Looking at upgrading etherpad servers to Xenial and realize that we
haven't "digitized" them yet. Lets get that in first so that the new
instances we boot can be etherpad01 and etherpad-dev01.
Change-Id: I700a1d018ab37436f11b2d883d79c82db7f1d6b1
Adding cache stats for port 80 requires a little refactoring to
account for the lack of a port number in the 80/tcp (default port)
proxy logs. This also slightly alters the output for the sake of
keeping the script simple.
Change-Id: I431a54445ff5bcb7f4a38bd30b73f00e4d7892f7
The options are deprecated and don't do anything - but they do put
warnings into the service logs.
Change-Id: If53bc8aecc7df75c99ae71e5adb8189790405795
The GWDG mirror is heavily outdated and this is impacting the infra
mirrors. As such, lets switch to a US mirrors which is also maintained
by the openSUSE project in order to resolve the problem.
Change-Id: I62c17c8ddf2f7b900a76ce6e06030ec61dc3fd08
In order to bring the operator/user/developer-focused segments of
our community together, we need a new discussion mailing list which
subsumes the topics of the current general, -dev, -operator and
-sigs mailing lists. This list will begin with configuration to
reject messages sent to it, but as we get closer to sunsetting the
original lists we'll subscribe it to them for a transitional period
and open it for discussion at that time.
I've set my E-mail address as the initial owner, but will coordinate
to find a team of list admins willing to take it on before it's
opened for posting.
Change-Id: I7dd62482229035c9b304573a3d93ef397cf43749
This is going to require some work to port several puppet things
to Ansible. To test the execution mechanism, let's just stub it
out for now.
Change-Id: Ief09ca30b19afffd106c98018cb23a9715fc9a69
After adding iptables configuration to allow bridge.o.o to send stats
to graphite.o.o in I299c0ab5dc3dea4841e560d8fb95b8f3e7df89f2, I
encountered the weird failure that ipv6 rules seemed to be applied on
graphite.o.o, but not the ipv4 ones.
Eventually I realised that the dns_a filter as written is using
socket.getaddrinfo() on bridge.o.o and querying for itself. It thus
gets matches the loopback entry in /etc/hosts and passes along a rule
for 127.0.1.1 or similar. The ipv6 hostname is not in /etc/hosts so
this works there.
What we really want the dns_<a|aaaa> filters to do is lookup the
address in DNS, rather than the local resolver. Without wanting to
get involved in new libraries, etc. the simplest option seems to be to
use the well-known 'host' tool. We can easily parse the output of
this to ensure we're getting the actual DNS addresses for hostnames.
An ipv6 match is added to the existing test. This is effectively
tested by the existing usage of the iptables role which sets up rules
for cacti.o.o access.
Change-Id: Ia7988626e9b1fba998fee796d4016fc66332ec03
We don't want to run ansible if we don't get a complete inventory from
our clouds. The reason for this is we cannot be sure that the ordering
of git servers, gerrit, and zuul or our serialized updates of afs
servers will work correctly if we have an incomplete inventory.
Instead we just want ansible to fail and try again in the future (we can
then debug why our clouds are not working).
From the ansible docs for any_unparsed_is_failed:
If 'true', it is a fatal error when any given inventory source
cannot be successfully parsed by any available inventory plugin;
otherwise, this situation only attracts a warning.
Additionally we tell openstack inventory plugin to report failures
rather than empty inventory so that the unparsed failures happen.
Change-Id: I9025776af4316fbdd2c910566883eb3a2530852a
Keystone auth and openstacksdk/openstackclient do not do the correct
thing without this setting set. They try v2 even though the discovery
doc at the root url does not list that version as valid. Force version 3
so that things will work again.
Change-Id: I7e1b0189c842bbf9640e2cd50873c9f7992dc8d3
OpenStack Ansible uses this repo to install LXC on CentOS as they
do not ship with the distribution packages.
They're not so reliable so its' good to get them monitored.
Change-Id: I011c7a0455e4853e582ed437204e94b6bcc73b3f
This new job is a parent job allowing us to CD from Zuul via
bridge.openstack.org. Using Zuul project ssh keys we add_host bridge.o.o
to our running inventory on the executor then run ansible on bridge.o.o
to run an ansible playbook in
bridge.openstack.org:/opt/system-config/playbooks.
Change-Id: I5cd2dcc53ac480459a22d9e19ef38af78a9e90f7