There is a second Ubuntu Archive key 3B4F E6AC C0B2 1F32 as described
[1]. We have this in our reprepo config, but don't appear to import
it automatically; this has broken mirroring on the new server. Add
it.
[1] https://wiki.ubuntu.com/SecurityTeam/FAQ
Change-Id: I97f1374d056516b2a34a7938764ca356b99d88f0
We've used this mirror for EPEL and don't have connection issues, lets
switch to it.
Change-Id: Ie6050fbf20259df39eab11f8e326d58351d98ea5
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Rather then creating per fqdn hiera entries for secrets, move to use a
group. This avoids the need to duplicate data.
Change-Id: I748314f52aeb6d288a1b133b3c20402c236dfb45
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
As we plan on upgrading review-dev01.o.o to ubuntu xenial, we need to
add an entry to site.pp to support it.
Remove old review-dev.o.o entry.
Change-Id: I736dea42b202b8131929db3b8a3795d2469aae77
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We're happy to welcome Limestone as a new infrastructure donor and
add the following cloud configurations:
- openstackci-limestone (control plane)
- openstackzuul-limestone (nodepool/testing nodes)
The proper credentials have been committed to hiera.
Change-Id: Iba7813f9c90a4ac84fd37ebb6556c6a98c03a079
The endpoint SSL certificate for the new limestone provider is
currently self-signed.
We're going to trust it in the same way we did with infracloud by
using the certificate itself for validation.
Change-Id: I56cae339312d0bc8ad94c98f118c215f610a6b23
I would like to be able to run test migrations of
projects against storyboard-dev.o.o so projects can see
the results and play with the environment before
pulling the trigger.
I've read and agree with the guidelines at
https://docs.openstack.org/infra/system-config/sysadmin.html#ssh-access
Change-Id: I8af2b8e253226651c80305f5ed5e602fbf8ac05c
Update the artifact signing key rotation process documentation for
the new Zuul v3 status quo. Also note that revocation certificates
should use distinct filenames per cycle so that they don't get
overwritten.
Change-Id: Ia7512cc7bd0b1ed52e99271e7d83f05e7bc57918
Our bash linter wants newlines at the end of files and this file was
missing oen so failed linting. Do quick fix and add a newline so that
jobs pass again.
Change-Id: I89f3d7b628e8e925c03fcb7b382b8545a91ba601
The kernel.org mirror's rsync server is overwhelmed with connections and
we are not getting updates to centos in a timely manner. Update the
upstream source mirror to use limestone network's mirror which should be
fairly close to our mirror infrastructure and we have friends there now
that can hopefully sort out problems if they arise.
Change-Id: Icb70b4033abee3a7d1893d7a1b53216940362f63
During manual runs, you want to do this without a timeout. Add a
flag; I always end up copying the script and manually editing this
stuff in. Add a quick note in the AFS docs.
Change-Id: I239bc1a0b5928673b42cc67291bb519d5f5d2471
Now that we've re-enabled the websockets support we can remove the note
about that now. However, we've disabled the tls websockets port so that
line is removed. Hopefully this doesn't horribly jinx the websockets
interface being reliable.
Change-Id: I500bd69efe13b202199e9741f8cd10f12f78f2af
Use a link to the project governance page so readers of the
contributing cloud article can find current PTL details.
Change-Id: Ifc8212c7703e7ac4c6113b866c424e9e9a774a5e
This installs the ara middleware for the logs.opentack.org server.
The depended-on review only enables it for logs-dev.o.o.
Change-Id: I9a2d996de46cb8ce34dc75ccda42b1799969e7ac
Depends-On: I3b10c93b4902a9b45e23c227863e472697f662ef
For some reason we were setting the websocket_port to true, which is not
a valid port number. This commit fixes this to just use the default and
removes that field from the config.
Change-Id: I0ac2e0919a59590182c6da7442883a6edca66a60
With our attempts to re-enable websockets on mosquitto we need to open
up port 80 again so we can connect via websockets. This commit does
that.
Change-Id: Id9bb77ef9a2ac70eec74db4ea64423b5d6351a06
This commit re-enables the websockets listener on mosquitto for
firehose.o.o but without a separate tls port. The websockets connections
will just not be encrypted.
Change-Id: Ibdf1e38fa990d3fd78bfe9dead28f6ec385c0e1a
Depends-On: I2bb806210dbe5c40cfda5ac205f3659c2085f0e1
This patch describes the major upgrade of the live translation
platform to version 4. We use the same procedure and version
like in translate-dev, manual steps are described here:
https://etherpad.openstack.org/p/zanata_upgrade_4xx
Change-Id: Ic53e0bbf8f82d6d811f1e4d4bea2b85a868de9d2
Change Ia7415d2fbbb320f8eddc4e46c3a055414df5f997 removed per-image
logging from nodepool; it now keeps a series of named log files. The
"image" logger is removed, along with all the specific build logs.
I972a66f9c153f52df934d25ab2f77596bb2e5429 removed the
image_log_document_root argument; which wasn't doing anything in
nodepool::builder, but was actually being used to fill-out the
builder-logging.conf file. Thus we need this to not have a bad path
in the config file.
Change-Id: I6fdc3b622454b069f3ad2cf42da584d8df23a110
I3c44ed5834b0e23d6ae8849040544d28f73a52fe added the argument to enable
the webapp, but I forgot to open the port to make it useful.
Change-Id: I45e080b79af45309ebea629d70a035a3c5d08e6a
Now that we have opensuse-tumbleweed DIBs online, we'll also need a
mirror.
Co-Authored-By: Dirk Mueller <dirk@dmllr.de>
Change-Id: I0a796e9c34eee01704ec50fb2e00cc498f0634d9
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
