Add mirror-update03 to the inventory

This is a new noble server that will take over mirror content
management from mirror-update02. Since all of the locking for AFS writes
is done on the host level we need to ensure that mirror-update02 is
sufficiently disabled (locks held and/or server shutdown) when we deploy
mirror-update03. It is probably also a good idea to have mirror-update02
in the emergency file so that automated changes don't undo any of the
lockout we've performed.

Then once we've confirmed that mirror-update03 is happily AFSing things
we can remove 02 from our inventory and delete it.

Depends-On: https://review.opendev.org/c/opendev/zone-opendev.org/+/953139
Change-Id: Ia4d80a68df51e33f8cc32f462e19f4663c604b91

doc/source/afs.rst

@@ -479,7 +479,7 @@ read-write volumes.
   .. code-block:: console
 
     root@bridge:~# /home/zuul/src/opendev.org/opendev/system-config/tools/hieraedit.py \
-      --yaml /etc/ansible/hosts/host_vars/mirror-update01.opendev.org.yaml \
+      --yaml /etc/ansible/hosts/group_vars/mirror-update.yaml \
       -f /path/to/foo.keytab KEYNAME
 
   (don't forget to ``git commit`` and save the change; you can remove
@@ -532,7 +532,7 @@ membership if our needs change.
 Because the initial replication may take more time than we allocate in
 our mirror update cron jobs, manually perform the first mirror update:
 
-* In screen, obtain the lock on ``mirror-update01.opendev.org``::
+* In screen, obtain the lock on ``mirror-update03.opendev.org``::
 
     flock -n /var/run/foo-mirror/mirror.lock bash
 

inventory/base/hosts.yaml

@@ -352,6 +352,17 @@ all:
         - 'ssh-rsa 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'
         - 'ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBA2HckrwCtU3kg/d1jaqMCf964iU2q7ZMwKm2QTnBsUFhAEMmP1DYRc4HkxuflTlJNkRtolN4rxXhYezvzNTW+k='
         - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsdGeNpJ2YzpEYVMdINHMKkrsImgDbAFDqyAm+xDpnr'
+    mirror-update03.opendev.org:
+      ansible_host: 104.130.124.190
+      location:
+        cloud: openstackci-rax
+        region_name: DFW
+      public_v4: 104.130.124.190
+      public_v6: 2001:4800:7818:104:be76:4eff:fe01:325c
+      host_keys:
+        - 'ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBPiUpycKeLOtN9NrF7+icw6R6BO2eMElVgQxHNtSt095Cr0Wh58sBeTOGGruQ9GTj/O0drrEOY63eDc42I6EanY='
+        - 'ssh-rsa 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'
+        - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINhL+WmX0Ir/9QyAC02SIpNzFYL1/H9f559jf1GVEcNL'
     mirror01.iad3.openmetal.opendev.org:
       ansible_host: 200.225.47.18
       location:

zuul.d/system-config-run.yaml

@@ -536,7 +536,7 @@
       nodes:
         - <<: *bridge_node_x86
         - name: mirror-update99.opendev.org
-          label: ubuntu-focal
+          label: ubuntu-noble
       groups:
         - <<: *bastion_group
     vars: