In preparation to move the SB data out of Trove instances to a local
database, make sure the database is created via configuration
management. Make the mysql_backup resource require
storyboard::database instead of storyboard::application to work
around a package resource conflict.
A separate maintenance window will be used to move the data, coupled
with a change of database hostname in private Hiera. Following that,
a followup change will switch the database backups from remote to
local.
Change-Id: I912130ad8a5a139147727e49800e36e2afd815f7
We believe the relative_priority change has altered our workload
such that we have smaller jobs starting more frequently. Since
job starts are limited by the executors, we have developed a backlog
and need another executor to relieve the pressure.
Change-Id: I98052e0135c7ee615f1f187b9d0a250cdd1ff178
We have an arm specific task here to install the HWE kernel. We use
first found to select these tasks which means the default Debian package
setup (unattended upgrades and cleanup) is not installed on our arm
servers.
Fix this by having the arm specific tasks include the generic Debian
tasks.
Change-Id: Ibb57e8b095a4cbd27cc14ef0c5ad45c61edc0679
We don't intend on using lxd on our servers and lxd is causing problems
for unattended upgrades. Lets just make sure these packages aren't
installed and avoid the problems entirely.
Change-Id: I9c6fcf8b0072c23ee0127245fa3bb6c3477dcaf5
This change takes the ARA report from the "inner" run of the base
playbooks on our bridge.o.o node and publishes it into the final log
output. This is then displayed by the middleware.
Create a new log hierarchy with a "bridge.o.o" to make it clear the
logs here are related to the test running on that node. Move the
ansible config under there too.
Change-Id: I74122db09f0f712836a0ee820c6fac87c3c9c734
This change enables the installation of the ARA callback plugin in
the install-ansible role. It does not take care of any web reporting
capabilities.
ARA will not be installed and set up by default.
It can be installed and configured by setting
"install_ansible_enable_ara" to "true".
Co-Authored-By: David Moreau-Simard <dmsimard@redhat.com>
Co-Authored-By: Ian Wienand <iwienand@redhat.com>
Change-Id: Iea84ec8e23ca2e3f021aafae4e89c764f2e05bd2
Rename install_openstacksdk to install_ansible_opensatcksdk to make it
clear this is part of the install-ansible role, and it's the
openstacksdk version used with ansible (might be important if we
switch to virtualenvs). This also clears up inconsistency when we add
ARA install options too.
Change-Id: Ie8cb3d5651322b3f6d2de9d6d80964b0d2822dce
This syntax doesn't work in Ansible 2.8.0. Futher, we can use
"listen" to collapse the notify to a single item (at the
expense of duplicating the when clause in the handlers).
Change-Id: I05e2d32f4e1e692ac528a7254c6e3be2858ebacf
Due to an issue with the current ansible branch, this check is failing
currently, make it non-voting to unblock other changes.
[0] https://github.com/ansible/ansible/issues/49430
Change-Id: I2fcf3abd69103a3e0b8eb56528650481a865a1cc
The current-context field needs to reference a defined context. The file
otherwise defines only one "vexxhost-sjc1". Set current-context to that
context.
Change-Id: I1d8991efb5d546f007146fd2fa86ce2b2aeed286
This list's owners have asked for it to be shut down, as they will
be using an [interop-wg] tag on the new openstack-discuss ML for
future communication. Once this merges (so that Puppet won't
recreate it), the list can be removed with the `rmlist` utility
(this will still leave the archives available but will remove it
from the list index and no longer accept subscriptions/posts).
Set the old list address as an alias for the new openstack-discuss
ML so that replies to previous messages from the list will be routed
there for the foreseeable future.
Change-Id: Ib5fd5aece2465d569e0e7c180ee14ba94882f2b7
The general openstack, openstack-dev, openstack-operators and
openstack-sigs mailing lists have been deprecated since November 19
and are slated to be removed on December 3. Merging this on that
date will ensure any further replies to messages from those lists
are rerouted to the new openstack-discuss mailing list for the
foreseeable future.
The openstack-tc list is included in this batch as it has already
been closed down with a recommendation to send further such
communications to the openstack-discuss ML.
Additionally remove the Puppet mailman resource for the
openstack-sigs ML so it won't be automatically recreated after it
gets deleted (the other lists predate our use of Puppet for this
purpose).
Clean up the corresponding -owner spam rejection aliases since these
addresses will no longer be accepting E-mail anyway.
Change-Id: I9a7fae465c3f6bdcf3ebbadb8926eb4feb8fad79
This installs Ansible 2.7.3 on bridge.o.o to incorporate fixes for [1]
which is currently stopping the cloud-launcher from running.
Currently every run it hits citycloud Lon1 and tries to delete it's
router
TASK [cloud-launcher : Processing router openstackci-router1 for openstackci-citycloud Lon1] ***
Monday 12 November 2018 04:07:48 +0000 (0:00:00.430) 0:07:45.811 *******
fatal: [localhost]: FAILED! => {"changed": false, "msg": "Error
detaching interface from router c7197a8f-096a-4488-a3ae-16fdce0ea580
... cannot be deleted, as it is required by one or more floating
IPs."}
Although it doesn't succeed, it's probably better that it isn't even
trying...
A prior version of this installed the unreleased stable branch to
bring this in, but didn't end up with enough reviews. I've left
behind how to do that as a breadcrumb should we need to do similar in
the future (we do seem to have a nack of tickling Ansible bugs :)
[1] 951572bec1
Change-Id: I8f112ba994040c52c7b3c7ee6fd6f5a69fd22919
Rather than be beholden to a dynamic multi-cloud process for data that
is mostly static, just pre-generated it and check it in to git. This
will remove the need to run the openstack dynamic inventory at all.
Change-Id: Ib5c38e9addc55201fd68cbe5f09684391686904e
Remove the zookeeper tcp firewall rules from the nodepool group vars
file as we have dedicated zookeeper servers now. These rules are not
helpful.
Change-Id: I08c2596b8f459fe59d45b0f01e002b9e4b4186d4
This adds connection information for an experimental kubernetes
cluster hosted in vexxhost-sjc1 to the nodepool servers.
Change-Id: Ie7aad841df1779ddba69315ddd9e0ae96a1c8c53
The OpenStack Korean mailing list's owner address have
become overrun by the same mass spam we've seen hitting our other ML
owner addresses. Add a blackhole alias for it.
Change-Id: Ia6c7e6701a69ee56076062aa85f8699121648501
Remove the pypi symlink from the mirrors in preparation for volume
removal
Change-Id: I0f1265857e204616e5e342afe764ff3a0215c4fe
Needed-By: https://review.openstack.org/618326
The OpenStack SIGS mailing list's owner address is starting to
become overrun by the same mass spam we've seen hitting our other ML
owner addresses. Add a blackhole alias for it.
Change-Id: Iefc5b5fa600c5d1de75d3302c8ddf0e1a03301e5
As described in [1], upstream mirrors have started putting setgid bits
on some directories starting with Fedora 29. As you need admin
permissions on AFS to set this, we need to disable -p and just take
our own umask for the mirroring to work.
[1] https://pagure.io/releng/issue/7921
Change-Id: Id24196791f80cd99fe8a330fb2c7c6d893fc9995
Fedora 27 builds were removed with
I6634317838bce4f5bbffe756d96e7dc4588b46fa. There are no more users,
so we can remove the mirror now.
Change-Id: I01c6fc15b332ecb4f17b7256b1c12fbe6be36227
Depends-On: https://review.openstack.org/614375
Bandersnatch mirroring has been disabled since
I88a838cb28fee3bd16b2b0a26e614ac5c2f23241 which is currently almost 6
months ago. Since then we have been running a reverse caching proxy.
Although bandersnatch served us well, it seems pypi has become
impractical to mirror locally. This is partially due to 2TB volume
limitations of OpenAFS and partially due to us not having a sane way
to filter large, frequently updating packages. With the reverse proxy
working there are no plans to restore our local mirror.
Retire the references to it before we clean up the AFS volumes.
Change-Id: Ia23828328dd859bbf26f95735c1c2e99c573d10e
Remove world-readable/traversable bits from permissions on the BIND
DNSSEC keys directory and the keys themselves (not actually
necessary for the public key files, but added for consistency as
they share a directory with the private keys). Note that this
matches the permissions and ownership of the existing
adns1.openstack.org server.
Change-Id: I015777ee346fefcaa92e64ad2ee88a41c7ea9bde
The OpenStack edge-computing mailing list's owner address is
starting to become overrun by the same mass spam we've seen hitting
our other ML owner addresses. Add a blackhole alias for it.
Change-Id: I97a2db5d0565cc166604352e397f580ea2d9e767