled2021-03-16T10:15:48+01:00Spyridon Trigazis[cern] Fix oidc_enabled* Validate correctly oidc_enabled.
* Move oidc logic in a separate function
Change-Id: Ia2a5e7cd6924ae92a7601827fecd1374653f1ec6
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>* Validate correctly oidc_enabled.
* Move oidc logic in a separate function
Change-Id: Ia2a5e7cd6924ae92a7601827fecd1374653f1ec6
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>https://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/159[cern] Pass the api_address to workers2021-03-16T10:49:09+01:00Spyridon Trigazis[cern] Pass the api_address to workersFix the kube_master_ip passed to the default worker
nodegroup.
Change-Id: I379b53d0bd24a50dcec98118f037fb71dd4ae9e1
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>Fix the kube_master_ip passed to the default worker
nodegroup.
Change-Id: I379b53d0bd24a50dcec98118f037fb71dd4ae9e1
Signed-off-by: Spyros Trigazis <spyridon.trigazis@cern.ch>Spyridon TrigazisSpyridon Trigazishttps://gitlab.cern.ch/kubernetes/magnum/-/merge_requests/158kubelet and kube-proxy certs2021-03-02T15:37:38+01:00Spyridon Trigaziskubelet and kube-proxy certs