We'd like to take advantage of the IRC logging that is managed by
openstack-infra. #softwarefactory is a project that packages
openstack-infra tooling:
https://softwarefactory-project.io/docs/
Change-Id: I3bd95eb06414ff7a27d6332591f65468e74bc5cd
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This also removes review-dev.o.o, as it is an CNAME for
review-dev01.o.o.
Change-Id: I82624c5c8c7a5824fc925cd005dc1ed3bdf7c1bb
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Bring mirror02.ca-ymq-1.vexxhost.openstack.org to test if having no
bandwidth limits on our mirrors results is faster jobs.
Change-Id: If5efb199b1966a02ba28fd0cf309cc1c0dc05c02
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
The endpoint SSL certificate for the new limestone provider is
currently self-signed.
We're going to trust it in the same way we did with infracloud by
using the certificate itself for validation.
Change-Id: I56cae339312d0bc8ad94c98f118c215f610a6b23
Turn the nb match into a generic "nb\d+" match to facilitate new
hosts.
Add nb03 to firewalls and hiera.
This is planned to be a linaro-based arm64 builder
Depends-On: https://review.openstack.org/546465
Change-Id: I417784263d231b3d05c64dee72def01d7733a26b
mirror02.dfw.o.o was brought up with
Ibd487840ca6eb263970e47c7d4bcbe36aa33938a as mirror01 was having
issues out of our control. We've decided to just retain mirror02 for
simplicity, so remove mirror01 from monitoring.
Change-Id: Ia3bddde8b318cd0f8acc19133c4d9ce9d2de7d15
We longer have any jobs or need to manage VMs in
tripleo-test-cloud-rh(1|2). This hardware still eventually be removed
so lets also remove it from our configuration.
Change-Id: I588ae945df15beceaf7a60bf6a65b1615b2074f0
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We look to be having networking issues with mirror01.dfw.rax.o.o,
bring online mirror02 as its replacement.
Change-Id: Ibd487840ca6eb263970e47c7d4bcbe36aa33938a
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Open zookeeper firewall rules for nl04.o.o and add to cacti.o.o.
Change-Id: I25171357fc3f93ea46b8d6751a1f4d31a5b7ed4c
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Now that zuulv3.openstack.org has been replaced by the larger
zuul01.openstack.org server, the former can be cleaned out of our
configuration in preparation for server deletion.
Change-Id: Icc1d545906e5615e2a205b98f364a084e1d22895
Our latest nodepool-launcher server is now online.
Change-Id: I6c27bededdf1cbd23634a451712ba1b2215edcbd
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
So that the denizens of #zuul may invoke the statusbot and hear it
sing our praises, we hereby request its presence.
Change-Id: I3cc2c800781f543fc083d99be7a61561ab7565e0
networking-sfc now happen in the channel, so add meetbot there
Add statusbot at the same time for status visibility
Change-Id: I56328da20ce78d1eb460987a5ffa9c67d8b03177
Now that the zuul01.openstack.org instance exists in DNS, update
firewall rules, zookeeper and cacti configuration to include it
(replacing the old zuul.openstack.org entries where relevant).
Change-Id: I6bf605cd5120e342d597d9f862902bdc04abc7e7
In preparation for replacing the zuulv3.openstack.org host with a
larger instance, set up the necessary support in
Puppet/Hiera/Ansible. While we're here, remove or replace old
references to the since-deleted zuul.openstack.org instance, and
where possible update documentation and configuration to refer to
the new zuul.openstack.org CNAME instead of the zuulv3.openstack.org
FQDN so as to smooth the future transition.
Change-Id: Ie51e133afb238dcfdbeff09747cbd2e53093ef84
We no longer have this server, and can remove the it from
system-config.
Change-Id: If72fce20f4f4994d46ed2652786952676912ba04
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Add the openstack-dragonflow channel to the statusbot channels list so
all notifications will be sent there as well.
Change-Id: Id3b79757d2d86a5805f76b3d229e8c6ad930d7b2
We no longer need kdc02.o.o (ubuntu trusty), now that kdc04.o.o
(ubuntu xenial) is online.
Change-Id: I92b879f7a233dc81c0d64153b293ac12f7e72a40
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This converts the config for elasticsearch cluster client firewall rules
to use the new puppet-iptables iptables_allowed_hosts feature. This works
around an issue with netfilter-persistent starting before dns
resolution is working on boot.
Change-Id: I81b7598cb32d498b219ee00f0589e6bf0dc8c242
This converts the config for logstsah gearman client firewall rules to
use the new puppet-iptables iptables_allowed_hosts feature. This works
around an issue with netfilter-persistent starting before dns
resolution is working on boot.
Change-Id: I76c45d8edbfe9f5420884e0ef2fb62cff2cc2bc9
This is a continuation of https://review.openstack.org/#/c/527866/ to setup
the #openstack-vpnaas channel with statusbot and meetbot.
The objective is to get Eavesdrop logging for the channel.
Change-Id: Idfb5b9851157e79eba9a9094c10efe9225e142db
We were using the list of elasticsearch clients to generate firewall
rules for both elasticsearch port ranges and gearman port ranges. We
really only need subsets of the super set in both cases so lets make two
distinct lists that we can add and remove servers from instead.
This means the two sets of nodes that can talk to elasticsaerch are the
logstash node for kibana and the logstash workers for indexing. Then
all zuul executors and logstash workers and subunit workers can talk to
logstash.o.o over port 4730 for gearman job submission and handling.
Change-Id: I95de1404dcc087f09f0fd4e4134e20673e8c0ae5
The server has been rebuilt on Ubuntu Xenial and is ready to go back
into service.
This reverts commit 664689e42729fdbc750ee74f481687cb4d9ee3f0.
Change-Id: I3e7a388fc01d99c5534ace678864dd5840f8e6d8
mirror01 is now live! Update cacti.o.o to start using it. We can also
delete the mirror in tripleo-test-cloud-rh2, as we nolonger have this
region any more.
Change-Id: I5955e95f9613cd2ea4b55ef7a609a551a0f36f8b
Signed-off-by: Paul Belanger <pabelanger@redhat.com>