Add Magnum Chart
This PS adds a Chart for OpenStack Magnum Change-Id: I70850886745423b06652a597b4bc31b42d6aebb5
This commit is contained in:
parent
a5df950b4b
commit
f9a5c8a960
6
Makefile
6
Makefile
@ -12,13 +12,13 @@
|
|||||||
# See the License for the specific language governing permissions and
|
# See the License for the specific language governing permissions and
|
||||||
# limitations under the License.
|
# limitations under the License.
|
||||||
|
|
||||||
.PHONY: ceph bootstrap mariadb etcd keystone barbican memcached rabbitmq helm-toolkit mistral neutron nova cinder heat senlin ingress all clean
|
.PHONY: ceph bootstrap mariadb etcd keystone barbican memcached rabbitmq helm-toolkit mistral neutron nova cinder heat senlin magnum ingress all clean
|
||||||
|
|
||||||
TASK :=build
|
TASK :=build
|
||||||
B64_DIRS := helm-toolkit/secrets
|
B64_DIRS := helm-toolkit/secrets
|
||||||
B64_EXCLUDE := $(wildcard helm-toolkit/secrets/*.b64)
|
B64_EXCLUDE := $(wildcard helm-toolkit/secrets/*.b64)
|
||||||
|
|
||||||
CHARTS := ceph mariadb etcd rabbitmq memcached keystone barbican glance horizon mistral neutron nova cinder heat senlin ingress
|
CHARTS := ceph mariadb etcd rabbitmq memcached keystone barbican glance horizon mistral neutron nova cinder heat senlin magnum ingress
|
||||||
TOOLKIT_TPL := helm-toolkit/templates/_globals.tpl
|
TOOLKIT_TPL := helm-toolkit/templates/_globals.tpl
|
||||||
|
|
||||||
all: helm-toolkit ceph bootstrap mariadb etcd rabbitmq memcached keystone barbican glance horizon mistral neutron nova cinder heat senlin ingress
|
all: helm-toolkit ceph bootstrap mariadb etcd rabbitmq memcached keystone barbican glance horizon mistral neutron nova cinder heat senlin ingress
|
||||||
@ -56,6 +56,8 @@ heat: $(TASK)-heat
|
|||||||
|
|
||||||
senlin: $(TASK)-senlin
|
senlin: $(TASK)-senlin
|
||||||
|
|
||||||
|
magnum: $(TASK)-magnum
|
||||||
|
|
||||||
memcached: $(TASK)-memcached
|
memcached: $(TASK)-memcached
|
||||||
|
|
||||||
ingress: $(TASK)-ingress
|
ingress: $(TASK)-ingress
|
||||||
|
24
magnum/Chart.yaml
Normal file
24
magnum/Chart.yaml
Normal file
@ -0,0 +1,24 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
apiVersion: v1
|
||||||
|
description: OpenStack-Helm Magnum
|
||||||
|
name: magnum
|
||||||
|
version: 0.1.0
|
||||||
|
home: https://docs.openstack.org/developer/magnum
|
||||||
|
sources:
|
||||||
|
- https://git.openstack.org/cgit/openstack/magnum
|
||||||
|
- https://git.openstack.org/cgit/openstack/openstack-helm
|
||||||
|
maintainers:
|
||||||
|
- name: OpenStack-Helm Authors
|
18
magnum/requirements.yaml
Normal file
18
magnum/requirements.yaml
Normal file
@ -0,0 +1,18 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
dependencies:
|
||||||
|
- name: helm-toolkit
|
||||||
|
repository: http://localhost:8879/charts
|
||||||
|
version: 0.1.0
|
19
magnum/templates/bin/_db-sync.sh.tpl
Normal file
19
magnum/templates/bin/_db-sync.sh.tpl
Normal file
@ -0,0 +1,19 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
set -ex
|
||||||
|
|
||||||
|
magnum-db-manage upgrade
|
19
magnum/templates/bin/_magnum-api.sh.tpl
Normal file
19
magnum/templates/bin/_magnum-api.sh.tpl
Normal file
@ -0,0 +1,19 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
set -x
|
||||||
|
exec magnum-api \
|
||||||
|
--config-file /etc/magnum/magnum.conf
|
19
magnum/templates/bin/_magnum-conductor.sh.tpl
Normal file
19
magnum/templates/bin/_magnum-conductor.sh.tpl
Normal file
@ -0,0 +1,19 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
set -x
|
||||||
|
exec magnum-conductor \
|
||||||
|
--config-file /etc/magnum/magnum.conf
|
35
magnum/templates/configmap-bin.yaml
Normal file
35
magnum/templates/configmap-bin.yaml
Normal file
@ -0,0 +1,35 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: magnum-bin
|
||||||
|
data:
|
||||||
|
db-init.py: |
|
||||||
|
{{- include "helm-toolkit.db_init" . | indent 4 }}
|
||||||
|
db-sync.sh: |
|
||||||
|
{{ tuple "bin/_db-sync.sh.tpl" . | include "helm-toolkit.template" | indent 4 }}
|
||||||
|
ks-service.sh: |+
|
||||||
|
{{- include "helm-toolkit.keystone_service" . | indent 4 }}
|
||||||
|
ks-endpoints.sh: |+
|
||||||
|
{{- include "helm-toolkit.keystone_endpoints" . | indent 4 }}
|
||||||
|
ks-user.sh: |+
|
||||||
|
{{- include "helm-toolkit.keystone_user" . | indent 4 }}
|
||||||
|
ks-domain-user.sh: |+
|
||||||
|
{{- include "helm-toolkit.keystone_domain_user" . | indent 4 }}
|
||||||
|
magnum-api.sh: |
|
||||||
|
{{ tuple "bin/_magnum-api.sh.tpl" . | include "helm-toolkit.template" | indent 4 }}
|
||||||
|
magnum-conductor.sh: |
|
||||||
|
{{ tuple "bin/_magnum-conductor.sh.tpl" . | include "helm-toolkit.template" | indent 4 }}
|
72
magnum/templates/configmap-etc.yaml
Normal file
72
magnum/templates/configmap-etc.yaml
Normal file
@ -0,0 +1,72 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
{{- include "magnum.conf.magnum_values_skeleton" .Values.conf.magnum | trunc 0 -}}
|
||||||
|
|
||||||
|
{{- if empty .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token.auth_uri -}}
|
||||||
|
{{- tuple "identity" "internal" "api" . | include "helm-toolkit.keystone_endpoint_uri_lookup"| set .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token "auth_uri" | quote | trunc 0 -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
# FIXME(alanmeadows) fix for broken keystonemiddleware oslo config gen in newton - will remove in future
|
||||||
|
{{- if empty .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token.auth_url -}}
|
||||||
|
{{- tuple "identity" "internal" "api" . | include "helm-toolkit.keystone_endpoint_uri_lookup"| set .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token "auth_url" | quote | trunc 0 -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- if empty .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token.memcached_servers -}}
|
||||||
|
{{- tuple "oslo_cache" "internal" "memcache" . | include "helm-toolkit.hostname_endpoint_uri_lookup" | set .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token "memcached_servers" | quote | trunc 0 -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- if empty .Values.conf.magnum.database.oslo.db.connection -}}
|
||||||
|
{{- tuple "oslo_db" "internal" "user" "mysql" . | include "helm-toolkit.authenticated_endpoint_uri_lookup"| set .Values.conf.magnum.database.oslo.db "connection" | quote | trunc 0 -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
{{- if empty .Values.conf.magnum.default.oslo.messaging.transport_url -}}
|
||||||
|
{{- tuple "oslo_messaging" "internal" "user" "amqp" . | include "helm-toolkit.authenticated_endpoint_uri_lookup" | set .Values.conf.magnum.default.oslo.messaging "transport_url" | quote | trunc 0 -}}
|
||||||
|
{{- end -}}
|
||||||
|
|
||||||
|
apiVersion: v1
|
||||||
|
kind: ConfigMap
|
||||||
|
metadata:
|
||||||
|
name: magnum-etc
|
||||||
|
data:
|
||||||
|
magnum.conf: |+
|
||||||
|
{{ if .Values.conf.magnum.override -}}
|
||||||
|
{{ .Values.conf.magnum.override | indent 4 }}
|
||||||
|
{{- else -}}
|
||||||
|
{{- if .Values.conf.magnum.prefix -}}
|
||||||
|
{{ .Values.conf.magnum.prefix | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{ tuple "etc/_magnum.conf.tpl" . | include "helm-toolkit.template" | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.conf.magnum.append -}}
|
||||||
|
{{ .Values.conf.magnum.append | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
api-paste.ini: |+
|
||||||
|
{{ if .Values.conf.paste.override -}}
|
||||||
|
{{ .Values.conf.paste.override | indent 4 }}
|
||||||
|
{{- else -}}
|
||||||
|
{{- if .Values.conf.paste.prefix -}}
|
||||||
|
{{ .Values.conf.paste.prefix | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{ tuple "etc/_api-paste.ini.tpl" . | include "helm-toolkit.template" | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
{{- if .Values.conf.paste.append -}}
|
||||||
|
{{ .Values.conf.paste.append | indent 4 }}
|
||||||
|
{{- end }}
|
||||||
|
policy.json: |+
|
||||||
|
{{ if .Values.conf.policy.override -}}
|
||||||
|
{{ .Values.conf.policy.override | indent 4 }}
|
||||||
|
{{- else -}}
|
||||||
|
{{ tuple "etc/_policy.json.tpl" . | include "helm-toolkit.template" | indent 4 }}
|
||||||
|
{{- end }}
|
98
magnum/templates/deployment-api.yaml
Normal file
98
magnum/templates/deployment-api.yaml
Normal file
@ -0,0 +1,98 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
{{- $envAll := . }}
|
||||||
|
{{- $dependencies := .Values.dependencies.api }}
|
||||||
|
{{- $mounts_magnum_api := .Values.mounts.magnum_api.magnum_api }}
|
||||||
|
{{- $mounts_magnum_api_init := .Values.mounts.magnum_api.init_container }}
|
||||||
|
apiVersion: extensions/v1beta1
|
||||||
|
kind: Deployment
|
||||||
|
metadata:
|
||||||
|
name: magnum-api
|
||||||
|
spec:
|
||||||
|
replicas: {{ .Values.replicas.api }}
|
||||||
|
revisionHistoryLimit: {{ .Values.upgrades.revision_history }}
|
||||||
|
strategy:
|
||||||
|
type: {{ .Values.upgrades.pod_replacement_strategy }}
|
||||||
|
{{ if eq .Values.upgrades.pod_replacement_strategy "RollingUpdate" }}
|
||||||
|
rollingUpdate:
|
||||||
|
maxUnavailable: {{ .Values.upgrades.rolling_update.max_unavailable }}
|
||||||
|
maxSurge: {{ .Values.upgrades.rolling_update.max_surge }}
|
||||||
|
{{ end }}
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: magnum-api
|
||||||
|
annotations:
|
||||||
|
pod.beta.kubernetes.io/init-containers: '[
|
||||||
|
{{ tuple $envAll $dependencies $mounts_magnum_api_init | include "helm-toolkit.kubernetes_entrypoint_init_container" | indent 10 }}
|
||||||
|
]'
|
||||||
|
spec:
|
||||||
|
nodeSelector:
|
||||||
|
{{ .Values.labels.node_selector_key }}: {{ .Values.labels.node_selector_value }}
|
||||||
|
containers:
|
||||||
|
- name: magnum-api
|
||||||
|
image: {{ .Values.images.api }}
|
||||||
|
imagePullPolicy: {{ .Values.images.pull_policy }}
|
||||||
|
{{- if .Values.resources.enabled }}
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
memory: {{ .Values.resources.magnum_api.requests.memory | quote }}
|
||||||
|
cpu: {{ .Values.resources.magnum_api.requests.cpu | quote }}
|
||||||
|
limits:
|
||||||
|
memory: {{ .Values.resources.magnum_api.limits.memory | quote }}
|
||||||
|
cpu: {{ .Values.resources.magnum_api.limits.cpu | quote }}
|
||||||
|
{{- end }}
|
||||||
|
ports:
|
||||||
|
- containerPort: {{ .Values.conf.magnum.api.magnum.port }}
|
||||||
|
readinessProbe:
|
||||||
|
tcpSocket:
|
||||||
|
port: {{ .Values.conf.magnum.api.magnum.port }}
|
||||||
|
command:
|
||||||
|
- bash
|
||||||
|
- /tmp/magnum-api.sh
|
||||||
|
volumeMounts:
|
||||||
|
- name: magnum-bin
|
||||||
|
mountPath: /tmp/magnum-api.sh
|
||||||
|
subPath: magnum-api.sh
|
||||||
|
readOnly: true
|
||||||
|
- name: pod-etc-magnum
|
||||||
|
mountPath: /etc/magnum
|
||||||
|
- name: pod-var-cache-magnum
|
||||||
|
mountPath: /var/cache/magnum
|
||||||
|
- name: magnum-etc
|
||||||
|
mountPath: /etc/magnum/magnum.conf
|
||||||
|
subPath: magnum.conf
|
||||||
|
readOnly: true
|
||||||
|
- name: magnum-etc
|
||||||
|
mountPath: /etc/magnum/api-paste.ini
|
||||||
|
subPath: api-paste.ini
|
||||||
|
readOnly: true
|
||||||
|
- name: magnum-etc
|
||||||
|
mountPath: /etc/magnum/policy.json
|
||||||
|
subPath: policy.json
|
||||||
|
readOnly: true
|
||||||
|
{{ if $mounts_magnum_api.volumeMounts }}{{ toYaml $mounts_magnum_api.volumeMounts | indent 12 }}{{ end }}
|
||||||
|
volumes:
|
||||||
|
- name: pod-etc-magnum
|
||||||
|
emptyDir: {}
|
||||||
|
- name: pod-var-cache-magnum
|
||||||
|
emptyDir: {}
|
||||||
|
- name: magnum-bin
|
||||||
|
configMap:
|
||||||
|
name: magnum-bin
|
||||||
|
- name: magnum-etc
|
||||||
|
configMap:
|
||||||
|
name: magnum-etc
|
||||||
|
{{ if $mounts_magnum_api.volumes }}{{ toYaml $mounts_magnum_api.volumes | indent 8 }}{{ end }}
|
21
magnum/templates/etc/_api-paste.ini.tpl
Normal file
21
magnum/templates/etc/_api-paste.ini.tpl
Normal file
@ -0,0 +1,21 @@
|
|||||||
|
[pipeline:main]
|
||||||
|
pipeline = cors healthcheck request_id authtoken api_v1
|
||||||
|
|
||||||
|
[app:api_v1]
|
||||||
|
paste.app_factory = magnum.api.app:app_factory
|
||||||
|
|
||||||
|
[filter:authtoken]
|
||||||
|
acl_public_routes = /, /v1
|
||||||
|
paste.filter_factory = magnum.api.middleware.auth_token:AuthTokenMiddleware.factory
|
||||||
|
|
||||||
|
[filter:request_id]
|
||||||
|
paste.filter_factory = oslo_middleware:RequestId.factory
|
||||||
|
|
||||||
|
[filter:cors]
|
||||||
|
paste.filter_factory = oslo_middleware.cors:filter_factory
|
||||||
|
oslo_config_project = magnum
|
||||||
|
|
||||||
|
[filter:healthcheck]
|
||||||
|
paste.filter_factory = oslo_middleware:Healthcheck.factory
|
||||||
|
backends = disable_by_file
|
||||||
|
disable_by_file_path = /etc/magnum/healthcheck_disable
|
2113
magnum/templates/etc/_magnum.conf.tpl
Normal file
2113
magnum/templates/etc/_magnum.conf.tpl
Normal file
File diff suppressed because it is too large
Load Diff
51
magnum/templates/etc/_policy.json.tpl
Normal file
51
magnum/templates/etc/_policy.json.tpl
Normal file
@ -0,0 +1,51 @@
|
|||||||
|
{
|
||||||
|
"context_is_admin": "role:admin",
|
||||||
|
"admin_or_owner": "is_admin:True or project_id:%(project_id)s",
|
||||||
|
"default": "rule:admin_or_owner",
|
||||||
|
"admin_api": "rule:context_is_admin",
|
||||||
|
"admin_or_user": "is_admin:True or user_id:%(user_id)s",
|
||||||
|
"cluster_user": "user_id:%(trustee_user_id)s",
|
||||||
|
"deny_cluster_user": "not domain_id:%(trustee_domain_id)s",
|
||||||
|
|
||||||
|
"bay:create": "rule:deny_cluster_user",
|
||||||
|
"bay:delete": "rule:deny_cluster_user",
|
||||||
|
"bay:detail": "rule:deny_cluster_user",
|
||||||
|
"bay:get": "rule:deny_cluster_user",
|
||||||
|
"bay:get_all": "rule:deny_cluster_user",
|
||||||
|
"bay:update": "rule:deny_cluster_user",
|
||||||
|
|
||||||
|
"baymodel:create": "rule:deny_cluster_user",
|
||||||
|
"baymodel:delete": "rule:deny_cluster_user",
|
||||||
|
"baymodel:detail": "rule:deny_cluster_user",
|
||||||
|
"baymodel:get": "rule:deny_cluster_user",
|
||||||
|
"baymodel:get_all": "rule:deny_cluster_user",
|
||||||
|
"baymodel:update": "rule:deny_cluster_user",
|
||||||
|
"baymodel:publish": "rule:admin_or_owner",
|
||||||
|
|
||||||
|
"cluster:create": "rule:deny_cluster_user",
|
||||||
|
"cluster:delete": "rule:deny_cluster_user",
|
||||||
|
"cluster:detail": "rule:deny_cluster_user",
|
||||||
|
"cluster:get": "rule:deny_cluster_user",
|
||||||
|
"cluster:get_all": "rule:deny_cluster_user",
|
||||||
|
"cluster:update": "rule:deny_cluster_user",
|
||||||
|
|
||||||
|
"clustertemplate:create": "rule:deny_cluster_user",
|
||||||
|
"clustertemplate:delete": "rule:deny_cluster_user",
|
||||||
|
"clustertemplate:detail": "rule:deny_cluster_user",
|
||||||
|
"clustertemplate:get": "rule:deny_cluster_user",
|
||||||
|
"clustertemplate:get_all": "rule:deny_cluster_user",
|
||||||
|
"clustertemplate:update": "rule:deny_cluster_user",
|
||||||
|
"clustertemplate:publish": "rule:admin_or_owner",
|
||||||
|
|
||||||
|
"rc:create": "rule:default",
|
||||||
|
"rc:delete": "rule:default",
|
||||||
|
"rc:detail": "rule:default",
|
||||||
|
"rc:get": "rule:default",
|
||||||
|
"rc:get_all": "rule:default",
|
||||||
|
"rc:update": "rule:default",
|
||||||
|
|
||||||
|
"certificate:create": "rule:admin_or_user or rule:cluster_user",
|
||||||
|
"certificate:get": "rule:admin_or_user or rule:cluster_user",
|
||||||
|
|
||||||
|
"magnum-service:get_all": "rule:admin_api"
|
||||||
|
}
|
79
magnum/templates/job-db-init.yaml
Normal file
79
magnum/templates/job-db-init.yaml
Normal file
@ -0,0 +1,79 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
{{- $envAll := . }}
|
||||||
|
{{- $dependencies := .Values.dependencies.init }}
|
||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
name: magnum-db-init
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
pod.beta.kubernetes.io/init-containers: '[
|
||||||
|
{{ tuple $envAll $dependencies "[]" | include "helm-toolkit.kubernetes_entrypoint_init_container" | indent 10 }}
|
||||||
|
]'
|
||||||
|
spec:
|
||||||
|
restartPolicy: OnFailure
|
||||||
|
nodeSelector:
|
||||||
|
{{ .Values.labels.node_selector_key }}: {{ .Values.labels.node_selector_value }}
|
||||||
|
containers:
|
||||||
|
- name: magnum-db-init
|
||||||
|
image: {{ .Values.images.db_init | quote }}
|
||||||
|
imagePullPolicy: {{ .Values.images.pull_policy | quote }}
|
||||||
|
{{- if .Values.resources.enabled }}
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
memory: {{ .Values.resources.magnum_db_init.requests.memory | quote }}
|
||||||
|
cpu: {{ .Values.resources.magnum_db_init.requests.cpu | quote }}
|
||||||
|
limits:
|
||||||
|
memory: {{ .Values.resources.magnum_db_init.limits.memory | quote }}
|
||||||
|
cpu: {{ .Values.resources.magnum_db_init.limits.cpu | quote }}
|
||||||
|
{{- end }}
|
||||||
|
env:
|
||||||
|
- name: ROOT_DB_CONNECTION
|
||||||
|
valueFrom:
|
||||||
|
secretKeyRef:
|
||||||
|
name: magnum-db-root
|
||||||
|
key: DB_CONNECTION
|
||||||
|
- name: OPENSTACK_CONFIG_FILE
|
||||||
|
value: /etc/magnum/magnum.conf
|
||||||
|
- name: OPENSTACK_CONFIG_DB_SECTION
|
||||||
|
value: database
|
||||||
|
- name: OPENSTACK_CONFIG_DB_KEY
|
||||||
|
value: connection
|
||||||
|
command:
|
||||||
|
- python
|
||||||
|
- /tmp/db-init.py
|
||||||
|
volumeMounts:
|
||||||
|
- name: magnum-bin
|
||||||
|
mountPath: /tmp/db-init.py
|
||||||
|
subPath: db-init.py
|
||||||
|
readOnly: true
|
||||||
|
- name: etcmagnum
|
||||||
|
mountPath: /etc/magnum
|
||||||
|
- name: magnum-etc
|
||||||
|
mountPath: /etc/magnum/magnum.conf
|
||||||
|
subPath: magnum.conf
|
||||||
|
readOnly: true
|
||||||
|
volumes:
|
||||||
|
- name: etcmagnum
|
||||||
|
emptyDir: {}
|
||||||
|
- name: magnum-etc
|
||||||
|
configMap:
|
||||||
|
name: magnum-etc
|
||||||
|
- name: magnum-bin
|
||||||
|
configMap:
|
||||||
|
name: magnum-bin
|
67
magnum/templates/job-db-sync.yaml
Normal file
67
magnum/templates/job-db-sync.yaml
Normal file
@ -0,0 +1,67 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
{{- $envAll := . }}
|
||||||
|
{{- $dependencies := .Values.dependencies.db_sync }}
|
||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
name: magnum-db-sync
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
pod.beta.kubernetes.io/init-containers: '[
|
||||||
|
{{ tuple $envAll $dependencies "[]" | include "helm-toolkit.kubernetes_entrypoint_init_container" | indent 10 }}
|
||||||
|
]'
|
||||||
|
spec:
|
||||||
|
restartPolicy: OnFailure
|
||||||
|
nodeSelector:
|
||||||
|
{{ .Values.labels.node_selector_key }}: {{ .Values.labels.node_selector_value }}
|
||||||
|
containers:
|
||||||
|
- name: magnum-db-sync
|
||||||
|
image: {{ .Values.images.db_sync }}
|
||||||
|
imagePullPolicy: {{ .Values.images.pull_policy }}
|
||||||
|
{{- if .Values.resources.enabled }}
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
memory: {{ .Values.resources.magnum_db_sync.requests.memory | quote }}
|
||||||
|
cpu: {{ .Values.resources.magnum_db_sync.requests.cpu | quote }}
|
||||||
|
limits:
|
||||||
|
memory: {{ .Values.resources.magnum_db_sync.limits.memory | quote }}
|
||||||
|
cpu: {{ .Values.resources.magnum_db_sync.limits.cpu | quote }}
|
||||||
|
{{- end }}
|
||||||
|
command:
|
||||||
|
- bash
|
||||||
|
- /tmp/db-sync.sh
|
||||||
|
volumeMounts:
|
||||||
|
- name: magnum-bin
|
||||||
|
mountPath: /tmp/db-sync.sh
|
||||||
|
subPath: db-sync.sh
|
||||||
|
readOnly: true
|
||||||
|
- name: etcmagnum
|
||||||
|
mountPath: /etc/magnum
|
||||||
|
- name: magnum-etc
|
||||||
|
mountPath: /etc/magnum/magnum.conf
|
||||||
|
subPath: magnum.conf
|
||||||
|
readOnly: true
|
||||||
|
volumes:
|
||||||
|
- name: etcmagnum
|
||||||
|
emptyDir: {}
|
||||||
|
- name: magnum-etc
|
||||||
|
configMap:
|
||||||
|
name: magnum-etc
|
||||||
|
- name: magnum-bin
|
||||||
|
configMap:
|
||||||
|
name: magnum-bin
|
73
magnum/templates/job-ks-endpoints.yaml
Normal file
73
magnum/templates/job-ks-endpoints.yaml
Normal file
@ -0,0 +1,73 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
{{- $envAll := . }}
|
||||||
|
{{- $ksAdminSecret := .Values.keystone_secrets.admin }}
|
||||||
|
{{- $dependencies := .Values.dependencies.ks_endpoints }}
|
||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
name: magnum-ks-endpoints
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
pod.beta.kubernetes.io/init-containers: '[
|
||||||
|
{{ tuple $envAll $dependencies "[]" | include "helm-toolkit.kubernetes_entrypoint_init_container" | indent 10 }}
|
||||||
|
]'
|
||||||
|
spec:
|
||||||
|
restartPolicy: OnFailure
|
||||||
|
nodeSelector:
|
||||||
|
{{ .Values.labels.node_selector_key }}: {{ .Values.labels.node_selector_value }}
|
||||||
|
containers:
|
||||||
|
{{- range $key1, $osServiceType := tuple "container-infra" }}
|
||||||
|
{{- range $key2, $osServiceEndPoint := tuple "admin" "internal" "public" }}
|
||||||
|
- name: {{ $osServiceType }}-ks-endpoints-{{ $osServiceEndPoint }}
|
||||||
|
image: {{ $envAll.Values.images.ks_endpoints }}
|
||||||
|
imagePullPolicy: {{ $envAll.Values.images.pull_policy }}
|
||||||
|
{{- if $envAll.Values.resources.enabled }}
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
memory: {{ $envAll.Values.resources.magnum_ks_endpoints.requests.memory | quote }}
|
||||||
|
cpu: {{ $envAll.Values.resources.magnum_ks_endpoints.requests.cpu | quote }}
|
||||||
|
limits:
|
||||||
|
memory: {{ $envAll.Values.resources.magnum_ks_endpoints.limits.memory | quote }}
|
||||||
|
cpu: {{ $envAll.Values.resources.magnum_ks_endpoints.limits.cpu | quote }}
|
||||||
|
{{- end }}
|
||||||
|
command:
|
||||||
|
- bash
|
||||||
|
- /tmp/ks-endpoints.sh
|
||||||
|
volumeMounts:
|
||||||
|
- name: ks-endpoints-sh
|
||||||
|
mountPath: /tmp/ks-endpoints.sh
|
||||||
|
subPath: ks-endpoints.sh
|
||||||
|
readOnly: true
|
||||||
|
env:
|
||||||
|
{{- with $env := dict "ksUserSecret" $ksAdminSecret }}
|
||||||
|
{{- include "helm-toolkit.keystone_openrc_env_vars" $env | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
- name: OS_SVC_ENDPOINT
|
||||||
|
value: {{ $osServiceEndPoint }}
|
||||||
|
- name: OS_SERVICE_NAME
|
||||||
|
value: {{ tuple $osServiceType $envAll | include "helm-toolkit.keystone_endpoint_name_lookup" }}
|
||||||
|
- name: OS_SERVICE_TYPE
|
||||||
|
value: {{ $osServiceType }}
|
||||||
|
- name: OS_SERVICE_ENDPOINT
|
||||||
|
value: {{ tuple $osServiceType $osServiceEndPoint "api" $envAll | include "helm-toolkit.keystone_endpoint_uri_lookup" }}
|
||||||
|
{{- end }}
|
||||||
|
{{- end }}
|
||||||
|
volumes:
|
||||||
|
- name: ks-endpoints-sh
|
||||||
|
configMap:
|
||||||
|
name: magnum-bin
|
67
magnum/templates/job-ks-service.yaml
Normal file
67
magnum/templates/job-ks-service.yaml
Normal file
@ -0,0 +1,67 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
{{- $envAll := . }}
|
||||||
|
{{- $ksAdminSecret := .Values.keystone_secrets.admin }}
|
||||||
|
{{- $dependencies := .Values.dependencies.ks_service }}
|
||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
name: magnum-ks-service
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
pod.beta.kubernetes.io/init-containers: '[
|
||||||
|
{{ tuple $envAll $dependencies "[]" | include "helm-toolkit.kubernetes_entrypoint_init_container" | indent 10 }}
|
||||||
|
]'
|
||||||
|
spec:
|
||||||
|
restartPolicy: OnFailure
|
||||||
|
nodeSelector:
|
||||||
|
{{ .Values.labels.node_selector_key }}: {{ .Values.labels.node_selector_value }}
|
||||||
|
containers:
|
||||||
|
{{- range $key1, $osServiceType := tuple "container-infra" }}
|
||||||
|
- name: {{ $osServiceType }}-ks-service-registration
|
||||||
|
image: {{ $envAll.Values.images.ks_service }}
|
||||||
|
imagePullPolicy: {{ $envAll.Values.images.pull_policy }}
|
||||||
|
{{- if $envAll.Values.resources.enabled }}
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
memory: {{ $envAll.Values.resources.magnum_ks_service.requests.memory | quote }}
|
||||||
|
cpu: {{ $envAll.Values.resources.magnum_ks_service.requests.cpu | quote }}
|
||||||
|
limits:
|
||||||
|
memory: {{ $envAll.Values.resources.magnum_ks_service.limits.memory | quote }}
|
||||||
|
cpu: {{ $envAll.Values.resources.magnum_ks_service.limits.cpu | quote }}
|
||||||
|
{{- end }}
|
||||||
|
command:
|
||||||
|
- bash
|
||||||
|
- /tmp/ks-service.sh
|
||||||
|
volumeMounts:
|
||||||
|
- name: ks-service-sh
|
||||||
|
mountPath: /tmp/ks-service.sh
|
||||||
|
subPath: ks-service.sh
|
||||||
|
readOnly: true
|
||||||
|
env:
|
||||||
|
{{- with $env := dict "ksUserSecret" $ksAdminSecret }}
|
||||||
|
{{- include "helm-toolkit.keystone_openrc_env_vars" $env | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
- name: OS_SERVICE_NAME
|
||||||
|
value: {{ tuple $osServiceType $envAll | include "helm-toolkit.keystone_endpoint_name_lookup" }}
|
||||||
|
- name: OS_SERVICE_TYPE
|
||||||
|
value: {{ $osServiceType }}
|
||||||
|
{{- end }}
|
||||||
|
volumes:
|
||||||
|
- name: ks-service-sh
|
||||||
|
configMap:
|
||||||
|
name: magnum-bin
|
69
magnum/templates/job-ks-user.yaml
Normal file
69
magnum/templates/job-ks-user.yaml
Normal file
@ -0,0 +1,69 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
{{- $ksAdminSecret := .Values.keystone.admin_secret | default "magnum-env-keystone-admin" }}
|
||||||
|
{{- $ksUserSecret := .Values.keystone.user_secret | default "magnum-env-keystone-user" }}
|
||||||
|
{{- $envAll := . }}
|
||||||
|
{{- $dependencies := .Values.dependencies.ks_user }}
|
||||||
|
apiVersion: batch/v1
|
||||||
|
kind: Job
|
||||||
|
metadata:
|
||||||
|
name: magnum-ks-user
|
||||||
|
spec:
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
annotations:
|
||||||
|
pod.beta.kubernetes.io/init-containers: '[
|
||||||
|
{{ tuple $envAll $dependencies "[]" | include "helm-toolkit.kubernetes_entrypoint_init_container" | indent 10 }}
|
||||||
|
]'
|
||||||
|
spec:
|
||||||
|
restartPolicy: OnFailure
|
||||||
|
nodeSelector:
|
||||||
|
{{ .Values.labels.node_selector_key }}: {{ .Values.labels.node_selector_value }}
|
||||||
|
containers:
|
||||||
|
- name: magnum-ks-user
|
||||||
|
image: {{ .Values.images.ks_user }}
|
||||||
|
imagePullPolicy: {{ .Values.images.pull_policy }}
|
||||||
|
{{- if .Values.resources.enabled }}
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
memory: {{ .Values.resources.magnum_ks_user.requests.memory | quote }}
|
||||||
|
cpu: {{ .Values.resources.magnum_ks_user.requests.cpu | quote }}
|
||||||
|
limits:
|
||||||
|
memory: {{ .Values.resources.magnum_ks_user.limits.memory | quote }}
|
||||||
|
cpu: {{ .Values.resources.magnum_ks_user.limits.cpu | quote }}
|
||||||
|
{{- end }}
|
||||||
|
command:
|
||||||
|
- bash
|
||||||
|
- /tmp/ks-user.sh
|
||||||
|
volumeMounts:
|
||||||
|
- name: ks-user-sh
|
||||||
|
mountPath: /tmp/ks-user.sh
|
||||||
|
subPath: ks-user.sh
|
||||||
|
readOnly: true
|
||||||
|
env:
|
||||||
|
{{- with $env := dict "ksUserSecret" $ksAdminSecret }}
|
||||||
|
{{- include "helm-toolkit.keystone_openrc_env_vars" $env | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
- name: SERVICE_OS_SERVICE_NAME
|
||||||
|
value: "magnum"
|
||||||
|
{{- with $env := dict "ksUserSecret" $ksUserSecret }}
|
||||||
|
{{- include "helm-toolkit.keystone_user_create_env_vars" $env | indent 12 }}
|
||||||
|
{{- end }}
|
||||||
|
- name: SERVICE_OS_ROLE
|
||||||
|
value: {{ .Values.keystone.magnum_user_role | quote }}
|
||||||
|
volumes:
|
||||||
|
- name: ks-user-sh
|
||||||
|
configMap:
|
||||||
|
name: magnum-bin
|
7
magnum/templates/secret-db-root.env.yaml
Normal file
7
magnum/templates/secret-db-root.env.yaml
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: magnum-db-root
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
DB_CONNECTION: {{ tuple "oslo_db" "internal" "admin" "mysql" . | include "helm-toolkit.authenticated_endpoint_uri_lookup" | b64enc }}
|
34
magnum/templates/secret-keystone-admin.env.yaml
Normal file
34
magnum/templates/secret-keystone-admin.env.yaml
Normal file
@ -0,0 +1,34 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: {{ .Values.keystone_secrets.admin }}
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
OS_AUTH_URL: |
|
||||||
|
{{ tuple "identity" "admin" "admin" . | include "helm-toolkit.keystone_endpoint_uri_lookup" | b64enc | indent 4 }}
|
||||||
|
OS_REGION_NAME: |
|
||||||
|
{{ .Values.keystone.admin_region_name | b64enc | indent 4 }}
|
||||||
|
OS_PROJECT_DOMAIN_NAME: |
|
||||||
|
{{ .Values.keystone.admin_project_domain | b64enc | indent 4 }}
|
||||||
|
OS_PROJECT_NAME: |
|
||||||
|
{{ .Values.keystone.admin_project_name | b64enc | indent 4 }}
|
||||||
|
OS_USER_DOMAIN_NAME: |
|
||||||
|
{{ .Values.keystone.admin_user_domain | b64enc | indent 4 }}
|
||||||
|
OS_USERNAME: |
|
||||||
|
{{ .Values.keystone.admin_user | b64enc | indent 4 }}
|
||||||
|
OS_PASSWORD: |
|
||||||
|
{{ .Values.keystone.admin_password | b64enc | indent 4 }}
|
34
magnum/templates/secret-keystone-user.env.yaml
Normal file
34
magnum/templates/secret-keystone-user.env.yaml
Normal file
@ -0,0 +1,34 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Secret
|
||||||
|
metadata:
|
||||||
|
name: {{ .Values.keystone_secrets.user }}
|
||||||
|
type: Opaque
|
||||||
|
data:
|
||||||
|
OS_AUTH_URL: |
|
||||||
|
{{ tuple "identity" "internal" "api" . | include "helm-toolkit.keystone_endpoint_uri_lookup" | b64enc | indent 4 }}
|
||||||
|
OS_REGION_NAME: |
|
||||||
|
{{ .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token.region_name | b64enc | indent 4 }}
|
||||||
|
OS_PROJECT_DOMAIN_NAME: |
|
||||||
|
{{ .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token.project_domain_name | b64enc | indent 4 }}
|
||||||
|
OS_PROJECT_NAME: |
|
||||||
|
{{ .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token.project_name | b64enc | indent 4 }}
|
||||||
|
OS_USER_DOMAIN_NAME: |
|
||||||
|
{{ .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token.user_domain_name | b64enc | indent 4 }}
|
||||||
|
OS_USERNAME: |
|
||||||
|
{{ .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token.username | b64enc | indent 4 }}
|
||||||
|
OS_PASSWORD: |
|
||||||
|
{{ .Values.conf.magnum.keystone_authtoken.keystonemiddleware.auth_token.password | b64enc | indent 4 }}
|
29
magnum/templates/service-api.yaml
Normal file
29
magnum/templates/service-api.yaml
Normal file
@ -0,0 +1,29 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
apiVersion: v1
|
||||||
|
kind: Service
|
||||||
|
metadata:
|
||||||
|
name: magnum-api
|
||||||
|
spec:
|
||||||
|
ports:
|
||||||
|
- port: {{ .Values.conf.magnum.api.magnum.port }}
|
||||||
|
{{ if .Values.network.api.node_port.enabled }}
|
||||||
|
nodePort: {{ .Values.network.api.node_port.port }}
|
||||||
|
{{ end }}
|
||||||
|
selector:
|
||||||
|
app: magnum-api
|
||||||
|
{{ if .Values.network.api.node_port.enabled }}
|
||||||
|
type: NodePort
|
||||||
|
{{ end }}
|
82
magnum/templates/statefulset-conductor.yaml
Normal file
82
magnum/templates/statefulset-conductor.yaml
Normal file
@ -0,0 +1,82 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
{{- $envAll := . }}
|
||||||
|
{{- $dependencies := .Values.dependencies.conductor }}
|
||||||
|
{{- $mounts_magnum_conductor := .Values.mounts.magnum_conductor.magnum_conductor }}
|
||||||
|
{{- $mounts_magnum_conductor_init := .Values.mounts.magnum_conductor.init_container }}
|
||||||
|
apiVersion: apps/v1beta1
|
||||||
|
kind: StatefulSet
|
||||||
|
metadata:
|
||||||
|
name: magnum-conductor
|
||||||
|
spec:
|
||||||
|
serviceName: magnum-conductor
|
||||||
|
replicas: {{ .Values.replicas.conductor }}
|
||||||
|
template:
|
||||||
|
metadata:
|
||||||
|
labels:
|
||||||
|
app: magnum-conductor
|
||||||
|
annotations:
|
||||||
|
pod.beta.kubernetes.io/init-containers: '[
|
||||||
|
{{ tuple $envAll $dependencies $mounts_magnum_conductor_init | include "helm-toolkit.kubernetes_entrypoint_init_container" | indent 10 }}
|
||||||
|
]'
|
||||||
|
spec:
|
||||||
|
nodeSelector:
|
||||||
|
{{ .Values.labels.node_selector_key }}: {{ .Values.labels.node_selector_value }}
|
||||||
|
containers:
|
||||||
|
- name: magnum-conductor
|
||||||
|
image: {{ .Values.images.conductor }}
|
||||||
|
imagePullPolicy: {{ .Values.images.pull_policy }}
|
||||||
|
{{- if .Values.resources.enabled }}
|
||||||
|
resources:
|
||||||
|
requests:
|
||||||
|
memory: {{ .Values.resources.magnum_conductor.requests.memory | quote }}
|
||||||
|
cpu: {{ .Values.resources.magnum_conductor.requests.cpu | quote }}
|
||||||
|
limits:
|
||||||
|
memory: {{ .Values.resources.magnum_conductor.limits.memory | quote }}
|
||||||
|
cpu: {{ .Values.resources.magnum_conductor.limits.cpu | quote }}
|
||||||
|
{{- end }}
|
||||||
|
command:
|
||||||
|
- bash
|
||||||
|
- /tmp/magnum-conductor.sh
|
||||||
|
volumeMounts:
|
||||||
|
- name: magnum-bin
|
||||||
|
mountPath: /tmp/magnum-conductor.sh
|
||||||
|
subPath: magnum-conductor.sh
|
||||||
|
readOnly: true
|
||||||
|
- name: pod-etc-magnum
|
||||||
|
mountPath: /etc/magnum
|
||||||
|
- name: pod-var-cache-magnum
|
||||||
|
mountPath: /var/cache/magnum
|
||||||
|
- name: magnum-etc
|
||||||
|
mountPath: /etc/magnum/magnum.conf
|
||||||
|
subPath: magnum.conf
|
||||||
|
readOnly: true
|
||||||
|
- name: magnum-etc
|
||||||
|
mountPath: /etc/magnum/policy.json
|
||||||
|
subPath: policy.json
|
||||||
|
readOnly: true
|
||||||
|
{{ if $mounts_magnum_conductor.volumeMounts }}{{ toYaml $mounts_magnum_conductor.volumeMounts | indent 12 }}{{ end }}
|
||||||
|
volumes:
|
||||||
|
- name: pod-etc-magnum
|
||||||
|
emptyDir: {}
|
||||||
|
- name: pod-var-cache-magnum
|
||||||
|
emptyDir: {}
|
||||||
|
- name: magnum-bin
|
||||||
|
configMap:
|
||||||
|
name: magnum-bin
|
||||||
|
- name: magnum-etc
|
||||||
|
configMap:
|
||||||
|
name: magnum-etc
|
||||||
|
{{ if $mounts_magnum_conductor.volumes }}{{ toYaml $mounts_magnum_conductor.volumes | indent 8 }}{{ end }}
|
247
magnum/values.yaml
Normal file
247
magnum/values.yaml
Normal file
@ -0,0 +1,247 @@
|
|||||||
|
# Copyright 2017 The Openstack-Helm Authors.
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
# Default values for keystone.
|
||||||
|
# This is a YAML-formatted file.
|
||||||
|
# Declare name/value pairs to be passed into your templates.
|
||||||
|
# name: value
|
||||||
|
|
||||||
|
|
||||||
|
replicas:
|
||||||
|
api: 1
|
||||||
|
conductor: 1
|
||||||
|
|
||||||
|
labels:
|
||||||
|
node_selector_key: openstack-control-plane
|
||||||
|
node_selector_value: enabled
|
||||||
|
|
||||||
|
images:
|
||||||
|
db_init: docker.io/kolla/ubuntu-source-magnum-api:3.0.3
|
||||||
|
db_sync: docker.io/kolla/ubuntu-source-magnum-api:3.0.3
|
||||||
|
ks_user: docker.io/kolla/ubuntu-source-kolla-toolbox:3.0.3
|
||||||
|
ks_service: docker.io/kolla/ubuntu-source-kolla-toolbox:3.0.3
|
||||||
|
ks_endpoints: docker.io/kolla/ubuntu-source-kolla-toolbox:3.0.3
|
||||||
|
api: docker.io/kolla/ubuntu-source-magnum-api:3.0.3
|
||||||
|
conductor: docker.io/kolla/ubuntu-source-magnum-conductor:3.0.3
|
||||||
|
dep_check: docker.io/kolla/ubuntu-source-kubernetes-entrypoint:4.0.0
|
||||||
|
pull_policy: "IfNotPresent"
|
||||||
|
|
||||||
|
upgrades:
|
||||||
|
revision_history: 3
|
||||||
|
pod_replacement_strategy: RollingUpdate
|
||||||
|
rolling_update:
|
||||||
|
max_unavailable: 1
|
||||||
|
max_surge: 3
|
||||||
|
|
||||||
|
keystone_secrets:
|
||||||
|
admin: "magnum-env-keystone-admin"
|
||||||
|
user: "magnum-env-keystone-user"
|
||||||
|
|
||||||
|
keystone:
|
||||||
|
admin_user: "admin"
|
||||||
|
admin_user_domain: "default"
|
||||||
|
admin_password: "password"
|
||||||
|
admin_project_name: "admin"
|
||||||
|
admin_project_domain: "default"
|
||||||
|
admin_region_name: "RegionOne"
|
||||||
|
|
||||||
|
magnum_user_role: "admin"
|
||||||
|
|
||||||
|
conf:
|
||||||
|
paste:
|
||||||
|
override:
|
||||||
|
append:
|
||||||
|
policy:
|
||||||
|
override:
|
||||||
|
append:
|
||||||
|
magnum:
|
||||||
|
override:
|
||||||
|
append:
|
||||||
|
keystone_authtoken:
|
||||||
|
keystonemiddleware:
|
||||||
|
auth_token:
|
||||||
|
auth_type: password
|
||||||
|
auth_version: v3
|
||||||
|
region_name: RegionOne
|
||||||
|
project_domain_name: default
|
||||||
|
project_name: service
|
||||||
|
user_domain_name: default
|
||||||
|
username: magnum
|
||||||
|
password: password
|
||||||
|
api:
|
||||||
|
magnum:
|
||||||
|
port: 9511
|
||||||
|
host: 0.0.0.0
|
||||||
|
|
||||||
|
network:
|
||||||
|
api:
|
||||||
|
name: "magnum-api"
|
||||||
|
proto: "http"
|
||||||
|
node_port:
|
||||||
|
enabled: false
|
||||||
|
port: 30511
|
||||||
|
|
||||||
|
dependencies:
|
||||||
|
db_init:
|
||||||
|
jobs:
|
||||||
|
- mariadb-seed
|
||||||
|
service:
|
||||||
|
- mariadb
|
||||||
|
db_sync:
|
||||||
|
jobs:
|
||||||
|
- magnum-db-init
|
||||||
|
service:
|
||||||
|
- mariadb
|
||||||
|
ks_user:
|
||||||
|
service:
|
||||||
|
- keystone-api
|
||||||
|
ks_service:
|
||||||
|
service:
|
||||||
|
- keystone-api
|
||||||
|
ks_endpoints:
|
||||||
|
jobs:
|
||||||
|
- magnum-ks-service
|
||||||
|
service:
|
||||||
|
- keystone-api
|
||||||
|
api:
|
||||||
|
jobs:
|
||||||
|
- magnum-db-sync
|
||||||
|
- magnum-ks-user
|
||||||
|
- magnum-ks-endpoints
|
||||||
|
service:
|
||||||
|
- keystone-api
|
||||||
|
- mariadb
|
||||||
|
conductor:
|
||||||
|
jobs:
|
||||||
|
- magnum-db-sync
|
||||||
|
- magnum-ks-user
|
||||||
|
- magnum-ks-endpoints
|
||||||
|
service:
|
||||||
|
- keystone-api
|
||||||
|
- mariadb
|
||||||
|
|
||||||
|
# typically overriden by environmental
|
||||||
|
# values, but should include all endpoints
|
||||||
|
# required by this chart
|
||||||
|
endpoints:
|
||||||
|
identity:
|
||||||
|
name: keystone
|
||||||
|
hosts:
|
||||||
|
default: keystone-api
|
||||||
|
path: /v3
|
||||||
|
scheme: 'http'
|
||||||
|
port:
|
||||||
|
admin: 35357
|
||||||
|
api: 5000
|
||||||
|
container-infra:
|
||||||
|
name: magnum
|
||||||
|
hosts:
|
||||||
|
default: magnum-api
|
||||||
|
path: /v1
|
||||||
|
scheme: 'http'
|
||||||
|
port:
|
||||||
|
api: 9511
|
||||||
|
oslo_db:
|
||||||
|
auth:
|
||||||
|
admin:
|
||||||
|
username: root
|
||||||
|
password: password
|
||||||
|
user:
|
||||||
|
username: magnum
|
||||||
|
password: password
|
||||||
|
hosts:
|
||||||
|
default: mariadb
|
||||||
|
path: /magnum
|
||||||
|
scheme: mysql+pymysql
|
||||||
|
port:
|
||||||
|
mysql: 3306
|
||||||
|
oslo_cache:
|
||||||
|
hosts:
|
||||||
|
default: memcache
|
||||||
|
port:
|
||||||
|
memcache: 11211
|
||||||
|
oslo_messaging:
|
||||||
|
auth:
|
||||||
|
admin:
|
||||||
|
username: admin
|
||||||
|
password: password
|
||||||
|
user:
|
||||||
|
username: rabbitmq
|
||||||
|
password: password
|
||||||
|
hosts:
|
||||||
|
default: rabbitmq
|
||||||
|
path: /
|
||||||
|
scheme: rabbit
|
||||||
|
port:
|
||||||
|
amqp: 5672
|
||||||
|
|
||||||
|
resources:
|
||||||
|
enabled: false
|
||||||
|
magnum_api:
|
||||||
|
requests:
|
||||||
|
memory: "124Mi"
|
||||||
|
cpu: "100m"
|
||||||
|
limits:
|
||||||
|
memory: "1024Mi"
|
||||||
|
cpu: "2000m"
|
||||||
|
magnum_db_init:
|
||||||
|
requests:
|
||||||
|
memory: "124Mi"
|
||||||
|
cpu: "100m"
|
||||||
|
limits:
|
||||||
|
memory: "1024Mi"
|
||||||
|
cpu: "2000m"
|
||||||
|
magnum_db_sync:
|
||||||
|
requests:
|
||||||
|
memory: "124Mi"
|
||||||
|
cpu: "100m"
|
||||||
|
limits:
|
||||||
|
memory: "1024Mi"
|
||||||
|
cpu: "2000m"
|
||||||
|
magnum_ks_endpoints:
|
||||||
|
requests:
|
||||||
|
memory: "124Mi"
|
||||||
|
cpu: "100m"
|
||||||
|
limits:
|
||||||
|
memory: "1024Mi"
|
||||||
|
cpu: "2000m"
|
||||||
|
magnum_ks_service:
|
||||||
|
requests:
|
||||||
|
memory: "124Mi"
|
||||||
|
cpu: "100m"
|
||||||
|
limits:
|
||||||
|
memory: "1024Mi"
|
||||||
|
cpu: "2000m"
|
||||||
|
magnum_ks_user:
|
||||||
|
requests:
|
||||||
|
memory: "124Mi"
|
||||||
|
cpu: "100m"
|
||||||
|
limits:
|
||||||
|
memory: "1024Mi"
|
||||||
|
cpu: "2000m"
|
||||||
|
magnum_conductor:
|
||||||
|
requests:
|
||||||
|
memory: "124Mi"
|
||||||
|
cpu: "100m"
|
||||||
|
limits:
|
||||||
|
memory: "1024Mi"
|
||||||
|
cpu: "2000m"
|
||||||
|
|
||||||
|
mounts:
|
||||||
|
magnum_api:
|
||||||
|
init_container: null
|
||||||
|
magnum_api:
|
||||||
|
magnum_conductor:
|
||||||
|
init_container: null
|
||||||
|
magnum_conductor:
|
Loading…
Reference in New Issue
Block a user