9850 Commits

Author SHA1 Message Date
Michael Krotscheck
b107426201 Added wheel hosting for AFS mirror slave
This patch adds a vhost that exposes /afs/openstack.org/mirror/wheel
to the internet under <hostname>/wheel. It also adds appropriate
rewrite rules.

Change-Id: Id514a76f7759b663b2ea3a3ec4aa2dfe083d6666
2016-02-01 15:09:11 -08:00
Michael Krotscheck
320dd74280 Added AFS keytab to wheel slave
This adds a hiera-loaded keytab for the wheel slaves. It may
be used when writing wheels to the AFS share directory.

Note: This will require the creation of a keytab for the
wheel mirror, as well as appropriate folders and access rights
on AFS.

Change-Id: I81c39d420d8ac70def57949ea0d4c323b8797086
2016-02-01 15:09:11 -08:00
Michael Krotscheck
ea17fc43a6 Added afs to wheel mirror slaves
This removes the SSH keys from the wheel mirror slaves, and
replaces them with the AFS share. It does not yet add afs
credentials. As we have not yet provisioned our wheel slaves,
no manual updates of the servers should be required.

Hiera keys for the previous approach should be removed.

Change-Id: Ifebf5d53d80e934674704078f7dd675f77aef5aa
2016-02-01 15:09:10 -08:00
Michael Krotscheck
9e01a13ce1 Added conditional install statements for kernel header packages
Consumed puppet modules may declare these (example: openafs).
This patch wraps the kernel header modules in test conditionals to
avoid conflicts.

Change-Id: I72962ae0d006cfe5f5d7e61046fd4862067b3b44
2016-02-01 15:09:10 -08:00
Jenkins
730c88eb8a Merge "Add storyboard.openstack.org to cacti" 2016-02-01 21:27:30 +00:00
Ian Wienand
2e3c01ca23 Update nodepool logging for Fedora 23
Update nodepool logging for Fedora 23 image builds.  There are also a
lot of other images that have been removed in the mean time.

Depends-On: I6ff6d684e17b0581ae6fbb310af29dd1be0e54d7
Change-Id: I5ffe9098a6bcf0e565ccc5b556b943d02eae26cd
2016-02-02 08:01:23 +11:00
James E. Blair
8fd024a620 Temporarily switch to AFS RW mirrors
While we perform an initial sync to a new site, updates to the RO
volume are suspended, so switch to the RW volume temporarity.

Change-Id: Ic14fc8c462f3eacfc9faed4b6bae55cd56b5286d
2016-02-01 07:48:41 -08:00
Jenkins
17a7269427 Merge "Add nibalizer to statusbot nicks" 2016-01-30 11:27:35 +00:00
Jenkins
abec9d984a Merge "Add documentation about how to reload Gerrit HTML" 2016-01-30 07:53:16 +00:00
Jenkins
bc4ee5803e Merge "Fix link for filing bugs to infra" 2016-01-30 07:47:31 +00:00
Spencer Krum
73f6e1e366 Add nibalizer to statusbot nicks
Change-Id: I51a6502f5496cce0a46a835cb59b039401416b96
2016-01-29 13:27:54 -08:00
Jenkins
8bdd76ec9c Merge "Provide separate nodepool builder log config" 2016-01-29 19:14:51 +00:00
Clark Boylan
8ed863ad9d Provide separate nodepool builder log config
Now that the nodepool builder is running as a separate daemon it needs
its own log config file. Move the auto generated nodepool logging config
stuff over to the new builder logging config as we can manage the main
daemon's logging config by hand trivially now.

Depends-On: I013835621dfbc311a0f7bd7c957b7d4656dfa628
Change-Id: Ic1da30eab949876e5bd6c88e83979bdedc6dd50a
2016-01-29 10:20:40 -08:00
James E. Blair
a76c916f42 Add storyboard.openstack.org to cacti
Change-Id: I4f13618e1811591d6a9fa9f71abb0094c70f292f
2016-01-29 09:46:52 -08:00
Jenkins
80ed294f7e Merge "Run puppet-apply tests with fedora 23" 2016-01-28 20:48:06 +00:00
Jenkins
359e9d8945 Merge "Add doc on launching jenkins job builder" 2016-01-28 17:41:41 +00:00
Paul Belanger
3b9212f1f2 Run puppet-apply tests with fedora 23
Change-Id: Iff13c55cf7c1857b741893bdb1828cef7e1c7539
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
2016-01-27 17:33:19 -05:00
James E. Blair
16e99c61ad Update afs superuser docs
Super users should be created on all servers

Change-Id: I995085f3716ff93385cb2c3aebfadd79148a0adf
2016-01-25 11:49:01 -08:00
James E. Blair
afbc2f11c7 Fix typos in bandersnatch afs mirror script
Change-Id: I457890ab04536b86be378f394fe9c3922f274b0d
2016-01-25 08:27:40 -08:00
James E. Blair
a48642c254 Put the admin keytab in the admin keytab
Rather than the bandersnatch keytab.

Change-Id: Ie03ee8313a42236a2bb49060131a44b184636a99
2016-01-25 08:22:13 -08:00
Jenkins
3d68f4717d Merge "Corrected mod_rewrite in pypi mirror" 2016-01-25 16:08:02 +00:00
Michael Krotscheck
137b185079 Corrected mod_rewrite in pypi mirror
This patch adds two RewriteCond with backreferences which
check for the existence of an AFS-style split directory. If
the directory exists, the rewrite rule will apply the necessary
path changes.

This patch permits passthrough of files such as index.html
at the root directory, while not impacting the folder structure
at sub-directory levels.

This patch will break rather badly if pypi ever publishes a
package named 'index.html'.

Change-Id: I712f2d4e262b9e20378365af8173066522e2e0cd
2016-01-25 07:47:27 -08:00
Jenkins
6d178e1ee1 Merge "Removed pypi.openstack.org from hiera.yaml" 2016-01-25 15:40:20 +00:00
Jenkins
c43747e337 Merge "Increase manage-projects timeout to 30 minutes" 2016-01-25 14:17:56 +00:00
Andreas Jaeger
78d38b0a96 Add pyyaml to proposal slave
The script tools/normalize_projects_yaml.py in project-config is run as
periodic job on the proposal slave. It needs the Python yaml module, so
install it.

Change-Id: I113dcfa13da34b3981de8910e6d07d69c5f95dfc
2016-01-25 08:30:22 +01:00
James E. Blair
9130d036f5 Set AFS cache size to 50G on mirrors
Change-Id: I2cbb453156aef28722b3c8a51bf221d8da8b7e23
2016-01-23 19:45:59 -08:00
Jenkins
d83a5cae14 Merge "Put wheel-mirror workers in a common group" 2016-01-23 22:20:35 +00:00
Jenkins
b05ad66944 Merge "Added extra-index-url to pip optional settings" 2016-01-23 22:19:05 +00:00
Jenkins
c3d995a4b0 Merge "Document adding a kerberos service principal" 2016-01-23 22:14:24 +00:00
Jenkins
34609e43b4 Merge "Fixed typo in mirrors" 2016-01-23 00:26:04 +00:00
Michael Krotscheck
0765a9f22e Added /var/www creation to mirrors
This adds the parent directory /var/www, which is required to
create the directory /var/www/mirror.

Change-Id: I6b8c7494c4bfebd8160c9cd6f75f0cb363bfa839
2016-01-22 16:02:32 -08:00
Jenkins
f2830ed5b9 Merge "Added pypi hosting for AFS mirror slave" 2016-01-22 21:52:06 +00:00
Jeremy Stanley
1b00523a93 Increase manage-projects timeout to 30 minutes
The full manage-projects run is taking as much as 20 minutes now,
leaving new project creation broken when it trips the timeout.
Double it from 15 to 30 minutes for some added safety margin.

Change-Id: Icc36aca2f7b949347ec891bba6cb533932428171
2016-01-22 21:28:01 +00:00
Michael Krotscheck
899a3b6b33 Fixed typo in mirrors
We're using 'rax' rather than 'rackspace'.

Change-Id: I444b43f7838e9b040c3401a8e3d49a713d29ae62
2016-01-22 11:22:35 -08:00
Michael Krotscheck
32e2888748 Removed pypi.openstack.org from hiera.yaml
This domain isn't relevant to this section of infra.

Change-Id: I342de44b8c26192458e3fa4424c822646a9acfa8
2016-01-22 05:59:31 -08:00
Michael Krotscheck
5e850464b9 Added extra-index-url to pip optional settings
This patch ensures that the 'extra-index-url' field is available
in the global pip.conf file, so that project-config's
configure_mirrors.sh script can use sed to replace it with the
region appropriate wheel mirror.

Change-Id: Ic9b069313c7a4e105cd086bdc4516c6c5826d53e
2016-01-22 05:28:24 -08:00
Jenkins
b6c922c8ee Merge "Add mirror.<region>.openstack.org" 2016-01-22 13:26:44 +00:00
Jenkins
685d953b50 Merge "Add mirror_update.openstack.org" 2016-01-22 13:25:32 +00:00
Jenkins
28bfc66e88 Merge "Pin pip to less than version 8 in install_puppet.sh" 2016-01-21 19:31:03 +00:00
Michael Krotscheck
168eab95d8 Added pypi hosting for AFS mirror slave
This patch adds a vhost that exposes /afs/openstack.org/mirror/pypi/web
to the internet under <hostname>/pypi. It also adds a do-not-follow
robots.txt file.

Change-Id: I3d7629d80fe1e8762344852fab4a942bc476b706
2016-01-21 11:25:36 -08:00
James E. Blair
c009700ca4 Add mirror.<region>.openstack.org
This patch creates a new manifest for unified infra mirrors,
which will act as read-only AFS nodes that host our mirror
data. These mirrors will, once validated and provisioned, replace
the existing pypi mirrors in infra under a new, more generic,
hostname.

This patch is only intended to create the AFS read-only slave.
Apache hosting will be added in subsequent patches.

Change-Id: I9a2bf596cf47bffad5d6a5fd0da3c571fa266013
2016-01-21 10:39:10 -08:00
Michael Krotscheck
2083eacd04 Update pypi_trusted_hosts
This patch updates pypi trusted hosts for all nodes to
add mirror.<region>.openstack.org.

Change-Id: I64663b5b5c7063e840d6f2d11151766a5100af20
2016-01-21 09:39:21 -08:00
Jeremy Stanley
031400567f Put wheel-mirror workers in a common group
The wheel-mirror workers share a common set of hiera keys, and so
keeping them in a group together reduces significant duplication in
our hiera files.

Change-Id: I67b717943eb19404c87b2a3b571f681a0a15b7b4
2016-01-21 16:48:58 +00:00
James E. Blair
32516012f0 Document adding a kerberos service principal
Change-Id: I6f10a400411220031864546ea82319373d9a965b
2016-01-21 08:09:44 -08:00
James E. Blair
dc4f086eef Add mirror_update.openstack.org
This is a machine that will drive centralized mirror updates for
mirrors that are in AFS.

Change-Id: I33eed90c21a2e57a26349be83ee69e968b18d2f8
Depends-On: I56bb3ce2237be1179724f7a2bdcf9d5b04bdecd2
Depends-On: I704c8bf395d83adea0f9a0db6fd3d3814ad7660a
2016-01-21 08:09:39 -08:00
Jenkins
dabf00782c Merge "Use groups.txt for disabling hosts for puppet" 2016-01-21 14:03:54 +00:00
Jenkins
77e727a9e2 Merge "Stop listing hosts as groups in the disabled file" 2016-01-21 13:55:21 +00:00
Monty Taylor
fce3e9d93b Pin pip to less than version 8 in install_puppet.sh
When we create a new server and install puppet, we also install pip.
That's awesome, except when pip >=8 breaks us. For now, pin it.

Change-Id: Id12f866f577c3ca2405a6049084c3cb0af82fde5
2016-01-20 17:15:50 -05:00
Jenkins
35dd625727 Merge "Add wheel_mirror_slaves that use pypi-mirror" 2016-01-20 21:36:02 +00:00
Jenkins
d7fa019afe Merge "Add wheel mirror to mirrors" 2016-01-20 21:08:34 +00:00