This was added for the puppet3 transition but is no longer needed
with the way we are using ansible.
Change-Id: Iac45771b64434fb36322dd91cc73e13e859724db
We want to actually run PyPI mirrors on a per-region basis. To do that,
we need to configure machines to run such things.
Change-Id: I96955d78783c0db31ace52146834f4e6b8e1fde4
Due to trademark issues, Marconi can't be used as a codename for the
queuing service. A new name has been voted by the team, Zaqar.
This patch replaces Marconi with Zaqar everywhere in the infrastructure
configs. The new channel has been created and openstackinfra has been
granted with all the required permissions in that channel.
Change-Id: I8e587af588d9be0b5ebbab4b0f729b106a2ae537
* manifests/site.pp: Start using hiera for openstackid-dev's
id_mysql_user parameter for consistency.
* modules/openstack_project/manifests/openstackid_dev.pp: TipIt is
moving the openstackid-dev server to new Trove databases, so update
the database names accordingly. Also null out the lingering default
values which we're filling from hiera in site.pp.
Change-Id: Id1b3b17751a34d3e760a789bf23c3ebea9c8c606
In order to get the puppet module for storyboard up to a level where
we can publish it to puppetforge, I did some work on it to create
separate modules which can be used by anyone to install storyboard.
- API and Webclient are now installed via storyboard::application,
which assumes that you can provide the DB connection criteria.
- storyboard::cert is now a separate class, which accepts either
files or strings, which generates the SSL certificate and chain
files for storyboard.
- storyboard::params is our dependency checker.
- storyboard::init will install a standalone, entirely
self-contained instance of storyboard.
- Added various puppet module files necessary for eventual
deployment to puppetforge.
- Added README.md documentation for later puppetforge addition.
This patch also includes a new module: example42-puppi, which is a
series of convenience utilities useful for deployment. For example,
puppi::netinstall (used here) will fetch tarballs and zip files and
extract them into a provided directory. It also contains changes to
the storyboard configuration for the new refresh token support patch
in #94363
Change-Id: I6ab8c24b308df38774fc0694d218dcb5022cd899
Remove elasticsearch01 as it has been turned off.
Allow all elasticsearch running nodes to talk to each other over ports
9200 to 9400. This includes the logstash-worker nodes running non data
elasticsearch clients. This appears to be necessary to keep logs from
filling up with gigs of NoRouteToHost exceptions on the worker nodes.
Change-Id: I3e3365a717d22d881654206692d17dd05ed32c98
The fallback value for sysadmins was was admins in some places
and admin in others. However, re: jeblair:
The fallback value for sysadmins should be "[]", which is actually the
default value. Configuring the mail system to send root's mail to an
account called 'admin' which may or may not exist and if it does exist
may send mail to root is not a good idea.
The default of [] will deliver root's mail normally.
Change-Id: Iaeca86ef135b6a3210541618d48caf4058dc7966
site.pp and groups.pp update for groups portal. To make it alive
we need to do the following preliminary tasks:
- create remote database in trove for groups
- add hiera variables similar to groups-dev
- launch the instance with those manifests
Change-Id: I91d7b35ad9aabc2237d5516918fa6ce8d92ee5af
We don't really use the salt infrastructure that we set up, which means
it's cruft. Go ahead and admit that we don't use it and remove it from
our systems.
Change-Id: Ic43695719cbad30aded16ac480deb3dfd9b2a110
Instead of a shell script looping over ssh calls, use a simple
ansible playbook. The benefit this gets is that we can then also
script ad-hoc admin tasks either via playbooks or on the command
line. We can also then get rid of the almost entirely unused
salt infrastructure.
Change-Id: I53112bd1f61d94c0521a32016c8a47c8cf9e50f7
Associate an OS with each node defined in site.pp so that the puppet
apply test will only test nodes apprapriate to the node the test
is running on.
Fix remaining errors related to this test, and make it vote.
Also, start running the centos6 version regularly
(which is still non-voting).
Change-Id: I26722dce15589c982af5de36f8ccf42666d29f2b
Configure to use the read only swift creds that pair up with the read
write creds used to push the files.
Change-Id: I53252b3ed0d596b3fe36caef179f253bde1739cb
This change modifies install_puppet.sh to accept a --three option
setting it to install the latest puppet available. It also creates
a node definition for the puppetmaster.o.o node, the new 3 master,
and the master of the future. Changes were made to various classes
to allow the pinning to version 2.x to be turned off.
Change-Id: I805d6dc50b9de0d8a99cf818d22d06c2dea6090a
Put the variables defined in manifests/site.pp at the top of the file so
that they are in a known location after running csplit in test.sh and we
can prepend them to the puppet-apply top files.
A better solution would be to move this data into hiera, but this is not
sensitive data, so a move to hiera should wait until we a have solution
for a public hiera data repo separate from the private hiera data.
Change-Id: I509a8266462dfdf53e1727938e4fb043241166b6
Add elasticsearch07 node. Move the elasticsearch discover node to
elasticsearch02 instead of 01 as we are moving away from 01 as part of
the 07 addition.
Change-Id: I2aa857ec4984ae1fc2f8e27f437f8ecc61d24fbd
Our Elasticsearch nodes need cinder volumes attached to them prior to
being puppeted. Make the regex for the elasticsearch nodes in site.pp
match only existing nodes so that new nodes can be created and have
their volumes attached before proper puppeting.
Change-Id: If12c67174315b8480998148e1325de59ecdba372
This patch removes the drush make site building function from
groups-dev instance, and now directly fetch release tarballs from
http://tarballs.openstack.org/groups repository. With an advanced
multi-slot deployment architecture it prevents the typical Drupal
WSOD issues that randomly caused site malfunction when a request
arrived during installation. It also simplifies the
deployment steps using the standard drush aliases and
drush-dsd extension and supports local configuration variables
in local_settings.php file.
Change-Id: I73976a60e080d15b6f513db79fee46bcf468e302
We have fallen behind on our ability to index all the things. Logstash
itself appears to be the current bottleneck. Add four more nodes to help
combat the backlog.
Change-Id: I9d5a7474a801c58c1e8933b264172e72f2d0bb86
The test.sh script is not currently being run in any jobs, this change
removes the redundant validation code that's also in the puppet-syntax
job and creates a puppet-apply-test job that runs the test.sh script.
Running `puppet apply --noop` requires sudo, otherwise it will give
errors about refusing to run commands as other users.
Change-Id: Ie6b278d98390a8a5dd8bb24899c8c4083f5755c9
Turns out that while keystoneclient does not require a tenant_name be
set swiftclient does require it so the fix to not pass a tenant_name to
zuul did not work.
Alex_Gaynor pointed out the reason using the normal tenant_name doesn't
work with Rax object store is that the tenant_name for object store in
Rax is different than the normal tenant_name. Use that different and
correct tenant_name instead.
Change-Id: I13d6b8dfc190d35178e7fc979d7feb58e7e1f8dd
This change adds credentials as set up by fungi (2014-04-05T03:16:46)
http://eavesdrop.openstack.org/irclogs/%23openstack-infra/%23openstack-infra.2014-04-05.log
This allows zuul to send signed URL's for workers to push files to on
a per-job basis.
This change will require a zuul restart, not just a reload!
Note this is unreverts the revert in
c1b98eaff6 but is slightly edited hence
the lack of a proper revert commit. The reason for the revert has been
debugged and was due to rax identity service not providing a catalog
entry for swift when a tenant name is provided.
Change-Id: I04d3207002f7422b9851515ee88a74b19dd2f248
This is a dedicated IRC channel for discussion
about Operating System container support in
OpenStack. The members of the OpenStack
Containers Team will idle in this channel:
https://wiki.openstack.org/wiki/Teams/Containers
Change-Id: I9ec77969f926e8ced912ce194f7d6fae6a0e2e4d
This reverts commit 176f15cd48.
Puppet and zuul aren't ready for this. The swift client throws an
exception. We need to restart zuul to fix a more pressing issue hence
this revert. Will debug when able to.
Change-Id: Ie4487d84b7f1495c7ec6fd31e4b5b90d6699a31d