Update deploy-env role

- Use kubeadm configuration to not set taints
  on control plain nodes (instead of removing them after
  deployment).
- Fix ssh client key permissions.
- Update the Mariadb ingress test job so it is inherinted
  from the plain compute-kit test job. And also remote
  it from the check pipeline.

Change-Id: I92c73606ed9b9161f39ea1971b3a7db7593982ff

roles/deploy-env/files/kubeadm_config.yaml

@@ -13,3 +13,15 @@ networking:
   podSubnet: "{{ kubeadm.pod_network_cidr }}"  # --pod-network-cidr
   dnsDomain: "cluster.local"
 ...
+---
+apiVersion: kubeadm.k8s.io/v1beta3
+kind: InitConfiguration
+nodeRegistration:
+  taints: []
+...
+---
+apiVersion: kubeadm.k8s.io/v1beta3
+kind: JoinConfiguration
+nodeRegistration:
+  taints: []
+...

roles/deploy-env/tasks/client_cluster_ssh.yaml

@@ -32,6 +32,7 @@
   when: cluster_ssh_user == "root"
 
 - name: Setup ssh keys
+  become_user: "{{ client_ssh_user }}"
   block:
     - name: Generate ssh key pair
       shell: |
@@ -46,6 +47,7 @@
       when: (inventory_hostname in (groups['primary'] | default([])))
 
 - name: Setup passwordless ssh from primary and cluster nodes
+  become_user: "{{ cluster_ssh_user }}"
   block:
     - name: Set primary ssh public key
       set_fact:

roles/deploy-env/tasks/k8s_client.yaml

@@ -63,8 +63,4 @@
       become_user: "{{ kubectl.user }}"
       command: helm repo remove stable
       ignore_errors: true
-
-- name: Untaint Kubernetes control plane node
-  become: false
-  command: kubectl taint nodes -l 'node-role.kubernetes.io/control-plane' node-role.kubernetes.io/control-plane-
 ...

zuul.d/jobs.yaml

@@ -363,8 +363,7 @@
 - job:
     name: openstack-helm-infra-tls-2024-1-ubuntu_jammy
     description: |
-      This job uses OSH Ceph charts for managing Ceph cluster.
-      The job is run on 1 32GB node.
+      This job uses Rook for managing Ceph cluster.
     parent: openstack-helm-tls-2024-1-ubuntu_jammy
     files:
       - ^helm-toolkit/.*
@@ -376,14 +375,11 @@
       - ^openvswitch/.*
 
 - job:
-    name: openstack-helm-infra-tls-mariadb-ingress-2024-1-ubuntu_jammy
-    description: |
-      This job uses OSH Ceph charts for managing Ceph cluster.
-      The job is run on 1 32GB node.
-    parent: openstack-helm-tls-2024-1-ubuntu_jammy
+    name: openstack-helm-infra-mariadb-ingress-2024-1-ubuntu_jammy
+    parent: openstack-helm-compute-kit-2024-1-ubuntu_jammy
     vars:
       osh_params:
-        feature_gates: "tls,ingress-service"
+        feature_gates: "ingress-service"
     files:
       - ^helm-toolkit/.*
       - ^roles/.*

zuul.d/project.yaml

@@ -35,7 +35,6 @@
         - openstack-helm-infra-keystone-cilium-2024-1-ubuntu_jammy
         - openstack-helm-infra-keystone-flannel-2024-1-ubuntu_jammy
         - openstack-helm-infra-ceph-migrate
-        - openstack-helm-infra-tls-mariadb-ingress-2024-1-ubuntu_jammy
     gate:
       jobs:
         - openstack-helm-lint