10 Commits

Author SHA1 Message Date
Jeremy Stanley
4ba760b81b Disable the salt minion data cache on master
* modules/salt/templates/master.erb: A bug with the salt mine was
preventing communication with CentOS minions after about 24 hours.
Disabling the minion data cache, which we don't currently use, works
around it.

Change-Id: I4f68305ee6215333bd1491fba859b0607bc25137
2013-10-01 19:03:11 +00:00
David Boucha
b085abb41b Give Jenkins the ability to trigger puppet runs
* modules/openstack_project/files/salt-trigger.sudoers: Allow the
jenkins user to send messages to the salt master.

* modules/openstack_project/manifests/salt_trigger_slave.pp: Add the
sudoers inclusion above to the salt-trigger slave.

* modules/salt/manifests/master.pp: Change ownership on the existing
salt configuration directory on the master to belong to the salt
user, and add the file structure for the new reactor components.

* modules/salt/templates/master.erb: Add reactor configuration to
run tests.sls when receiving a trigger named jenkins.

* modules/salt/templates/tests.reactor.erb: Define a puppet command
which will be run on all minions.

Change-Id: I346bb28e5b4d53618855a28f616f7c5ed0e60dc7
2013-09-12 23:37:30 +00:00
Jeremy Stanley
1f6f6574d5 Revert "Disable salt master and minions globally"
This reverts commit ec900482c3db820e1f24ba380040d466c35f705f.

The original reason for disabling salt globally was a slow
memory/process leak with the message queue in versions prior to
0.16. Ensuring salt packages are upgraded everywhere should mitigate
the issue.

Change-Id: Ie5cb4df7367d82551b79decf2ba71349df1966d7
2013-09-12 17:20:15 +00:00
Monty Taylor
ec900482c3 Disable salt master and minions globally
Change-Id: I9ec8a411c8862f1033dbeae21a78d05b0b4fa986
2013-08-20 22:12:40 -04:00
Jeremy Stanley
b48c3bc49b Update launch docs for salt permissions.
* launch/README: Mention adding yourself to the salt group.

* modules/salt/manifests/master.pp: Loosen directory permissions
minimally as needed for salt group members to be able to run the
launch script without being root.

Change-Id: I4e462fe2efabe2200a635c79e4b7a1314bf174a3
Reviewed-on: https://review.openstack.org/27562
Reviewed-by: Jesse Keating <jesse.keating@rackspace.com>
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Reviewed-by: Monty Taylor <mordred@inaugust.com>
Approved: James E. Blair <corvus@inaugust.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Tested-by: Jenkins
2013-04-30 17:22:23 +00:00
Jeremy Stanley
3089973311 Use facter's osfamily instead of operatingsystem.
The osfamily fact is more flexible when we want to support more
GNU/Linux distributions while avoiding unnecessary code duplication.

Change-Id: Iea4c73c19e7f94df8daccf25c764b6a4539a1ea0
Reviewed-on: https://review.openstack.org/27400
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Approved: Jeremy Stanley <fungi@yuggoth.org>
Reviewed-by: Jeremy Stanley <fungi@yuggoth.org>
Tested-by: Jenkins
2013-04-25 21:37:03 +00:00
Dan Prince
926bf44fe6 RHEL support for salt.
Updates to the salt modules so that they run on RHEL.

Change-Id: Ibdbc35594a018a7f49f3785d527e5c1a71a92a2e
Reviewed-on: https://review.openstack.org/23188
Reviewed-by: Jeremy Stanley <fungi@yuggoth.org>
Reviewed-by: Khai Do <zaro0508@gmail.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Approved: James E. Blair <corvus@inaugust.com>
Tested-by: Jenkins
2013-03-04 17:59:29 +00:00
Paul Belanger
39c786ee10 Puppet lint fixes
A few trival fixes to remove puppet lint warnings

Change-Id: I414684e43b18ebbe5cad30157f587cea654c381e
Signed-off-by: Paul Belanger <paul.belanger@polybeacon.com>
Reviewed-on: https://review.openstack.org/15838
Approved: Clark Boylan <clark.boylan@gmail.com>
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Tested-by: Jenkins
2012-11-12 18:53:01 +00:00
Clark Boylan
cd64a94b4c Run salt master as non root user.
The salt master service should not run as root. Run it as salt instead.

Change-Id: Ia5cdedf8c98684e25c5d88c59130cae3361c9fc3
Reviewed-on: https://review.openstack.org/14311
Approved: James E. Blair <corvus@inaugust.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Tested-by: Jenkins
2012-10-11 21:23:47 +00:00
Clark Boylan
71e96df67f Add saltstack puppet module.
Add a puppet module to install saltstack minion and saltstack master.
This is to be used to bootstrap saltstack. As a result the only
configurable option here is the master node that minions should talk to.
Eventually salt master should have a setup similar to puppet to manage
its own configs.

Change-Id: I27cb902f043c4f4a2a53c599c08ae94df297cc97
Reviewed-on: https://review.openstack.org/14235
Reviewed-by: Monty Taylor <mordred@inaugust.com>
Reviewed-by: Paul Belanger <paul.belanger@polybeacon.com>
Approved: James E. Blair <corvus@inaugust.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Tested-by: Jenkins
2012-10-10 17:52:29 +00:00