Create the signing01.ci.openstack.org job node and puppet the
signing subkey onto it via pubring.gpg and secring.gpg files stored
in private hiera. Also set up some basic configuration and packages
on the management bastion to aid in key management/rotation, and add
the beginnings of administrative documentation for this.
Change-Id: Iecddb778994a38f7898e0c20e7f3f8e93f0a7f60
Depends-On: I70c3b82185681ee64791cda653360c26a93bd466
Story: #2000336
Signed-off-by: Jeremy Stanley <fungi@yuggoth.org>
anteaya has requested this be reverted until proper consensus is reached.
This reverts commit 4fb97f7ed44272fdde51cd373dd465314ed913ed.
Change-Id: I19f481a46d203328fb0bb0667df864a6040eefd9
Based on http://lists.openstack.org/pipermail/openstack-dev/2014-July/041238.html,
update the recommendations to ensure the global namespace is
left for official Infra usage, and per-system rechecks occur
only within a namespace for each individual system
Change-Id: I2a51d45938bc607f49714a372cdd7da574e254d8
As discussed during the "Launch Node, Ansible and Puppet" summit
session in Austin, we're making things unnecessarily hard on
ourselves by insisting on having multiple servers in our inventory
with the same name. In order to make server addition and replacement
automation simpler, start using an ordinal suffix on server short
names to differentiate them (we can still easily rely on DNS for
their non-numbered convenience names).
Change-Id: I040a5c3b5e1abc50c3e4676bcab0bf4eaa550f4b
In the project rename process documentation, amend the list of
reminders to include checking .gitmodules in openstack/openstack as
we've missed it more than once in the past.
Change-Id: I47b09ed317a14222088097c84a5bab157e3d5b47
Has been incorrectly reported that JJB has issues with CSRF, however
that has been supported by python-jenkins, which JJB uses, and has been
working for sometime. However other infra components are known to have
issues with CSRF being enabled in Jenkins.
Change-Id: I0a3b22f8aadbce06e9417c42a4666d2198d08642
Story: 2000556
It's not entirely required, but I was confused why copy/paste wouldn't
work the first few times I can this, having set the HOST variable.
Change-Id: I67cb8f27a28befbb15b070004957a78a3b776a59
I am reliably informed these are not used anymore. Note, this
change updates All-Projects ACLs, so on approval, we should make
the corresponding change in Gerrit.
Change-Id: I1073663b8f80de8639a75b4b155258c1abed9df9
Sometimes we want to extend a logical volume to the entire size of the
volume group. The command to do this is quite strange and I am tried of
googling it. It is so documented.
Change-Id: I600ceb41c57e27eaaf68a1643be848cd331130a5
Freenode has a "blog" post of an FAQ about the channel registration
process, which may be more useful to newcomers than our abbreviated
recipe. Link it.
Change-Id: I8f67d1c6baac60f99740d11acae28b1557fb435c
Freenode has recently shuffled around their online documentation
without maintaining redirects from the old URLs, so update the link
to their channel guidelines accordingly.
Change-Id: I9bf3e697f3397f4c0490ab8ad5a72ebb8a385c99
Add a paragraph to the Contributing Cloud Test Resources document's
Benefits to Contributors section about provider name visibility in
job logs, clarify that the significance of contribution necessary to
be listed on the Foundation site is at the discretion of the Infra
team, and use a more specific URL to a more specific anchor for that
list.
Change-Id: I41d46ece9a1547647a16023ab28b3cb4b2fa8419
Running puppet remotely in an ad-hoc manner on disabled hosts is mildly
complex. To facilitate, have a wide open playbook that we always run
with --limit - and a shell script to help us type less.
Change-Id: I629072dcada38d0465d351b1b99828466405372f
Add the new mirror.ca-ymq-1.vexxhost.openstack.org host to our
bandersnatch documentation and also correct a typo in another entry
there. Further, add it to the cacti monitoring list and remove the
entry for the dead HPCloud mirror while we're in the neighborhood.
Change-Id: I4be0dfc0099336773ea94bd940e55c4b0f7d036f
