Hi all,


This is an introductory email of what hopefully becomes a regular series to help digest development efforts in the Airship community.


In case you missed it, our first community design call was held Thursday, 2018-08-30.  Here's the recording [0].


On to the updates:


The new airship-treasuremap repo [1] is intended to hold a realistic, up-to-date example of Airship configuration.  It's still evolving, but will be supported by an AT&T-provided CICD pipeline to help automate and validate component updates. This should help ensure it remains a reasonable starting place for operators.


Armada now uses Helm version 2.10.  This upgrade enables new features, including an effort in OpenStack Helm to leverage Tiller to generate certificates.  This is a breaking change that requires coordinating updates Tiller and Armada (Tiller first!).


Shipyard supports a couple of new actions: update_software [2] and redploy_server [4].  There is still work to do, especially around redeploy_server, but these should improve the Airship operational experience.


Finally, there have been a number of security improvements moving through the pipeline [6-5].  These improvements are part of a theme to harden Airship-based deployments across the board, so keep an eye out for future work in this area.


Feel free to respond in this thread with questions or comments about current and future development themes.


Best,

Mark Burnett


[0] Design meeting recording: https://bluejeans.com/s/8TTM1

[1] Treasuremap repo: https://github.com/openstack/airship-treasuremap

[2] Shipyard update_software action: https://review.openstack.org/#/c/579990/

[3] Initial Shipyard redeploy_server action: https://review.openstack.org/#/c/583793/

[4] Disable anonymous auth in Kubelet: https://review.openstack.org/#/c/596898/

[5] Replace Deckhand ConfigMap with Secret: https://review.openstack.org/#/c/595386/

[6] First steps for security guide: https://review.openstack.org/#/c/587979/