The wiki and wiki-dev hostgroups can't conveniently both use globs,
since one will also match a superset of the other. Instead use
regular expressions for a more exact matching.
Change-Id: Ic81b4440783758e5063c2408fe5c15e09977fc22
The wiki-dev.openstack.org server will eventually be used to test
newer versions of Mediawiki and extensions/skins. To accommodate
this, also parameterize server backups so that they don't conflict
with production (and are in fact disabled entirely for the dev
site).
Change-Id: I6505d3af87f670e71a440c76873c085d97e5b82f
In keeping with our decision in Austin to start appending ordinal
suffixes to hostnames for new server instances, switch the node
definition for wiki.openstack.org to allow a new
wiki01.openstack.org to match. The production server has Puppet
temporarily disabled, and the FQDN hiera keys have already been
moved to a new "wiki" group file.
As a requirement for this work, also purge remaining "FQDNisms" from
the openstack_project::wiki class by making the site name a classvar
and removing redundant SSL filenames which now merely mirror the
defaults in the mediawiki module anyway.
Change-Id: I950cb68ecd34e82f0da6b10bf2b93fb2c349286f
Change I3d0962b975ffaf disabled puppet on review-dev.o.o to allow
testing it-storyboard plugin. Testing is complete so now renable
puppet again.
Change-Id: Ieb6279d96331d4c793aaf62e8d5ef11abb420e98
We're test-driving a newer recaptcha configuration which may or may
not be viable, so easier to temporarily disable configuration
management until we know what config change to prose next.
Change-Id: I5571fe8dedab266521364911ce193c435adfb165
The configuration adjustments for recaptcha support have been tested
and are now ready, so we can reenable this.
This reverts commit 7dc243b594ceb14b0a28cfbf7e9c76268d03758f.
Change-Id: Id1692788390dfb08310ddd2d9bf97b8dabe7ffb4
Create the signing01.ci.openstack.org job node and puppet the
signing subkey onto it via pubring.gpg and secring.gpg files stored
in private hiera. Also set up some basic configuration and packages
on the management bastion to aid in key management/rotation, and add
the beginnings of administrative documentation for this.
Change-Id: Iecddb778994a38f7898e0c20e7f3f8e93f0a7f60
Depends-On: I70c3b82185681ee64791cda653360c26a93bd466
Story: #2000336
Signed-off-by: Jeremy Stanley <fungi@yuggoth.org>
This is a redo of change 9c717d9c108b32. That change was incorrect,
the server needs to be placed on the disable list.
Change-Id: I3d0962b975ffaf4560bace88abddb2f661763d55
A set of manual investigation and remediation is under way. While that
is going on, we don't want puppet to step on things.
Change-Id: I7ebc54b222f72ca90475420499ca568b4dcb40d8