This was missed as part of the earlier translate upgrade change. With
switch to digitized host names we also want to group those hosts
together in hiera and ansible. Make that change here.
Change-Id: I6d25b35efbf0b43bd63a8ff9e217b68663575c75
This is part of the Zanata upgrade process. We will be deploying new
Zanata to translate01.openstack.org so add node def in site.pp to
support that. This keeps the old translate.o.o def too so that it is
left alone untouched.
Note that this also adds code to pass through wildlfy's install URL and
fixes the specification of the wildfly version number. I think the
version number var being wrong was not a problem for us because the
wildfly installation only runs if there is no installation dir in place.
Change-Id: I4b6ababcc34e2464cf6a824e92a1c146d553dcaf
We don't need this for nodepool-launcher, as image builds now happen
on nodepool-builder (nb01.o.o / nb02.o.o).
Change-Id: I1318805b466be9416f162280766da14b08998df5
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We need to change our the private SSH key for gerrit, since we are
using a different user the zuul.o.o.
Change-Id: I3d93fa70e8d5b6830d14cb891aa19de6b4e63efa
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We need to allow zuulv3-dev.o.o access to nodepool.o.o zookeeper
instance.
Change-Id: I9be72511f245282b2261e25ad907f8b258947373
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Surprisingly our previous patch wasn't actually tested in the gate.
Enable that logic and fix syntax issues.
Change-Id: I5dd98ab0b75fd5f31ed80b8fe0bcc0bd11e4352d
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This is needed for our zuulv3 effort durning the atlanta PTG event. We
don't expect this server to be moved into production at this time.
Currently, we are missing zuul-launcher and zuul-scheduler support, which
will be added in a follow up patch.
Change-Id: I97a3ffd168679562edd2f89c572c185d94b44255
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Open the firewall on nodepool.o.o allowing nl01.o.o access to
zookeeper.
Change-Id: I67c5d6755784859a9d55598e15e5d7cc5dc0aeb2
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Stand up a server we'll be using for nodepool (zuulv3) testing.
We'll be using this for the Atlanta PTG with the goal of moving it
into production when our feature/zuulv3 branch is merged into master
for nodepool.
Change-Id: I7a3edb871510d1000a9bbf06944551d4b272ac8d
Depends-On: I29e661e38e9a2a56a01a1c30f1dc1eae97a4de7b
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This should be setup in site.pp, like all our other nodes.
Change-Id: I790f59d870ac70340bc43b9ebf53f6ce93fd5f46
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Use the correct hiera key names for the HTTPS cert/chain/key file
contents used by the developer.openstack.org and docs.openstack.org
sites.
Change-Id: I84f790bf132c81678836e84b2f89bdb01ed71f73
Also, remove port 22 from the list of public tcp ports that need
opening -- that's implied and not necessary.
Change-Id: Ief17a2eab3330b2c4b85bc252b8af55cdd99980f
Add X.509 certificates, certificate chains and private keys for
https://developer.openstack.org/ and https://docs.openstack.org/
separately using SNI (as the list grows we can consider condensing
these into a single cert using ServerAltNames later).
Change-Id: Ia365be3363b611e5ee3b6dceb38ec311456466ec
This is a simple first deployment of an ethercalc service. It does not
come with authenticated redis or redis backups. It will however have
working ssl.
Change-Id: I8c434a6bff42bce75e67fb37665d213f3cc018c8
Depends-On: Id10247211d9643e81bb1b6e8fb67377ba6de873a
This also removes fedora-23 support, which was removed a while back.
Change-Id: I5a73ba63967feb29881652c734f0014c7ff8f446
Depends-On: I8142c3b4e5517f197b6fb47c8cc98f3759516a02
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This has been on my list for some time, since we run fedora jobs in
the gate, we should also mirror this infra too.
Change-Id: I523bf263b5f9455ee51a712fc97cde3f8daeba80
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Every 5 minutes, check to see if the docs volumes have been updated,
and if so, release them. This means we can serve the docs volumes
from replicated read-only volumes with only a 5 minute delay.
Since this does not coordinate with the docs publishing jobs, we
may end up releasing partial updates, however, those jobs, since they
use rsync, should tolerate this.
Change-Id: I082ae6f37af9a6e12ad62b0cc4cb45e631a0935b
This was and should have remained $accessbot_nick, but was inadvertently
changed in I62c767eeab472ac79bf18ba0177ed80b08dbf8fa.
Change-Id: If65833b2ebd15be7c7f002c20e466e095a886334
This patch adds a static, read-only gem mirror to openstack-infra's regional
mirrors under the /gem path.
Change-Id: I2f67fe01d32c4472ff56862b9dc25b9915a695c0
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We have merged the zuulv3 branch into master; resume running from
master on the production servers.
Change-Id: Ia514f70ead458819ceba065e89c83dbddd99b781
Since we use DIB elements to create our zuul user, we also need to
have our SSH public key on disk. Other wise, diskimage builds will
fail.
Change-Id: I9dec17fe8937eca363cafb636cb2dd4359e5edc2
Depends-On: Ic80f2337d42ea228496b4dafcf32303fbc2ef3e5
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We need to allow access to zookeeper from nb01.o.o.
Change-Id: I03fb205544fb27253c6227823858ed92cea9b258
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Previous solution does not work as expected.
In this change we explicitly provide order and
instructions in which the services should be
configured and started up.
Also we do not use HTTPS, 80/tcp open port
should suffice.
Change-Id: I3735a7930610a9fac48e676ca18914f48372474b
Depends-On: I6e07f99a69b8beedac49edd1cf8f551ebb5c569d
This supports our first independent nodepool builder server. It
will run the zuulv3 branch in parallel with the current master/
production branch to start.
Change-Id: Ic2fe4c6ac66cdeed909dd0aba35f233b61e270b1
Depends-On: I9d45d1e0ab2bcacdf9609329b88e7de45f827f74
Switch to openstackid instead of openstackid-dev system
so that upgrades of newer Zanata can get tested by translators
Implements: blueprint ocata-zanata-upgrade
Change-Id: Ia88529e2dd5e8b375a5870ee23aabaeb58ea77fe
As part of the work to redeploy Zanata on Xenial for newer Java lets
modernize the deployment a bit and allow for arbitrary numbered servers.
Change-Id: Iee1192fc4e4798ccbeb9bad98a53fb3896d02a5c
Remove a stray ')' and correct an incorrectly named httpd_vhost
parameter for the pholio node pattern in the global site manifest.
Also fix missing space that caused tests not to run.
Change-Id: I64711ca5b58160c50a6bde3985d2d366652a9022