14133 Commits

Author SHA1 Message Date
Zuul
45c427838a Merge "Update cache-stats.sh to include the port 80 proxy" 2018-09-25 19:43:41 +00:00
Zuul
055c35481b Merge "Allow project website volume path to be overridden" 2018-09-25 17:28:26 +00:00
Clark Boylan
0f0031d16e Add digit support to etherpad servers
Looking at upgrading etherpad servers to Xenial and realize that we
haven't "digitized" them yet. Lets get that in first so that the new
instances we boot can be etherpad01 and etherpad-dev01.

Change-Id: I700a1d018ab37436f11b2d883d79c82db7f1d6b1
2018-09-24 13:33:44 -07:00
Jeremy Stanley
a8a59b479d Update cache-stats.sh to include the port 80 proxy
Adding cache stats for port 80 requires a little refactoring to
account for the lack of a port number in the 80/tcp (default port)
proxy logs. This also slightly alters the output for the sake of
keeping the script simple.

Change-Id: I431a54445ff5bcb7f4a38bd30b73f00e4d7892f7
2018-09-24 20:31:05 +00:00
Zuul
62a7f45951 Merge "There are no core developers, only core reviewers" 2018-09-21 20:54:20 +00:00
Zuul
5baa1c667a Merge "Use include_tasks instead of include" 2018-09-20 21:33:26 +00:00
Monty Taylor
576f1b9976
Remove ssh v1 options from sshd_config
The options are deprecated and don't do anything - but they do put
warnings into the service logs.

Change-Id: If53bc8aecc7df75c99ae71e5adb8189790405795
2018-09-20 09:11:26 -05:00
Monty Taylor
68329470fa
Use include_tasks instead of include
They're the same, basically, but include tasks is clearer.

Change-Id: Ia03b8eb2b3e17b421fd5a178b0d9907cc71ebcae
2018-09-20 09:08:55 -05:00
Zuul
59f03951f7 Merge "Use zuul-sphinx README.rst detection" 2018-09-19 23:54:54 +00:00
Zuul
39aea4facd Merge "Create the OpenStack discussion mailing list" 2018-09-19 17:53:52 +00:00
Zuul
7892725873 Merge "modules: opensuse-mirror: Switch to US mirror for OBS repositories" 2018-09-19 12:44:05 +00:00
Zuul
251661e6df Merge "Turn on the future parser for pbx.o.o" 2018-09-19 10:37:39 +00:00
Markos Chandras
6975d7168a modules: opensuse-mirror: Switch to US mirror for OBS repositories
The GWDG mirror is heavily outdated and this is impacting the infra
mirrors. As such, lets switch to a US mirrors which is also maintained
by the openSUSE project in order to resolve the problem.

Change-Id: I62c17c8ddf2f7b900a76ce6e06030ec61dc3fd08
2018-09-19 10:04:08 +01:00
Zuul
3514ea7265 Merge "Remove expire-old-reviews from docs" 2018-09-18 23:51:06 +00:00
Zuul
4c162e59a6 Merge "Turn on the future parser for cacti.o.o" 2018-09-18 22:44:03 +00:00
Sorin Sbarnea
ba48b1dc5c Remove expire-old-reviews from docs
As this feature was disabled we remove it from docs to avoid
confusing users.

Change-Id: Ia5704bcda37b8da43af6e22673a3d3b03605649d
2018-09-18 17:22:43 +01:00
Zuul
56d9de1039 Merge "Turn on the future parser for translate.o.o" 2018-09-17 21:58:55 +00:00
Jeremy Stanley
871430c491 Create the OpenStack discussion mailing list
In order to bring the operator/user/developer-focused segments of
our community together, we need a new discussion mailing list which
subsumes the topics of the current general, -dev, -operator and
-sigs mailing lists. This list will begin with configuration to
reject messages sent to it, but as we get closer to sunsetting the
original lists we'll subscribe it to them for a transitional period
and open it for discussion at that time.

I've set my E-mail address as the initial owner, but will coordinate
to find a team of list admins willing to take it on before it's
opened for posting.

Change-Id: I7dd62482229035c9b304573a3d93ef397cf43749
2018-09-14 22:26:40 +00:00
Zuul
d8abc6951d Merge "Add dns servers to cacti" 2018-09-14 19:07:50 +00:00
Zuul
e4ae7bf814 Merge "base: Install yaml-mode" 2018-09-14 18:24:58 +00:00
Zuul
c66a5ffd80 Merge "Turn on the future parser for translate-dev" 2018-09-14 17:51:06 +00:00
Zuul
9503457141 Merge "Use the empty nodeset for bride playbook runs" 2018-09-14 17:51:04 +00:00
James E. Blair
7e502ab955 Add dns servers to cacti
Change-Id: I8566b91b98dd77ca5a1887ce6c01dfa0d6693a40
2018-09-14 11:46:47 -06:00
Zuul
ffbdc1d937 Merge "dns_[a|aaaa] filter; use host for lookup" 2018-09-14 16:33:10 +00:00
James E. Blair
14b9027da2 Use the empty nodeset for bride playbook runs
We need no nodes for this.

Change-Id: I3af7de061b0052a584c783371d9ebb94680b8106
2018-09-14 10:30:59 -06:00
James E. Blair
5d2d1ffed4 Stub out zuul_reconfigure playbook
This is going to require some work to port several puppet things
to Ansible.  To test the execution mechanism, let's just stub it
out for now.

Change-Id: Ief09ca30b19afffd106c98018cb23a9715fc9a69
2018-09-14 09:17:36 -06:00
Zuul
989608fbe0 Merge "Turn on the future parser for storyboard" 2018-09-13 21:50:46 +00:00
Zuul
565a6a7f81 Merge "modules: mirror: Mirror the openSUSE Rocky repository" 2018-09-13 12:55:09 +00:00
Ian Wienand
11343cc75d dns_[a|aaaa] filter; use host for lookup
After adding iptables configuration to allow bridge.o.o to send stats
to graphite.o.o in I299c0ab5dc3dea4841e560d8fb95b8f3e7df89f2, I
encountered the weird failure that ipv6 rules seemed to be applied on
graphite.o.o, but not the ipv4 ones.

Eventually I realised that the dns_a filter as written is using
socket.getaddrinfo() on bridge.o.o and querying for itself.  It thus
gets matches the loopback entry in /etc/hosts and passes along a rule
for 127.0.1.1 or similar.  The ipv6 hostname is not in /etc/hosts so
this works there.

What we really want the dns_<a|aaaa> filters to do is lookup the
address in DNS, rather than the local resolver.  Without wanting to
get involved in new libraries, etc. the simplest option seems to be to
use the well-known 'host' tool.  We can easily parse the output of
this to ensure we're getting the actual DNS addresses for hostnames.

An ipv6 match is added to the existing test.  This is effectively
tested by the existing usage of the iptables role which sets up rules
for cacti.o.o access.

Change-Id: Ia7988626e9b1fba998fee796d4016fc66332ec03
2018-09-13 22:50:40 +10:00
Zuul
93d62f8d71 Merge "Add statsd metrics for ansible runs" 2018-09-13 00:14:17 +00:00
Clark Boylan
681e24d27d Treat unparsed inventory as a failure
We don't want to run ansible if we don't get a complete inventory from
our clouds. The reason for this is we cannot be sure that the ordering
of git servers, gerrit, and zuul or our serialized updates of afs
servers will work correctly if we have an incomplete inventory.

Instead we just want ansible to fail and try again in the future (we can
then debug why our clouds are not working).

From the ansible docs for any_unparsed_is_failed:

  If 'true', it is a fatal error when any given inventory source
  cannot be successfully parsed by any available inventory plugin;
  otherwise, this situation only attracts a warning.

Additionally we tell openstack inventory plugin to report failures
rather than empty inventory so that the unparsed failures happen.

Change-Id: I9025776af4316fbdd2c910566883eb3a2530852a
2018-09-12 15:09:21 -07:00
Zuul
9c0e8b8173 Merge "Add infra-run-zuul_reconfigure" 2018-09-12 21:19:22 +00:00
Zuul
97319f0cd8 Merge "roles/kerberos-client: fix defaults" 2018-09-12 21:03:05 +00:00
Zuul
7425195b70 Merge "launch-node.py : add timeout option" 2018-09-12 21:03:04 +00:00
Zuul
1bffe5ee7f Merge "Force identity api version 3 against linaro london" 2018-09-12 21:03:02 +00:00
Zuul
69b6537c6e Merge "Use host groups for zuul playbooks" 2018-09-12 20:52:31 +00:00
Zuul
ae24d65d78 Merge "Add LXC COPR cache" 2018-09-12 20:17:19 +00:00
Zuul
ec58d47ae6 Merge "Revert "Revert "Turn on the future parser for storyboard-dev""" 2018-09-12 20:00:09 +00:00
Zuul
7348a08f48 Merge "Add job to run playbook on bridge.o.o" 2018-09-12 20:00:08 +00:00
James E. Blair
0f69aa3321 Add infra-run-zuul_reconfigure
Add a job to reconfigure zuul, and rename its parent job to use
a shorter name.

Change-Id: Id049086e138f6c98bb0c223284d5df9b73c4d4bf
2018-09-12 13:57:37 -06:00
Clark Boylan
36ca17c37b Force identity api version 3 against linaro london
Keystone auth and openstacksdk/openstackclient do not do the correct
thing without this setting set. They try v2 even though the discovery
doc at the root url does not list that version as valid. Force version 3
so that things will work again.

Change-Id: I7e1b0189c842bbf9640e2cd50873c9f7992dc8d3
2018-09-12 12:52:19 -07:00
Zuul
19f25d8567 Merge "Add missing quote to alpine cache" 2018-09-12 19:30:17 +00:00
Zuul
e124f8f776 Merge "Add zuul_reconfigure playbook" 2018-09-12 19:27:46 +00:00
Joshua Hesketh
600d87ffe5 Use host groups for zuul playbooks
Rather than list the hostnames individually, use the inventory group.

Change-Id: I554fb33f26c31df5f97ffd5be61f6d3e17faefa5
2018-09-12 12:26:43 -06:00
Mohammed Naser
ce5874cba3 Add LXC COPR cache
OpenStack Ansible uses this repo to install LXC on CentOS as they
do not ship with the distribution packages.

They're not so reliable so its' good to get them monitored.

Change-Id: I011c7a0455e4853e582ed437204e94b6bcc73b3f
2018-09-12 12:22:55 -06:00
Zuul
5ddfafc23d Merge "Remove !ci-backup play" 2018-09-12 17:48:09 +00:00
Mohammed Naser
c33ba6c046 Add missing quote to alpine cache
Change-Id: I6eb2b867e87d6279d4d626613c6a6f87a0125386
2018-09-12 11:42:33 -06:00
Zuul
7e81e7f067 Merge "Allow Zuul to log into bridge" 2018-09-12 17:36:53 +00:00
Joshua Hesketh
bed24ba5e0 Add zuul_reconfigure playbook
Reconfigure a running zuul-scheduler.

Change-Id: I21f16c221903ccd9b726a091c3acf3e755788263
2018-09-12 11:28:52 -06:00
Clark Boylan
0e9d830a64 Add job to run playbook on bridge.o.o
This new job is a parent job allowing us to CD from Zuul via
bridge.openstack.org. Using Zuul project ssh keys we add_host bridge.o.o
to our running inventory on the executor then run ansible on bridge.o.o
to run an ansible playbook in
bridge.openstack.org:/opt/system-config/playbooks.

Change-Id: I5cd2dcc53ac480459a22d9e19ef38af78a9e90f7
2018-09-12 11:26:55 -06:00