2014-06-04 00:28:27 +00:00
|
|
|
#
|
|
|
|
# Top-level variables
|
|
|
|
#
|
|
|
|
# There must not be any whitespace between this comment and the variables or
|
|
|
|
# in between any two variables in order for them to be correctly parsed and
|
|
|
|
# passed around in test.sh
|
|
|
|
#
|
2019-02-07 15:34:18 +00:00
|
|
|
# Note we do not do a hiera lookup here as we set $group on a per node basis
|
|
|
|
# and that must be set before we can do hiera lookups. Doing a hiera lookup
|
|
|
|
# here would fail to find any group specific info.
|
|
|
|
$elasticsearch_nodes = [
|
|
|
|
"elasticsearch02.openstack.org",
|
|
|
|
"elasticsearch03.openstack.org",
|
|
|
|
"elasticsearch04.openstack.org",
|
|
|
|
"elasticsearch05.openstack.org",
|
|
|
|
"elasticsearch06.openstack.org",
|
|
|
|
"elasticsearch07.openstack.org",
|
|
|
|
]
|
2014-06-04 00:28:27 +00:00
|
|
|
|
2011-09-08 20:20:21 +00:00
|
|
|
#
|
|
|
|
# Default: should at least behave like an openstack server
|
|
|
|
#
|
|
|
|
node default {
|
2012-09-06 17:32:48 +00:00
|
|
|
class { 'openstack_project::server':
|
|
|
|
}
|
2011-09-08 20:20:21 +00:00
|
|
|
}
|
|
|
|
|
2011-08-02 19:58:08 +00:00
|
|
|
#
|
|
|
|
# Long lived servers:
|
|
|
|
#
|
2018-03-22 15:06:15 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^review\d*\.open.*\.org$/ {
|
2018-03-23 13:56:53 +00:00
|
|
|
$group = "review"
|
|
|
|
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2018-03-22 15:06:15 +00:00
|
|
|
|
|
|
|
class { 'openstack_project::review':
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2019-04-17 18:06:06 +00:00
|
|
|
github_oauth_token => hiera('gerrit_github_token'),
|
|
|
|
github_project_username => hiera('github_project_username', 'username'),
|
|
|
|
github_project_password => hiera('github_project_password'),
|
|
|
|
mysql_host => hiera('gerrit_mysql_host', 'localhost'),
|
|
|
|
mysql_password => hiera('gerrit_mysql_password'),
|
|
|
|
email_private_key => hiera('gerrit_email_private_key'),
|
|
|
|
token_private_key => hiera('gerrit_rest_token_private_key'),
|
|
|
|
gerritbot_password => hiera('gerrit_gerritbot_password'),
|
|
|
|
gerritbot_ssh_rsa_key_contents => hiera('gerritbot_ssh_rsa_key_contents'),
|
|
|
|
gerritbot_ssh_rsa_pubkey_contents => hiera('gerritbot_ssh_rsa_pubkey_contents'),
|
|
|
|
ssl_cert_file_contents => hiera('review_opendev_cert_file_contents'),
|
|
|
|
ssl_key_file_contents => hiera('review_opendev_key_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('review_opendev_chain_file_contents'),
|
|
|
|
ssh_dsa_key_contents => hiera('gerrit_ssh_dsa_key_contents'),
|
|
|
|
ssh_dsa_pubkey_contents => hiera('gerrit_ssh_dsa_pubkey_contents'),
|
|
|
|
ssh_rsa_key_contents => hiera('gerrit_ssh_rsa_key_contents'),
|
|
|
|
ssh_rsa_pubkey_contents => hiera('gerrit_ssh_rsa_pubkey_contents'),
|
|
|
|
ssh_project_rsa_key_contents => hiera('gerrit_project_ssh_rsa_key_contents'),
|
|
|
|
ssh_project_rsa_pubkey_contents => hiera('gerrit_project_ssh_rsa_pubkey_contents'),
|
|
|
|
ssh_welcome_rsa_key_contents => hiera('welcome_message_gerrit_ssh_private_key'),
|
|
|
|
ssh_welcome_rsa_pubkey_contents => hiera('welcome_message_gerrit_ssh_public_key'),
|
|
|
|
ssh_replication_rsa_key_contents => hiera('gerrit_replication_ssh_rsa_key_contents'),
|
|
|
|
ssh_replication_rsa_pubkey_contents => hiera('gerrit_replication_ssh_rsa_pubkey_contents'),
|
|
|
|
lp_access_token => hiera('gerrit_lp_access_token'),
|
|
|
|
lp_access_secret => hiera('gerrit_lp_access_secret'),
|
|
|
|
lp_consumer_key => hiera('gerrit_lp_consumer_key'),
|
|
|
|
swift_username => hiera('swift_store_user', 'username'),
|
|
|
|
swift_password => hiera('swift_store_key'),
|
|
|
|
storyboard_password => hiera('gerrit_storyboard_token'),
|
|
|
|
# Compatibility layer vars for the old domain name below here.
|
|
|
|
# TODO rename the hiera keys to reduce confusion
|
|
|
|
review_openstack_cert_file_contents => hiera('gerrit_ssl_cert_file_contents'),
|
|
|
|
review_openstack_key_file_contents => hiera('gerrit_ssl_key_file_contents'),
|
|
|
|
review_openstack_chain_file_contents => hiera('gerrit_ssl_chain_file_contents'),
|
2012-07-26 23:58:35 +00:00
|
|
|
}
|
2011-08-05 23:00:46 +00:00
|
|
|
}
|
|
|
|
|
2018-03-14 14:56:34 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^review-dev\d*\.open.*\.org$/ {
|
2018-03-14 19:01:14 +00:00
|
|
|
$group = "review-dev"
|
|
|
|
|
2015-11-13 21:12:34 +00:00
|
|
|
class { 'openstack_project::server':
|
|
|
|
afs => true,
|
|
|
|
}
|
|
|
|
|
2012-07-26 23:58:35 +00:00
|
|
|
class { 'openstack_project::review_dev':
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2015-10-16 21:05:35 +00:00
|
|
|
github_oauth_token => hiera('gerrit_dev_github_token'),
|
2015-04-15 22:38:05 +00:00
|
|
|
github_project_username => hiera('github_dev_project_username', 'username'),
|
2015-10-16 21:05:35 +00:00
|
|
|
github_project_password => hiera('github_dev_project_password'),
|
2015-04-15 22:38:05 +00:00
|
|
|
mysql_host => hiera('gerrit_dev_mysql_host', 'localhost'),
|
2015-10-16 21:05:35 +00:00
|
|
|
mysql_password => hiera('gerrit_dev_mysql_password'),
|
|
|
|
email_private_key => hiera('gerrit_dev_email_private_key'),
|
|
|
|
ssh_dsa_key_contents => hiera('gerrit_dev_ssh_dsa_key_contents'),
|
|
|
|
ssh_dsa_pubkey_contents => hiera('gerrit_dev_ssh_dsa_pubkey_contents'),
|
|
|
|
ssh_rsa_key_contents => hiera('gerrit_dev_ssh_rsa_key_contents'),
|
|
|
|
ssh_rsa_pubkey_contents => hiera('gerrit_dev_ssh_rsa_pubkey_contents'),
|
|
|
|
ssh_project_rsa_key_contents => hiera('gerrit_dev_project_ssh_rsa_key_contents'),
|
|
|
|
ssh_project_rsa_pubkey_contents => hiera('gerrit_dev_project_ssh_rsa_pubkey_contents'),
|
|
|
|
ssh_replication_rsa_key_contents => hiera('gerrit_dev_replication_ssh_rsa_key_contents'),
|
|
|
|
ssh_replication_rsa_pubkey_contents => hiera('gerrit_dev_replication_ssh_rsa_pubkey_contents'),
|
2016-08-17 18:29:36 +00:00
|
|
|
lp_access_token => hiera('gerrit_dev_lp_access_token'),
|
|
|
|
lp_access_secret => hiera('gerrit_dev_lp_access_secret'),
|
|
|
|
lp_consumer_key => hiera('gerrit_dev_lp_consumer_key'),
|
2016-06-17 07:17:10 +00:00
|
|
|
storyboard_password => hiera('gerrit_dev_storyboard_token'),
|
|
|
|
storyboard_ssl_cert => hiera('gerrit_dev_storyboard_ssl_crt'),
|
2012-07-26 23:58:35 +00:00
|
|
|
}
|
2011-08-02 19:58:08 +00:00
|
|
|
}
|
|
|
|
|
2017-12-11 17:05:04 +00:00
|
|
|
# Node-OS: xenial
|
2019-04-15 01:00:52 +00:00
|
|
|
# Puppet-Version: !3
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^grafana\d*\.open.*\.org$/ {
|
2017-12-11 21:17:24 +00:00
|
|
|
$group = "grafana"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-04-30 19:09:38 +00:00
|
|
|
class { 'openstack_project::grafana':
|
2015-10-28 02:31:50 +00:00
|
|
|
admin_password => hiera('grafana_admin_password'),
|
2015-10-09 15:20:50 +00:00
|
|
|
admin_user => hiera('grafana_admin_user', 'username'),
|
|
|
|
mysql_host => hiera('grafana_mysql_host', 'localhost'),
|
2015-10-28 02:31:50 +00:00
|
|
|
mysql_name => hiera('grafana_mysql_name'),
|
|
|
|
mysql_password => hiera('grafana_mysql_password'),
|
2015-10-09 15:20:50 +00:00
|
|
|
mysql_user => hiera('grafana_mysql_user', 'username'),
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2015-10-28 02:31:50 +00:00
|
|
|
secret_key => hiera('grafana_secret_key'),
|
2015-04-30 19:09:38 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-12-11 17:12:02 +00:00
|
|
|
# Node-OS: xenial
|
2019-02-27 18:32:02 +00:00
|
|
|
node /^health\d*\.openstack\.org$/ {
|
2019-02-26 18:50:27 +00:00
|
|
|
$group = "health"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-10-14 19:33:20 +00:00
|
|
|
class { 'openstack_project::openstack_health_api':
|
|
|
|
subunit2sql_db_host => hiera('subunit2sql_db_host', 'localhost'),
|
2019-02-25 23:11:19 +00:00
|
|
|
hostname => 'health.openstack.org',
|
2015-10-14 19:33:20 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-12-13 22:05:26 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^cacti\d+\.open.*\.org$/ {
|
2016-09-28 20:50:54 +00:00
|
|
|
$group = "cacti"
|
|
|
|
include openstack_project::ssl_cert_check
|
|
|
|
class { 'openstack_project::cacti':
|
|
|
|
cacti_hosts => hiera_array('cacti_hosts'),
|
|
|
|
vhost_name => 'cacti.openstack.org',
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-12-11 17:18:12 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^graphite\d*\.open.*\.org$/ {
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-08-25 12:30:09 +00:00
|
|
|
|
|
|
|
class { '::graphite':
|
2014-05-16 15:46:59 +00:00
|
|
|
graphite_admin_user => hiera('graphite_admin_user', 'username'),
|
|
|
|
graphite_admin_email => hiera('graphite_admin_email', 'email@example.com'),
|
2015-10-16 21:14:46 +00:00
|
|
|
graphite_admin_password => hiera('graphite_admin_password'),
|
2019-04-11 03:23:41 +00:00
|
|
|
# NOTE(ianw): installed on the host via ansible
|
|
|
|
ssl_cert_file => '/etc/letsencrypt-certs/graphite01.opendev.org/graphite01.opendev.org.cer',
|
|
|
|
ssl_key_file => '/etc/letsencrypt-certs/graphite01.opendev.org/graphite01.opendev.org.key',
|
|
|
|
ssl_chain_file => '/etc/letsencrypt-certs/graphite01.opendev.org/ca.cer',
|
2012-11-28 23:12:07 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-02-25 20:39:08 +00:00
|
|
|
# Node-OS: trusty
|
2017-12-11 17:22:05 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^lists\d*\.open.*\.org$/ {
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2017-03-25 13:55:29 +00:00
|
|
|
|
2012-07-26 23:58:35 +00:00
|
|
|
class { 'openstack_project::lists':
|
2015-10-16 21:17:05 +00:00
|
|
|
listpassword => hiera('listpassword'),
|
2012-07-26 23:58:35 +00:00
|
|
|
}
|
2011-08-02 19:58:08 +00:00
|
|
|
}
|
|
|
|
|
2017-12-11 17:22:05 +00:00
|
|
|
# Node-OS: xenial
|
|
|
|
node /^lists\d*\.katacontainers\.io$/ {
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2017-11-30 20:14:59 +00:00
|
|
|
|
|
|
|
class { 'openstack_project::kata_lists':
|
|
|
|
listpassword => hiera('listpassword'),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-12-11 17:23:14 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^paste\d*\.open.*\.org$/ {
|
2017-12-12 22:32:49 +00:00
|
|
|
$group = "paste"
|
|
|
|
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2016-05-02 17:45:14 +00:00
|
|
|
class { 'openstack_project::paste':
|
|
|
|
db_password => hiera('paste_db_password'),
|
|
|
|
db_host => hiera('paste_db_host'),
|
|
|
|
vhost_name => 'paste.openstack.org',
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-03-28 02:57:31 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /planet\d*\.open.*\.org$/ {
|
2012-09-06 17:32:48 +00:00
|
|
|
class { 'openstack_project::planet':
|
|
|
|
}
|
2012-02-03 14:37:54 +00:00
|
|
|
}
|
|
|
|
|
2017-12-11 17:24:02 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^eavesdrop\d*\.open.*\.org$/ {
|
2017-12-11 21:18:03 +00:00
|
|
|
$group = "eavesdrop"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-05-19 18:16:18 +00:00
|
|
|
|
2012-07-26 23:58:35 +00:00
|
|
|
class { 'openstack_project::eavesdrop':
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2015-10-16 21:19:34 +00:00
|
|
|
nickpass => hiera('openstack_meetbot_password'),
|
2014-05-16 15:46:59 +00:00
|
|
|
statusbot_nick => hiera('statusbot_nick', 'username'),
|
2015-10-16 21:19:34 +00:00
|
|
|
statusbot_password => hiera('statusbot_nick_password'),
|
2013-03-29 20:47:38 +00:00
|
|
|
statusbot_server => 'chat.freenode.net',
|
2015-07-29 01:05:08 +00:00
|
|
|
statusbot_channels => hiera_array('statusbot_channels', ['openstack_infra']),
|
2016-01-29 21:34:24 +00:00
|
|
|
statusbot_auth_nicks => hiera_array('statusbot_auth_nicks'),
|
2014-05-16 15:46:59 +00:00
|
|
|
statusbot_wiki_user => hiera('statusbot_wiki_username', 'username'),
|
2015-10-16 21:19:34 +00:00
|
|
|
statusbot_wiki_password => hiera('statusbot_wiki_password'),
|
2013-03-29 20:47:38 +00:00
|
|
|
statusbot_wiki_url => 'https://wiki.openstack.org/w/api.php',
|
2015-09-17 14:43:37 +00:00
|
|
|
# https://wiki.openstack.org/wiki/Infrastructure_Status
|
2013-03-29 20:47:38 +00:00
|
|
|
statusbot_wiki_pageid => '1781',
|
2015-09-17 14:43:37 +00:00
|
|
|
statusbot_wiki_successpageid => '7717',
|
2018-01-04 16:13:59 +00:00
|
|
|
statusbot_wiki_successpageurl => 'https://wiki.openstack.org/wiki/Successes',
|
2017-06-12 16:54:40 +00:00
|
|
|
statusbot_wiki_thankspageid => '37700',
|
2018-01-04 16:13:59 +00:00
|
|
|
statusbot_wiki_thankspageurl => 'https://wiki.openstack.org/wiki/Thanks',
|
2015-09-17 14:43:37 +00:00
|
|
|
statusbot_irclogs_url => 'http://eavesdrop.openstack.org/irclogs/%(chan)s/%(chan)s.%(date)s.log.html',
|
2016-09-09 21:43:51 +00:00
|
|
|
statusbot_twitter => true,
|
|
|
|
statusbot_twitter_key => hiera('statusbot_twitter_key'),
|
|
|
|
statusbot_twitter_secret => hiera('statusbot_twitter_secret'),
|
|
|
|
statusbot_twitter_token_key => hiera('statusbot_twitter_token_key'),
|
|
|
|
statusbot_twitter_token_secret => hiera('statusbot_twitter_token_secret'),
|
2016-12-14 22:04:28 +00:00
|
|
|
accessbot_nick => hiera('accessbot_nick', 'username'),
|
2015-10-16 21:19:34 +00:00
|
|
|
accessbot_password => hiera('accessbot_nick_password'),
|
2015-12-05 00:43:57 +00:00
|
|
|
meetbot_channels => hiera('meetbot_channels', ['openstack-infra']),
|
2017-07-06 19:41:03 +00:00
|
|
|
ptgbot_nick => hiera('ptgbot_nick', 'username'),
|
|
|
|
ptgbot_password => hiera('ptgbot_password'),
|
2012-07-26 23:58:35 +00:00
|
|
|
}
|
2012-04-15 15:06:41 +00:00
|
|
|
}
|
|
|
|
|
2017-12-11 05:19:28 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^ethercalc\d+\.open.*\.org$/ {
|
2017-01-24 19:00:31 +00:00
|
|
|
$group = "ethercalc"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2017-01-24 19:00:31 +00:00
|
|
|
|
|
|
|
class { 'openstack_project::ethercalc':
|
|
|
|
vhost_name => 'ethercalc.openstack.org',
|
|
|
|
ssl_cert_file_contents => hiera('ssl_cert_file_contents'),
|
|
|
|
ssl_key_file_contents => hiera('ssl_key_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('ssl_chain_file_contents'),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-12-11 17:26:13 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^etherpad\d*\.open.*\.org$/ {
|
2018-08-10 16:58:42 +00:00
|
|
|
$group = "etherpad"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-05-20 14:00:28 +00:00
|
|
|
|
2012-07-26 23:58:35 +00:00
|
|
|
class { 'openstack_project::etherpad':
|
2018-08-10 16:58:42 +00:00
|
|
|
vhost_name => 'etherpad.openstack.org',
|
2015-10-16 21:20:37 +00:00
|
|
|
ssl_cert_file_contents => hiera('etherpad_ssl_cert_file_contents'),
|
|
|
|
ssl_key_file_contents => hiera('etherpad_ssl_key_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('etherpad_ssl_chain_file_contents'),
|
2014-05-16 15:46:59 +00:00
|
|
|
mysql_host => hiera('etherpad_db_host', 'localhost'),
|
|
|
|
mysql_user => hiera('etherpad_db_user', 'username'),
|
2015-10-16 21:20:37 +00:00
|
|
|
mysql_password => hiera('etherpad_db_password'),
|
2012-07-26 23:58:35 +00:00
|
|
|
}
|
2012-05-31 23:16:57 +00:00
|
|
|
}
|
|
|
|
|
2017-12-11 17:26:13 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^etherpad-dev\d*\.open.*\.org$/ {
|
2018-08-10 16:58:42 +00:00
|
|
|
$group = "etherpad-dev"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-05-20 14:00:28 +00:00
|
|
|
|
2012-10-25 23:09:13 +00:00
|
|
|
class { 'openstack_project::etherpad_dev':
|
2018-08-10 16:58:42 +00:00
|
|
|
vhost_name => 'etherpad-dev.openstack.org',
|
|
|
|
mysql_host => hiera('etherpad-dev_db_host', 'localhost'),
|
|
|
|
mysql_user => hiera('etherpad-dev_db_user', 'username'),
|
|
|
|
mysql_password => hiera('etherpad-dev_db_password'),
|
2012-10-25 23:09:13 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-08-19 02:00:30 +00:00
|
|
|
# Node-OS: trusty
|
2019-03-10 14:32:11 +00:00
|
|
|
node /^wiki\d+\.openstack\.org$/ {
|
2016-08-29 19:49:45 +00:00
|
|
|
$group = "wiki"
|
2012-07-30 07:23:41 +00:00
|
|
|
class { 'openstack_project::wiki':
|
2016-08-20 15:22:46 +00:00
|
|
|
bup_user => 'bup-wiki',
|
2016-08-22 19:45:12 +00:00
|
|
|
serveradmin => hiera('infra_apache_serveradmin'),
|
2016-08-29 19:49:45 +00:00
|
|
|
site_hostname => 'wiki.openstack.org',
|
2016-08-20 15:05:58 +00:00
|
|
|
ssl_cert_file_contents => hiera('ssl_cert_file_contents'),
|
|
|
|
ssl_key_file_contents => hiera('ssl_key_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('ssl_chain_file_contents'),
|
|
|
|
wg_dbserver => hiera('wg_dbserver'),
|
|
|
|
wg_dbname => 'openstack_wiki',
|
|
|
|
wg_dbuser => 'wikiuser',
|
|
|
|
wg_dbpassword => hiera('wg_dbpassword'),
|
|
|
|
wg_secretkey => hiera('wg_secretkey'),
|
|
|
|
wg_upgradekey => hiera('wg_upgradekey'),
|
|
|
|
wg_recaptchasitekey => hiera('wg_recaptchasitekey'),
|
|
|
|
wg_recaptchasecretkey => hiera('wg_recaptchasecretkey'),
|
|
|
|
wg_googleanalyticsaccount => hiera('wg_googleanalyticsaccount'),
|
2012-07-30 07:23:41 +00:00
|
|
|
}
|
2012-07-16 22:29:28 +00:00
|
|
|
}
|
|
|
|
|
2016-08-20 15:22:46 +00:00
|
|
|
# Node-OS: trusty
|
2019-03-10 14:32:11 +00:00
|
|
|
node /^wiki-dev\d+\.openstack\.org$/ {
|
2016-08-20 15:22:46 +00:00
|
|
|
$group = "wiki-dev"
|
|
|
|
class { 'openstack_project::wiki':
|
|
|
|
serveradmin => hiera('infra_apache_serveradmin'),
|
|
|
|
site_hostname => 'wiki-dev.openstack.org',
|
|
|
|
wg_dbserver => hiera('wg_dbserver'),
|
|
|
|
wg_dbname => 'openstack_wiki',
|
|
|
|
wg_dbuser => 'wikiuser',
|
|
|
|
wg_dbpassword => hiera('wg_dbpassword'),
|
|
|
|
wg_secretkey => hiera('wg_secretkey'),
|
|
|
|
wg_upgradekey => hiera('wg_upgradekey'),
|
|
|
|
wg_recaptchasitekey => hiera('wg_recaptchasitekey'),
|
|
|
|
wg_recaptchasecretkey => hiera('wg_recaptchasecretkey'),
|
2016-09-07 20:47:27 +00:00
|
|
|
disallow_robots => true,
|
2016-08-20 15:22:46 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-12-11 17:27:01 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^logstash\d*\.open.*\.org$/ {
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-05-22 15:41:31 +00:00
|
|
|
|
2013-01-16 23:01:25 +00:00
|
|
|
class { 'openstack_project::logstash':
|
2015-05-22 15:41:31 +00:00
|
|
|
discover_nodes => [
|
2014-02-25 00:07:17 +00:00
|
|
|
'elasticsearch03.openstack.org:9200',
|
|
|
|
'elasticsearch04.openstack.org:9200',
|
|
|
|
'elasticsearch05.openstack.org:9200',
|
|
|
|
'elasticsearch06.openstack.org:9200',
|
2014-06-13 18:19:34 +00:00
|
|
|
'elasticsearch07.openstack.org:9200',
|
2017-12-15 15:10:41 +00:00
|
|
|
'elasticsearch02.openstack.org:9200',
|
2013-08-06 17:46:00 +00:00
|
|
|
],
|
2015-05-22 15:41:31 +00:00
|
|
|
subunit2sql_db_host => hiera('subunit2sql_db_host', ''),
|
|
|
|
subunit2sql_db_pass => hiera('subunit2sql_db_password', ''),
|
2013-05-26 23:08:46 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-12-11 17:27:33 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^logstash-worker\d+\.open.*\.org$/ {
|
2015-05-22 15:41:31 +00:00
|
|
|
$group = 'logstash-worker'
|
|
|
|
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-05-22 15:41:31 +00:00
|
|
|
|
2013-05-26 23:08:46 +00:00
|
|
|
class { 'openstack_project::logstash_worker':
|
2017-12-15 15:10:41 +00:00
|
|
|
discover_node => 'elasticsearch03.openstack.org',
|
2016-09-30 21:43:38 +00:00
|
|
|
enable_mqtt => false,
|
2016-09-13 16:42:47 +00:00
|
|
|
mqtt_password => hiera('mqtt_service_user_password'),
|
|
|
|
mqtt_ca_cert_contents => hiera('mosquitto_tls_ca_file'),
|
2013-01-16 23:01:25 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-12-11 17:27:59 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^subunit-worker\d+\.open.*\.org$/ {
|
2015-03-16 19:47:42 +00:00
|
|
|
$group = "subunit-worker"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2014-11-17 14:48:55 +00:00
|
|
|
class { 'openstack_project::subunit_worker':
|
2017-04-25 21:14:03 +00:00
|
|
|
subunit2sql_db_host => hiera('subunit2sql_db_host', ''),
|
|
|
|
subunit2sql_db_pass => hiera('subunit2sql_db_password', ''),
|
|
|
|
mqtt_pass => hiera('mqtt_service_user_password'),
|
|
|
|
mqtt_ca_cert_contents => hiera('mosquitto_tls_ca_file'),
|
2014-11-17 14:48:55 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-12-11 17:28:45 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^elasticsearch\d+\.open.*\.org$/ {
|
2015-03-16 19:47:42 +00:00
|
|
|
$group = "elasticsearch"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2014-02-25 00:07:17 +00:00
|
|
|
class { 'openstack_project::elasticsearch_node':
|
2017-12-14 22:09:05 +00:00
|
|
|
discover_nodes => $elasticsearch_nodes,
|
2013-05-23 21:08:58 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-07-26 23:03:55 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^firehose\d+\.open.*\.org$/ {
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2016-07-26 23:03:55 +00:00
|
|
|
class { 'openstack_project::firehose':
|
|
|
|
gerrit_ssh_host_key => hiera('gerrit_ssh_rsa_pubkey_contents'),
|
2016-08-02 07:45:10 +00:00
|
|
|
gerrit_public_key => hiera('germqtt_gerrit_ssh_public_key'),
|
2016-07-26 23:03:55 +00:00
|
|
|
gerrit_private_key => hiera('germqtt_gerrit_ssh_private_key'),
|
|
|
|
mqtt_password => hiera('mqtt_service_user_password'),
|
2016-08-08 15:03:11 +00:00
|
|
|
ca_file => hiera('mosquitto_tls_ca_file'),
|
|
|
|
cert_file => hiera('mosquitto_tls_server_cert_file'),
|
|
|
|
key_file => hiera('mosquitto_tls_server_key_file'),
|
2016-08-30 22:26:43 +00:00
|
|
|
imap_hostname => hiera('lpmqtt_imap_server'),
|
|
|
|
imap_username => hiera('lpmqtt_imap_username'),
|
|
|
|
imap_password => hiera('lpmqtt_imap_password'),
|
2019-04-09 06:12:57 +00:00
|
|
|
statsd_host => 'graphite.opendev.org',
|
2016-07-26 23:03:55 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-01-20 23:11:24 +00:00
|
|
|
# A machine to drive AFS mirror updates.
|
2017-12-11 17:29:28 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^mirror-update\d*\.open.*\.org$/ {
|
2016-02-04 16:58:30 +00:00
|
|
|
$group = "afsadmin"
|
|
|
|
|
2016-01-20 23:11:24 +00:00
|
|
|
class { 'openstack_project::mirror_update':
|
2018-01-24 20:03:42 +00:00
|
|
|
admin_keytab => hiera('afsadmin_keytab'),
|
|
|
|
fedora_keytab => hiera('fedora_keytab'),
|
|
|
|
opensuse_keytab => hiera('opensuse_keytab'),
|
|
|
|
reprepro_keytab => hiera('reprepro_keytab'),
|
|
|
|
gem_keytab => hiera('gem_keytab'),
|
|
|
|
centos_keytab => hiera('centos_keytab'),
|
|
|
|
epel_keytab => hiera('epel_keytab'),
|
|
|
|
yum_puppetlabs_keytab => hiera('yum_puppetlabs_keytab'),
|
2016-01-20 23:11:24 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-01-20 23:11:24 +00:00
|
|
|
# Machines in each region to serve AFS mirrors.
|
2017-08-16 00:11:19 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^mirror\d*\..*\.open.*\.org$/ {
|
2016-01-20 23:11:24 +00:00
|
|
|
$group = "mirror"
|
|
|
|
|
|
|
|
class { 'openstack_project::server':
|
|
|
|
afs => true,
|
2016-01-24 03:45:59 +00:00
|
|
|
afs_cache_size => 50000000, # 50GB
|
2016-01-20 23:11:24 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
class { 'openstack_project::mirror':
|
|
|
|
vhost_name => $::fqdn,
|
|
|
|
require => Class['Openstack_project::Server'],
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-09-15 16:35:03 +00:00
|
|
|
# Serve static AFS content for docs and other sites.
|
2017-12-11 17:33:43 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^files\d*\.open.*\.org$/ {
|
2017-01-24 22:54:32 +00:00
|
|
|
$group = "files"
|
2016-09-15 16:35:03 +00:00
|
|
|
class { 'openstack_project::server':
|
|
|
|
afs => true,
|
|
|
|
afs_cache_size => 10000000, # 10GB
|
|
|
|
}
|
|
|
|
|
|
|
|
class { 'openstack_project::files':
|
2019-03-08 15:27:42 +00:00
|
|
|
vhost_name => 'files.openstack.org',
|
|
|
|
developer_cert_file_contents => hiera('developer_cert_file_contents'),
|
|
|
|
developer_key_file_contents => hiera('developer_key_file_contents'),
|
|
|
|
developer_chain_file_contents => hiera('developer_chain_file_contents'),
|
|
|
|
docs_cert_file_contents => hiera('docs_cert_file_contents'),
|
|
|
|
docs_key_file_contents => hiera('docs_key_file_contents'),
|
|
|
|
docs_chain_file_contents => hiera('docs_chain_file_contents'),
|
|
|
|
git_airship_cert_file_contents => hiera('git_airship_cert_file_contents'),
|
|
|
|
git_airship_key_file_contents => hiera('git_airship_key_file_contents'),
|
|
|
|
git_airship_chain_file_contents => hiera('git_airship_chain_file_contents'),
|
|
|
|
git_openstack_cert_file_contents => hiera('git_openstack_cert_file_contents'),
|
|
|
|
git_openstack_key_file_contents => hiera('git_openstack_key_file_contents'),
|
|
|
|
git_openstack_chain_file_contents => hiera('git_openstack_chain_file_contents'),
|
|
|
|
git_starlingx_cert_file_contents => hiera('git_starlingx_cert_file_contents'),
|
|
|
|
git_starlingx_key_file_contents => hiera('git_starlingx_key_file_contents'),
|
|
|
|
git_starlingx_chain_file_contents => hiera('git_starlingx_chain_file_contents'),
|
|
|
|
git_zuul_cert_file_contents => hiera('git_zuul_cert_file_contents'),
|
|
|
|
git_zuul_key_file_contents => hiera('git_zuul_key_file_contents'),
|
|
|
|
git_zuul_chain_file_contents => hiera('git_zuul_chain_file_contents'),
|
|
|
|
require => Class['Openstack_project::Server'],
|
2016-09-15 16:35:03 +00:00
|
|
|
}
|
2017-12-13 00:19:18 +00:00
|
|
|
|
2019-02-04 20:53:04 +00:00
|
|
|
# Temporary for evaluating htaccess rules
|
|
|
|
::httpd::vhost { "git-test.openstack.org":
|
|
|
|
port => 80, # Is required despite not being used.
|
|
|
|
docroot => "/afs/openstack.org/project/git-test/www",
|
|
|
|
priority => '50',
|
|
|
|
template => 'openstack_project/git-test.vhost.erb',
|
|
|
|
}
|
|
|
|
|
2018-08-31 18:09:21 +00:00
|
|
|
openstack_project::website { 'docs.starlingx.io':
|
|
|
|
volume_name => 'starlingx.io',
|
|
|
|
aliases => [],
|
|
|
|
ssl_cert => hiera('docs_starlingx_io_ssl_cert'),
|
|
|
|
ssl_key => hiera('docs_starlingx_io_ssl_key'),
|
|
|
|
ssl_intermediate => hiera('docs_starlingx_io_ssl_intermediate'),
|
|
|
|
require => Class['openstack_project::files'],
|
|
|
|
}
|
|
|
|
|
2019-03-22 22:47:48 +00:00
|
|
|
openstack_project::website { 'docs.opendev.org':
|
|
|
|
aliases => [],
|
|
|
|
docroot => "/afs/openstack.org/project/opendev.org/docs",
|
2019-03-26 22:31:50 +00:00
|
|
|
ssl_cert => hiera('docs_opendev_ssl_cert'),
|
|
|
|
ssl_key => hiera('docs_opendev_ssl_key'),
|
|
|
|
ssl_intermediate => hiera('docs_opendev_ssl_intermediate'),
|
2018-11-29 18:13:45 +00:00
|
|
|
require => Class['openstack_project::files'],
|
|
|
|
}
|
|
|
|
|
2019-06-05 21:10:19 +00:00
|
|
|
openstack_project::website { 'tarballs.opendev.org':
|
|
|
|
aliases => [],
|
|
|
|
docroot => "/afs/openstack.org/project/opendev.org/tarballs",
|
|
|
|
ssl_cert_file => '/etc/letsencrypt-certs/tarballs.opendev.org/tarballs.opendev.org.cer',
|
|
|
|
ssl_key_file => '/etc/letsencrypt-certs/tarballs.opendev.org/tarballs.opendev.org.key',
|
|
|
|
ssl_chain_file => '/etc/letsencrypt-certs/tarballs.opendev.org/ca.cer',
|
|
|
|
require => Class['openstack_project::files'],
|
|
|
|
}
|
|
|
|
|
2017-12-13 00:19:18 +00:00
|
|
|
openstack_project::website { 'zuul-ci.org':
|
2018-05-15 18:19:06 +00:00
|
|
|
aliases => ['www.zuul-ci.org', 'zuulci.org', 'www.zuulci.org'],
|
2017-12-13 00:19:18 +00:00
|
|
|
ssl_cert => hiera('zuul-ci_org_ssl_cert'),
|
|
|
|
ssl_key => hiera('zuul-ci_org_ssl_key'),
|
|
|
|
ssl_intermediate => hiera('zuul-ci_org_ssl_intermediate'),
|
|
|
|
require => Class['openstack_project::files'],
|
|
|
|
}
|
|
|
|
|
2016-09-15 16:35:03 +00:00
|
|
|
}
|
|
|
|
|
2015-07-06 19:39:00 +00:00
|
|
|
# Node-OS: trusty
|
2017-12-11 17:34:11 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^refstack\d*\.open.*\.org$/ {
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-07-06 19:39:00 +00:00
|
|
|
class { 'refstack':
|
|
|
|
mysql_host => hiera('refstack_mysql_host', 'localhost'),
|
|
|
|
mysql_database => hiera('refstack_mysql_db_name', 'refstack'),
|
|
|
|
mysql_user => hiera('refstack_mysql_user', 'refstack'),
|
2015-10-16 21:22:54 +00:00
|
|
|
mysql_user_password => hiera('refstack_mysql_password'),
|
|
|
|
ssl_cert_content => hiera('refstack_ssl_cert_file_contents'),
|
2018-06-22 22:38:37 +00:00
|
|
|
ssl_cert => '/etc/ssl/certs/refstack.pem',
|
2015-10-16 21:22:54 +00:00
|
|
|
ssl_key_content => hiera('refstack_ssl_key_file_contents'),
|
2018-06-22 22:38:37 +00:00
|
|
|
ssl_key => '/etc/ssl/private/refstack.key',
|
2015-10-16 21:22:54 +00:00
|
|
|
ssl_ca_content => hiera('refstack_ssl_chain_file_contents'),
|
2018-06-22 22:38:37 +00:00
|
|
|
ssl_ca => '/etc/ssl/certs/refstack.ca.pem',
|
2015-07-06 19:39:00 +00:00
|
|
|
protocol => 'https',
|
|
|
|
}
|
2015-12-07 22:44:39 +00:00
|
|
|
mysql_backup::backup_remote { 'refstack':
|
|
|
|
database_host => hiera('refstack_mysql_host', 'localhost'),
|
|
|
|
database_user => hiera('refstack_mysql_user', 'refstack'),
|
|
|
|
database_password => hiera('refstack_mysql_password'),
|
|
|
|
require => Class['::refstack'],
|
|
|
|
}
|
2015-07-06 19:39:00 +00:00
|
|
|
}
|
|
|
|
|
2014-01-06 02:33:45 +00:00
|
|
|
# A machine to run Storyboard
|
2017-12-11 17:34:41 +00:00
|
|
|
# Node-OS: xenial
|
2019-02-16 18:00:10 +00:00
|
|
|
node /^storyboard\d+\.opendev\.org$/ {
|
2019-01-20 18:06:21 +00:00
|
|
|
$group = "storyboard"
|
2014-01-06 02:33:45 +00:00
|
|
|
class { 'openstack_project::storyboard':
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2014-05-16 15:46:59 +00:00
|
|
|
mysql_host => hiera('storyboard_db_host', 'localhost'),
|
|
|
|
mysql_user => hiera('storyboard_db_user', 'username'),
|
2015-10-16 21:24:54 +00:00
|
|
|
mysql_password => hiera('storyboard_db_password'),
|
2014-08-13 21:48:11 +00:00
|
|
|
rabbitmq_user => hiera('storyboard_rabbit_user', 'username'),
|
2015-10-16 21:24:54 +00:00
|
|
|
rabbitmq_password => hiera('storyboard_rabbit_password'),
|
2016-05-18 15:28:14 +00:00
|
|
|
ssl_cert => '/etc/ssl/certs/storyboard.openstack.org.pem',
|
2015-10-16 21:24:54 +00:00
|
|
|
ssl_cert_file_contents => hiera('storyboard_ssl_cert_file_contents'),
|
2016-05-18 15:28:14 +00:00
|
|
|
ssl_key => '/etc/ssl/private/storyboard.openstack.org.key',
|
2015-10-16 21:24:54 +00:00
|
|
|
ssl_key_file_contents => hiera('storyboard_ssl_key_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('storyboard_ssl_chain_file_contents'),
|
2019-01-20 18:06:21 +00:00
|
|
|
hostname => 'storyboard.openstack.org',
|
2015-02-23 20:27:02 +00:00
|
|
|
valid_oauth_clients => [
|
2019-01-20 18:06:21 +00:00
|
|
|
'storyboard.openstack.org',
|
2017-12-07 20:57:25 +00:00
|
|
|
'logs.openstack.org',
|
2015-02-23 20:27:02 +00:00
|
|
|
],
|
2015-02-23 21:08:51 +00:00
|
|
|
cors_allowed_origins => [
|
2019-01-20 18:06:21 +00:00
|
|
|
'https://storyboard.openstack.org',
|
2017-12-07 20:57:25 +00:00
|
|
|
'http://logs.openstack.org',
|
2015-02-23 21:08:51 +00:00
|
|
|
],
|
2016-03-16 10:48:23 +00:00
|
|
|
sender_email_address => 'storyboard@storyboard.openstack.org',
|
2018-04-18 20:44:04 +00:00
|
|
|
default_url => 'https://storyboard.openstack.org',
|
2014-01-06 02:33:45 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-05-03 15:37:42 +00:00
|
|
|
# A machine to run Storyboard devel
|
2017-12-11 17:34:41 +00:00
|
|
|
# Node-OS: xenial
|
2019-01-27 17:04:56 +00:00
|
|
|
node /^storyboard-dev\d+\.opendev\.org$/ {
|
2019-01-09 22:47:29 +00:00
|
|
|
$group = "storyboard-dev"
|
2016-05-12 18:09:49 +00:00
|
|
|
class { 'openstack_project::storyboard::dev':
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2016-05-03 15:37:42 +00:00
|
|
|
mysql_host => hiera('storyboard_db_host', 'localhost'),
|
|
|
|
mysql_user => hiera('storyboard_db_user', 'username'),
|
|
|
|
mysql_password => hiera('storyboard_db_password'),
|
|
|
|
rabbitmq_user => hiera('storyboard_rabbit_user', 'username'),
|
|
|
|
rabbitmq_password => hiera('storyboard_rabbit_password'),
|
2019-01-09 20:15:21 +00:00
|
|
|
hostname => 'storyboard-dev.openstack.org',
|
2016-05-03 15:37:42 +00:00
|
|
|
valid_oauth_clients => [
|
2019-01-09 20:15:21 +00:00
|
|
|
'storyboard-dev.openstack.org',
|
2017-12-07 20:57:25 +00:00
|
|
|
'logs.openstack.org',
|
2016-05-03 15:37:42 +00:00
|
|
|
],
|
|
|
|
cors_allowed_origins => [
|
2019-01-09 20:15:21 +00:00
|
|
|
'https://storyboard-dev.openstack.org',
|
2017-12-07 20:57:25 +00:00
|
|
|
'http://logs.openstack.org',
|
2016-05-03 15:37:42 +00:00
|
|
|
],
|
|
|
|
sender_email_address => 'storyboard-dev@storyboard-dev.openstack.org',
|
2018-04-18 20:44:04 +00:00
|
|
|
default_url => 'https://storyboard-dev.openstack.org',
|
2016-05-03 15:37:42 +00:00
|
|
|
}
|
2016-05-12 18:09:49 +00:00
|
|
|
|
2016-05-03 15:37:42 +00:00
|
|
|
}
|
|
|
|
|
2012-08-10 22:38:08 +00:00
|
|
|
# A machine to serve static content.
|
2016-07-28 15:27:18 +00:00
|
|
|
# Node-OS: trusty
|
2017-12-11 17:36:36 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^static\d*\.open.*\.org$/ {
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2012-09-06 17:32:48 +00:00
|
|
|
class { 'openstack_project::static':
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2017-06-30 20:30:54 +00:00
|
|
|
swift_authurl => 'https://identity.api.rackspacecloud.com/v2.0/',
|
|
|
|
swift_user => 'infra-files-ro',
|
|
|
|
swift_key => hiera('infra_files_ro_password'),
|
|
|
|
swift_tenant_name => hiera('infra_files_tenant_name', 'tenantname'),
|
|
|
|
swift_region_name => 'DFW',
|
|
|
|
swift_default_container => 'infra-files',
|
|
|
|
ssl_cert_file_contents => hiera('static_ssl_cert_file_contents'),
|
|
|
|
ssl_key_file_contents => hiera('static_ssl_key_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('static_ssl_chain_file_contents'),
|
2013-12-11 20:01:13 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-11-30 17:51:24 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^zk\d+\.open.*\.org$/ {
|
2018-10-22 23:22:03 +00:00
|
|
|
# We use IP addresses here so that zk listens on the public facing addresses
|
|
|
|
# allowing cluster members to talk to each other. Without this they listen
|
|
|
|
# on 127.0.1.1 because that is what we have in /etc/hosts for
|
|
|
|
# zk0X.openstack.org.
|
|
|
|
$zk_cluster_members = [
|
|
|
|
'23.253.236.126', # zk01
|
|
|
|
'172.99.117.32', # zk02
|
|
|
|
'23.253.90.246', # zk03
|
|
|
|
]
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2017-11-30 17:51:24 +00:00
|
|
|
|
|
|
|
class { '::zookeeper':
|
2017-12-05 04:04:32 +00:00
|
|
|
# ID needs to be numeric, so we use regex to extra numbers from fqdn.
|
2018-12-19 20:31:35 +00:00
|
|
|
id => regsubst($::fqdn, '^zk(\d+)\.open.*\.org$', '\1'),
|
2017-11-30 17:51:24 +00:00
|
|
|
# The frequency in hours to look for and purge old snapshots,
|
|
|
|
# defaults to 0 (disabled). The number of retained snapshots can
|
|
|
|
# be separately controlled through snap_retain_count and
|
|
|
|
# defaults to the minimum value of 3. This will quickly fill the
|
|
|
|
# disk in production if not enabled. Works on ZK >=3.4.
|
|
|
|
purge_interval => 6,
|
|
|
|
servers => $zk_cluster_members,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2013-12-19 22:57:02 +00:00
|
|
|
# A machine to serve various project status updates.
|
2016-05-24 20:30:22 +00:00
|
|
|
# Node-OS: trusty
|
2017-12-11 03:27:36 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^status\d*\.open.*\.org$/ {
|
2017-12-11 03:27:36 +00:00
|
|
|
$group = 'status'
|
|
|
|
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-05-27 18:55:10 +00:00
|
|
|
|
2013-12-11 20:01:13 +00:00
|
|
|
class { 'openstack_project::status':
|
2019-05-09 14:38:02 +00:00
|
|
|
gerrit_host => 'review.opendev.org',
|
2015-10-16 21:26:49 +00:00
|
|
|
gerrit_ssh_host_key => hiera('gerrit_ssh_rsa_pubkey_contents'),
|
|
|
|
reviewday_ssh_public_key => hiera('reviewday_rsa_pubkey_contents'),
|
|
|
|
reviewday_ssh_private_key => hiera('reviewday_rsa_key_contents'),
|
|
|
|
recheck_ssh_public_key => hiera('elastic-recheck_gerrit_ssh_public_key'),
|
|
|
|
recheck_ssh_private_key => hiera('elastic-recheck_gerrit_ssh_private_key'),
|
2013-12-31 19:11:55 +00:00
|
|
|
recheck_bot_nick => 'openstackrecheck',
|
2015-10-16 21:26:49 +00:00
|
|
|
recheck_bot_passwd => hiera('elastic-recheck_ircbot_password'),
|
2012-09-06 17:32:48 +00:00
|
|
|
}
|
2012-08-10 22:38:08 +00:00
|
|
|
}
|
|
|
|
|
2018-03-30 18:26:01 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^survey\d+\.open.*\.org$/ {
|
2018-03-30 18:26:01 +00:00
|
|
|
$group = "survey"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2018-03-30 18:26:01 +00:00
|
|
|
|
|
|
|
class { 'openstack_project::survey':
|
|
|
|
vhost_name => 'survey.openstack.org',
|
|
|
|
auth_openid => true,
|
|
|
|
ssl_cert_file_contents => hiera('ssl_cert_file_contents'),
|
|
|
|
ssl_key_file_contents => hiera('ssl_key_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('ssl_chain_file_contents'),
|
|
|
|
dbpassword => hiera('dbpassword'),
|
|
|
|
dbhost => hiera('dbhost'),
|
|
|
|
adminuser => hiera('adminuser'),
|
|
|
|
adminpass => hiera('adminpass'),
|
|
|
|
adminmail => hiera('adminmail'),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-02-07 15:48:57 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^nl\d+\.open.*\.org$/ {
|
2017-02-07 15:48:57 +00:00
|
|
|
$group = 'nodepool'
|
2018-09-10 23:40:04 +00:00
|
|
|
|
2019-05-09 14:38:02 +00:00
|
|
|
# NOTE(ianw) From 09-2018 (https://review.opendev.org/#/c/598329/)
|
2018-09-10 23:40:04 +00:00
|
|
|
# the cloud credentials are deployed with ansible via the
|
|
|
|
# configure-openstacksdk role and are no longer configured here
|
2017-02-07 15:48:57 +00:00
|
|
|
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2017-02-07 15:48:57 +00:00
|
|
|
|
|
|
|
include openstack_project
|
|
|
|
|
|
|
|
class { '::openstackci::nodepool_launcher':
|
2017-02-20 18:46:36 +00:00
|
|
|
nodepool_ssh_private_key => hiera('zuul_worker_ssh_private_key_contents'),
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2019-04-09 06:12:57 +00:00
|
|
|
statsd_host => 'graphite.opendev.org',
|
2018-01-18 17:55:30 +00:00
|
|
|
revision => 'master',
|
2017-07-19 15:21:35 +00:00
|
|
|
python_version => 3,
|
2018-02-13 03:26:43 +00:00
|
|
|
enable_webapp => true,
|
2017-02-07 15:48:57 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-09-07 19:01:07 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^nb\d+\.open.*\.org$/ {
|
2017-09-07 19:01:07 +00:00
|
|
|
$group = 'nodepool'
|
|
|
|
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2017-09-07 19:01:07 +00:00
|
|
|
|
|
|
|
include openstack_project
|
|
|
|
|
|
|
|
class { '::openstackci::nodepool_builder':
|
|
|
|
nodepool_ssh_public_key => hiera('zuul_worker_ssh_public_key_contents'),
|
|
|
|
vhost_name => $::fqdn,
|
2018-02-13 03:26:43 +00:00
|
|
|
enable_build_log_via_http => true,
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2019-04-09 06:12:57 +00:00
|
|
|
statsd_host => 'graphite.opendev.org',
|
2017-09-07 19:01:07 +00:00
|
|
|
upload_workers => '16',
|
2018-01-18 17:55:30 +00:00
|
|
|
revision => 'master',
|
2018-01-16 20:05:26 +00:00
|
|
|
python_version => 3,
|
2018-01-17 19:41:15 +00:00
|
|
|
zuulv3 => true,
|
2018-05-17 04:00:48 +00:00
|
|
|
ssl_cert_file => '/etc/ssl/certs/ssl-cert-snakeoil.pem',
|
|
|
|
ssl_key_file => '/etc/ssl/private/ssl-cert-snakeoil.key',
|
2017-09-07 19:01:07 +00:00
|
|
|
}
|
|
|
|
|
2016-11-22 23:11:32 +00:00
|
|
|
cron { 'mirror_gitgc':
|
|
|
|
user => 'nodepool',
|
|
|
|
hour => '20',
|
|
|
|
minute => '0',
|
|
|
|
command => 'find /opt/dib_cache/source-repositories/ -type d -name "*.git" -exec git --git-dir="{}" gc \; >/dev/null',
|
|
|
|
environment => 'PATH=/usr/bin:/bin:/usr/sbin:/sbin',
|
|
|
|
require => Class['::openstackci::nodepool_builder'],
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-06-01 20:06:22 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^ze\d+\.open.*\.org$/ {
|
2017-06-06 16:36:44 +00:00
|
|
|
$group = "zuul-executor"
|
|
|
|
|
2019-05-09 14:38:02 +00:00
|
|
|
$gerrit_server = 'review.opendev.org'
|
2017-06-27 20:36:16 +00:00
|
|
|
$gerrit_user = 'zuul'
|
|
|
|
$gerrit_ssh_host_key = hiera('gerrit_ssh_rsa_pubkey_contents')
|
|
|
|
$gerrit_ssh_private_key = hiera('gerrit_ssh_private_key_contents')
|
|
|
|
$zuul_ssh_private_key = hiera('zuul_ssh_private_key_contents')
|
|
|
|
$zuul_static_private_key = hiera('jenkins_ssh_private_key_contents')
|
|
|
|
$git_email = 'zuul@openstack.org'
|
|
|
|
$git_name = 'OpenStack Zuul'
|
2018-01-18 17:55:30 +00:00
|
|
|
$revision = 'master'
|
2017-06-01 20:06:22 +00:00
|
|
|
|
|
|
|
class { 'openstack_project::server':
|
2017-08-31 00:57:12 +00:00
|
|
|
afs => true,
|
2017-06-01 20:06:22 +00:00
|
|
|
}
|
|
|
|
|
2017-08-04 01:05:14 +00:00
|
|
|
class { '::project_config':
|
2019-04-20 13:34:25 +00:00
|
|
|
url => 'https://opendev.org/openstack/project-config',
|
2017-08-04 01:05:14 +00:00
|
|
|
}
|
|
|
|
|
2018-02-14 04:43:43 +00:00
|
|
|
# We use later HWE kernels for better memory managment, requiring an
|
|
|
|
# updated AFS version which we install from our custom ppa.
|
|
|
|
include ::apt
|
|
|
|
apt::ppa { 'ppa:openstack-ci-core/openafs-amd64-hwe': }
|
|
|
|
package { 'linux-generic-hwe-16.04':
|
|
|
|
ensure => present,
|
|
|
|
require => [
|
|
|
|
Apt::Ppa['ppa:openstack-ci-core/openafs-amd64-hwe'],
|
|
|
|
Class['apt::update'],
|
|
|
|
],
|
|
|
|
}
|
|
|
|
|
2019-02-04 23:27:56 +00:00
|
|
|
# Skopeo is required for pushing/pulling from the intermediate
|
|
|
|
# registry, and is available in the projectatomic ppa.
|
|
|
|
|
|
|
|
apt::ppa { 'ppa:projectatomic/ppa': }
|
|
|
|
package { 'skopeo':
|
2019-05-18 13:32:29 +00:00
|
|
|
ensure => present,
|
2019-02-04 23:27:56 +00:00
|
|
|
require => [
|
|
|
|
Apt::Ppa['ppa:projectatomic/ppa'],
|
|
|
|
Class['apt::update'],
|
|
|
|
],
|
|
|
|
}
|
|
|
|
|
2019-04-22 17:16:47 +00:00
|
|
|
# Socat is also required for pushing/pulling images
|
|
|
|
package { 'socat':
|
|
|
|
ensure => present,
|
|
|
|
require => [
|
|
|
|
Class['apt::update'],
|
|
|
|
],
|
|
|
|
}
|
|
|
|
|
2017-06-01 20:06:22 +00:00
|
|
|
# NOTE(pabelanger): We call ::zuul directly, so we can override all in one
|
|
|
|
# settings.
|
|
|
|
class { '::zuul':
|
2018-01-17 20:17:47 +00:00
|
|
|
gearman_server => 'zuul01.openstack.org',
|
2017-08-04 01:05:14 +00:00
|
|
|
gerrit_server => $gerrit_server,
|
|
|
|
gerrit_user => $gerrit_user,
|
|
|
|
zuul_ssh_private_key => $gerrit_ssh_private_key,
|
|
|
|
git_email => $git_email,
|
|
|
|
git_name => $git_name,
|
|
|
|
worker_private_key_file => '/var/lib/zuul/ssh/nodepool_id_rsa',
|
|
|
|
revision => $revision,
|
|
|
|
python_version => 3,
|
2018-10-22 16:29:11 +00:00
|
|
|
zookeeper_hosts => 'zk01.openstack.org:2181,zk02.openstack.org:2181,zk03.openstack.org:2181',
|
2017-08-04 01:05:14 +00:00
|
|
|
zuulv3 => true,
|
|
|
|
connections => hiera('zuul_connections', []),
|
2019-10-04 21:11:26 +00:00
|
|
|
connection_secrets => hiera('zuul_connection_secrets', []),
|
2017-08-04 01:05:14 +00:00
|
|
|
gearman_client_ssl_cert => hiera('gearman_client_ssl_cert'),
|
|
|
|
gearman_client_ssl_key => hiera('gearman_client_ssl_key'),
|
|
|
|
gearman_ssl_ca => hiera('gearman_ssl_ca'),
|
2017-08-31 16:44:03 +00:00
|
|
|
#TODO(pabelanger): Add openafs role for zuul-jobs to setup /etc/openafs
|
|
|
|
# properly. We need to revisting this post Queens PTG.
|
2017-10-23 15:37:44 +00:00
|
|
|
trusted_ro_paths => ['/etc/openafs', '/etc/ssl/certs', '/var/lib/zuul/ssh'],
|
2017-08-31 23:08:23 +00:00
|
|
|
trusted_rw_paths => ['/afs'],
|
2017-10-23 15:41:10 +00:00
|
|
|
untrusted_ro_paths => ['/etc/ssl/certs'],
|
2017-09-22 20:13:06 +00:00
|
|
|
disk_limit_per_job => 5000, # Megabytes
|
2017-08-04 01:05:14 +00:00
|
|
|
site_variables_yaml_file => $::project_config::zuul_site_variables_yaml,
|
|
|
|
require => $::project_config::config_dir,
|
2019-04-09 06:12:57 +00:00
|
|
|
statsd_host => 'graphite.opendev.org',
|
2017-06-01 20:06:22 +00:00
|
|
|
}
|
|
|
|
|
2017-08-04 01:01:44 +00:00
|
|
|
class { '::zuul::executor': }
|
2017-06-07 18:07:52 +00:00
|
|
|
|
2017-09-11 18:20:17 +00:00
|
|
|
# This is used by the log job submission playbook which runs under
|
|
|
|
# python2
|
|
|
|
package { 'gear':
|
|
|
|
ensure => latest,
|
|
|
|
provider => openstack_pip,
|
|
|
|
require => Class['pip'],
|
|
|
|
}
|
|
|
|
|
2017-06-07 18:07:52 +00:00
|
|
|
file { '/var/lib/zuul/ssh/nodepool_id_rsa':
|
|
|
|
owner => 'zuul',
|
|
|
|
group => 'zuul',
|
|
|
|
mode => '0400',
|
|
|
|
require => File['/var/lib/zuul/ssh'],
|
|
|
|
content => $zuul_ssh_private_key,
|
|
|
|
}
|
2017-06-08 21:59:26 +00:00
|
|
|
|
2017-06-27 20:36:16 +00:00
|
|
|
file { '/var/lib/zuul/ssh/static_id_rsa':
|
|
|
|
owner => 'zuul',
|
|
|
|
group => 'zuul',
|
|
|
|
mode => '0400',
|
|
|
|
require => File['/var/lib/zuul/ssh'],
|
|
|
|
content => $zuul_static_private_key,
|
|
|
|
}
|
|
|
|
|
2017-06-08 21:59:26 +00:00
|
|
|
class { '::zuul::known_hosts':
|
2019-04-20 02:47:38 +00:00
|
|
|
known_hosts_content => "[review.opendev.org]:29418,[review.openstack.org]:29418,[104.130.246.32]:29418,[2001:4800:7819:103:be76:4eff:fe04:9229]:29418 ${gerrit_ssh_host_key}\n[git.opendaylight.org]:29418,[52.35.122.251]:29418,[2600:1f14:421:f500:7b21:2a58:ab0a:2d17]:29418 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyRXyHEw/P1iZr/fFFzbodT5orVV/ftnNRW59Zh9rnSY5Rmbc9aygsZHdtiWBERVVv8atrJSdZool75AglPDDYtPICUGWLR91YBSDcZwReh5S9es1dlQ6fyWTnv9QggSZ98KTQEuE3t/b5SfH0T6tXWmrNydv4J2/mejKRRLU2+oumbeVN1yB+8Uau/3w9/K5F5LgsDDzLkW35djLhPV8r0OfmxV/cAnLl7AaZlaqcJMA+2rGKqM3m3Yu+pQw4pxOfCSpejlAwL6c8tA9naOvBkuJk+hYpg5tDEq2QFGRX5y1F9xQpwpdzZROc5hdGYntM79VMMXTj+95dwVv/8yTsw==\n",
|
2017-06-08 21:59:26 +00:00
|
|
|
}
|
2017-06-01 20:06:22 +00:00
|
|
|
}
|
|
|
|
|
2018-01-15 20:32:54 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^zuul\d+\.open.*\.org$/ {
|
2018-01-16 18:19:21 +00:00
|
|
|
$group = "zuul-scheduler"
|
2019-05-09 14:38:02 +00:00
|
|
|
$gerrit_server = 'review.opendev.org'
|
2018-01-15 20:32:54 +00:00
|
|
|
$gerrit_user = 'zuul'
|
|
|
|
$gerrit_ssh_host_key = hiera('gerrit_zuul_user_ssh_key_contents')
|
|
|
|
$zuul_ssh_private_key = hiera('zuul_ssh_private_key_contents')
|
|
|
|
$zuul_url = "http://zuul.openstack.org/p"
|
|
|
|
$git_email = 'zuul@openstack.org'
|
|
|
|
$git_name = 'OpenStack Zuul'
|
2018-01-18 17:55:30 +00:00
|
|
|
$revision = 'master'
|
2018-01-15 20:32:54 +00:00
|
|
|
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2017-02-07 20:05:42 +00:00
|
|
|
|
2018-01-15 20:32:54 +00:00
|
|
|
class { '::project_config':
|
2019-04-20 13:34:25 +00:00
|
|
|
url => 'https://opendev.org/openstack/project-config',
|
2014-01-08 08:12:39 +00:00
|
|
|
}
|
2018-01-15 20:32:54 +00:00
|
|
|
|
|
|
|
# NOTE(pabelanger): We call ::zuul directly, so we can override all in one
|
|
|
|
# settings.
|
|
|
|
class { '::zuul':
|
2018-01-21 17:01:51 +00:00
|
|
|
gerrit_server => $gerrit_server,
|
|
|
|
gerrit_user => $gerrit_user,
|
|
|
|
zuul_ssh_private_key => $zuul_ssh_private_key,
|
|
|
|
git_email => $git_email,
|
|
|
|
git_name => $git_name,
|
|
|
|
revision => $revision,
|
|
|
|
python_version => 3,
|
2018-10-22 16:29:11 +00:00
|
|
|
zookeeper_hosts => 'zk01.openstack.org:2181,zk02.openstack.org:2181,zk03.openstack.org:2181',
|
2018-01-21 17:01:51 +00:00
|
|
|
zookeeper_session_timeout => 40,
|
|
|
|
zuulv3 => true,
|
|
|
|
connections => hiera('zuul_connections', []),
|
|
|
|
connection_secrets => hiera('zuul_connection_secrets', []),
|
2018-01-26 03:30:26 +00:00
|
|
|
vhost_name => 'zuul.openstack.org',
|
2018-01-21 17:01:51 +00:00
|
|
|
zuul_status_url => 'http://127.0.0.1:8001/openstack',
|
2018-02-15 22:03:05 +00:00
|
|
|
zuul_web_url => 'http://127.0.0.1:9000',
|
|
|
|
zuul_tenant_name => 'openstack',
|
2018-01-21 17:01:51 +00:00
|
|
|
gearman_client_ssl_cert => hiera('gearman_client_ssl_cert'),
|
|
|
|
gearman_client_ssl_key => hiera('gearman_client_ssl_key'),
|
|
|
|
gearman_server_ssl_cert => hiera('gearman_server_ssl_cert'),
|
|
|
|
gearman_server_ssl_key => hiera('gearman_server_ssl_key'),
|
|
|
|
gearman_ssl_ca => hiera('gearman_ssl_ca'),
|
|
|
|
proxy_ssl_cert_file_contents => hiera('zuul_ssl_cert_file_contents'),
|
|
|
|
proxy_ssl_chain_file_contents => hiera('zuul_ssl_chain_file_contents'),
|
|
|
|
proxy_ssl_key_file_contents => hiera('zuul_ssl_key_file_contents'),
|
2019-04-09 06:12:57 +00:00
|
|
|
statsd_host => 'graphite.opendev.org',
|
2018-02-03 01:15:31 +00:00
|
|
|
status_url => 'https://zuul.openstack.org',
|
2018-11-30 16:00:44 +00:00
|
|
|
relative_priority => true,
|
2019-08-09 15:14:57 +00:00
|
|
|
web_root => 'https://zuul.opendev.org',
|
2018-01-15 20:32:54 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
file { "/etc/zuul/github.key":
|
|
|
|
ensure => present,
|
|
|
|
owner => 'zuul',
|
|
|
|
group => 'zuul',
|
|
|
|
mode => '0600',
|
|
|
|
content => hiera('zuul_github_app_key'),
|
|
|
|
require => File['/etc/zuul'],
|
|
|
|
}
|
|
|
|
|
|
|
|
class { '::zuul::scheduler':
|
|
|
|
layout_dir => $::project_config::zuul_layout_dir,
|
|
|
|
require => $::project_config::config_dir,
|
|
|
|
python_version => 3,
|
|
|
|
use_mysql => true,
|
|
|
|
}
|
|
|
|
|
2018-03-27 22:42:30 +00:00
|
|
|
class { '::zuul::web':
|
2019-03-12 21:21:05 +00:00
|
|
|
# We manage backups below
|
|
|
|
enable_status_backups => false,
|
2019-01-29 17:07:04 +00:00
|
|
|
vhosts => {
|
|
|
|
'zuul.openstack.org' => {
|
|
|
|
port => 443,
|
|
|
|
docroot => '/opt/zuul-web/content',
|
|
|
|
priority => '50',
|
|
|
|
ssl => true,
|
|
|
|
template => 'zuul/zuulv3.vhost.erb',
|
|
|
|
vhost_name => 'zuul.openstack.org',
|
|
|
|
},
|
|
|
|
'zuul.opendev.org' => {
|
|
|
|
port => 443,
|
|
|
|
docroot => '/opt/zuul-web/content',
|
|
|
|
priority => '40',
|
|
|
|
ssl => true,
|
|
|
|
template => 'zuul/zuulv3.vhost.erb',
|
|
|
|
vhost_name => 'zuul.opendev.org',
|
|
|
|
},
|
2019-01-29 23:20:00 +00:00
|
|
|
'zuul.openstack.org-http' => {
|
|
|
|
port => 80,
|
|
|
|
docroot => '/opt/zuul-web/content',
|
|
|
|
priority => '50',
|
|
|
|
ssl => false,
|
|
|
|
template => 'zuul/zuulv3.vhost.erb',
|
|
|
|
vhost_name => 'zuul.openstack.org',
|
|
|
|
},
|
|
|
|
'zuul.opendev.org-http' => {
|
|
|
|
port => 80,
|
|
|
|
docroot => '/opt/zuul-web/content',
|
|
|
|
priority => '40',
|
|
|
|
ssl => false,
|
|
|
|
template => 'zuul/zuulv3.vhost.erb',
|
|
|
|
vhost_name => 'zuul.opendev.org',
|
|
|
|
},
|
2019-01-29 17:07:04 +00:00
|
|
|
},
|
|
|
|
vhosts_flags => {
|
|
|
|
'zuul.openstack.org' => {
|
|
|
|
tenant_name => 'openstack',
|
|
|
|
ssl => true,
|
|
|
|
},
|
|
|
|
'zuul.opendev.org' => {
|
|
|
|
tenant_name => '',
|
|
|
|
ssl => true,
|
|
|
|
},
|
2019-01-29 23:20:00 +00:00
|
|
|
'zuul.openstack.org-http' => {
|
|
|
|
tenant_name => 'openstack',
|
|
|
|
ssl => false,
|
|
|
|
},
|
|
|
|
'zuul.opendev.org-http' => {
|
|
|
|
tenant_name => '',
|
|
|
|
ssl => false,
|
|
|
|
},
|
2019-01-29 17:07:04 +00:00
|
|
|
},
|
|
|
|
vhosts_ssl => {
|
|
|
|
'zuul.openstack.org' => {
|
|
|
|
ssl_cert_file_contents => hiera('zuul_ssl_cert_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('zuul_ssl_chain_file_contents'),
|
|
|
|
ssl_key_file_contents => hiera('zuul_ssl_key_file_contents'),
|
|
|
|
},
|
|
|
|
'zuul.opendev.org' => {
|
|
|
|
ssl_cert_file_contents => hiera('opendev_zuul_ssl_cert_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('opendev_zuul_ssl_chain_file_contents'),
|
|
|
|
ssl_key_file_contents => hiera('opendev_zuul_ssl_key_file_contents'),
|
|
|
|
},
|
|
|
|
},
|
2018-03-27 22:42:30 +00:00
|
|
|
}
|
|
|
|
|
2019-03-12 21:21:05 +00:00
|
|
|
zuul::status_backups { 'openstack-zuul-tenant':
|
|
|
|
tenant_name => 'openstack',
|
|
|
|
ssl => true,
|
|
|
|
status_uri => 'https://zuul.opendev.org/api/tenant/openstack/status',
|
|
|
|
}
|
|
|
|
|
|
|
|
zuul::status_backups { 'kata-zuul-tenant':
|
|
|
|
tenant_name => 'kata-containers',
|
|
|
|
ssl => true,
|
|
|
|
status_uri => 'https://zuul.opendev.org/api/tenant/kata-containers/status',
|
|
|
|
}
|
|
|
|
|
2018-01-15 20:32:54 +00:00
|
|
|
class { '::zuul::fingergw': }
|
|
|
|
|
2018-06-07 18:15:22 +00:00
|
|
|
class { '::zuul::known_hosts':
|
2019-04-20 02:47:38 +00:00
|
|
|
known_hosts_content => "[review.opendev.org]:29418,[review.openstack.org]:29418,[104.130.246.32]:29418,[2001:4800:7819:103:be76:4eff:fe04:9229]:29418 ${gerrit_ssh_host_key}\n[git.opendaylight.org]:29418,[52.35.122.251]:29418,[2600:1f14:421:f500:7b21:2a58:ab0a:2d17]:29418 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAyRXyHEw/P1iZr/fFFzbodT5orVV/ftnNRW59Zh9rnSY5Rmbc9aygsZHdtiWBERVVv8atrJSdZool75AglPDDYtPICUGWLR91YBSDcZwReh5S9es1dlQ6fyWTnv9QggSZ98KTQEuE3t/b5SfH0T6tXWmrNydv4J2/mejKRRLU2+oumbeVN1yB+8Uau/3w9/K5F5LgsDDzLkW35djLhPV8r0OfmxV/cAnLl7AaZlaqcJMA+2rGKqM3m3Yu+pQw4pxOfCSpejlAwL6c8tA9naOvBkuJk+hYpg5tDEq2QFGRX5y1F9xQpwpdzZROc5hdGYntM79VMMXTj+95dwVv/8yTsw==\n",
|
2018-06-07 18:15:22 +00:00
|
|
|
}
|
|
|
|
|
2018-01-15 20:32:54 +00:00
|
|
|
include bup
|
|
|
|
bup::site { 'rax.ord':
|
|
|
|
backup_user => 'bup-zuulv3',
|
|
|
|
backup_server => 'backup01.ord.rax.ci.openstack.org',
|
|
|
|
}
|
|
|
|
|
2013-05-09 23:06:21 +00:00
|
|
|
}
|
|
|
|
|
2017-09-10 17:57:57 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^zm\d+.open.*\.org$/ {
|
2017-09-10 17:57:57 +00:00
|
|
|
$group = "zuul-merger"
|
|
|
|
|
2019-05-09 14:38:02 +00:00
|
|
|
$gerrit_server = 'review.opendev.org'
|
2017-09-10 17:57:57 +00:00
|
|
|
$gerrit_user = 'zuul'
|
2017-09-12 16:58:13 +00:00
|
|
|
$gerrit_ssh_host_key = hiera('gerrit_ssh_rsa_pubkey_contents')
|
2017-09-11 19:45:39 +00:00
|
|
|
$zuul_ssh_private_key = hiera('zuulv3_ssh_private_key_contents')
|
2017-09-10 17:57:57 +00:00
|
|
|
$zuul_url = "http://${::fqdn}/p"
|
|
|
|
$git_email = 'zuul@openstack.org'
|
|
|
|
$git_name = 'OpenStack Zuul'
|
2018-01-18 17:55:30 +00:00
|
|
|
$revision = 'master'
|
2017-09-10 17:57:57 +00:00
|
|
|
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2017-09-10 17:57:57 +00:00
|
|
|
|
|
|
|
# NOTE(pabelanger): We call ::zuul directly, so we can override all in one
|
|
|
|
# settings.
|
|
|
|
class { '::zuul':
|
2018-01-17 20:17:47 +00:00
|
|
|
gearman_server => 'zuul01.openstack.org',
|
2017-09-10 17:57:57 +00:00
|
|
|
gerrit_server => $gerrit_server,
|
|
|
|
gerrit_user => $gerrit_user,
|
|
|
|
zuul_ssh_private_key => $zuul_ssh_private_key,
|
|
|
|
git_email => $git_email,
|
|
|
|
git_name => $git_name,
|
|
|
|
revision => $revision,
|
|
|
|
python_version => 3,
|
2018-10-22 16:29:11 +00:00
|
|
|
zookeeper_hosts => 'zk01.openstack.org:2181,zk02.openstack.org:2181,zk03.openstack.org:2181',
|
2017-09-10 17:57:57 +00:00
|
|
|
zuulv3 => true,
|
|
|
|
connections => hiera('zuul_connections', []),
|
2019-10-04 21:11:26 +00:00
|
|
|
connection_secrets => hiera('zuul_connection_secrets', []),
|
2017-09-10 17:57:57 +00:00
|
|
|
gearman_client_ssl_cert => hiera('gearman_client_ssl_cert'),
|
|
|
|
gearman_client_ssl_key => hiera('gearman_client_ssl_key'),
|
|
|
|
gearman_ssl_ca => hiera('gearman_ssl_ca'),
|
2019-04-09 06:12:57 +00:00
|
|
|
statsd_host => 'graphite.opendev.org',
|
2017-09-10 17:57:57 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
class { 'openstack_project::zuul_merger':
|
|
|
|
gerrit_server => $gerrit_server,
|
|
|
|
gerrit_user => $gerrit_user,
|
|
|
|
gerrit_ssh_host_key => $gerrit_ssh_host_key,
|
|
|
|
zuul_ssh_private_key => $zuul_ssh_private_key,
|
|
|
|
manage_common_zuul => false,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2019-02-13 17:06:58 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^pbx\d*\.open.*\.org$/ {
|
2019-02-13 17:06:58 +00:00
|
|
|
$group = "pbx"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2013-07-16 21:03:58 +00:00
|
|
|
class { 'openstack_project::pbx':
|
2013-07-18 20:36:21 +00:00
|
|
|
sip_providers => [
|
|
|
|
{
|
|
|
|
provider => 'voipms',
|
|
|
|
hostname => 'dallas.voip.ms',
|
2014-05-16 15:46:59 +00:00
|
|
|
username => hiera('voipms_username', 'username'),
|
2015-10-16 21:32:03 +00:00
|
|
|
password => hiera('voipms_password'),
|
2013-07-18 20:36:21 +00:00
|
|
|
outgoing => false,
|
|
|
|
},
|
|
|
|
],
|
2013-07-16 21:03:58 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-10-29 23:55:09 +00:00
|
|
|
# Node-OS: xenial
|
2017-10-30 02:03:42 +00:00
|
|
|
# A backup machine. Don't run cron or puppet agent on it.
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^backup\d+\..*\.ci\.open.*\.org$/ {
|
2017-10-29 23:55:09 +00:00
|
|
|
$group = "ci-backup"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2017-10-29 23:55:09 +00:00
|
|
|
include openstack_project::backup_server
|
|
|
|
}
|
|
|
|
|
2019-02-18 13:30:39 +00:00
|
|
|
# Node-OS: xenial
|
2019-02-02 23:36:43 +00:00
|
|
|
node /^openstackid\d*(\.openstack)?\.org$/ {
|
|
|
|
$group = "openstackid"
|
2014-09-05 12:47:47 +00:00
|
|
|
class { 'openstack_project::openstackid_prod':
|
2019-02-18 13:30:39 +00:00
|
|
|
site_admin_password => hiera('openstackid_site_admin_password'),
|
|
|
|
id_mysql_host => hiera('openstackid_id_mysql_host', 'localhost'),
|
|
|
|
id_mysql_password => hiera('openstackid_id_mysql_password'),
|
|
|
|
id_mysql_user => hiera('openstackid_id_mysql_user', 'username'),
|
|
|
|
id_db_name => hiera('openstackid_id_db_name'),
|
|
|
|
ss_mysql_host => hiera('openstackid_ss_mysql_host', 'localhost'),
|
|
|
|
ss_mysql_password => hiera('openstackid_ss_mysql_password'),
|
|
|
|
ss_mysql_user => hiera('openstackid_ss_mysql_user', 'username'),
|
|
|
|
ss_db_name => hiera('openstackid_ss_db_name', 'username'),
|
|
|
|
redis_password => hiera('openstackid_redis_password'),
|
|
|
|
ssl_cert_file_contents => hiera('openstackid_ssl_cert_file_contents'),
|
|
|
|
ssl_key_file_contents => hiera('openstackid_ssl_key_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('openstackid_ssl_chain_file_contents'),
|
|
|
|
id_recaptcha_public_key => hiera('openstackid_recaptcha_public_key'),
|
|
|
|
id_recaptcha_private_key => hiera('openstackid_recaptcha_private_key'),
|
|
|
|
vhost_name => 'openstackid.org',
|
|
|
|
session_cookie_domain => 'openstackid.org',
|
|
|
|
serveradmin => 'webmaster@openstackid.org',
|
|
|
|
canonicalweburl => 'https://openstackid.org/',
|
|
|
|
app_url => 'https://openstackid.org',
|
|
|
|
app_key => hiera('openstackid_app_key'),
|
|
|
|
id_log_error_to_email => 'openstack@tipit.net',
|
|
|
|
id_log_error_from_email => 'noreply@openstack.org',
|
2019-04-30 16:13:38 +00:00
|
|
|
email_driver => 'sendgrid',
|
|
|
|
email_send_grid_api_key => hiera('openstackid_send_grid_api_key'),
|
2019-02-18 13:30:39 +00:00
|
|
|
php_version => 7,
|
2019-02-25 21:14:12 +00:00
|
|
|
mysql_ssl_enabled => true,
|
|
|
|
mysql_ssl_ca_file_contents => hiera('openstackid_mysql_ssl_ca_file_contents'),
|
|
|
|
mysql_ssl_client_key_file_contents => hiera('openstackid_mysql_ssl_client_key_file_contents'),
|
|
|
|
mysql_ssl_client_cert_file_contents => hiera('openstackid_mysql_ssl_client_cert_file_contents'),
|
2019-04-29 20:29:21 +00:00
|
|
|
lost_password_url => 'https://openstackid.org/lost-password',
|
|
|
|
registration_url => 'https://openstackid.org/registration',
|
|
|
|
registration_mobile_url => 'https://openstackid.org/registration-mobile',
|
|
|
|
resend_verification_url => 'https://openstackid.org/resend-verification',
|
2014-09-05 12:47:47 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2018-12-17 15:55:04 +00:00
|
|
|
# Node-OS: xenial
|
2019-02-02 23:36:43 +00:00
|
|
|
node /^openstackid-dev\d*\.openstack\.org$/ {
|
2019-01-22 22:14:33 +00:00
|
|
|
$group = "openstackid-dev"
|
2013-12-20 04:59:12 +00:00
|
|
|
class { 'openstack_project::openstackid_dev':
|
2019-02-14 13:30:11 +00:00
|
|
|
site_admin_password => hiera('openstackid_dev_site_admin_password'),
|
|
|
|
id_mysql_host => hiera('openstackid_dev_id_mysql_host', 'localhost'),
|
|
|
|
id_mysql_password => hiera('openstackid_dev_id_mysql_password'),
|
|
|
|
id_mysql_user => hiera('openstackid_dev_id_mysql_user', 'username'),
|
|
|
|
ss_mysql_host => hiera('openstackid_dev_ss_mysql_host', 'localhost'),
|
|
|
|
ss_mysql_password => hiera('openstackid_dev_ss_mysql_password'),
|
|
|
|
ss_mysql_user => hiera('openstackid_dev_ss_mysql_user', 'username'),
|
|
|
|
ss_db_name => hiera('openstackid_dev_ss_db_name', 'username'),
|
|
|
|
redis_password => hiera('openstackid_dev_redis_password'),
|
|
|
|
ssl_cert_file_contents => hiera('openstackid_dev_ssl_cert_file_contents'),
|
|
|
|
ssl_key_file_contents => hiera('openstackid_dev_ssl_key_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('openstackid_dev_ssl_chain_file_contents'),
|
|
|
|
id_recaptcha_public_key => hiera('openstackid_dev_recaptcha_public_key'),
|
|
|
|
id_recaptcha_private_key => hiera('openstackid_dev_recaptcha_private_key'),
|
|
|
|
vhost_name => 'openstackid-dev.openstack.org',
|
|
|
|
session_cookie_domain => 'openstackid-dev.openstack.org',
|
|
|
|
serveradmin => 'webmaster@openstackid-dev.openstack.org',
|
|
|
|
canonicalweburl => 'https://openstackid-dev.openstack.org/',
|
|
|
|
app_url => 'https://openstackid-dev.openstack.org',
|
|
|
|
app_key => hiera('openstackid_dev_app_key'),
|
|
|
|
id_log_error_to_email => 'openstack@tipit.net',
|
|
|
|
id_log_error_from_email => 'noreply@openstack.org',
|
2019-04-11 14:48:52 +00:00
|
|
|
email_driver => 'sendgrid',
|
|
|
|
email_send_grid_api_key => hiera('openstackid_dev_send_grid_api_key'),
|
2019-02-14 13:30:11 +00:00
|
|
|
php_version => 7,
|
|
|
|
mysql_ssl_enabled => true,
|
|
|
|
mysql_ssl_ca_file_contents => hiera('openstackid_dev_mysql_ssl_ca_file_contents'),
|
|
|
|
mysql_ssl_client_key_file_contents => hiera('openstackid_dev_mysql_ssl_client_key_file_contents'),
|
|
|
|
mysql_ssl_client_cert_file_contents => hiera('openstackid_dev_mysql_ssl_client_cert_file_contents'),
|
2019-04-29 20:29:21 +00:00
|
|
|
lost_password_url => 'https://openstackid-dev.openstack.org/lost-password',
|
|
|
|
registration_url => 'https://openstackid-dev.openstack.org/registration',
|
|
|
|
registration_mobile_url => 'https://openstackid-dev.openstack.org/registration-mobile',
|
|
|
|
resend_verification_url => 'https://openstackid-dev.openstack.org/resend-verification',
|
2013-10-24 14:18:24 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-11-16 01:12:46 +00:00
|
|
|
# Node-OS: trusty
|
|
|
|
# Used for testing all-in-one deployments
|
|
|
|
node 'single-node-ci.test.only' {
|
|
|
|
include ::openstackci::single_node_ci
|
|
|
|
}
|
|
|
|
|
2019-02-22 18:30:57 +00:00
|
|
|
# Node-OS: xenial
|
|
|
|
node /^kdc03\.open.*\.org$/ {
|
|
|
|
class { 'openstack_project::server': }
|
|
|
|
|
2019-02-22 23:47:49 +00:00
|
|
|
class { 'openstack_project::kdc': }
|
2019-02-22 18:30:57 +00:00
|
|
|
}
|
|
|
|
|
2017-12-15 16:38:10 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^kdc04\.open.*\.org$/ {
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2017-12-15 16:38:10 +00:00
|
|
|
|
|
|
|
class { 'openstack_project::kdc':
|
|
|
|
slave => true,
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2019-03-06 23:08:17 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^afsdb01\.open.*\.org$/ {
|
2016-11-22 17:31:05 +00:00
|
|
|
$group = "afsdb"
|
|
|
|
|
|
|
|
class { 'openstack_project::server':
|
|
|
|
afs => true,
|
|
|
|
}
|
|
|
|
|
|
|
|
include openstack_project::afsdb
|
|
|
|
include openstack_project::afsrelease
|
|
|
|
}
|
|
|
|
|
2019-03-06 23:08:17 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^afsdb.*\.open.*\.org$/ {
|
2015-03-16 19:47:42 +00:00
|
|
|
$group = "afsdb"
|
2015-04-07 20:55:42 +00:00
|
|
|
|
2016-01-20 00:13:50 +00:00
|
|
|
class { 'openstack_project::server':
|
2015-04-07 20:55:42 +00:00
|
|
|
afs => true,
|
2014-10-18 23:22:52 +00:00
|
|
|
}
|
2015-04-07 20:55:42 +00:00
|
|
|
|
|
|
|
include openstack_project::afsdb
|
2014-10-18 23:22:52 +00:00
|
|
|
}
|
|
|
|
|
2019-03-06 23:08:17 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^afs.*\..*\.open.*\.org$/ {
|
2015-03-16 19:47:42 +00:00
|
|
|
$group = "afs"
|
2015-04-07 20:55:42 +00:00
|
|
|
|
2016-01-20 00:13:50 +00:00
|
|
|
class { 'openstack_project::server':
|
2015-04-07 20:55:42 +00:00
|
|
|
afs => true,
|
2014-10-18 23:22:52 +00:00
|
|
|
}
|
2015-04-07 20:55:42 +00:00
|
|
|
|
|
|
|
include openstack_project::afsfs
|
2014-10-18 23:22:52 +00:00
|
|
|
}
|
|
|
|
|
2015-08-05 15:56:08 +00:00
|
|
|
# Node-OS: trusty
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^ask\d*\.open.*\.org$/ {
|
2015-05-15 20:53:38 +00:00
|
|
|
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-05-15 20:53:38 +00:00
|
|
|
|
2014-12-08 15:58:38 +00:00
|
|
|
class { 'openstack_project::ask':
|
|
|
|
db_user => hiera('ask_db_user', 'ask'),
|
2015-10-16 21:36:04 +00:00
|
|
|
db_password => hiera('ask_db_password'),
|
|
|
|
redis_password => hiera('ask_redis_password'),
|
2014-12-08 15:58:38 +00:00
|
|
|
site_ssl_cert_file_contents => hiera('ask_site_ssl_cert_file_contents', undef),
|
|
|
|
site_ssl_key_file_contents => hiera('ask_site_ssl_key_file_contents', undef),
|
|
|
|
site_ssl_chain_file_contents => hiera('ask_site_ssl_chain_file_contents', undef),
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-04-13 11:07:23 +00:00
|
|
|
# Node-OS: trusty
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^ask-staging\d*\.open.*\.org$/ {
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-04-13 11:07:23 +00:00
|
|
|
|
|
|
|
class { 'openstack_project::ask_staging':
|
2015-10-16 21:36:04 +00:00
|
|
|
db_password => hiera('ask_staging_db_password'),
|
|
|
|
redis_password => hiera('ask_staging_redis_password'),
|
2015-04-13 11:07:23 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2017-02-27 17:09:48 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^translate\d+\.open.*\.org$/ {
|
2017-02-27 19:03:27 +00:00
|
|
|
$group = "translate"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2017-02-27 17:09:48 +00:00
|
|
|
class { 'openstack_project::translate':
|
2017-12-04 04:52:39 +00:00
|
|
|
admin_users => 'aeng,cboylan,eumel8,ianw,ianychoi,infra,jaegerandi,mordred,stevenk',
|
2017-02-27 17:09:48 +00:00
|
|
|
openid_url => 'https://openstackid.org',
|
|
|
|
listeners => ['ajp'],
|
|
|
|
from_address => 'noreply@openstack.org',
|
2017-02-27 23:35:07 +00:00
|
|
|
mysql_host => hiera('translate_mysql_host', 'localhost'),
|
|
|
|
mysql_password => hiera('translate_mysql_password'),
|
2017-02-27 17:09:48 +00:00
|
|
|
zanata_server_user => hiera('proposal_zanata_user'),
|
|
|
|
zanata_server_api_key => hiera('proposal_zanata_api_key'),
|
|
|
|
zanata_wildfly_version => '10.1.0',
|
|
|
|
zanata_wildfly_install_url => 'https://repo1.maven.org/maven2/org/wildfly/wildfly-dist/10.1.0.Final/wildfly-dist-10.1.0.Final.tar.gz',
|
2018-02-27 10:02:48 +00:00
|
|
|
zanata_main_version => 4,
|
|
|
|
zanata_url => 'https://github.com/zanata/zanata-platform/releases/download/platform-4.3.3/zanata-4.3.3-wildfly.zip',
|
|
|
|
zanata_checksum => 'eaf8bd07401dade758b677007d2358f173193d17',
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2017-02-27 17:09:48 +00:00
|
|
|
ssl_cert_file_contents => hiera('translate_ssl_cert_file_contents'),
|
|
|
|
ssl_key_file_contents => hiera('translate_ssl_key_file_contents'),
|
|
|
|
ssl_chain_file_contents => hiera('translate_ssl_chain_file_contents'),
|
2017-02-27 19:05:10 +00:00
|
|
|
vhost_name => 'translate.openstack.org',
|
2017-02-27 17:09:48 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-11-18 22:35:38 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^translate-dev\d*\.open.*\.org$/ {
|
2016-11-18 22:35:38 +00:00
|
|
|
$group = "translate-dev"
|
2015-03-30 19:13:59 +00:00
|
|
|
class { 'openstack_project::translate_dev':
|
2017-12-04 04:52:39 +00:00
|
|
|
admin_users => 'aeng,cboylan,eumel,eumel8,ianw,ianychoi,infra,jaegerandi,mordred,stevenk',
|
2017-01-12 22:03:58 +00:00
|
|
|
openid_url => 'https://openstackid-dev.openstack.org',
|
2016-11-18 22:35:38 +00:00
|
|
|
listeners => ['ajp'],
|
|
|
|
from_address => 'noreply@openstack.org',
|
|
|
|
mysql_host => hiera('translate_dev_mysql_host', 'localhost'),
|
|
|
|
mysql_password => hiera('translate_dev_mysql_password'),
|
|
|
|
zanata_server_user => hiera('proposal_zanata_user'),
|
|
|
|
zanata_server_api_key => hiera('proposal_zanata_api_key'),
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2016-11-18 22:35:38 +00:00
|
|
|
vhost_name => 'translate-dev.openstack.org',
|
2015-03-30 19:13:59 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2016-10-06 13:58:56 +00:00
|
|
|
|
2017-12-14 23:03:50 +00:00
|
|
|
# Node-OS: xenial
|
2018-12-19 20:31:35 +00:00
|
|
|
node /^codesearch\d*\.open.*\.org$/ {
|
2017-12-14 23:03:50 +00:00
|
|
|
$group = "codesearch"
|
2018-08-20 23:31:33 +00:00
|
|
|
class { 'openstack_project::server': }
|
2015-08-25 06:23:06 +00:00
|
|
|
class { 'openstack_project::codesearch':
|
2019-04-20 13:34:25 +00:00
|
|
|
project_config_repo => 'https://opendev.org/openstack/project-config',
|
2015-08-25 06:23:06 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2012-09-28 14:05:02 +00:00
|
|
|
# vim:sw=2:ts=2:expandtab:textwidth=79
|