Zuul is publishing lovely container images, so we should
go ahead and start using them.
We can't use containers for zuul-executor because of the
docker->bubblewrap->AFS issue, so install from pip there.
Don't start any of the containers by default, which should
let us safely roll this out and then do a rolling restart.
For things (like web or mergers) where it's safe to do so,
a followup change will swap the flag.
Change-Id: I37dcce3a67477ad3b2c36f2fd3657af18bc25c40
Zuul is updating the default auth type for gerrit connections to better
reflect current Gerrit's expectations. We need to force digest instead
of basic auth in order to accomodate our older gerrit install.
Change-Id: I6ec64f0625abe0c9e3871a5d1942a35e1a58177c
This is the connection for Gerrit's Gerrit. We can connect to it
directly with the Gerrit driver now that we support entirely
HTTP-based Gerrits and we have an account. Use that so we can
set up some third-party CI testing.
Change-Id: I7b91b4e67594ce62772e3e450a1236095d4ef1c9
This is the connection for Gerrit's Gerrit. We can connect to it
directly with the Gerrit driver now that we support entirely
HTTP-based Gerrits and we have an account. Use that so we can
set up some third-party CI testing.
Change-Id: I10e279218de985a0c17ea6b5bc46f3eebefcfb39
We are currently well under our rate limits for github and logging the
rate limit adds a number of requests to github for each github event
processed. This can be reenabled if we suspect rate limit based
failures, but until then let's reduce the number of requests and
simplify our logging.
Change-Id: I02878f9749737d297680cd324d6dafeefc44a005
This causes a massive sad for zuul, resulting in ability to clone
the repos and indefinitely hung job.
Change-Id: I96b2bd883b63079f5032c5715960c25b61940f16
So that we can make gerrit build jobs using zuul to do the cloning
and not git modules inside of the jobs themselves, add gerrit's
git server as a git driver source.
Change-Id: I4a64e6627805d568030d3864f3d331a4e8f9ab8b
This adds a connection to the opendaylight Gerrit server to zuul
so that we can perform cross-community testing.
Change-Id: I846983e873072c2235a4c49e36f602a47d06cfce
This reverts commit c7bb14bba6.
SSH connectivity isn't quite working yet. Revert until we can get that
sorted out.
Change-Id: If2a88a61ed592f927980c71486ed0b7e3cb848d0
This adds a connection to the opendaylight Gerrit server to zuul
so that we can perform cross-community testing.
Change-Id: I840b24ebe52c50840180f2dda40a3f8669baa347
In preparation for replacing the zuulv3.openstack.org host with a
larger instance, set up the necessary support in
Puppet/Hiera/Ansible. While we're here, remove or replace old
references to the since-deleted zuul.openstack.org instance, and
where possible update documentation and configuration to refer to
the new zuul.openstack.org CNAME instead of the zuulv3.openstack.org
FQDN so as to smooth the future transition.
Change-Id: Ie51e133afb238dcfdbeff09747cbd2e53093ef84
We no longer need our proposal or signing nodes. These are now managed
directly in zuulv3 jobs (via nodepool).
Also noticed wheel mirror group was never deleted, so removing that
too.
Change-Id: Ibca89052b8d27093e17a33cb738fd3855538dca1
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
And with that, we can delete 3 nodes from our control plane. We've
successfully moved these nodes into zuulv3 jobs!
Change-Id: Ibd9c8440050fb908d0f87595d7116fec587c9e7d
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Add zuul-mergers for xenial and feature/zuulv3
Change-Id: Ifd8c14c8665687f8d77e3980dba56e781eb91c95
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
The executor needs the github connection config so that it knows how to
interact with the remote system from the merger.
However, if we don't provide an ssh_key to github, it will just use
https for cloning. Since that means less keys to manage and we certainly
aren't cloning from anything private on github - just do that.
Change-Id: I3acb6123398b2c6c3fac45f20a4cfde251862b58
We also use the gearman client on zuulv3.o.o, so we need to populate
them too.
Change-Id: Ie77f54017c829a364b68b983ee296359d55b55fe
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Because zuul-executors do merging too, we need to populate both ssh
keys for gerrit and how to connect to gerrit.
Change-Id: Ifde6f01ab509495a373b77677883625e80d3b2ab
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Since we added a read-only mirror for serving, it means that we need to
write to the read-write volume, which is in /afs/.openstack.org.
Change-Id: I42899cbe9f14a5eee444fde9693b27aec60576e3
It needs to be tuned depending on number of cpus
and memory of the server.
Change-Id: Id00d32c1bc225db16fa45d990ff8227db4f68ff0
Depends-On: Id5a0e5af031175cc0a9d8b5a3bb97ae4adfbdf1e
Stop hardcoding the network settings on the modules
and instead of that, use parameters and rely on public
hiera.
Change-Id: I3cccfc03609bf90503b3fe27d3e717f89f6ec654
Monty Taylor