Keystone auth and openstacksdk/openstackclient do not do the correct
thing without this setting set. They try v2 even though the discovery
doc at the root url does not list that version as valid. Force version 3
so that things will work again.
Change-Id: I7e1b0189c842bbf9640e2cd50873c9f7992dc8d3
OpenStack Ansible uses this repo to install LXC on CentOS as they
do not ship with the distribution packages.
They're not so reliable so its' good to get them monitored.
Change-Id: I011c7a0455e4853e582ed437204e94b6bcc73b3f
This new job is a parent job allowing us to CD from Zuul via
bridge.openstack.org. Using Zuul project ssh keys we add_host bridge.o.o
to our running inventory on the executor then run ansible on bridge.o.o
to run an ansible playbook in
bridge.openstack.org:/opt/system-config/playbooks.
Change-Id: I5cd2dcc53ac480459a22d9e19ef38af78a9e90f7
Allow post-review jobs running under system-config and project-config
to ssh into bridge in order to run Ansible.
Change-Id: I841f87425349722ee69e2f4265b99b5ee0b5a2c8
There is an ERB parsing error for puppet 4, roll back while we figure it
out.
This reverts commit a156accb7d2799cb76e263c927f6bcfaac3c22b2.
Change-Id: I1d2cd468a8d1ebab2573b03250bf6c3ba1195798
Some clouds may be a little slower than others building images and to
override the create_server default timeout of 3 minutes (180) you have
to hand edit -- add a global timeout option and use that consistently.
Change-Id: I66032ef929746739d07dca3fd178b8c43bb8174c
ethercalc doesn't have a dev site to use as a canary, but it does have
passing puppet 4 tests so go go go
Change-Id: Ifec4bf00d4c966653455e567abbdc9bd500ae2ef
Let's abandon the idea that we'll treat the backup server specially.
As long as we allow *any* automated remote access via ansible, we
have opened the door to potential compromise of the backup systems
if bridge is compromised. Rather than pretending that this separation
gives us any benefit, remove it.
Change-Id: I751060dc05918c440374e80ffb483d948f048f36
In run_all.sh, increase the number of ansible forks to 50 for most
playbooks in an attempt to speed up the process.
Change-Id: I487605fd3b2d20d7b1f19c40d22018deeae9c112
In run_all, we start a bunch of plays in sequence, but it's difficult
to tell what they're doing until you see the tasks. Name the plays
themselves to produce a better narrative structure.
Change-Id: I0597eab2c06c6963601dec689714c38101a4d470
This reverts commit de9c7a7c6b22813f2c0d742d61f93a4d0eec9eb8.
The kernel.org mirror is outdated again so we switch to another US
mirror that seems to be up to date.
Change-Id: Iaffc1fa94ea0e01c62b38ce1870b6c40c0c8fb7b
