* modules/salt/templates/master.erb: A bug with the salt mine was
preventing communication with CentOS minions after about 24 hours.
Disabling the minion data cache, which we don't currently use, works
around it.
Change-Id: I4f68305ee6215333bd1491fba859b0607bc25137
* modules/openstack_project/files/salt-trigger.sudoers: Allow the
jenkins user to send messages to the salt master.
* modules/openstack_project/manifests/salt_trigger_slave.pp: Add the
sudoers inclusion above to the salt-trigger slave.
* modules/salt/manifests/master.pp: Change ownership on the existing
salt configuration directory on the master to belong to the salt
user, and add the file structure for the new reactor components.
* modules/salt/templates/master.erb: Add reactor configuration to
run tests.sls when receiving a trigger named jenkins.
* modules/salt/templates/tests.reactor.erb: Define a puppet command
which will be run on all minions.
Change-Id: I346bb28e5b4d53618855a28f616f7c5ed0e60dc7
This reverts commit ec900482c3db820e1f24ba380040d466c35f705f.
The original reason for disabling salt globally was a slow
memory/process leak with the message queue in versions prior to
0.16. Ensuring salt packages are upgraded everywhere should mitigate
the issue.
Change-Id: Ie5cb4df7367d82551b79decf2ba71349df1966d7
* launch/README: Mention adding yourself to the salt group.
* modules/salt/manifests/master.pp: Loosen directory permissions
minimally as needed for salt group members to be able to run the
launch script without being root.
Change-Id: I4e462fe2efabe2200a635c79e4b7a1314bf174a3
Reviewed-on: https://review.openstack.org/27562
Reviewed-by: Jesse Keating <jesse.keating@rackspace.com>
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Reviewed-by: Monty Taylor <mordred@inaugust.com>
Approved: James E. Blair <corvus@inaugust.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Tested-by: Jenkins
The osfamily fact is more flexible when we want to support more
GNU/Linux distributions while avoiding unnecessary code duplication.
Change-Id: Iea4c73c19e7f94df8daccf25c764b6a4539a1ea0
Reviewed-on: https://review.openstack.org/27400
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Approved: Jeremy Stanley <fungi@yuggoth.org>
Reviewed-by: Jeremy Stanley <fungi@yuggoth.org>
Tested-by: Jenkins
Updates to the salt modules so that they run on RHEL.
Change-Id: Ibdbc35594a018a7f49f3785d527e5c1a71a92a2e
Reviewed-on: https://review.openstack.org/23188
Reviewed-by: Jeremy Stanley <fungi@yuggoth.org>
Reviewed-by: Khai Do <zaro0508@gmail.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Approved: James E. Blair <corvus@inaugust.com>
Tested-by: Jenkins
A few trival fixes to remove puppet lint warnings
Change-Id: I414684e43b18ebbe5cad30157f587cea654c381e
Signed-off-by: Paul Belanger <paul.belanger@polybeacon.com>
Reviewed-on: https://review.openstack.org/15838
Approved: Clark Boylan <clark.boylan@gmail.com>
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Tested-by: Jenkins
The salt master service should not run as root. Run it as salt instead.
Change-Id: Ia5cdedf8c98684e25c5d88c59130cae3361c9fc3
Reviewed-on: https://review.openstack.org/14311
Approved: James E. Blair <corvus@inaugust.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Tested-by: Jenkins
Add a puppet module to install saltstack minion and saltstack master.
This is to be used to bootstrap saltstack. As a result the only
configurable option here is the master node that minions should talk to.
Eventually salt master should have a setup similar to puppet to manage
its own configs.
Change-Id: I27cb902f043c4f4a2a53c599c08ae94df297cc97
Reviewed-on: https://review.openstack.org/14235
Reviewed-by: Monty Taylor <mordred@inaugust.com>
Reviewed-by: Paul Belanger <paul.belanger@polybeacon.com>
Approved: James E. Blair <corvus@inaugust.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Tested-by: Jenkins