Skip to content

Instantly share code, notes, and snippets.

View fmount's full-sized avatar

Francesco Pantano fmount

View GitHub Profile

Common Templates Deduplication: ssl.conf

Problem

The ssl.conf Apache mod_ssl configuration template is duplicated across service operators. Every operator ships the exact same file. A TLS policy change (cipher suite, protocol version) requires coordinated patches across all repositories.

Approach

@fmount
fmount / 2026-04-02-OSPRH-9968-plan.md
Created April 2, 2026 19:57
OSPRH-9968: [designate-operator] Ensure stable condition messages - Implementation Plan

Plan: OSPRH-9968 - [designate-operator] Ensure stable condition messages

Context Summary

Source: OSPRH-9968 (Jira) Type: Epic Priority: Normal Status: Refinement Assignee: Brent Eagles Reporter: Balazs Gibizer

@fmount
fmount / 2026-03-31-OSPRH-28407-plan.md
Created March 31, 2026 09:27
Plan: OSPRH-28407 - Update swift-operator to ensure sorting

Plan: OSPRH-28407 -- Update swift-operator to ensure sorting

Context Summary

Source: OSPRH-28407 (Jira) Type: Story Priority: Normal Parent Epic: OSPRH-9987 (Ensure stable condition messages) Parent Feature: RHOSSTRAT-110

@fmount
fmount / probes.md
Last active February 26, 2026 10:49

OpenStack Probe Configuration Management

This document describes a unified approach to managing Kubernetes probes in RHOSO (liveness, readiness, and startup) across service operators, based on an existing lib-common module [0].

Overview

The probe configuration system addresses two key aspects:

  1. User customization: How services can define overrides for probe configurations
  2. Operator consumption: How operators can consume these overrides through a consistent, type-safe interface

Step 1: Create Pool and configure allow_ec_overwrites

$ ceph osd pool create images_data erasure
$ ceph osd pool create images_meta replicated
$ ceph osd pool set images_data allow_ec_overwrites true

Note: allow_ec_overwrites is required and must be set in Ceph.

Verification steps:

Building custom OpenStack images

This document outlines the hotfix process for an OpenStack service deployed on OpenShift. The procedure assumes the following:

  • Internal Registry Usage: Use the OpenShift internal container image registry instead of a third-party registry. To enable access from EDPM nodes, expose the registry via an OpenShift Route.

Topology and Affinity notes

oc label nodes master-0 node=node0 zone=zoneA --overwrite
oc label nodes master-1 node=node1 zone=zoneB --overwrite
oc label nodes master-2 node=node2 zone=zoneC --overwrite
+--------+      +--------+      +--------+

External Ceph - ROOK / CRC

This guide outlines how to set up an external Ceph cluster using the ROOK operator in a CRC (CodeReady Containers) or SNO (Single Node OpenShift) environment. The instructions assume you're using the install_yamls project and openstack-ceph scripts for development tools.

The setup involves 2 nodes:

  • a crc environment that can be replaced by a SNO
@fmount
fmount / depends_on.sh
Last active October 18, 2023 15:45
depends-on
#!/bin/bash
set -x
REF_REPO="glance-operator"
PR_NUMBER="329"
DEPENDS_ON=$(curl -s -X GET -H \
-H "Accept: application/vnd.github+json" \
-H "X-GitHub-Api-Version: 2022-11-28" \
@fmount
fmount / kcs7025985.sh
Last active January 25, 2024 21:30
workaround provided by kcs 7025985
#!/bin/bash
TIME=5
STORAGE_NETWORK=${STORAGE_NETWORK:-"172.17.3.0/24"}
cat <<EOF>rgw_spec
---
service_type: rgw
service_id: rgw
service_name: rgw.rgw