Make a "base" version of the gerrit master job with no file matcher
so that we can use it in other repositories (eg, gerrit, zuul).
Inherit from it with the original name to add the file matcher back.
Change-Id: I4e428b44dd82f8dba08b219cbf8407969c6436b1
When we build either, it could pick up base image changes, such as
moving from stretch to buster. Make sure any time we build one we
build the other so that they stay in sync.
Change-Id: Ia28ad4f64114c88cc02289c9318a323ceb4f143d
Apparently, an update to the python-base image caused a new image
to be uploaded to dockerhub. Because python-builder was not updated,
it is running a slightly older base image which we believe is causing
issues with python wheel packaging due to possible different python
versions.
Change-Id: I38948882131e30c7358a970292621b0280b75aac
Add bool to use_upstream_docker conditional
This is an ansible behavior change that's coming in 2.12 but is
currently spewing warnings. The warnings make the log really hard
to read, so just fix it.
Disable group name auto-renaming
If you have group names with non-python identifier characters, it
prevents you from looking it up in jinja like "groups.group-name"
so ansible auto-transforms it so you can do "groups.group_name".
This is a confusing behavior which is going away. However, ansible
is warning everyone who has groups with characters in them as it
has no idea how you might be accessing those group names. Add
a config setting to suppress the warning about -'s in group names.
Change-Id: Ib3262025799af7c3171ed0b079cb1dd969075931
We'll use this to test the checks plugin.
We have to add jgit as a repo because it's a submodule now.
Change-Id: Ic7e9ad0265e136a9ac6b1147998f6eb5ee398180
A few things have changed and we need to fix them in one go.
Use mirror for installing docker for buildset-registry
While, we need to make this more systemic, that's hanging off of the
mirror rework. For now, since we know all of these jobs are debian
based, just set the mirror location.
Replace use of zuul cloner with git clones
You can never be a prophet in your own hometown. This is now broken
because of the git cache rework, so just replace it.
Update libjemalloc library
python:slim is based on buster now, which has libjemalloc2 not
libjemalloc1.
Remove gerrit repo remote for submodules
A recent change to the base jobs to use prepare-workspace-git
broke the gerrit image builds by actually having the origin
remote by /dev/null as intended. This breaks submodules because
for a few of them where we don't have matching stable branches
the submodule relative path behavior is actually exactly what
we want.
Since we don't care about the remote otherwise, remove the
origin remote before doing the submodule update --init so that
the submodule will clone the refs from the zuul prepared repo.
Change-Id: Ieb5b6bc8711fe971ed3445c7c267306ac4616464
Our existing config management puts files into hooks and static.
We can bind mount those in, but having the mount-points in the
image is useful.
The tmp dir is important for gerrit to be able to write
plugin expansions and javaamelody data.
Change-Id: Idd917c268ed7bdead412620dfe3ca842736b7463
1.0.0 has released, which is what gerrit wants now. Use it.
Depends-On: https://review.opendev.org/688555
Change-Id: I6cd76b8cfda3656d6105f9fe96b82a388809375f
Just to eliminate the possibility that a bug in this may be causing
us to erroneously delete blobs.
Change-Id: I048d9ae5ba92984c90f84f231b412050a52fcea6
This is no longer used as read access is provided to unathenticated
users with the recently added JWT support.
Depends-On: https://review.opendev.org/687422
Change-Id: I36fd28710c644be9b07d645c6b0c6092f52a7385
An upcoming change will add JWT authentication to the registry;
prepare for that by establishing a server-side secret for use
in signing the tokens.
Change-Id: Ibaa15dd0c4b0d797f01a1886186fdc021dc990fa
We're trying to get clouds.yaml into /etc/openstack/clouds.yaml.
This should accomplish that. The previous configuration was in
error and wiped out the /etc directory which made things not work
well.
Change-Id: I88e69b05f3e8c1688d24736fa775163fc25a07f0
This change adds a task to the zuul restart playbook to update the zuul
ansible installs on the executors during the restart. This will help
ensure we keep our ansible installs there up to date.
Change-Id: I443e204eaa69dcf0c5622303201549224e893626
This uses the new zuul-registry container image to run the
intermediate registry. The same authentication data and certs
are used. The new registry also writes to the same swift container,
but uses different pseudo-directories so it won't clash with the
current registry. If there are problems, we can switch back easily.
After successful use of the new registry, we can delete the old data.
Change-Id: Ib855fb99c991411293a617b9b238d79a6bfae328
This is the connection for Gerrit's Gerrit. We can connect to it
directly with the Gerrit driver now that we support entirely
HTTP-based Gerrits and we have an account. Use that so we can
set up some third-party CI testing.
Change-Id: I7b91b4e67594ce62772e3e450a1236095d4ef1c9
This reverts commit 01bef804de2d65f9ce4cda80e937a718c7ee7628.
This was missing an option, and also our password doesn't work.
Change-Id: I317c29034efaae62ea74a5c16ec25bed98c1e3cc
The extant "logrotate_daily" varaible doesn't really do anything and
isn't used. Modify this to be able to set a range of rotation periods
or a size.
Update mirror rsync mirrors to rotate weekly, as often releases run
overnight and it's a pain to reconstruct.
Change-Id: I121dc5f4fe7f226b66d18b9ec39e7e3839be4d40
This adds mirroring of CentOS 8. It is somewhat simpler because the
architecture we're interested in are in the base repos, no need for
altarch.
The current mirror doesn't have a 8/ directory; possibly they require
their own mirroring filter updates? Use an up-to-date mirror for 8
(we can switch 7 too, but leaving alone for now).
Additionally, the altarch mirror we are using appears to have gone
offline for at least a few days. Switch to another one that is in
Texas, which should be close-ish to the DFW servers.
Change-Id: I33d95fa6b2df23fbfdb6745a3079761e228f677b
Looks like leaseweb, kernel.org and others are not properly
syncing the Suse mirrors as they are out of date for Leap15.0 and
missing files (deltainfo.xml.gz) which causes job breakage for
Leap15.0 based jobs.
Revert this to the original mirror from a year ago which is updated
and not broken
Change-Id: Id7184ee973bbabfec3f601fc9200ffac17322558
The #openstack-election IRC channel is used in the execution of
official OpenStack project duties involving technical elections, so
should be publicly logged. Also, its denizens would appreciate
receiving infrastructure status updates, as these may impact their
activities.
Depends-On: https://review.opendev.org/682440
Change-Id: I54a2feed3cf7265d700082f3ce04b82aa36e56e5
Analysis of IRC channel logs indicates the following have seen 5 or
fewer non-bot comments posted in the past 12 months and are likely
of no value to continue logging:
5 #openstack-vpnaas
2 #swift3
2 #openstack-ko
1 #openstack-deployment
1 #midonet
0 #openstack-valet
0 #openstack-valence
0 #openstack-swg
0 #openstack-mogan
We're currently at Freenode's 120 channel maximum, so remove them
from logging and free up available slots for new channels which wish
to have logging added. In addition, the Neutron team has asked to
have #networking-sfc and #openstack-fwaas removed from logging as
those channels's discussions are being folded back into
the #openstack-neutron channel now:
http://lists.openstack.org/pipermail/openstack-discuss/2019-September/009480.html
While we're here, go ahead and remove the same channels from the
statusbot configuration if they're listed in it.
Change-Id: If1f65be378fa247014e175c75e1562d4755ef497
This change adds a proxy config for quay which should assist
us when gating using images provided by the publically
available registry.
Change-Id: I971705e59724e70bd9d42a6920cf4f883556f673
Signed-off-by: Kevin Carter <kecarter@redhat.com>
We need jeepyb installed because the content of the gerrit hook scripts
we install is done via jeepyb commands. Use python-builder so that we
can just install the jeepyb wheel.
Should we maybe transition these hooks into being zuul jobs?
Depends-On: https://review.opendev.org/683146/
Change-Id: I8899885b05d1e9f48b3f354ca22b360b54d455a3