From 8193a0174258fa55afc198e7cc9fe09727badc6d Mon Sep 17 00:00:00 2001 From: Monty Taylor Date: Sun, 3 May 2020 07:51:39 -0500 Subject: [PATCH] Stop running mcollective The puppet-agent package has added mcollective as a service that just gets run, so we have a ton of servers, basically anything that has been rebooted since the package update, that are running an mcollective daemon that is trying and failing to connect to the mcollective system that does not exist. Add a disabling of the mcollective unit to the disable-puppet-agent role. Also - add disable-puppet-agent everywhere. We'll re-remove it later, but let's make sure we've got this turned off on all of our non-puppet hosts now too. Change-Id: I5c6235e88e5aac3fee85f58d762023c793635f42 --- playbooks/base.yaml | 1 + playbooks/roles/disable-puppet-agent/tasks/main.yaml | 8 ++++++++ 2 files changed, 9 insertions(+) diff --git a/playbooks/base.yaml b/playbooks/base.yaml index 183f3b36e9..1a5d126e8d 100644 --- a/playbooks/base.yaml +++ b/playbooks/base.yaml @@ -13,6 +13,7 @@ - timezone - unbound - exim + - disable-puppet-agent # Do not run firewall rules on kubernetes hosts, they are managed by k8s-on-openstack. # TODO(mordred) snmpd should be able to be re-added to kubernetes hosts but we will diff --git a/playbooks/roles/disable-puppet-agent/tasks/main.yaml b/playbooks/roles/disable-puppet-agent/tasks/main.yaml index 2cbf884bb8..da59b717b2 100644 --- a/playbooks/roles/disable-puppet-agent/tasks/main.yaml +++ b/playbooks/roles/disable-puppet-agent/tasks/main.yaml @@ -10,3 +10,11 @@ name: puppet enabled: no state: stopped + failed_when: false + +- name: Disable the mcollective service + service: + name: mcollective + enabled: no + state: stopped + failed_when: false