The list owners miss their notifications, and a quick check of the
Exim logs on the listserv indicate the constant flood which
precipitated these blackhole aliases has finally subsided.
This reverts commit 159f012d47241b5f97772a6b88d616e710391a2c.
Change-Id: I0b3f0bb8a0f802e98211abc5aff8b04586e42f73
This host used to send stats for afsmon but that has moved to
mirror-update.opendev.org. I accidentally changed this in
ceb711e6d96c3acaa239a4411eb8f33d9ac1e950 when bringing up a new mirror
update host, but we don't need this at all now.
Change-Id: I01d5a8611c018c8c9c4cff2476ea155ef42e923e
This is a new Focal based host, which we want for it's more recent
rsync which hopefully causes less issues resyncing things to AFS
volumes.
See 4918594aa472010a8a112f5f4ed0a471a3351a91 for discussion of the
original issues; we have found that without "-t" all new data seems to
be copied continuously. Empirical testing shows later rsync doesn't
have this issue.
Depends-On: https://review.opendev.org/736859
Change-Id: Iebfffdf8aea6f123e36f264c87d6775771ce2dd8
To prepare for switching to TLS, set up TLS certs for Zookeeper and
all of Nodepool and Zuul, but do not have them connect over TLS yet.
We have observed problems with Kazoo using TLS in production. This
will let us run the ZK quorum using TLS internally, and have Zuul
and Nodepool connect over plaintext while also exposing the TLS
client port so that we can perform some more production tests.
Change-Id: If93b27f5b55be42be1cf6ee23258127fab5ce9ea
This reverts commit 29825ac18b58145f007f64b2998357445b8fdd91.
We observed this issue in production:
https://github.com/python-zk/kazoo/issues/587
Revert until we find a fix.
Change-Id: Ib7b8e3b06770a83b39458d09d2b1e655bd94bd22
Private host_vars exist on bridge separate from review01.openstack.org
with their own mysql database, rest key and email key. Add in a
conditional on accepting our own hostkey since we're not actually
going to run manage-projects on this host so we don't need to do that.
Change-Id: If7f45250e7ead62f2117f3e6c0fcfc0b4e7f71aa
This creates TLS certs for Zookeeper, uses them inside the ZK
quorum, and configures Nodepool and Zuul to use them as well.
A full system restart of all ZK-related components will be required
after merging this patch.
Change-Id: I0cb96a989f3d2c7e0563ce8899f2a5945ea225b3
The OpenStack User Committee is working on merging with the
Technical Committee, and part of that is making sure discussions all
occur in a common place (including planning the committee merger).
The TC already moved its E-mail discussions to the openstack-discuss
mailing list in late 2018, so moving UC discussions to the same list
is imperative.
Change-Id: I9fd6580a65995be235c0f52e65b37a8491edca95
All zuul.conf files can have the same contents, including the
connection information. To reduce the chances of error, set
it in only one place.
If some entries in zuul_connections_secrets aren't available
(because they are specified in a narrower group), we simply won't
include them in the zuul.conf file for that group. That should
be fine.
Change-Id: I446f531162f409e7479eb904251d0c75b9a6e8ff
Make inventory/service for service-specific things, including the
groups.yaml group definitions, and inventory/base for hostvars
related to the base system, including the list of hosts.
Move the exisitng host_vars into inventory/service, since most of
them are likely service-specific. Move group_vars/all.yaml into
base/group_vars as almost all of it is related to base things,
with the execption of the gerrit public key.
A followup patch will move host-specific values into equivilent
files in inventory/base.
This should let us override hostvars in gate jobs. It should also
allow us to do better file matchers - and to be able to organize
our playbooks move if we want to.
Depends-On: https://review.opendev.org/731583
Change-Id: Iddf57b5be47c2e9de16b83a1bc83bee25db995cf