opendev/system-config
Code Issues Proposed changes

Stop running mcollective

Browse Source 
The puppet-agent package has added mcollective as a service that
just gets run, so we have a ton of servers, basically anything
that has been rebooted since the package update, that are running
an mcollective daemon that is trying and failing to connect to
the mcollective system that does not exist.

Add a disabling of the mcollective unit to the disable-puppet-agent
role. Also - add disable-puppet-agent everywhere. We'll re-remove
it later, but let's make sure we've got this turned off on all
of our non-puppet hosts now too.

Change-Id: I5c6235e88e5aac3fee85f58d762023c793635f42
This commit is contained in:
Monty Taylor 2020-05-03 07:51:39 -05:00
parent 33e48396d1
commit 8193a01742
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
playbooks/base.yaml
View File

@ -13,6 +13,7 @@
- timezone - timezone
- unbound - unbound
- exim - exim
- disable-puppet-agent
# Do not run firewall rules on kubernetes hosts, they are managed by k8s-on-openstack. # Do not run firewall rules on kubernetes hosts, they are managed by k8s-on-openstack.
# TODO(mordred) snmpd should be able to be re-added to kubernetes hosts but we will # TODO(mordred) snmpd should be able to be re-added to kubernetes hosts but we will

8
playbooks/roles/disable-puppet-agent/tasks/main.yaml
View File

@ -10,3 +10,11 @@
name: puppet name: puppet
enabled: no enabled: no
state: stopped state: stopped
failed_when: false
- name: Disable the mcollective service
service:
name: mcollective
enabled: no
state: stopped
failed_when: false