A simple walkthrough of using an AFS superuser to perform write
operations under an AFS read-write path, including authenticating
and unauthenticating.
Change-Id: If27376745b43f94f27f104bca9309035d265ee72
As happens, if you don't use your Kerberos credentials often you may
lose track of your password for them. Document how, as a system
administrator with a shell on one of the KDCs, you can set a new
passwords for your accounts without needing to recreate the
principals.
Change-Id: I843b5be9630c805335a6cca04237477002748242
The code block for adding a new list to Mailman was out of date.
Updated the codeblock to match format in the lists.pp file.
Change-Id: I76c844c051e8c51a4c76fd774f6af038c647b819
An interesting discussion this morning brought up some details of
reprepro that maybe aren't widely understood. Add some rationale to
the docs.
Change-Id: I371cc67a10d29881b8df03f09830776bf5639ac8
Since we re-enabled the websockets port in change
Id9bb77ef9a2ac70eec74db4ea64423b5d6351a06 things having quite stable.
Connections to mosquitto over websockets hasn't crashed. Since things
have been stable this commit unblocks the tls websockets port for
firehose.o.o and switches it to the standard 443 for https instead of
the default 8080 we were using before. This should enable websites
trying to use the firehose over websockets from https server.
Change-Id: I1b08eabf22f5345a9b4ebfae5d3dab08270efbf9
Jeffrey Altman has pointed out that our settings are not optimal for
our use cases. Turning up threads and callbacks is a start. We
should evaluate the other settings too.
Add notes on how to apply settings manually
Change-Id: I1405b21f97c1ac2d3bd99ffbba18e5fd0ff959b1
With the switch to Zuul v3, we need to resolve some configuration
catch-22s where project names and related in-repository job
definitions can't happen without a complex multi-stage removal and
reintroduction process to get it through speculative testing
successfully. For now, just punt and use monolithic changes
bypassing CI in code review. As an up side, the Ansible automation
of this process coupled with Zuul v3's increased resilience to
on-the-fly configuration changes means we can skip stopping/starting
it now and significantly simplify the process.
Since we're here, correct the section heading level for
"Force-Merging a Change" in the sysadmin document.
Change-Id: I335c23abd0b5706f43bbea2dd8cfffa4280dd5db
I had to figure out this command to restore some of our reprepro
mirrors, add notes on it.
Cleanup some other things I noticed; quotes around REPREPRO command,
clarify the situation with pointing mirrors at the RO/RW volumes and
refactor discussion.
Change-Id: I3e3f763929bf74e0c4faf29b13973dcf1df36975
Update the artifact signing key rotation process documentation for
the new Zuul v3 status quo. Also note that revocation certificates
should use distinct filenames per cycle so that they don't get
overwritten.
Change-Id: Ia7512cc7bd0b1ed52e99271e7d83f05e7bc57918
During manual runs, you want to do this without a timeout. Add a
flag; I always end up copying the script and manually editing this
stuff in. Add a quick note in the AFS docs.
Change-Id: I239bc1a0b5928673b42cc67291bb519d5f5d2471
Now that we've re-enabled the websockets support we can remove the note
about that now. However, we've disabled the tls websockets port so that
line is removed. Hopefully this doesn't horribly jinx the websockets
interface being reliable.
Change-Id: I500bd69efe13b202199e9741f8cd10f12f78f2af
Use a link to the project governance page so readers of the
contributing cloud article can find current PTL details.
Change-Id: Ifc8212c7703e7ac4c6113b866c424e9e9a774a5e
Now that zuulv3.openstack.org has been replaced by the larger
zuul01.openstack.org server, the former can be cleaned out of our
configuration in preparation for server deletion.
Change-Id: Icc1d545906e5615e2a205b98f364a084e1d22895
We are merging feature/zuulv3 in Zuul and Nodepool into master. That
means we need to point things that were pointing at feature/zuulv3 back
to master. Make this update.
Change-Id: Id95fcfbf872e0ed5122941c8c14c0dbf8f393ba4
When we added the schema documentation for the logstash workers to
firehose docs we neglected to update the services tables. This commit
corrects the oversight and updates the table to include the logstash
workers.
Change-Id: Ie2bda5c56b16b1eec1f7e59c6388865bce22cecc
In preparation for replacing the zuulv3.openstack.org host with a
larger instance, set up the necessary support in
Puppet/Hiera/Ansible. While we're here, remove or replace old
references to the since-deleted zuul.openstack.org instance, and
where possible update documentation and configuration to refer to
the new zuul.openstack.org CNAME instead of the zuulv3.openstack.org
FQDN so as to smooth the future transition.
Change-Id: Ie51e133afb238dcfdbeff09747cbd2e53093ef84
We no longer need a zuulv2 dev server, so we can delete it.
Change-Id: Ib6be603719fda8b759c606a9c972377a64437c98
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This runs bind as a hidden master nameserver so we can do all the
keysigning there, and then use nsd (or bind) as public authoritative
slaves.
Change-Id: Ifb2ad109103051fa13c4af1c7be1ca0ae98bb1a1
We no longer need kdc02.o.o (ubuntu trusty), now that kdc04.o.o
(ubuntu xenial) is online.
Change-Id: I92b879f7a233dc81c0d64153b293ac12f7e72a40
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
The server has been rebuilt on Ubuntu Xenial and is ready to go back
into service.
This reverts commit 664689e42729fdbc750ee74f481687cb4d9ee3f0.
Change-Id: I3e7a388fc01d99c5534ace678864dd5840f8e6d8
