da7bc575ec
This introduces a mechanism for generating the logging.conf file for the openstack services via the values. This allows us to define loggers, handlers, and formatters for the services and the modules they're composed of. This also allows us to take advantage of the oslo fluent handler and formatter. The fluent handler and formatter give us the following benefits: sending logs directly to fluentd instead of routed to stdout/stderr and then through fluentbit to fluentd, project specific tags on the logged events (enables us to define more robust filters in fluentd for aggregation if required), full traceback support, and additional metadata (modules that created logged event, etc) Depends-On: https://review.openstack.org/577796 Change-Id: I63340ce6b03191d93a74d9ac6947f0b49b8a1a39
116 lines
4.1 KiB
YAML
116 lines
4.1 KiB
YAML
{{/*
|
|
Copyright 2017 The Openstack-Helm Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/}}
|
|
|
|
{{- if .Values.manifests.job_credential_setup }}
|
|
{{- $envAll := . }}
|
|
|
|
{{- $mounts_keystone_credential_setup := .Values.pod.mounts.keystone_credential_setup.keystone_credential_setup }}
|
|
{{- $mounts_keystone_credential_setup_init := .Values.pod.mounts.keystone_credential_setup.init_container }}
|
|
|
|
{{- $serviceAccountName := "keystone-credential-setup" }}
|
|
{{ tuple $envAll "credential_setup" $serviceAccountName | include "helm-toolkit.snippets.kubernetes_pod_rbac_serviceaccount" }}
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
kind: Role
|
|
metadata:
|
|
name: {{ $serviceAccountName }}
|
|
rules:
|
|
- apiGroups:
|
|
- ""
|
|
resources:
|
|
- secrets
|
|
verbs:
|
|
- get
|
|
- list
|
|
- create
|
|
- update
|
|
---
|
|
apiVersion: rbac.authorization.k8s.io/v1beta1
|
|
kind: RoleBinding
|
|
metadata:
|
|
name: {{ $serviceAccountName }}
|
|
roleRef:
|
|
apiGroup: rbac.authorization.k8s.io
|
|
kind: Role
|
|
name: {{ $serviceAccountName }}
|
|
subjects:
|
|
- kind: ServiceAccount
|
|
name: {{ $serviceAccountName }}
|
|
namespace: {{ $envAll.Release.Namespace }}
|
|
---
|
|
apiVersion: batch/v1
|
|
kind: Job
|
|
metadata:
|
|
name: keystone-credential-setup
|
|
spec:
|
|
template:
|
|
metadata:
|
|
labels:
|
|
{{ tuple $envAll "keystone" "credential-setup" | include "helm-toolkit.snippets.kubernetes_metadata_labels" | indent 8 }}
|
|
spec:
|
|
serviceAccountName: {{ $serviceAccountName }}
|
|
initContainers:
|
|
{{ tuple $envAll "credential_setup" $mounts_keystone_credential_setup_init | include "helm-toolkit.snippets.kubernetes_entrypoint_init_container" | indent 8 }}
|
|
restartPolicy: OnFailure
|
|
nodeSelector:
|
|
{{ .Values.labels.job.node_selector_key }}: {{ .Values.labels.job.node_selector_value }}
|
|
containers:
|
|
- name: keystone-credential-setup
|
|
{{ tuple $envAll "keystone_credential_setup" | include "helm-toolkit.snippets.image" | indent 10 }}
|
|
{{ tuple $envAll $envAll.Values.pod.resources.jobs.credential_setup | include "helm-toolkit.snippets.kubernetes_resources" | indent 10 }}
|
|
env:
|
|
- name: KEYSTONE_USER
|
|
value: {{ .Values.jobs.credential_setup.user | quote }}
|
|
- name: KEYSTONE_GROUP
|
|
value: {{ .Values.jobs.credential_setup.group | quote }}
|
|
- name: KUBERNETES_NAMESPACE
|
|
value: {{ .Release.Namespace | quote }}
|
|
- name: KEYSTONE_KEYS_REPOSITORY
|
|
value: {{ .Values.conf.keystone.credential.key_repository | quote }}
|
|
command:
|
|
- python
|
|
- /tmp/fernet-manage.py
|
|
- credential_setup
|
|
volumeMounts:
|
|
- name: etckeystone
|
|
mountPath: /etc/keystone
|
|
- name: keystone-etc
|
|
mountPath: /etc/keystone/keystone.conf
|
|
subPath: keystone.conf
|
|
readOnly: true
|
|
- name: keystone-etc
|
|
mountPath: {{ .Values.conf.keystone.DEFAULT.log_config_append }}
|
|
subPath: {{ base .Values.conf.keystone.DEFAULT.log_config_append }}
|
|
readOnly: true
|
|
- name: keystone-bin
|
|
mountPath: /tmp/fernet-manage.py
|
|
subPath: fernet-manage.py
|
|
readOnly: true
|
|
{{ if $mounts_keystone_credential_setup.volumeMounts }}{{ toYaml $mounts_keystone_credential_setup.volumeMounts | indent 10 }}{{ end }}
|
|
volumes:
|
|
- name: etckeystone
|
|
emptyDir: {}
|
|
- name: keystone-etc
|
|
configMap:
|
|
name: keystone-etc
|
|
defaultMode: 0444
|
|
- name: keystone-bin
|
|
configMap:
|
|
name: keystone-bin
|
|
defaultMode: 0555
|
|
{{ if $mounts_keystone_credential_setup.volumes }}{{ toYaml $mounts_keystone_credential_setup.volumes | indent 6 }}{{ end }}
|
|
{{- end }}
|