833 Commits

Author SHA1 Message Date
James E. Blair
87fccc8e9b Add docs for recovering an OpenAFS fileserver
This should be a smooth recovery process.

Change-Id: I3c68b077e38a88160286d94e71676c0c4dbb6a51
2019-09-13 10:42:17 -07:00
Zuul
1b14855a45 Merge "AFS server restart and audit logging : helper script" 2019-08-29 21:03:09 +00:00
Andreas Jaeger
13ce6ffd69 Zuul docs: Remove obsolete note
This note is not needed anymore, remove it.

Change-Id: I708fc3653833f794a448d40e3df72626f282b747
2019-08-28 06:51:58 +02:00
Andreas Jaeger
a6aaaed6a3 Docs: Zuul v2 is dead
Update the Zuul v3 page with correct links and description of promote
pipeline and remove the now obsolete note - and follow it with renaming
the document to zuul.

Change-Id: I9c89cb56d4a318f3a234e7f2f08dabb46d0dfab6
2019-08-27 08:39:57 +02:00
Ian Wienand
814e4be128 Ansible roles for backup
This introduces two new roles for managing the backup-server and hosts
that we wish to back up.

Firstly the "backup" role runs on hosts we wish to backup.  This
generates and configures a separate ssh key for running bup and
installs the appropriate cron job to run the backup daily.

The "backup-server" job runs on the backup server (or, indeed
servers).  It creates users for each backup host, accepts the remote
keys mentioned above and initalises bup.  It is then ready to receive
backups from the remote hosts.

This eliminates a fairly long-standing requirement for manual setup of
the backup server users and keys; this section is removed from the
documentation.

testinfra coverage is added.

Change-Id: I9bf74df351e056791ed817180436617048224d2c
2019-08-05 16:59:57 +10:00
Ian Wienand
35f1321e14 AFS server restart and audit logging : helper script
This script helps restart the AFS servers, which is useful when
updating parameters.  It can also enable audit logging.

It can also stop and start the servers, although it's unlikely we'd
want all the servers offline at the same time so stopping has a
warning included.

Documentation is updated to refer to the helper script

Change-Id: Idcb3e43a3f6e614cdb787d4334e692a98bffdd15
2019-08-02 16:37:00 +10:00
Zuul
b0ea150b89 Merge "Correct emergency file reference in launch script" 2019-07-31 23:22:38 +00:00
James E. Blair
48cafd19f8 Add LE cert for logs.opendev.org to static
This can be used in an apache vhost later, but should be fine to
merge now.

Depends-On: https://review.opendev.org/673902
Change-Id: Ic2cb7585433351ec1bdabd88915fa1ca07da44e7
2019-07-31 13:00:50 -07:00
Jeremy Stanley
4c04ad5436 Correct emergency file reference in launch script
The launch script is referring to the wrong path for the emergency
inventory. Also correct the references in the sysadmin guide and
update the example for using it.

Change-Id: I80bdbd440ec451bcd6fb1a3eb552ffda32407c44
2019-07-26 14:55:32 +00:00
Ian Wienand
667e0dffa0 Add some pointers on the OpenDev PPA
The OpenStack/OpenDev PPA repositories are currently undocumented.
Add some information on where to find things.

Change-Id: Iea03c5d558b3dd6af9f7c860dfcc75a71dc59d9f
2019-07-22 10:58:54 +10:00
Zuul
40c53a796a Merge "mirror-update: update docs for mirror-update.opendev.org" 2019-07-18 20:54:03 +00:00
Zuul
876e7b0dbd Merge "Streamline documented bup setup process" 2019-07-18 13:33:08 +00:00
Ian Wienand
6b22833765 Add letsencrypt documentation
Add an overview of Let's Encrypt operation, and details of requesting
a certificate for hosts.

Change-Id: I636dbeb60383edd79f8d852c52272f6a79043154
2019-07-08 15:21:44 +10:00
Ian Wienand
23f4f3989d mirror-update: update docs for mirror-update.opendev.org
Update AFS docs to refer to the new host

Change-Id: Ib6b54729e0b186ceb7d0beffbbd68bcab0e2e1ba
2019-07-04 09:11:40 +10:00
Ian Wienand
abf11982ce Raise callbacks for AFS server
As documented in [1]

 If the number next to "GotSomeSpaces" or any of the "GSS*" fields is
 greater than 0, then the fileserver ran out of callback space and had
 to prematurely revoke callback promises from clients in order to free
 up space.

Here's our stats on afs01:

  $ xstat_fs_test localhost -collID 3 -onceonly

  Starting up the xstat_fs service, no debugging, one-shot operation

  ------------------------------------------------------------
            13547865 DeleteFiles
          1849223729 DeleteCallBacks
            45049055 BreakCallBacks
          2098382037 AddCallBack
                 174 GotSomeSpaces
                7800 DeleteAllCallBacks
               20778 nFEs
               21184 nCBs
             1500000 nblks
            43425561 CBsTimedOut
                   0 nbreakers
                   8 GSS1
                   4 GSS2
                   5 GSS3
                 169 GSS4
                   4 GSS5

So as noted, the server ran out of callback spaces a few times.
Raising it takes only a little memory, but will help performance.

Thanks to Jeffrey Altman (auristor) for pointing this out.

[1] https://www.openafs.org/pages/newsletter/newsletter-2013-03-volume004-issue05.html

Change-Id: I2ad33dd8918cb559634d2c5b8c4e4e7f2d6d4051
2019-06-28 12:14:47 +10:00
Clark Boylan
4aac4b990a Add docs for deploying a new gitea server
We have gitea state now so deploying a new server requires a bit of
process. Document that process.

Change-Id: I946f9880b66efdfb39bc9894950cd02058ed987a
2019-06-27 12:31:48 -07:00
David Pursehouse
c32fd879b7 Remove dead link from 'paste' documentation
Change-Id: If47bb344d9e0dbea26a45bf8d0353c53449f89a1
Signed-off-by: David Pursehouse <dpursehouse@collab.net>
2019-06-20 11:24:30 +09:00
Jeremy Stanley
861f5e893f Streamline documented bup setup process
Reorder some of the commands used to set up and configure the bup
user on backup servers so the process is more straightforward and
requires fewer mental context switches.

Change-Id: I73cb80a04b8b5a74bb0857b4c8b6fb09030d6306
2019-06-18 23:57:19 +00:00
Andreas Jaeger
15a5806bce Follow opendev renames
The sandbox repos moved from openstack-dev to opendev, the
zone-opendev.org and zone-zuul-ci.org as well.

Follow the rename in this repo.

Depends-On: https://review.opendev.org/657277
Change-Id: I31097568e8791cc49c623fc751bcc575268ad148
2019-05-30 16:00:30 +02:00
James E. Blair
860652fedf Add gitea docs
This is based on the recently removed cgit document, but updated
for gitea.

Change-Id: I4bb1f4b9485d15c412e4882ccc0baf031aeba87b
2019-05-29 08:06:29 -07:00
Monty Taylor
40e3cf3c5e Update references to OpenDev Zuul
The GitHub app has been updated to be called OpenDev Zuul. Update
the docs accordingly.

Change-Id: I384f84d2d291e82c2062b116c77f1b062a009907
2019-05-22 11:16:23 -05:00
Ian Wienand
2acfc176b0 Remove graphite.openstack.org
The server has been removed, remove it from inventory.

While we're here, s/graphite.openstack.org/graphite.opendev.org/'
... it's a CNAME redirect but we might as well clean up.

Change-Id: I36c951c85316cd65dde748b1e50ffa2e058c9a88
2019-05-08 05:55:33 +10:00
Monty Taylor
e7722f8c6b Fix cgit references in docstrings
Change-Id: Ia332bc350882d3948ee30a5569304b43a9487b82
2019-05-03 16:00:02 +00:00
Monty Taylor
d500651367 Rename cgit_file to git_file
In sphinx, we have a :cgit_file: directive that makes links to files.
Thing is - we're not using cgit anymore. So just rename it to git_file.

Change-Id: I80aca5fb3cc84281e29843944fea33e6f4d9fe6f
2019-04-22 11:47:11 +00:00
Monty Taylor
eaa74543de Finish updating docs for opendev
The zuul and zuulv3 docs need to be merged, but that seemed like
too much for this. Also, the 3rd party CI doc is out of date, but
in this patch only removed sections that linked to docs or files
that don't exist anymore.

Change-Id: Ie5497edd762d2146165608f3227b0bac88a913df
2019-04-20 18:25:37 +00:00
Monty Taylor
06353bdb5d Remove running your own doc
This is just so massively out of date fixing it isn't worth it.

Change-Id: Ica122f4579de90c05f4b9327aa04945bbc381daf
2019-04-20 18:25:36 +00:00
Monty Taylor
e01ed4f066 Update some docs for opendev
There's a lot of these, so doing them in chunks. This fixes
the custom roles.

Remove the git and jjb docs, since we don't use them anymore.

Change-Id: I0c5b74f7b73315dac93bce6be0d920cddb94fb58
2019-04-20 09:41:45 -07:00
Clark Boylan
90e867b0e3 Remove no longer used logstash config
This created confusion when updating configs to handle journald. Remove
the unused files and update docs to point at the proper config location.

Change-Id: Ifd8d8868b124b72a86cf7b5acb30480e72b903ed
2019-04-05 17:29:24 -07:00
Ian Wienand
d4a6f1269a Backup rotation procedure
Add a backup rotation procedure to the sysadmin documentation

Change-Id: I366198c635c7fd7f8e1876296bf9357dd577bf56
2019-03-19 12:12:16 +11:00
Zuul
b735f2d478 Merge "Document kerberos stash file requirement" 2019-03-01 18:15:25 +00:00
Zuul
7a712ec6e2 Merge "Docs addition on decrypting Zuul secrets" 2019-02-27 16:53:51 +00:00
Clark Boylan
9c465131db Make kdc03 the master kerberos kdc and admin server
This change will convert kdc03 to a master from a hot standby and will
remove kdc01 from management.

Cutover plan:
  Disable kdc01 in ansible emergeny file
  Stop run-kprop cron on kdc01
  Stop kadmind on kdc01
  Execute run-kprop.sh on kdc01
  Merge this change
  Wait for puppet to convert kdc03 to the master
  Confirm that run-kprop works from kdc03 to kdc04
  Update dns records as documented in our kerberos docs
  Test kadmin works
  Delete old kdc01 server

Change-Id: Ib14b11fa1f0a6bc11b0f615ce5b6f6be214b5629
2019-02-22 15:47:49 -08:00
Clark Boylan
b1b4c1e70d Document kerberos stash file requirement
This adds a piece of missing documentation for running kerberos KDC
servers.

Change-Id: Iac1ffec96ec459ac5856dcdf0fbb2c83224acdb4
2019-02-22 14:28:21 -08:00
Clark Boylan
452760a49c Add kdc03.openstack.org
This new Xenial server is being added as a kerberos standby node but
will be used to replace kdc01 as the master once fully configured and
happy as a standby. This replaces the old trusty server.

Note that the server wasn't added to opendev.org as we don't have a
kerberos realm for that domain so that would be a separate activity for
the future.

Change-Id: I4cc5fcd7504c98a7bcd9dc4f2ad57bb5bf8b54bd
2019-02-22 10:30:57 -08:00
Jeremy Stanley
7323108d4a Docs addition on decrypting Zuul secrets
As this does come up from time to time, record an example command
for decrypting a Zuul secret.

Change-Id: I056bb808ecf0f44cfa5b448521e3f28d04eeffcf
2019-02-19 18:43:26 +00:00
Clark Boylan
4d3ba10e46 pbx.openstack.org cleanup
Update the docs, test flags, cacti entries, and inventory for our new
pbx server. We have replaced the old Trusty node with a Xenial node.

Change-Id: Ifb1e156afbcb38474cbc9f0bc78ae45fdd74444b
2019-02-18 09:19:20 -08:00
James E. Blair
06f322b629 Update DNS documentation
This reflects the new ansible-only opendev dns servers.

Change-Id: I26bda9f6618f8af49a7dfb61981af8640582b7cf
2019-01-28 09:58:02 -08:00
Zuul
c132c0fe25 Merge "Update doc for ptgbot to match current behavior" 2019-01-11 19:49:33 +00:00
Zuul
1eac3674f9 Merge "Update Zuul service documentation" 2019-01-04 10:29:16 +00:00
Thierry Carrez
77b58a8f62 Update doc for ptgbot to match current behavior
PTGbot no longer updates an ethercalc document.

Change-Id: If29ca58a5dd3e4933a111fa143a376151335f32f
2018-12-21 11:38:49 +01:00
Zuul
65527237f5 Merge "Enable github shared admin account" 2018-12-19 02:29:12 +00:00
melissaml
54ecfe0ef4 Change openstack-dev to openstack-discuss
Mailinglists have been updated. Openstack-discuss replaces
openstack-dev.

Change-Id: If72585a6d360bac1696fb75ce1583a44c6dbb662
2018-12-17 10:26:01 +11:00
Zuul
d3b9dfb04a Merge "Ectomy some Jenkins out of the docs" 2018-12-12 11:53:39 +00:00
Ian Wienand
1c48bfe327 Enable github shared admin account
This change describes the shared github administrator account.

This is inspired by I0c61f192a6b5164af7babde5c99e5ee2b77a652c.  As
described there, this allows for admins to have private accounts in
the organisation, but requires that 2FA be turned on.  If people wish
to keep this as a single account which they do "real" work with
(commits, etc) that is probably OK, but add a note that you'll end up
with a lot of mostly irrelevant stuff in your feeds.

Change-Id: Ic408250571133796b4b4639715fe8d01f91898f2
2018-12-12 10:48:16 +11:00
Monty Taylor
55ddc7bf88
Ectomy some Jenkins out of the docs
There are a bunch of places where the narrative text say things like
"jenkins runs jobs". This hasn't been true for a while and it's getting
less true.

Left third-party and running-your-own alone because those are
instructions for other people to do things - and we are not yet at the
point where we are suggesting anyone do their things like we do our
things.

The devstack-gate document describes an old deprecated system, but the
system is still in use (sadly) so it was mostly left intact. A warning
was added so that people would be clear that it was deprecated.

Also removed the logstash client config file. It's the only change in
here that actually affects running code and became unnecessary when it
was switched to geard with Ie3f814e6d3278d87f2a20a72e40b6b92217684fc

Change-Id: Iaf2128c3f953976180c71cb599fcbff7bc06c28a
2018-12-10 17:55:04 +00:00
Zuul
e92b81bae2 Merge "Trivial: Update pypi url to new url" 2018-12-10 02:09:48 +00:00
Zuul
69a9ddb463 Merge "fix somes typos in doc file." 2018-12-10 02:04:26 +00:00
Zuul
dad0716592 Merge "Fix enumerated list in gerrit.rst" 2018-12-10 01:47:35 +00:00
liumk
3f8ec46be8 fix somes typos in doc file.
Change-Id: I5a27ddb6fcbcaa21c223d0b76e733063acce4556
2018-12-10 12:26:23 +11:00
melissaml
f8f7b73846 Trivial: Update pypi url to new url
Pypi url changed from [1] to [2]

[1] https://pypi.python.org/pypi/<package>
[2] https://pypi.org/project/<package>

Change-Id: Ie9f62ed7ed9d9732590d7d274feee64eb41818e9
2018-12-10 12:19:25 +11:00