14 Commits

Author SHA1 Message Date
K Jonathan Harker
c29a9dd8df Only include selinux bits on rhel-based systems
The gate-config-puppet-apply test will try to run everything on a
bare-precise node, so even though this doesn't occur in production it is
being tested.

Change-Id: I13b03a7476e30cbb26dc820bb4cf5b56c4018669
2014-05-30 15:36:07 -07:00
Jeremy Stanley
9f0d0dfc83 Fix rsyslog duplicate declaration for git.o.o
It's already declared in the template class, which is included by
the git class.

Change-Id: I94b660f13f93a459a9c130804f0d9b3409055138
2014-02-27 00:12:55 +00:00
Clark Boylan
85c01e9f50 Update git.o.o configs for better rolling reboots
* modules/openstack_project/manifests/git.pp: Give the haproxy stats
socket admin level permissions. Make the socket owned by user root and
group root with mode of 0600. This is necessary to provide instructions
to enable and disable backend servers through the stats socket. Also,
install socat on this server so that commands can be given through the
stats socket.

* modules/openstack_project/manifests/git.pp: Enable git-daemon service
so that it starts running at boot.

Change-Id: Ic38114bdbd9fd1e9ab711e636deaadb15f9c7fe3
2013-10-25 11:18:22 -07:00
Clark Boylan
1c0c4b18df Move location of haproxy rsyslog conf file.
The haproxy rsyslog config file was left in the cgit module despite
pulling the haproxy stuff out of cgit and putting it in
openstack_project. Move the rsyslog config file into the
openstack_project module where it belongs.

Change-Id: I0fc45f7497f0f2682bbc5c7ae0da546a71b67188
2013-08-28 15:53:38 -07:00
Clark Boylan
f22f8f5aa1 Split git.o.o haproxy out of cgit module.
* manifests/site.pp: Use distinct manifests for git.o.o and git.o.o
backends. This allows for the haproxy server to not serve git content
and purely be a load balancer.

* modules/cgit/manifests/init.pp: Remove haproxy from cgit module.
Remove stale xinetd cleanup. Select git daemon port when selecting
HTTP(S) ports.

* modules/openstack_project/manifests/git.pp: Make git.pp a manifest to
load balance git servers with haproxy.

* modules/openstack_project/manifests/git_backend.pp: New manifest to
manage servers that actually serve git content. They sit behind a load
balancer.

* modules/openstack_project/manifests/review.pp: Stop replicating repos
to git load balancer.

Change-Id: I343a0d1e0a7b93874c2e2299ed974a3304957efb
2013-08-26 12:05:26 -07:00
James E. Blair
491363edd6 Add a mirror repack cron to git servers
Like the one on gerrit, but this one adds pack-refs (because
the git server on centos seems to deal with that better).

Change-Id: I1ed497a3690d2c030408010dbd56b6cd916b47fa
2013-08-22 12:14:49 -07:00
Clark Boylan
dea75ed695 Load balance git requests.
* install_modules.sh: Add puppetlabs-haproxy forge module.

* modules/cgit/manifests/init.pp: Add haproxy config to load balance
https, https and git protocol git access. Each git server will host git
http on port 8080, https on port 4443 and git protocol on 29418. These
endpoints will then be load balanced by a single haproxy instance
listening on ports 80, 443 and 9418. The use of haproxy and having
services listen on offset ports to accomodate haproxy is toggleable
using the $balance_git and $behind_proxy boolean flags.
Additionally, configure rsyslog for haproxy.

* modules/cgit/files/rsyslog.haproxy.conf: Enable syslog over UDP on
port 514. This is needed by haproxy to perform logging. Send local0
messages to /var/log/haproxy.log.

* modules/cgit/templates/ssl.conf.erb: Make Apache https listen port
configurable. Remove default virtualhost.

* modules/cgit/templates/httpd.conf.erb: Make Apache http listen port
configurable.

* modules/cgit/templates/git.vhost..erb: Make Apache http(s) listen
ports configuruable. Allow http without redirecting to https as a
fallback option to accomodate CentOS clients.

* modules/openstack_project/manifests/git.pp: Pass load balancer
variables through to the cgit manifest.

* manifests/site.pp: Configure git.o.o to run the load balancer haproxy
and balance across the new gitXX.o.o nodes.

Change-Id: Icefc5923cff9a7c6ce62c1923ec2ea87ebc6474a
2013-08-22 10:52:04 -07:00
Elizabeth Krumbach Joseph
8dd215bece Add static web directory for cgit & initial files
Create and define a static directory for cgit to use.

Add initial favicon and logo files and include in cgitrc.

Also include custom CSS and background image.

Change-Id: If1e20d8e62557cc90aafbf92f4291b964400e029
2013-08-16 16:41:30 -07:00
Elizabeth Krumbach
ceb405b4bb Fix ssl location for git.o.o on CentOS
Attempted to put Apache ssl certificates for git.o.o into the
/etc/ssl/ and /etc/ssl/ directories, but this is a bit of a
Debianism. Updating to RedHat style /etc/pki/tls directories.

Change-Id: Icb83ee2601d29ad679e7c8503a406faeb5153727
2013-08-07 21:22:40 -07:00
Elizabeth Krumbach
64dd0f2b8f Fix double-declaration of cgit class
The cgit class was declared twice, fixing up syntax so it's not.

Change-Id: I94691090e9c5fb49153dbc89ed414e2e7a37afa4
2013-08-07 16:33:55 -07:00
Elizabeth Krumbach
8b81e9d213 Add httpd ssl support to git.openstack.org
Certificates have been added to hiera, now adding the support for
https in a new apache file.

Change-Id: I8447d60a15779b103556e53f04accf671dbf4843
2013-08-06 16:26:52 -07:00
Elizabeth Krumbach
753d8813ad Fix jeepyb class issue on git.o.o
Of course jeepyb::git doesn't really exist, so class failed in
initial attmept to fix missing variables. Moved variables and
comment to an existing class.

Change-Id: I172588eae4b03427f1ee7862073cd50ca4e5a14e
2013-07-19 14:53:36 -07:00
Elizabeth Krumbach
f33d45dca6 Add jeepyb & cgit repo creation script to git.o.o
Includes the jeepyb and required pip modules to the new
git.openstack.org server.

Also installs and sets up the create_cgitrepos.py script for
creating the /etc/cgitrepos configuration file

Change-Id: I06606ca73541dd328f413bfdbd2810fe66ca633b
2013-07-19 10:11:59 -07:00
Elizabeth Krumbach
52732dd550 Add cgit web service and git server
Define git.openstack.org server and deploy cgit web service with
Apache on CentOS.

Change-Id: Id3c7c870e25e4202915bc081454896895084f9af
2013-07-16 09:55:11 -07:00