https://wiki.openstack.org/w/index.php?title=Special:NewPages&feed=atom&limit=50&offset=&namespace=0&username=&tagfilter=
OpenStack - New pages [en]
2024-03-29T06:04:02Z
From OpenStack
MediaWiki 1.28.2
https://wiki.openstack.org/wiki/Nova/2024.2_Release_Schedule
Nova/2024.2 Release Schedule
2024-03-17T13:44:01Z
<p>Takashi Natsume: Created page with "= Dates Overview = Nova follows the [https://releases.openstack.org/dalmatian/schedule.html general release schedule]. * Apr 08 - Apr 12: Virtual PTG * May 13 - May 17: Dalm..."</p>
<hr />
<div>= Dates Overview =<br />
<br />
Nova follows the [https://releases.openstack.org/dalmatian/schedule.html general release schedule].<br />
<br />
* Apr 08 - Apr 12: Virtual PTG<br />
* May 13 - May 17: Dalmatian-1 milestone<br />
* Jul 01 - Jul 05: Dalmatian-2 milestone, nova spec freeze<br />
* Aug 19 - Aug 23: Final release for non-client libraries (oslo, os-vif, etc)<br />
* Aug 26 - Aug 30: Dalmatian-3 milestone, Feature Freeze, final python-novaclient release, requirements freeze, Soft String Freeze<br />
* Sep 09 - Sep 13: RC1<br />
* Sep 23 - Sep 27: Last release candidate<br />
* Sep 30 - Oct 04: 2024.2 Dalmatian release<br />
<br />
= FAQs =<br />
<br />
Please see: [https://docs.openstack.org/nova/latest/contributor/process.html Nova team process] and [[Nova/Mentoring]]</div>
Takashi Natsume
https://wiki.openstack.org/wiki/OSSN/OSSN-0093
OSSN/OSSN-0093
2024-03-06T22:38:58Z
<p>Fungi: /* Contacts / References */ add assigned cve</p>
<hr />
<div>== Unsafe Environment Handling in MuranoPL ==<br />
<br />
=== Summary ===<br />
<br />
The Murano service's MuranoPL extension to the YAQL language fails to sanitize the supplied environment, leading to potential leakage of sensitive service account information. Murano is an inactive project, so no fix is currently under development for this vulnerability. It is strongly recommended that any OpenStack deployments disable or fully remove Murano, if installed, at the earliest opportunity.<br />
<br />
=== Affected Services / Software === <br />
<br />
Murano (all versions)<br />
<br />
=== Discussion === <br />
<br />
The YAQL interpreter project has released a new major version (3.0.0) which removes support for format strings, a feature necessary to exploit this condition in MuranoPL. Because Murano is not considered under active maintenance in OpenStack, its complete removal from all deployments is still strongly advised.<br />
<br />
Note that this behavior change in YAQL means configurations relying on string formatting will no longer be interpreted the same after upgrading, which could cause them to not work as intended by their users in services which accept YAQL (including Heat and Mistral). Reliance on that feature is considered to be unusual, but users should be made aware in case it negatively impacts their configuration.<br />
<br />
=== Recommended Actions === <br />
<br />
Disable the Murano service in, or fully remove it from, all OpenStack deployments at the earliest opportunity.<br />
<br />
=== Credits ===<br />
kirualawliet and Zhiniang Peng (@edwardzpeng) from Sangfor Security Research Team<br />
<br />
=== Contacts / References === <br />
<br />
'''Author:'''<br />
* Jeremy Stanley, OpenStack Vulnerability Coordinator<br />
<br />
<br />
This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0093<br />
<br />
Original LaunchPad Bug : https://launchpad.net/bugs/2048114<br />
<br />
Mailing List : [security-sig] openstack-discuss@lists.openstack.org<br />
<br />
CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29156</div>
Fungi
https://wiki.openstack.org/wiki/I18nTeam/Migration-to-weblate
I18nTeam/Migration-to-weblate
2024-01-31T09:00:58Z
<p>Brian-rosmaita: added description for weblate_users.py</p>
<hr />
<div>== Migration to weblate ==<br />
<br />
=== Who's joining the migration project ===<br />
* Ian Y. Choi (Manager)<br />
* Seongsoo Cho<br />
* Kuemjong Jeong<br />
* Nayeon Kim<br />
* Sion Shin<br />
<br />
=== Planning a weblate migration schedule ===<br />
You can find more details about each task below.<br />
<br />
* Define the scope of target test projects<br />
** All vs. a few projects (e.g., openstack-manuals, nova, i18n, horizon)<br />
* Make Translation Infrastructure Scripts compatible with Weblate<br />
** Weblate project creation with settings if the target project is not existing on the platform<br />
*** (If it is not supported, Weblate projects will be created manually)<br />
*** Testing needs to be performed locally, since the scripts are executed on 06:00 UTC daily.<br />
* ZuuL Integration Test<br />
** Determine when to test (e.g., Test methodology without waiting at 06:00 UTC?)<br />
** Integration test with all translation target projects<br />
* Making tools for extracting statistical data from Weblate<br />
<br />
=== Action Item ===<br />
<br />
==== Define the scope of target test projects ====<br />
* Configure Weblate with the information set in Zanata.<br />
* User information is not migrated.<br />
<br />
==== Make Translation Infrastructure Scripts compatible with Weblate ====<br />
* WIP patch to support Weblate for https://opendev.org/openstack/openstack-zuul-jobs/src/branch/master/roles/prepare-zanata-client/files/<br />
<br />
==== Zuul Integration Test ====<br />
Create and test a ZuuL Job that performs the following tasks<br />
* Uploading translation files to Weblate when new changes are made to your project<br />
* Upload translations from Weblate to your project every day at 06 UTC<br />
<br />
==== Making tools for extracting statistical data from Weblate ====<br />
* weblate_userinfo.py : Done ( https://review.opendev.org/c/openstack/i18n/+/893361 ) <br />
** Generates a csv file which contains the list of translators for a specified target role with name and e-mail address. Requires privileges to access Weblate accounts API.<br />
* weblate_users.py : Done ( https://review.opendev.org/c/openstack/i18n/+/895763 ) <br />
** Generates a list of Weblate language contributors.<br />
* weblate_utils.py : Done ( https://review.opendev.org/c/openstack/i18n/+/896308 )<br />
** Provides basic classes used by the other scripts<br />
*** IniConfig class to get the key and url for the weblate server<br />
*** WeblateRestService class that communicates with the Weblate REST API<br />
* weblate_stats.py : Working ( https://review.opendev.org/c/openstack/i18n/+/896306 ) <br />
** (describe the role of the tool )<br />
* weblate_records.py : Working ( https://review.opendev.org/c/openstack/i18n/+/896306 ) <br />
** (describe the role of the tool )<br />
<br />
=== Etherpads ===<br />
* [https://etherpad.opendev.org/p/vancouver-forum-i18n OpenInfra Summit Vancouver 2023 Forum]<br />
* [https://etherpad.opendev.org/p/i18n-weblate i18n weblate migration]</div>
Ppiyakk2
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-snmp
StarlingX/Containers/Applications/app-snmp
2024-01-26T23:05:08Z
<p>Robert.church: Created page with "= Application: snmp-armada-app = == Source == * [https://opendev.org/starlingx/snmp-armada-app Code Repository] * [https://review.opendev.org/q/project:starlingx/snmp-armada-a..."</p>
<hr />
<div>= Application: snmp-armada-app =<br />
== Source ==<br />
* [https://opendev.org/starlingx/snmp-armada-app Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/snmp-armada-app Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-audit
StarlingX/Containers/Applications/app-audit
2024-01-26T21:26:27Z
<p>Robert.church: Created page with "= Application: audit-armada-app = == Source == * [https://opendev.org/starlingx/audit-armada-app Code Repository] * [https://review.opendev.org/q/project:starlingx/audit-armad..."</p>
<hr />
<div>= Application: audit-armada-app =<br />
== Source ==<br />
* [https://opendev.org/starlingx/audit-armada-app Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/audit-armada-app Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-openstack
StarlingX/Containers/Applications/app-openstack
2024-01-26T13:54:03Z
<p>Robert.church: Created page with "= Application: openstack-armada-app = == Source == * [https://opendev.org/starlingx/openstack-armada-app Code Repository] * [https://review.opendev.org/q/project:starlingx/ope..."</p>
<hr />
<div>= Application: openstack-armada-app =<br />
== Source ==<br />
* [https://opendev.org/starlingx/openstack-armada-app Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/openstack-armada-app Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-vault
StarlingX/Containers/Applications/app-vault
2024-01-26T02:19:50Z
<p>Robert.church: Created page with "= Application: vault-armada-app = == Source == * [https://opendev.org/starlingx/vault-armada-app Code Repository] * [https://review.opendev.org/q/project:starlingx/vault-armad..."</p>
<hr />
<div>= Application: vault-armada-app =<br />
== Source ==<br />
* [https://opendev.org/starlingx/vault-armada-app Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/vault-armada-app Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-portieris
StarlingX/Containers/Applications/app-portieris
2024-01-25T14:27:37Z
<p>Jerry.sun: /* Testing */</p>
<hr />
<div>= Application: portieris-armada-app =<br />
== Source ==<br />
* [https://opendev.org/starlingx/portieris-armada-app Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/portieris-armada-app Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
build-pkgs -p portieris-helm,python-k8sapp-portieris,stx-portieris-helm<br />
<br />
== Testing ==<br />
Portieris works with signed images. One way to work with image signing is to deploy Harbor with Notary:<br />
<br />
https://goharbor.io/docs/2.7.0/install-config/run-installer-script/#installation-with-notary<br />
<br />
https://goharbor.io/docs/2.7.0/working-with-projects/working-with-images/sign-images/<br />
<br />
Portieris is an optional application in StarlingX, not applied by default. To apply the Portieris application, find the application tarball in<br />
<br />
/usr/local/share/applications/helm<br />
<br />
and upload using<br />
<br />
system application-upload /usr/local/share/applications/helm/name-of-portieris-tarball<br />
<br />
Create caCert.yaml with the CA certificate for your Notary<br />
<br />
caCert: <base64 encoded CA certificate for your Notary><br />
<br />
Apply helm overrides to portieris-certs, setting up the CA cert for your Notary<br />
<br />
system helm-override-update portieris portieris-certs portieris --values caCert.yaml<br />
<br />
Apply the Portieris application<br />
<br />
system application-apply portieris<br />
<br />
Create an ImagePolicy (image-policy.yaml) to enforce that images from a certain registry must be signed by a certain notary:<br />
<br />
apiVersion: portieris.cloud.ibm.com/v1<br />
kind: ImagePolicy<br />
metadata:<br />
name: allow-custom<br />
spec:<br />
repositories:<br />
- name: "my.harbor.registry.com:12345/*"<br />
policy:<br />
trust:<br />
enabled: true<br />
trustServer: "https://my.harbor.notary.com:54321"<br />
<br />
Apply your ImagePolicy<br />
<br />
kubectl apply -f image-policy.yaml<br />
<br />
Now Kubernetes deployments/pods should fail if they used an image without proper signing information with an error like the following:<br />
trust: policy denied the request: Deny "my.harbor.registry.com:12345/test-unsigned/busybox:latest", failed to get content trust information: my.harbor.notary.com:54321 does not have trust data for my.harbor.registry.com:12345/test-unsigned/busybox</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-oidc-auth
StarlingX/Containers/Applications/app-oidc-auth
2024-01-24T22:33:19Z
<p>Robert.church: Created page with "= Application: oidc-auth-armada-app = == Source == * [https://opendev.org/starlingx/oidc-auth-armada-app Code Repository] * [https://review.opendev.org/q/project:starlingx/oid..."</p>
<hr />
<div>= Application: oidc-auth-armada-app =<br />
== Source ==<br />
* [https://opendev.org/starlingx/oidc-auth-armada-app Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/oidc-auth-armada-app Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-nginx-ingress-controller
StarlingX/Containers/Applications/app-nginx-ingress-controller
2024-01-24T13:59:59Z
<p>Robert.church: Created page with "= Application: nginx-ingress-controller-armada-app = == Source == * [https://opendev.org/starlingx/nginx-ingress-controller-armada-app Code Repository] * [https://review.opend..."</p>
<hr />
<div>= Application: nginx-ingress-controller-armada-app =<br />
== Source ==<br />
* [https://opendev.org/starlingx/nginx-ingress-controller-armada-app Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/nginx-ingress-controller-armada-app Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-metrics-server
StarlingX/Containers/Applications/app-metrics-server
2024-01-24T01:38:27Z
<p>Robert.church: Created page with "= Application: metrics-server-armada-app = == Source == * [https://opendev.org/starlingx/metrics-server-armada-app Code Repository] * [https://review.opendev.org/q/project:sta..."</p>
<hr />
<div>= Application: metrics-server-armada-app =<br />
== Source ==<br />
* [https://opendev.org/starlingx/metrics-server-armada-app Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/metrics-server-armada-app Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-ptp-notification
StarlingX/Containers/Applications/app-ptp-notification
2024-01-23T22:09:51Z
<p>Robert.church: Created page with "= Application: ptp-notification-armada-app = == Source == * [https://opendev.org/starlingx/ptp-notification-armada-app Code Repository] * [https://review.opendev.org/q/project..."</p>
<hr />
<div>= Application: ptp-notification-armada-app =<br />
== Source ==<br />
* [https://opendev.org/starlingx/ptp-notification-armada-app Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/ptp-notification-armada-app Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-cert-manager
StarlingX/Containers/Applications/app-cert-manager
2024-01-23T20:59:56Z
<p>Robert.church: Created page with "= Application: cert-manager-armada-app = == Source == * [https://opendev.org/starlingx/cert-manager-armada-app Code Repository] * [https://review.opendev.org/q/project:starlin..."</p>
<hr />
<div>= Application: cert-manager-armada-app =<br />
== Source ==<br />
* [https://opendev.org/starlingx/cert-manager-armada-app Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/cert-manager-armada-app Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-sts-silicom
StarlingX/Containers/Applications/app-sts-silicom
2024-01-22T14:53:32Z
<p>Robert.church: Created page with "= Application: app-sts-silicom = == Source == * [https://opendev.org/starlingx/app-sts-silicom Code Repository] * [https://review.opendev.org/q/project:starlingx/app-sts-silic..."</p>
<hr />
<div>= Application: app-sts-silicom =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-sts-silicom Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-sts-silicom Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-sriov-fec-operator
StarlingX/Containers/Applications/app-sriov-fec-operator
2024-01-22T13:30:55Z
<p>Robert.church: Created page with "= Application: app-sriov-fec-operator = == Source == * [https://opendev.org/starlingx/app-sriov-fec-operator Code Repository] * [https://review.opendev.org/q/project:starlingx..."</p>
<hr />
<div>= Application: app-sriov-fec-operator =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-sriov-fec-operator Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-sriov-fec-operator Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-security-profiles-operator
StarlingX/Containers/Applications/app-security-profiles-operator
2024-01-21T18:29:39Z
<p>Robert.church: Created page with "= Application: app-security-profiles-operator = == Source == * [https://opendev.org/starlingx/app-security-profiles-operator Code Repository] * [https://review.opendev.org/q/p..."</p>
<hr />
<div>= Application: app-security-profiles-operator =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-security-profiles-operator Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-security-profiles-operator Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-power-metrics
StarlingX/Containers/Applications/app-power-metrics
2024-01-21T16:58:10Z
<p>Robert.church: Created page with "= Application: app-power-metrics = == Source == * [https://opendev.org/starlingx/app-power-metrics Code Repository] * [https://review.opendev.org/q/project:starlingx/app-power..."</p>
<hr />
<div>= Application: app-power-metrics =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-power-metrics Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-power-metrics Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/ThirdPartySystems/vmwareapi_CI_run_by_SAP
ThirdPartySystems/vmwareapi CI run by SAP
2024-01-17T13:36:54Z
<p>Fabian.wiesel: </p>
<hr />
<div>{{ThirdPartySystemInfo|name=vmwareapi CI run by SAP<br />
|account=sap-openstack-ci<br />
|contact=Fabian Wiesel (fabian dot wiesel), Jakob Karge (jakob dot karge) (both @ sap dot com)<br />
|intent=Validate Nova changes with vCenter driver, Validate Cinder changes with vCenter VMDK driver.<br />
|structure=devstack + argo workflows (triggered by [https://github.com/sapcc/gerrit-argo-gateway gerrit-argo-gateway])<br />
|method=<br />
|programs=Nova, Cinder<br />
|status=testing<br />
You can trigger a recheck just targeting this CI with a replies like<br />
<br />
sap-openstack-ci recheck<br />
<br />
sap-openstack-ci recheck - some comment<br />
}}</div>
Fabian.wiesel
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-oran-o2
StarlingX/Containers/Applications/app-oran-o2
2024-01-16T20:32:40Z
<p>Robert.church: Created page with "= Application: app-oran-o2 = == Source == * [https://opendev.org/starlingx/app-oran-o2 Code Repository] * [https://review.opendev.org/q/project:starlingx/app-oran-o2 Gerrit Re..."</p>
<hr />
<div>= Application: app-oran-o2 =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-oran-o2 Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-oran-o2 Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-ceph
StarlingX/Containers/Applications/app-ceph
2024-01-16T10:40:30Z
<p>Gabriel.cabral: /* Testing */</p>
<hr />
<div>= Application: platform-armada-app =<br />
Note: This application repo will be renamed in the future to '''app-ceph''' so that the armada reference is dropped and it is aligned with the new naming convention.<br />
== Source ==<br />
* [https://opendev.org/starlingx/platform-armada-app Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/platform-armada-app Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
<big>'''Once you have platform-integ-apps applied, some of the tests you can run are:'''</big><br />
<br />
'''Using Cephfs provisioner'''<br />
<br />
1. Create a PVC<br />
a. Consider the PVC example.<br />
---<br />
apiVersion: v1<br />
kind: PersistentVolumeClaim<br />
metadata:<br />
name: cephfs-pvc<br />
spec:<br />
accessModes:<br />
- ReadWriteMany<br />
resources:<br />
requests:<br />
storage: 1Gi<br />
storageClassName: cephfs<br />
b. Use "kubectl create -f <file.yaml>" <br />
c. Check with "kubectl get pvc" if the PVC status is Bound.<br />
<br />
2. Create a pod<br />
a. Consider the pod example<br />
---<br />
apiVersion: v1<br />
kind: Pod<br />
metadata:<br />
name: csi-cephfs-demo-pod<br />
spec:<br />
containers:<br />
- name: web-server<br />
image: docker.io/library/nginx:latest<br />
volumeMounts:<br />
- name: mypvc<br />
mountPath: /var/lib/www<br />
volumes:<br />
- name: mypvc<br />
persistentVolumeClaim:<br />
claimName: cephfs-pvc<br />
readOnly: false<br />
b. Use "kubectl create -f <file.yaml>" <br />
c. Check with "kubectl get pods" if the pod is running and succesfully attached to the PVC<br />
<br />
3. Resize the PVC created<br />
a. Use "kubectl edit pvc <name_pvc>"<br />
b. Increase the pvc size on resources.requests.storage field<br />
c. Check with "kubectl get pvc" or "kubectl describe pvc <pvc_name>" if the PVC capacity changed after a few seconds<br />
<br />
4. Create a Volume Snapshot Class<br />
a. Check existing overrides for the cephfs-provisioner chart<br />
system helm-override-show platform-integ-apps cephfs-provisioner kube-system<br />
b. Update the 'snapshotClass.create' field to 'true' via helm<br />
system helm-override-update platform-integ-apps cephfs-provisioner kube-system --set snapshotClass.create=True<br />
c. Apply the overrides<br />
system application-apply platform-integ-apps<br />
d. After a few seconds, confirm the creation of the Volume Snapshot Class<br />
~(keystone_admin)]$ kubectl get volumesnapshotclasses.snapshot.storage.k8s.io <br />
NAME DRIVER DELETIONPOLICY AGE<br />
cephfs-snapshot cephfs.csi.ceph.com Delete 5s<br />
<br />
5. Create a PVC snapshot.<br />
a. Consider the Cephfs Volume Snapshot yaml example<br />
---<br />
apiVersion: snapshot.storage.k8s.io/v1<br />
kind: VolumeSnapshot<br />
metadata:<br />
name: <cephfs-pvc-snapshot-name><br />
spec:<br />
volumeSnapshotClassName: cephfs-snapshot<br />
source:<br />
persistentVolumeClaimName: <cephfs-pvc-name><br />
b. Replace the values in the 'persistentVolumeClaimName' and 'name' fields<br />
c. Create the Volume Snapshot<br />
kubectl create -f cephfs-volume-snapshot.yaml<br />
<br />
'''Using RBD provisioner'''<br />
<br />
1. Create a PVC<br />
a. Consider the PVC example.<br />
---<br />
apiVersion: v1<br />
kind: PersistentVolumeClaim<br />
metadata:<br />
name: rbd-pvc<br />
spec:<br />
accessModes:<br />
- ReadWriteOnce<br />
resources:<br />
requests:<br />
storage: 1Gi<br />
storageClassName: general<br />
b. Use "kubectl create -f <file.yaml>" <br />
c. Check with "kubectl get pvc" if the PVC status is Bound<br />
<br />
2. Create a pod<br />
a. Consider the pod example.<br />
---<br />
apiVersion: v1<br />
kind: Pod<br />
metadata:<br />
name: csi-rbd-demo-pod<br />
spec:<br />
containers:<br />
- name: web-server<br />
image: docker.io/library/nginx:latest<br />
volumeMounts:<br />
- name: mypvc<br />
mountPath: /var/lib/www/html<br />
volumes:<br />
- name: mypvc<br />
persistentVolumeClaim:<br />
claimName: rbd-pvc<br />
readOnly: false<br />
b. Use "kubectl create -f <file.yaml>" <br />
c. Check with "kubectl get pods" if the pod is running and succesfully attached to the PVC<br />
<br />
3. Resize the PVC created<br />
a. Use "kubectl edit pvc <name_pvc>"<br />
b. Increase the pvc size on resources.requests.storage field<br />
c. Check with "kubectl get pvc" or "kubectl describe pvc <pvc_name>" if the PVC capacity changed after a few seconds<br />
<br />
4. Create a Volume Snapshot Class<br />
a. Check existing overrides for the rbd-provisioner chart<br />
system helm-override-show platform-integ-apps rbd-provisioner kube-system<br />
b. Update the 'snapshotClass.create' field to 'true' via helm<br />
system helm-override-update platform-integ-apps rbd-provisioner kube-system --set snapshotClass.create=True<br />
c. Apply the overrides<br />
system application-apply platform-integ-apps<br />
d. After a few seconds, confirm the creation of the Volume Snapshot Class<br />
~(keystone_admin)]$ kubectl get volumesnapshotclasses.snapshot.storage.k8s.io <br />
NAME DRIVER DELETIONPOLICY AGE<br />
rbd-snapshot rbd.csi.ceph.com Delete 5s<br />
<br />
5. Create a PVC snapshot<br />
a. Consider the Cephfs Volume Snapshot yaml example<br />
---<br />
apiVersion: snapshot.storage.k8s.io/v1<br />
kind: VolumeSnapshot<br />
metadata:<br />
name: <rbd-pvc-snapshot-name><br />
spec:<br />
volumeSnapshotClassName: rbd-snapshot<br />
source:<br />
persistentVolumeClaimName: <rbd-pvc-name><br />
b. Replace the values in the 'persistentVolumeClaimName' and 'name' fields<br />
c. Create the Volume Snapshot<br />
kubectl create -f cephfs-volume-snapshot.yaml</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-node-interface-metrics-exporter
StarlingX/Containers/Applications/app-node-interface-metrics-exporter
2024-01-15T00:40:51Z
<p>Robert.church: Created page with "= Application: app-node-interface-metrics-exporter = == Source == * [https://opendev.org/starlingx/app-node-interface-metrics-exporter Code Repository] * [https://review.opend..."</p>
<hr />
<div>= Application: app-node-interface-metrics-exporter =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-node-interface-metrics-exporter Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-node-interface-metrics-exporter Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-node-feature-discovery
StarlingX/Containers/Applications/app-node-feature-discovery
2024-01-14T23:49:47Z
<p>Eduardo.alberti: /* Building */</p>
<hr />
<div>= Application: app-node-feature-discovery =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-node-feature-discovery Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-node-feature-discovery Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
<br />
== Testing ==</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-kubevirt
StarlingX/Containers/Applications/app-kubevirt
2024-01-14T17:37:53Z
<p>Robert.church: Created page with "= Application: app-kubevirt = == Source == * [https://opendev.org/starlingx/app-kubevirt Code Repository] * [https://review.opendev.org/q/project:starlingx/app-kubevirt Gerrit..."</p>
<hr />
<div>= Application: app-kubevirt =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-kubevirt Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-kubevirt Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-kubernetes-power-manager
StarlingX/Containers/Applications/app-kubernetes-power-manager
2024-01-14T16:52:27Z
<p>Eduardo.alberti: /* Testing parameter changes */</p>
<hr />
<div>= Application: app-kubernetes-power-manager =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-kubernetes-power-manager Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-kubernetes-power-manager Gerrit Reviews]<br />
== Building ==<br />
<br />
From the Debian Build environment:<br />
<br />
build-pkgs [-c] -p kubernetes-power-manager-helm,python3-k8sapp-kubernetes-power-manager,stx-kubernetes-power-manager-helm<br />
<br />
== Testing ==<br />
<br />
After the installation, the application will have installed all basic resources to set idle CPUs range of frequency to the minimum and maximum defined by the hardware. <br />
<br />
=== Testing frequency set === <br />
<br />
To check if the Power Manager can change the CPU frequency execute: <br />
<br />
''sudo cpupower frequency-info –o'' <br />
<br />
The same command can be used to check if the Power Manager can manage the frequency of Pod’s cores or platform cores. <br />
<br />
=== What you need to see on Power Node Agent log file ===<br />
<br />
When the system is working well, the Power Node Agent will log some information's that will allow the developer to understand the machine's topology. <br />
<br />
* Available c-states on the node <br />
''{"level":"Level(-3)","logger":"powerLibrary","msg":"mapped C-states","map":{"C1":1,"C1E":2,"C6":3,"POLL":0}}'' <br />
<br />
* The number of CPUs (this information includes the reserved CPUs) <br />
''{"level":"info","logger":"powerLibrary","msg":"discovered cpus","cpus":192}''<br />
<br />
* The driver used for p-states, in this case “intel_pstate” <br />
''{"level":"info","logger":"setup","msg":"feature status","feature":"Frequency-Scaling","driver":"intel_pstate","error":null,"available":true}''<br />
<br />
* Available governors. This information depends on the driver in use. <br />
''{"level":"info","logger":"setup","msg":"available governors: [performance powersave]"}''<br />
<br />
* The driver used for c-states, in this case “intel_idle” <br />
''{"level":"info","logger":"setup","msg":"feature status","feature":"C-States","driver":"intel_idle","error":null,"available":true}''<br />
<br />
=== Testing parameter changes === <br />
<br />
To test changes in parameters, like frequency or cstates, create a yaml that reflect the same hierarchy of the override information: <br />
<br />
''[sysadmin@controller-0 ~(keystone_admin)]$ cat <<EOF> test.yaml<br />
<br />
> sharedProfile: <br />
<br />
> controller-0: <br />
<br />
> min: 1000 <br />
<br />
> EOF'' <br />
<br />
Apply the override using system command: <br />
''system helm-override-update –values test.yaml kubernetes-power-manager kubernetes-power-manager intel-power'' <br />
<br />
And re-apply the application:<br />
''system application-apply kubernetes-power-manager'' <br />
<br />
During the testing section the developer can deploy the Kubernetes Power manager yaml files directly, but it's important to note that these files will be overwritten during the application re-apply.<br />
<br />
=== Checking power profile assignment === <br />
<br />
To check if the Power Profile is correctly assigned to the Pod:<br />
# Retrieve the Container ID using kubectl describe <br />
# Use find command to search for the cgroups path that contains the container id -> ''sudo find /sys/fs/cgroup/cpuset/ -name "<container ID>”'' <br />
# With the right path, prints the cpuset.effective_cpus content file -> ''sudo cat /sys/fs/cgroup/cpuset/k8s-infra/kubepods/<pod ID>/<container ID>/cpuset.effective_cpus'' <br />
# Using cpupower command check if the CPUs are assigned to the right frequency range</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-istio
StarlingX/Containers/Applications/app-istio
2024-01-14T14:34:32Z
<p>Robert.church: Created page with "= Application: app-istio = == Source == * [https://opendev.org/starlingx/app-istio Code Repository] * [https://review.opendev.org/q/project:starlingx/app-istio Gerrit Reviews]..."</p>
<hr />
<div>= Application: app-istio =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-istio Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-istio Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-intel-ethernet-operator
StarlingX/Containers/Applications/app-intel-ethernet-operator
2024-01-14T12:56:04Z
<p>Robert.church: Created page with "= Application: app-intel-ethernet-operator = == Source == * [https://opendev.org/starlingx/app-intel-ethernet-operator Code Repository] * [https://review.opendev.org/q/project..."</p>
<hr />
<div>= Application: app-intel-ethernet-operator =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-intel-ethernet-operator Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-intel-ethernet-operator Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-intel-device-plugins
StarlingX/Containers/Applications/app-intel-device-plugins
2024-01-12T22:43:43Z
<p>Robert.church: Created page with "= Application: app-intel-device-plugins = == Source == * [https://opendev.org/starlingx/app-intel-device-plugins Code Repository] * [https://review.opendev.org/q/project:starl..."</p>
<hr />
<div>= Application: app-intel-device-plugins =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-intel-device-plugins Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-intel-device-plugins Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-harbor
StarlingX/Containers/Applications/app-harbor
2024-01-12T20:32:45Z
<p>Robert.church: Created page with "= Application: app-harbor = == Source == * [https://opendev.org/starlingx/app-harbor Code Repository] * [https://review.opendev.org/q/project:starlingx/app-harbor Gerrit Revie..."</p>
<hr />
<div>= Application: app-harbor =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-harbor Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-harbor Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-dell-storage
StarlingX/Containers/Applications/app-dell-storage
2024-01-10T23:15:38Z
<p>Robert.church: Created page with "= Application: app-dell-storage = == Source == * [https://opendev.org/starlingx/app-dell-storage Code Repository] * [https://review.opendev.org/q/project:starlingx/app-dell-st..."</p>
<hr />
<div>= Application: app-dell-storage =<br />
== Source ==<br />
* [https://opendev.org/starlingx/app-dell-storage Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/app-dell-storage Gerrit Reviews]<br />
== Building ==<br />
* From the Debian Build environment:<br />
TBD<br />
<br />
== Testing ==<br />
TBD</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-rook-ceph
StarlingX/Containers/Applications/app-rook-ceph
2024-01-03T17:34:23Z
<p>Caio.correa: /* Verifying the Installation */</p>
<hr />
<div>= StarlingX Rook Ceph App installation guide =<br />
<br />
== Source ==<br />
* [https://opendev.org/starlingx/rook-ceph Code Repository]<br />
* [https://review.opendev.org/q/project:starlingx/rook-ceph Gerrit Reviews]<br />
<br />
== Building ==<br />
* Build from the Debian Build environment (if needed):<br />
build-pkgs -c -p rook-helm,python3-k8sapp-rook,stx-rook-ceph-helm<br />
<br />
==Configuration==<br />
<br />
* Add the Rook storage backend<br />
sysadmin@controller-0:~$ source /etc/platform/openrc<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system storage-backend-add ceph-rook<br />
<br />
WARNING : THIS OPERATION IS NOT REVERSIBLE AND CANNOT BE CANCELLED. <br />
<br />
Please set the 'confirmed' field to execute this operation for the ceph-rook backend.<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system storage-backend-add ceph-rook --confirmed<br />
<br />
System configuration has changed.<br />
Please follow the administrator guide to complete configuring the system.<br />
<br />
+-----------------+-----------+-------------+----------------------------------------+----------+--------------+<br />
| name | backend | state | task | services | capabilities | <br />
+-----------------+-----------+-------------+----------------------------------------+----------+--------------+<br />
| ceph-rook-store | ceph-rook | configuring | {'controller-0': 'applying-manifests'} | None | |<br />
+-----------------+-----------+-------------+----------------------------------------+----------+--------------+<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system storage-backend-list <br />
+-----------------+-----------+------------+------+----------+--------------+<br />
| name | backend | state | task | services | capabilities |<br />
+-----------------+-----------+------------+------+----------+--------------+<br />
| ceph-rook-store | ceph-rook | configured | None | None | |<br />
+-----------------+-----------+------------+------+----------+--------------+<br />
<br />
* Upload the app (if needed)<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system application-upload ~/rook-ceph-apps-23.09-42.tgz<br />
<br />
Then follow one of the following configurations according to you system:<br />
[[https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-rook-ceph#AIO-SX_-_Simplex AIO-SX Simplex]]<br />
[[https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-rook-ceph#AIO-DX_-_Duplex AIO-DX Duplex]]<br />
[[https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-rook-ceph#Standard Standard]]<br />
<br />
=== AIO-SX - Simplex ===<br />
* Add system labels for rook-ceph<br />
sysadmin@controller-0:~$ source /etc/platform/openrc<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-label-assign controller-0 ceph-mon-placement=enabled<br />
<br />
+-------------+--------------------------------------+<br />
| Property | Value |<br />
+-------------+--------------------------------------+<br />
| uuid | 719c3828-3806-4711-8824-774c1037316d |<br />
| host_uuid | aed595fc-9fba-4aab-981a-ae2c04193689 |<br />
| label_key | ceph-mon-placement |<br />
| label_value | enabled |<br />
+-------------+--------------------------------------+<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$system host-label-assign controller-0 ceph-mgr-placement=enabled<br />
<br />
+-------------+--------------------------------------+<br />
| Property | Value |<br />
+-------------+--------------------------------------+<br />
| uuid | 11bec756-0d76-4fce-89a6-c1f0a0677f4a |<br />
| host_uuid | aed595fc-9fba-4aab-981a-ae2c04193689 |<br />
| label_key | ceph-mgr-placement |<br />
| label_value | enabled | <br />
+-------------+--------------------------------------+<br />
<br />
Proceed to OSD configuring [[https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-rook-ceph#OSD_configurations OSD Configurations]]<br />
<br />
=== AIO-DX - Duplex ===<br />
* Add system labels for rook-ceph<br />
sysadmin@controller-0:~$ source /etc/platform/openrc<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-label-assign '''controller-0''' ceph-mon-placement=enabled<br />
<br />
+-------------+--------------------------------------+<br />
| Property | Value |<br />
+-------------+--------------------------------------+<br />
| uuid | 719c3828-3806-4711-8824-774c1037316d |<br />
| host_uuid | aed595fc-9fba-4aab-981a-ae2c04193689 |<br />
| label_key | ceph-mon-placement |<br />
| label_value | enabled |<br />
+-------------+--------------------------------------+<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-label-assign '''controller-0''' ceph-mgr-placement=enabled<br />
<br />
+-------------+--------------------------------------+<br />
| Property | Value |<br />
+-------------+--------------------------------------+<br />
| uuid | 11bec756-0d76-4fce-89a6-c1f0a0677f4a |<br />
| host_uuid | aed595fc-9fba-4aab-981a-ae2c04193689 |<br />
| label_key | ceph-mgr-placement |<br />
| label_value | enabled | <br />
+-------------+--------------------------------------+<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-label-assign '''controller-1''' ceph-mgr-placement=enabled;<br />
<br />
+-------------+--------------------------------------+<br />
| Property | Value |<br />
+-------------+--------------------------------------+<br />
| uuid | 9d92bac5-ba77-483a-9b2e-dfb57302a54b |<br />
| host_uuid | f56121ea-cf37-48c2-9e77-5708417a6963 |<br />
| label_key | ceph-mgr-placement |<br />
| label_value | enabled |<br />
+-------------+--------------------------------------+<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-label-assign '''controller-1''' ceph-mon-placement=enabled;<br />
<br />
system host-label-assign controller-1 ceph-mgr-placement=enabled;<br />
+-------------+--------------------------------------+<br />
| Property | Value |<br />
+-------------+--------------------------------------+<br />
| uuid | 9720faf3-7a77-4072-8c1e-ab6f236821a1 |<br />
| host_uuid | f56121ea-cf37-48c2-9e77-5708417a6963 |<br />
| label_key | ceph-mon-placement |<br />
| label_value | enabled |<br />
+-------------+--------------------------------------+<br />
<br />
Proceed to OSD configuring [[https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-rook-ceph#OSD_configurations OSD Configurations]]<br />
<br />
=== Standard ===<br />
* Add system labels for rook-ceph<br />
sysadmin@controller-0:~$ source /etc/platform/openrc<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-label-assign '''controller-0''' ceph-mon-placement=enabled<br />
<br />
+-------------+--------------------------------------+<br />
| Property | Value |<br />
+-------------+--------------------------------------+<br />
| uuid | 719c3828-3806-4711-8824-774c1037316d |<br />
| host_uuid | aed595fc-9fba-4aab-981a-ae2c04193689 |<br />
| label_key | ceph-mon-placement |<br />
| label_value | enabled |<br />
+-------------+--------------------------------------+<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-label-assign '''controller-0''' ceph-mgr-placement=enabled<br />
<br />
+-------------+--------------------------------------+<br />
| Property | Value |<br />
+-------------+--------------------------------------+<br />
| uuid | 11bec756-0d76-4fce-89a6-c1f0a0677f4a |<br />
| host_uuid | aed595fc-9fba-4aab-981a-ae2c04193689 |<br />
| label_key | ceph-mgr-placement |<br />
| label_value | enabled | <br />
+-------------+--------------------------------------+<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-label-assign '''controller-1''' ceph-mgr-placement=enabled;<br />
<br />
+-------------+--------------------------------------+<br />
| Property | Value |<br />
+-------------+--------------------------------------+<br />
| uuid | 9d92bac5-ba77-483a-9b2e-dfb57302a54b |<br />
| host_uuid | f56121ea-cf37-48c2-9e77-5708417a6963 |<br />
| label_key | ceph-mgr-placement |<br />
| label_value | enabled |<br />
+-------------+--------------------------------------+<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-label-assign '''controller-1''' ceph-mon-placement=enabled;<br />
<br />
system host-label-assign controller-1 ceph-mgr-placement=enabled;<br />
+-------------+--------------------------------------+<br />
| Property | Value |<br />
+-------------+--------------------------------------+<br />
| uuid | 9720faf3-7a77-4072-8c1e-ab6f236821a1 |<br />
| host_uuid | f56121ea-cf37-48c2-9e77-5708417a6963 |<br />
| label_key | ceph-mon-placement |<br />
| label_value | enabled |<br />
+-------------+--------------------------------------+<br />
<br />
* Add a label for mon placement on your worker<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-label-assign '''compute-0''' ceph-mon-placement=enabled;<br />
<br />
system host-label-assign compute-0 ceph-mon-placement=enabled;<br />
+-------------+--------------------------------------+<br />
| Property | Value |<br />
+-------------+--------------------------------------+<br />
| uuid | 2e267859-e845-48e1-be61-ca3b376b4b30 |<br />
| host_uuid | c102ceb8-7102-4fb7-acd7-0fea2a4fe8a1 |<br />
| label_key | ceph-mon-placement |<br />
| label_value | enabled |<br />
+-------------+--------------------------------------+<br />
<br />
Proceed to OSD configuring [[https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-rook-ceph#OSD_configurations OSD Configurations]]<br />
<br />
== OSD configurations ==<br />
<br />
* Identify the disk to use for bluestore OSD<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-disk-list 1<br />
+-----------+---------+---------+-------+------------+-----+--------------------------------------------+<br />
| device_no | device_ | device_ | size_ | available_ | rpm | device_path |<br />
| de | num | type | gib | gib | | |<br />
+-----------+---------+---------+-------+------------+-----+--------------------------------------------+<br />
| /dev/sda | 2048 | SSD | 520.0 | 0.0 | N/A | /dev/disk/by-path/pci-0000:00:0d.0-ata-1.0 |<br />
| /dev/sdb | 2064 | SSD | 520.0 | 519.996 | N/A | /dev/disk/by-path/pci-0000:00:0d.0-ata-2.0 |<br />
| /dev/sdc | 2080 | SSD | 520.0 | 519.996 | N/A | /dev/disk/by-path/pci-0000:00:0d.0-ata-3.0 |<br />
+-----------+---------+---------+-------+------------+-----+--------------------------------------------+<br />
<br />
* Make sure that the disk has been purged<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-disk-wipe -s --confirm controller-0 /dev/sdb<br />
<br />
* Set up the overrides with all desired OSD configurations (e.g.: using sdb as OSD)<br />
[sysadmin@controller-0 ~(keystone_admin)]$ cat <<EOF > /home/sysadmin/ceph-values.yml<br />
cephClusterSpec:<br />
storage:<br />
useAllNodes: false<br />
useAllDevices: false<br />
nodes:<br />
- name: controller-0<br />
devices:<br />
- name: /dev/disk/by-path/pci-0000:00:0d.0-ata-2.0<br />
EOF<br />
[sysadmin@controller-0 ~(keystone_admin)]$ cat /home/sysadmin/ceph-values.yml<br />
<br />
* Set the overrides<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system helm-override-list rook-ceph-apps<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system helm-override-update rook-ceph-apps rook-ceph-cluster rook-ceph --values /home/sysadmin/ceph-values.yml<br />
<br />
Proceed to Installation step [[https://wiki.openstack.org/wiki/StarlingX/Containers/Applications/app-rook-ceph#Installation Installation]]<br />
<br />
== Installation ==<br />
* Verify current overrides<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system helm-override-show rook-ceph-apps rook-ceph rook-ceph<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system helm-override-show rook-ceph-apps rook-ceph-cluster rook-ceph<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system helm-override-show rook-ceph-apps rook-ceph-provisioner rook-ceph<br />
<br />
* Apply the app<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system application-apply rook-ceph-apps<br />
+---------------+----------------------------------+<br />
| Property | Value |<br />
+---------------+----------------------------------+<br />
| active | False |<br />
| app_version | 23.09-41 |<br />
| created_at | 2023-12-18T23:25:07.201915+00:00 |<br />
| manifest_file | fluxcd-manifests |<br />
| manifest_name | rook-ceph-apps-fluxcd-manifests |<br />
| name | rook-ceph-apps |<br />
| progress | None |<br />
| status | applying |<br />
| updated_at | 2023-12-19T16:13:46.924152+00:00 |<br />
+---------------+----------------------------------+<br />
Please use 'system application-list' or 'system application-show rook-ceph-apps' to view the current progress.<br />
<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system application-list<br />
+--------------------------+----------+-------------------------------------------+----------+-----------+<br />
| application | version | manifest name | status | progress |<br />
+--------------------------+----------+-------------------------------------------+----------+-----------+<br />
| cert-manager | 1.0-69 | cert-manager-fluxcd-manifests | applied | completed |<br />
| dell-storage | 1.0-6 | dell-storage-fluxcd-manifests | uploaded | completed |<br />
| nginx-ingress-controller | 1.0-50 | nginx-ingress-controller-fluxcd-manifests | applied | completed |<br />
| oidc-auth-apps | 1.0-45 | oidc-auth-apps-fluxcd-manifests | uploaded | completed |<br />
| platform-integ-apps | 1.2-119 | platform-integ-apps-fluxcd-manifests | uploaded | completed |<br />
| rook-ceph-apps | 23.09-41 | rook-ceph-apps-fluxcd-manifests | applied | completed |<br />
+--------------------------+----------+-------------------------------------------+----------+-----------+<br />
<br />
== Verifying the Installation ==<br />
* Verify that rook is running<br />
[sysadmin@controller-0 ~(keystone_admin)]$ NS=rook-ceph<br />
[sysadmin@controller-0 ~(keystone_admin)]$ kubectl get pods -n ${NS} -o wide -w <br />
<br />
NAME READY STATUS RESTARTS AGE IP NODE <br />
csi-cephfsplugin-provisioner-86d7d5d9b7-98gn2 6/6 Running 0 11m 172.16.192.101 controller-0<br />
csi-rbdplugin-nd8xk 3/3 Running 0 11m 192.168.206.2 controller-0<br />
csi-rbdplugin-provisioner-c9cd4ffd7-mmfp9 6/6 Running 0 11m 172.16.192.100 controller-0<br />
rook-ceph-mds-kube-cephfs-a-7b544db87d-4ctrf 1/1 Running 0 11m 192.168.206.2 controller-0<br />
rook-ceph-mds-kube-cephfs-b-5fcbb478fd-qjw4g 1/1 Running 0 11m 192.168.206.2 controller-0<br />
rook-ceph-mgr-a-69fbb9d7b4-tcbt4 1/1 Running 0 11m 192.168.206.2 controller-0<br />
rook-ceph-mon-a-55bbd66678-9cvt6 1/1 Running 0 12m 192.168.206.2 controller-0<br />
rook-ceph-operator-5ddc68f467-kqbwt 1/1 Running 0 12m 172.16.192.95 controller-0<br />
rook-ceph-osd-0-bfbf89745-679kp 1/1 Running 0 11m 192.168.206.2 controller-0<br />
rook-ceph-osd-1-69799854f5-qvgvg 1/1 Running 0 11m 192.168.206.2 controller-0<br />
rook-ceph-osd-prepare-controller-0-jmxmz 0/1 Completed 0 11m 192.168.206.2 controller-0<br />
rook-ceph-provision-g8qfg 0/1 Completed 0 5m20s 172.16.192.104 controller-0<br />
rook-ceph-tools-644f4dbc4b-8qc2m 1/1 Running 0 12m 192.168.206.2 controller-0<br />
stx-ceph-manager-66764cb49d-hxt4d 1/1 Running 0 11m 172.16.192.98 controller-0<br />
stx-ceph-osd-audit-28484346-r5nfq 0/1 Completed 0 8s 192.168.206.2 controller-0<br />
<br />
<br />
* Verify that the cluster is operational<br />
[sysadmin@controller-0 ~(keystone_admin)]$ ceph -s<br />
<br />
* Verify the ceph version<br />
[sysadmin@controller-0 ~(keystone_admin)]$ceph version<br />
ceph version 14.2.22 (ca74598065096e6fcbd8433c8779a2be0c889351) nautilus (stable)<br />
<br />
* Make sure that the disk is reported used<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-disk-list controller-0<br />
+-----------+---------+---------+-------+------------+-----+--------------------------------------------+<br />
| device_no | device_ | device_ | size_ | available_ | rpm | device_path |<br />
| de | num | type | gib | gib | | |<br />
+-----------+---------+---------+-------+------------+-----+--------------------------------------------+<br />
| /dev/sda | 2048 | SSD | 520.0 | 0.0 | N/A | /dev/disk/by-path/pci-0000:00:0d.0-ata-1.0 |<br />
| /dev/sdb | 2064 | SSD | 520.0 | 0.0 | N/A | /dev/disk/by-path/pci-0000:00:0d.0-ata-2.0 |<br />
| /dev/sdc | 2080 | SSD | 520.0 | 519.996 | N/A | /dev/disk/by-path/pci-0000:00:0d.0-ata-3.0 |<br />
+-----------+---------+---------+-------+------------+-----+--------------------------------------------+<br />
<br />
* Make sure that the volume group is reported<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-lvg-list controller-0<br />
+-------------------+-------------+--------+------------------+------------------+-------------+-------------+<br />
| LVG Name | State | Access | Total Size (GiB) | Avail Size (GiB) | Current PVs | Current LVs |<br />
+-------------------+-------------+--------+------------------+------------------+-------------+-------------+<br />
| cgts-vg | provisioned | wz--n- | 488.406 | 261.593 | 1 | 15 |<br />
| ceph-2e5d9569-... | provisioned | wz--n- | 519.996 | 0.0 | 1 | 1 |<br />
+-------------------+-------------+--------+------------------+------------------+-------------+-------------+<br />
<br />
* Make sure that the physical volume is reported<br />
[sysadmin@controller-0 ~(keystone_admin)]$ system host-pv-list controller-0 --nowrap<br />
+-------------+--------------+--------------------------------------------------+----------+-----------+--------------+<br />
| lvm_pv_name | disk_or_part | disk_or_part_device_path | pv_state | pv_type | lvm_vg_name |<br />
| | _device_node | | | | |<br />
+-------------+--------------+--------------------------------------------------+----------+-----------+--------------+<br />
| /dev/sdb | /dev/sdb | /dev/disk/by-path/pci-0000:00:0d.0-ata-2.0 | provisnd | disk | ceph-2e5d... |<br />
| /dev/sda5 | /dev/sda5 | /dev/disk/by-path/pci-0000:00:0d.0-ata-1.0-part5 | provisnd | partition | cgts-vg |<br />
+-------------+--------------+--------------------------------------------------+----------+-----------+--------------+</div>
Robert.church
https://wiki.openstack.org/wiki/StarlingX/Containers/Applications
StarlingX/Containers/Applications
2024-01-03T16:40:49Z
<p>Robert.church: /* Active Applications */</p>
<hr />
<div>= Containerized Applications =<br />
This page serves a launch pad for all StarlingX Containerized application bundles<br />
== Requirements ==<br />
* '''''STX.APP.01''''' - StarlingX shall provide application compatibility for all k8s releases supported in the planned StarlingX Release<br />
** Currently supported versions can be seen here: https://opendev.org/starlingx/integ/src/branch/master/kubernetes<br />
* '''''STX.APP.02''''' - StarlingX shall use the latest helm chart(s) and container image release(s) in an effort to stay current from a feature perspective and to include the latest CVE fixes available upstream.<br />
* '''''STX.APP.03''''' - StarlingX applications shall support all application framework lifecycle operations exercised with the '''system application-xxx''' API/CLI.<br />
* '''''STX.APP.04''''' - StarlingX applications shall support all application framework lifecycle operations exercised with the '''system system helm-override-xxx''' API/CLI.<br />
* '''''STX.APP.05''''' - StarlingX applications shall support all application framework lifecycle operations exercised with the '''system helm-chart-attribute-modify''' API/CLI.<br />
* '''''STX.APP.06''''' - StarlingX applications shall be updatable without operator intervention from one application version to another.<br />
* '''''STX.APP.07''''' - StarlingX applications shall support automatic updates when a new version is delivered to the platform via a platform patch.<br />
** This is controlled via the [https://opendev.org/starlingx/config/src/branch/master/sysinv/sysinv/sysinv/sysinv/common/app_metadata.py#L40 application metatdata] packaged with each version of the application<br />
* '''''STX.APP.08''''' - StarlingX applications shall support orchestrated updates over a platform release if a new version of the application is provided in the new release.<br />
** Currently this is automated via a platform [https://opendev.org/starlingx/config/src/branch/master/controllerconfig/controllerconfig/upgrade-scripts/65-k8s-app-upgrade.sh upgrade-activation script] ([https://opendev.org/starlingx/docs/src/branch/master/doc/source/sample_apps corresponding repo])<br />
* '''''STX.APP.09''''' - StarlingX applications shall support orchestrated updates over a k8s upgrade if a new version of the application is available on the platform and when a specific version k8s is enabled.<br />
** This is controlled via the [https://opendev.org/starlingx/config/src/branch/master/sysinv/sysinv/sysinv/sysinv/common/app_metadata.py#L46 application metatdata] packaged with each version of the application<br />
* '''''STX.APP.10''''' - StarlingX applications should be documented in the StarlingX Documentation explaining the basic purpose, functionality, limitations, and tested use cases for each version of the application available.<br />
** Based on the current limited documentation, application documentation should be added [https://docs.starlingx.io/sample_apps/index-sample-apps-15fce86ad4bf.html here] ([https://opendev.org/starlingx/docs/src/branch/master/doc/source/sample_apps code repo])<br />
* '''''STX.APP.11''''' - StarlingX applications should maintain a [[StarlingX/Containers/Applications#Active_Applications|StarlingX Wiki page]] documenting source code location, build instructions, basic functionality, limitations, and testing instructions. The content of the Wiki page should track to the latest content delivered to the master branch.<br />
* '''''STX.APP.12''''' - StarlingX applications should strive to use unmodified upstream helm charts and integrate into StarlingX with only static/dynamic helm overrides.<br />
* '''''STX.APP.13''''' - StarlingX applications that need helm chart modifications to properly integrate into StarlingX should upstream those helm chart modifications so that in the future these customizations can be dropped from the product.<br />
* '''''STX.APP.14''''' - StarlingX applications should be tested in simplex and multi-node environments to ensure the pods/replicas are deployed as desired<br />
* '''''STX.APP.15''''' - StarlingX applications should be tested in multi-personality environments to ensure the pods/replicas are deployed as as desired on k8s master+worker(AIO) and master(STD controller) + worker(worker) nodes<br />
* '''''STX.APP.16''''' - StarlingX applications should be tested over all MTC operations ensure the pods/replicas are operational/scaled/recovered as as desired on all nodes. MTC operations include: install/reinstall/lock/unlock/swact/power-off/reboot<br />
* '''''STX.APP.17''''' - To support proper CPU affining StarlingX application pods/namespaces should be labeled with '''app.starlingx.io/component=platform''' or '''app.starlingx.io/component=application'''<br />
* '''''STX.APP.18''''' - StarlingX applications should be compliant with our use of the Pod Security Admission Controller<br />
<br />
== Active Applications ==<br />
These applications are currently under development and actively maintained<br />
* [[StarlingX/Containers/Applications/app-dell-storage | app-dell-storage]]<br />
* [[StarlingX/Containers/Applications/app-harbor | app-harbor]]<br />
* [[StarlingX/Containers/Applications/app-intel-device-plugins | app-intel-device-plugins]]<br />
* [[StarlingX/Containers/Applications/app-intel-ethernet-operator | app-intel-ethernet-operator]]<br />
* [[StarlingX/Containers/Applications/app-istio | app-istio]]<br />
* [[StarlingX/Containers/Applications/app-kubernetes-power-manager | app-kubernetes-power-manager]]<br />
* [[StarlingX/Containers/Applications/app-kubevirt | app-kubevirt]]<br />
* [[StarlingX/Containers/Applications/app-node-feature-discovery | app-node-feature-discovery]]<br />
* [[StarlingX/Containers/Applications/app-node-interface-metrics-exporter | app-node-interface-metrics-exporter]]<br />
* [[StarlingX/Containers/Applications/app-oran-o2 | app-oran-o2]]<br />
* [[StarlingX/Containers/Applications/app-power-metrics | app-power-metrics]]<br />
* [[StarlingX/Containers/Applications/app-security-profiles-operator | app-security-profiles-operator]]<br />
* [[StarlingX/Containers/Applications/app-sriov-fec-operator | app-sriov-fec-operator]]<br />
* [[StarlingX/Containers/Applications/app-sts-silicom | app-sts-silicom]]<br />
* [[StarlingX/Containers/Applications/app-audit | audit-armada-app]]<br />
* [[StarlingX/Containers/Applications/app-cert-manager | cert-manager-armada-app]]<br />
* [[StarlingX/Containers/Applications/app-metrics-server | metrics-server-armada-app]]<br />
* [[StarlingX/Containers/Applications/app-nginx-ingress-controller | nginx-ingress-controller-armada-app]]<br />
* [[StarlingX/Containers/Applications/app-oidc-auth | oidc-auth-armada-app]]<br />
* [[StarlingX/Containers/Applications/app-openstack | openstack-armada-app]]<br />
* [[StarlingX/Containers/Applications/app-ceph | platform-armada-app]]<br />
* [[StarlingX/Containers/Applications/app-portieris | portieris-armada-app]]<br />
* [[StarlingX/Containers/Applications/app-ptp-notification | ptp-notification-armada-app]]<br />
* [[StarlingX/Containers/Applications/app-rook-ceph | rook-ceph]]<br />
* [[StarlingX/Containers/Applications/app-snmp | snmp-armada-app]]<br />
* [[StarlingX/Containers/Applications/app-vault | vault-armada-app]]<br />
<br />
== Inactive Applications ==<br />
These applications are currently NOT maintained and their functionality/usability is unknown<br />
* monitor-armada-app<br />
* SDO-rv-service<br />
== Developer Resources ==<br />
* [[StarlingX/Containers/Applications/HowToAddNewFluxCDAppInSTX | Create a new application]]<br />
* [[StarlingX/Containers/Applications/AppIntegration | Application Integration with the Platform]]<br />
<br />
== Page Archive ==<br />
* [[StarlingX/Containers/Applications/Archive/HowToAddNewArmadaAppInSTX | How To Add an Armada App]]<br />
* [[StarlingX/Containers/Application/Archive/ArmadaAppCodeStructure | Armada App Code Structure]]<br />
* [[StarlingX/Containers/Application/Archive/ConvertingArmadaAppsToFluxCD | Armada to FluxCD Conversion ]]</div>
Robert.church