[rally] Add Rally role and test_operator integration#3996
Conversation
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 16m 50s |
|
Build failed (check pipeline). Post ❌ openstack-k8s-operators-content-provider FAILURE in 7m 00s |
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 39m 19s |
Add a new `rally` Ansible role that runs OpenStack Rally benchmarks inside a podman container (quay.io/airshipit/xrally-openstack:3.0.0). The role auto-discovers OpenStack credentials from the cluster's KeystoneAPI resource and appends the deployment CA to the trust bundle so SSL verification works without any manual configuration. Wire Rally into the `test_operator` multi-stage framework via a new `rally_runner.yml` dispatcher and `cifmw_test_operator_rally_*` defaults, so it can run as a named stage alongside Tempest. Key design decisions: - Podman container (no Kubernetes CRD exists for Rally) - Shell script templated to disk to avoid YAML/JSON quoting issues - `--fromenv` deployment creation — no JSON config file needed - `rootca-public` CA from the `openstack` namespace appended to the CA bundle so the container can verify the Keystone TLS endpoint - Default task: `Authenticate.keystone` (no cloud resources required) - `cinder-task.yaml` included for Cinder volume benchmarks Assisted-By: Claude Sonnet 4.6 <noreply@anthropic.com> Signed-off-by: lkuchlan <lkuchlan@redhat.com>
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 23m 47s |
1 participant
Add a new
rallyAnsible role that runs OpenStack Rally benchmarks inside a podman container (quay.io/airshipit/xrally-openstack:3.0.0). The role auto-discovers OpenStack credentials from the cluster's KeystoneAPI resource and appends the deployment CA to the trust bundle so SSL verification works without any manual configuration.Wire Rally into the
test_operatormulti-stage framework via a newrally_runner.ymldispatcher andcifmw_test_operator_rally_*defaults, so it can run as a named stage alongside Tempest.Key design decisions:
--fromenvdeployment creation — no JSON config file neededrootca-publicCA from theopenstacknamespace appended to the CA bundle so the container can verify the Keystone TLS endpointAuthenticate.keystone(no cloud resources required)cinder-task.yamlincluded for Cinder volume benchmarksAssisted-By: Claude Sonnet 4.6 noreply@anthropic.com