opendev
/
system-config
Code Issues Proposed changes
System configuration for OpenStack Infrastructure
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
16595 Commits
1 Branch
42 MiB
 
 
 
 
 
 
Branch: master
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'master'
${ noResults }
system-config/manifests/site.pp

581 lines
25 KiB
Raw Permalink Blame History 

  1. # Node-OS: xenial

  2. node /^health\d*\.openstack\.org$/ {

  3.   $group = "health"

  4.   class { 'openstack_project::server': }

  5.   class { 'openstack_project::openstack_health_api':

  6.     subunit2sql_db_host => hiera('subunit2sql_db_host', 'localhost'),

  7.     hostname            => 'health.openstack.org',

  8.   }

  9. }

  10. 

  11. # Node-OS: xenial

  12. node /^cacti\d+\.open.*\.org$/ {

  13.   $group = "cacti"

  14.   # NOTE(ianw) 2020-05 : disabled pending removal, migrated to

  15.   # ansible.

  16.   #  include openstack_project::ssl_cert_check

  17.   class { 'openstack_project::cacti':

  18.     cacti_hosts => hiera_array('cacti_hosts'),

  19.     vhost_name  => 'cacti.openstack.org',

  20.   }

  21. }

  22. 

  23. # Node-OS: xenial

  24. node /^lists\d*\.open.*\.org$/ {

  25.   class { 'openstack_project::server': }

  26. 

  27.   class { 'openstack_project::lists':

  28.     listpassword => hiera('listpassword'),

  29.   }

  30. }

  31. 

  32. # Node-OS: xenial

  33. node /^lists\d*\.katacontainers\.io$/ {

  34.   class { 'openstack_project::server': }

  35. 

  36.   class { 'openstack_project::kata_lists':

  37.     listpassword => hiera('listpassword'),

  38.   }

  39. }

  40. 

  41. # Node-OS: xenial

  42. node /^paste\d*\.open.*\.org$/ {

  43.   $group = "paste"

  44. 

  45.   class { 'openstack_project::server': }

  46.   class { 'openstack_project::paste':

  47.     db_password         => hiera('paste_db_password'),

  48.     db_host             => hiera('paste_db_host'),

  49.     vhost_name          => 'paste.openstack.org',

  50.   }

  51. }

  52. 

  53. # Node-OS: xenial

  54. node /planet\d*\.open.*\.org$/ {

  55.   class { 'openstack_project::planet':

  56.   }

  57. }

  58. 

  59. # Node-OS: xenial

  60. node /^ethercalc\d+\.open.*\.org$/ {

  61.   $group = "ethercalc"

  62.   class { 'openstack_project::server': }

  63. 

  64.   class { 'openstack_project::ethercalc':

  65.     vhost_name              => 'ethercalc.openstack.org',

  66.     ssl_cert_file_contents  => hiera('ssl_cert_file_contents'),

  67.     ssl_key_file_contents   => hiera('ssl_key_file_contents'),

  68.     ssl_chain_file_contents => hiera('ssl_chain_file_contents'),

  69.   }

  70. }

  71. 

  72. # Node-OS: xenial

  73. node /^wiki\d+\.openstack\.org$/ {

  74.   $group = "wiki"

  75.   class { 'openstack_project::wiki':

  76.     bup_user                  => 'bup-wiki',

  77.     serveradmin               => hiera('infra_apache_serveradmin'),

  78.     site_hostname             => 'wiki.openstack.org',

  79.     ssl_cert_file_contents    => hiera('ssl_cert_file_contents'),

  80.     ssl_key_file_contents     => hiera('ssl_key_file_contents'),

  81.     ssl_chain_file_contents   => hiera('ssl_chain_file_contents'),

  82.     wg_dbserver               => hiera('wg_dbserver'),

  83.     wg_dbname                 => 'openstack_wiki',

  84.     wg_dbuser                 => 'wikiuser',

  85.     wg_dbpassword             => hiera('wg_dbpassword'),

  86.     wg_secretkey              => hiera('wg_secretkey'),

  87.     wg_upgradekey             => hiera('wg_upgradekey'),

  88.     wg_recaptchasitekey       => hiera('wg_recaptchasitekey'),

  89.     wg_recaptchasecretkey     => hiera('wg_recaptchasecretkey'),

  90.     wg_googleanalyticsaccount => hiera('wg_googleanalyticsaccount'),

  91.   }

  92. }

  93. 

  94. # Node-OS: xenial

  95. node /^wiki-dev\d+\.openstack\.org$/ {

  96.   $group = "wiki-dev"

  97.   class { 'openstack_project::wiki':

  98.     serveradmin           => hiera('infra_apache_serveradmin'),

  99.     site_hostname         => 'wiki-dev.openstack.org',

  100.     wg_dbserver           => hiera('wg_dbserver'),

  101.     wg_dbname             => 'openstack_wiki',

  102.     wg_dbuser             => 'wikiuser',

  103.     wg_dbpassword         => hiera('wg_dbpassword'),

  104.     wg_secretkey          => hiera('wg_secretkey'),

  105.     wg_upgradekey         => hiera('wg_upgradekey'),

  106.     wg_recaptchasitekey   => hiera('wg_recaptchasitekey'),

  107.     wg_recaptchasecretkey => hiera('wg_recaptchasecretkey'),

  108.     disallow_robots       => true,

  109.   }

  110. }

  111. 

  112. # Node-OS: xenial

  113. node /^logstash\d*\.open.*\.org$/ {

  114.   class { 'openstack_project::server': }

  115. 

  116.   class { 'openstack_project::logstash':

  117.     discover_nodes      => [

  118.       'elasticsearch03.openstack.org:9200',

  119.       'elasticsearch04.openstack.org:9200',

  120.       'elasticsearch05.openstack.org:9200',

  121.       'elasticsearch06.openstack.org:9200',

  122.       'elasticsearch07.openstack.org:9200',

  123.       'elasticsearch02.openstack.org:9200',

  124.     ],

  125.     subunit2sql_db_host => hiera('subunit2sql_db_host', ''),

  126.     subunit2sql_db_pass => hiera('subunit2sql_db_password', ''),

  127.   }

  128. }

  129. 

  130. # Node-OS: xenial

  131. node /^logstash-worker\d+\.open.*\.org$/ {

  132.   $group = 'logstash-worker'

  133. 

  134.   $elasticsearch_nodes = [

  135.     'elasticsearch02.openstack.org',

  136.     'elasticsearch03.openstack.org',

  137.     'elasticsearch04.openstack.org',

  138.     'elasticsearch05.openstack.org',

  139.     'elasticsearch06.openstack.org',

  140.     'elasticsearch07.openstack.org',

  141.   ]

  142. 

  143.   class { 'openstack_project::server': }

  144. 

  145.   class { 'openstack_project::logstash_worker':

  146.     discover_node         => 'elasticsearch03.openstack.org',

  147.     enable_mqtt           => false,

  148.     mqtt_password         => hiera('mqtt_service_user_password'),

  149.     mqtt_ca_cert_contents => hiera('mosquitto_tls_ca_file'),

  150.   }

  151. }

  152. 

  153. # Node-OS: xenial

  154. node /^subunit-worker\d+\.open.*\.org$/ {

  155.   $group = "subunit-worker"

  156.   class { 'openstack_project::server': }

  157.   class { 'openstack_project::subunit_worker':

  158.     subunit2sql_db_host   => hiera('subunit2sql_db_host', ''),

  159.     subunit2sql_db_pass   => hiera('subunit2sql_db_password', ''),

  160.     mqtt_pass             => hiera('mqtt_service_user_password'),

  161.     mqtt_ca_cert_contents => hiera('mosquitto_tls_ca_file'),

  162.   }

  163. }

  164. 

  165. # Node-OS: xenial

  166. node /^elasticsearch\d+\.open.*\.org$/ {

  167.   $group = "elasticsearch"

  168. 

  169.   $elasticsearch_nodes = [

  170.     'elasticsearch02.openstack.org',

  171.     'elasticsearch03.openstack.org',

  172.     'elasticsearch04.openstack.org',

  173.     'elasticsearch05.openstack.org',

  174.     'elasticsearch06.openstack.org',

  175.     'elasticsearch07.openstack.org',

  176.   ]

  177. 

  178.   class { 'openstack_project::server': }

  179.   class { 'openstack_project::elasticsearch_node':

  180.     discover_nodes => $elasticsearch_nodes,

  181.   }

  182. }

  183. 

  184. # Node-OS: xenial

  185. node /^firehose\d+\.open.*\.org$/ {

  186.   class { 'openstack_project::server': }

  187.   class { 'openstack_project::firehose':

  188.     gerrit_ssh_host_key => hiera('gerrit_ssh_rsa_pubkey_contents'),

  189.     gerrit_public_key   => hiera('germqtt_gerrit_ssh_public_key'),

  190.     gerrit_private_key  => hiera('germqtt_gerrit_ssh_private_key'),

  191.     mqtt_password       => hiera('mqtt_service_user_password'),

  192.     ca_file             => hiera('mosquitto_tls_ca_file'),

  193.     cert_file           => hiera('mosquitto_tls_server_cert_file'),

  194.     key_file            => hiera('mosquitto_tls_server_key_file'),

  195.     imap_hostname       => hiera('lpmqtt_imap_server'),

  196.     imap_username       => hiera('lpmqtt_imap_username'),

  197.     imap_password       => hiera('lpmqtt_imap_password'),

  198.     statsd_host         => 'graphite.opendev.org',

  199.   }

  200. }

  201. 

  202. # Node-OS: trusty

  203. # Node-OS: xenial

  204. node /^refstack\d*\.open.*\.org$/ {

  205.   class { 'openstack_project::server': }

  206.   class { 'refstack':

  207.     mysql_host          => hiera('refstack_mysql_host', 'localhost'),

  208.     mysql_database      => hiera('refstack_mysql_db_name', 'refstack'),

  209.     mysql_user          => hiera('refstack_mysql_user', 'refstack'),

  210.     mysql_user_password => hiera('refstack_mysql_password'),

  211.     ssl_cert_content    => hiera('refstack_ssl_cert_file_contents'),

  212.     ssl_cert            => '/etc/ssl/certs/refstack.pem',

  213.     ssl_key_content     => hiera('refstack_ssl_key_file_contents'),

  214.     ssl_key             => '/etc/ssl/private/refstack.key',

  215.     ssl_ca_content      => hiera('refstack_ssl_chain_file_contents'),

  216.     ssl_ca              => '/etc/ssl/certs/refstack.ca.pem',

  217.     protocol            => 'https',

  218.   }

  219.   mysql_backup::backup_remote { 'refstack':

  220.     database_host     => hiera('refstack_mysql_host', 'localhost'),

  221.     database_user     => hiera('refstack_mysql_user', 'refstack'),

  222.     database_password => hiera('refstack_mysql_password'),

  223.     require           => Class['::refstack'],

  224.   }

  225. }

  226. 

  227. # A machine to run Storyboard

  228. # Node-OS: xenial

  229. node /^storyboard\d+\.opendev\.org$/ {

  230.   $group = "storyboard"

  231.   class { 'openstack_project::storyboard':

  232.     project_config_repo     => 'https://opendev.org/openstack/project-config',

  233.     mysql_host              => hiera('storyboard_db_host', 'localhost'),

  234.     mysql_user              => hiera('storyboard_db_user', 'username'),

  235.     mysql_password          => hiera('storyboard_db_password'),

  236.     rabbitmq_user           => hiera('storyboard_rabbit_user', 'username'),

  237.     rabbitmq_password       => hiera('storyboard_rabbit_password'),

  238.     ssl_cert                => '/etc/ssl/certs/storyboard.openstack.org.pem',

  239.     ssl_cert_file_contents  => hiera('storyboard_ssl_cert_file_contents'),

  240.     ssl_key                 => '/etc/ssl/private/storyboard.openstack.org.key',

  241.     ssl_key_file_contents   => hiera('storyboard_ssl_key_file_contents'),

  242.     ssl_chain_file_contents => hiera('storyboard_ssl_chain_file_contents'),

  243.     hostname                => 'storyboard.openstack.org',

  244.     valid_oauth_clients     => ['storyboard.openstack.org',],

  245.     cors_allowed_origins    => ['https://storyboard.openstack.org',],

  246.     sender_email_address    => 'storyboard@storyboard.openstack.org',

  247.     default_url             => 'https://storyboard.openstack.org',

  248.   }

  249. }

  250. 

  251. # A machine to run Storyboard devel

  252. # Node-OS: xenial

  253. node /^storyboard-dev\d+\.opendev\.org$/ {

  254.   $group = "storyboard-dev"

  255.   class { 'openstack_project::storyboard::dev':

  256.     project_config_repo     => 'https://opendev.org/openstack/project-config',

  257.     mysql_host              => hiera('storyboard_db_host', 'localhost'),

  258.     mysql_user              => hiera('storyboard_db_user', 'username'),

  259.     mysql_password          => hiera('storyboard_db_password'),

  260.     rabbitmq_user           => hiera('storyboard_rabbit_user', 'username'),

  261.     rabbitmq_password       => hiera('storyboard_rabbit_password'),

  262.     hostname                => 'storyboard-dev.openstack.org',

  263.     valid_oauth_clients     => ['^.*',],

  264.     cors_allowed_origins    => ['^.*',],

  265.     sender_email_address    => 'storyboard-dev@storyboard-dev.openstack.org',

  266.     default_url             => 'https://storyboard-dev.openstack.org',

  267.   }

  268. 

  269. }

  270. 

  271. # A machine to serve various project status updates.

  272. # Node-OS: xenial

  273. node /^status\d*\.open.*\.org$/ {

  274.   $group = 'status'

  275. 

  276.   class { 'openstack_project::server': }

  277. 

  278.   class { 'openstack_project::status':

  279.     gerrit_host                   => 'review.opendev.org',

  280.     gerrit_ssh_host_key           => hiera('gerrit_ssh_rsa_pubkey_contents'),

  281.     reviewday_ssh_public_key      => hiera('reviewday_rsa_pubkey_contents'),

  282.     reviewday_ssh_private_key     => hiera('reviewday_rsa_key_contents'),

  283.     recheck_ssh_public_key        => hiera('elastic-recheck_gerrit_ssh_public_key'),

  284.     recheck_ssh_private_key       => hiera('elastic-recheck_gerrit_ssh_private_key'),

  285.     recheck_bot_nick              => 'openstackrecheck',

  286.     recheck_bot_passwd            => hiera('elastic-recheck_ircbot_password'),

  287.   }

  288. }

  289. 

  290. # Node-OS: xenial

  291. node /^survey\d+\.open.*\.org$/ {

  292.   $group = "survey"

  293.   class { 'openstack_project::server': }

  294. 

  295.   class { 'openstack_project::survey':

  296.     vhost_name              => 'survey.openstack.org',

  297.     auth_openid             => true,

  298.     ssl_cert_file_contents  => hiera('ssl_cert_file_contents'),

  299.     ssl_key_file_contents   => hiera('ssl_key_file_contents'),

  300.     ssl_chain_file_contents => hiera('ssl_chain_file_contents'),

  301.     dbpassword              => hiera('dbpassword'),

  302.     dbhost                  => hiera('dbhost'),

  303.     adminuser               => hiera('adminuser'),

  304.     adminpass               => hiera('adminpass'),

  305.     adminmail               => hiera('adminmail'),

  306.   }

  307. }

  308. 

  309. # Node-OS: xenial

  310. node /^nb\d+\.open.*\.org$/ {

  311.   $group = 'nodepool'

  312. 

  313.   class { 'openstack_project::server': }

  314. 

  315.   include openstack_project

  316. 

  317.   class { '::openstackci::nodepool_builder':

  318.     nodepool_ssh_public_key       => hiera('zuul_worker_ssh_public_key_contents'),

  319.     vhost_name                    => $::fqdn,

  320.     enable_build_log_via_http     => true,

  321.     project_config_repo           => 'https://opendev.org/openstack/project-config',

  322.     statsd_host                   => 'graphite.opendev.org',

  323.     upload_workers                => '16',

  324.     revision                      => 'master',

  325.     python_version                => 3,

  326.     zuulv3                        => true,

  327.     ssl_cert_file                 => '/etc/ssl/certs/ssl-cert-snakeoil.pem',

  328.     ssl_key_file                  => '/etc/ssl/private/ssl-cert-snakeoil.key',

  329.   }

  330. 

  331.   cron { 'mirror_gitgc':

  332.     user        => 'nodepool',

  333.     hour        => '20',

  334.     minute      => '0',

  335.     command     => 'find /opt/dib_cache/source-repositories/ -type d -name "*.git" -exec git --git-dir="{}" gc \; >/dev/null',

  336.     environment => 'PATH=/usr/bin:/bin:/usr/sbin:/sbin',

  337.     require     => Class['::openstackci::nodepool_builder'],

  338.   }

  339. }

  340. 

  341. # Node-OS: xenial

  342. node /^pbx\d*\.open.*\.org$/ {

  343.   $group = "pbx"

  344.   class { 'openstack_project::server': }

  345.   class { 'openstack_project::pbx':

  346.     sip_providers => [

  347.       {

  348.         provider => 'voipms',

  349.         hostname => 'dallas.voip.ms',

  350.         username => hiera('voipms_username', 'username'),

  351.         password => hiera('voipms_password'),

  352.         outgoing => false,

  353.       },

  354.     ],

  355.   }

  356. }

  357. 

  358. # Node-OS: xenial

  359. # A backup machine.  Don't run cron or puppet agent on it.

  360. node /^backup\d+\..*\.ci\.open.*\.org$/ {

  361.   $group = "ci-backup"

  362.   class { 'openstack_project::server': }

  363.   include openstack_project::backup_server

  364. }

  365. 

  366. # Node-OS: xenial

  367. node /^openstackid\d*(\.openstack)?\.org$/ {

  368.   $group = "openstackid"

  369.   class { 'openstack_project::openstackid_prod':

  370.     site_admin_password                          => hiera('openstackid_site_admin_password'),

  371.     id_mysql_host                                => hiera('openstackid_id_mysql_host', 'localhost'),

  372.     id_mysql_password                            => hiera('openstackid_id_mysql_password'),

  373.     id_mysql_user                                => hiera('openstackid_id_mysql_user', 'username'),

  374.     id_db_name                                   => hiera('openstackid_id_db_name'),

  375.     redis_password                               => hiera('openstackid_redis_password'),

  376.     ssl_cert_file_contents                       => hiera('openstackid_ssl_cert_file_contents'),

  377.     ssl_key_file_contents                        => hiera('openstackid_ssl_key_file_contents'),

  378.     ssl_chain_file_contents                      => hiera('openstackid_ssl_chain_file_contents'),

  379.     id_recaptcha_public_key                      => hiera('openstackid_recaptcha_public_key'),

  380.     id_recaptcha_private_key                     => hiera('openstackid_recaptcha_private_key'),

  381.     vhost_name                                   => 'openstackid.org',

  382.     session_cookie_domain                        => 'openstackid.org',

  383.     serveradmin                                  => 'webmaster@openstackid.org',

  384.     canonicalweburl                              => 'https://openstackid.org/',

  385.     app_url                                      => 'https://openstackid.org',

  386.     app_key                                      => hiera('openstackid_app_key'),

  387.     id_log_error_to_email                        => 'openstack@tipit.net',

  388.     id_log_error_from_email                      => 'noreply@openstack.org',

  389.     email_driver                                 => 'sendgrid',

  390.     email_send_grid_api_key                      => hiera('openstackid_send_grid_api_key'),

  391.     php_version                                  => 7,

  392.     mysql_ssl_enabled                            => true,

  393.     mysql_ssl_ca_file_contents                   => hiera('openstackid_mysql_ssl_ca_file_contents'),

  394.     mysql_ssl_client_key_file_contents           => hiera('openstackid_mysql_ssl_client_key_file_contents'),

  395.     mysql_ssl_client_cert_file_contents          => hiera('openstackid_mysql_ssl_client_cert_file_contents'),

  396.     user_spam_processor_to                       => hiera('openstackid_user_spam_processor_to'),

  397.     message_broker_exchange_name                 => 'message-broker',

  398.     message_broker_host                          => hiera('openstackid_message_broker_host'),

  399.     message_broker_port                          => 5671,

  400.     message_broker_vhost                         => 'databus',

  401.     message_broker_login                         => hiera('openstackid_message_broker_login'),

  402.     message_broker_password                      => hiera('openstackid_message_broker_password'),

  403.     message_broker_ssl_enabled                   => true,

  404.     message_broker_ssl_ca_file_contents          => hiera('openstackid_message_broker_ssl_ca_file_contents'),

  405.     message_broker_ssl_client_cert_file_contents => hiera('openstackid_message_broker_ssl_client_cert_file_contents'),

  406.     message_broker_ssl_client_key_file_contents  => hiera('openstackid_message_broker_ssl_client_key_file_contents'),

  407.     message_broker_enabled                       => true,

  408.     cloud_storage_base_url                       => hiera('openstackid_cloud_storage_base_url'),

  409.     cloud_storage_auth_url                       => 'https://auth.vexxhost.net/v3',

  410.     cloud_storage_app_credential_id              => hiera('openstackid_cloud_storage_app_credential_id'),

  411.     cloud_storage_app_credential_secret          => hiera('openstackid_cloud_storage_app_credential_secret'),

  412.     cloud_storage_project_name                   => hiera('openstackid_cloud_storage_project_name'),

  413.     cloud_storage_region                         => 'ca-ymq-1',

  414.     cloud_storage_container                      => 'idp-osf',

  415.   }

  416. }

  417. 

  418. # Node-OS: xenial

  419. node /^openstackid-dev\d*\.openstack\.org$/ {

  420.   $group = "openstackid-dev"

  421.   class { 'openstack_project::openstackid_dev':

  422.     site_admin_password                          => hiera('openstackid_dev_site_admin_password'),

  423.     id_mysql_host                                => hiera('openstackid_dev_id_mysql_host', 'localhost'),

  424.     id_mysql_password                            => hiera('openstackid_dev_id_mysql_password'),

  425.     id_mysql_user                                => hiera('openstackid_dev_id_mysql_user', 'username'),

  426.     redis_password                               => hiera('openstackid_dev_redis_password'),

  427.     ssl_cert_file_contents                       => hiera('openstackid_dev_ssl_cert_file_contents'),

  428.     ssl_key_file_contents                        => hiera('openstackid_dev_ssl_key_file_contents'),

  429.     ssl_chain_file_contents                      => hiera('openstackid_dev_ssl_chain_file_contents'),

  430.     id_recaptcha_public_key                      => hiera('openstackid_dev_recaptcha_public_key'),

  431.     id_recaptcha_private_key                     => hiera('openstackid_dev_recaptcha_private_key'),

  432.     vhost_name                                   => 'openstackid-dev.openstack.org',

  433.     session_cookie_domain                        => 'openstackid-dev.openstack.org',

  434.     serveradmin                                  => 'webmaster@openstackid-dev.openstack.org',

  435.     canonicalweburl                              => 'https://openstackid-dev.openstack.org/',

  436.     app_url                                      => 'https://openstackid-dev.openstack.org',

  437.     app_key                                      => hiera('openstackid_dev_app_key'),

  438.     id_log_error_to_email                        => 'openstack@tipit.net',

  439.     id_log_error_from_email                      => 'noreply@openstack.org',

  440.     email_driver                                 => 'sendgrid',

  441.     email_send_grid_api_key                      => hiera('openstackid_dev_send_grid_api_key'),

  442.     php_version                                  => 7,

  443.     mysql_ssl_enabled                            => true,

  444.     mysql_ssl_ca_file_contents                   => hiera('openstackid_dev_mysql_ssl_ca_file_contents'),

  445.     mysql_ssl_client_key_file_contents           => hiera('openstackid_dev_mysql_ssl_client_key_file_contents'),

  446.     mysql_ssl_client_cert_file_contents          => hiera('openstackid_dev_mysql_ssl_client_cert_file_contents'),

  447.     user_spam_processor_to                       => hiera('openstackid_dev_user_spam_processor_to'),

  448.     message_broker_exchange_name                 => 'message-broker',

  449.     message_broker_host                          => hiera('openstackid_dev_message_broker_host'),

  450.     message_broker_port                          => 5671,

  451.     message_broker_vhost                         => 'databus',

  452.     message_broker_login                         => hiera('openstackid_dev_message_broker_login'),

  453.     message_broker_password                      => hiera('openstackid_dev_message_broker_password'),

  454.     message_broker_ssl_enabled                   => true,

  455.     message_broker_ssl_ca_file_contents          => hiera('openstackid_dev_message_broker_ssl_ca_file_contents'),

  456.     message_broker_ssl_client_cert_file_contents => hiera('openstackid_dev_message_broker_ssl_client_cert_file_contents'),

  457.     message_broker_ssl_client_key_file_contents  => hiera('openstackid_dev_message_broker_ssl_client_key_file_contents'),

  458.     message_broker_enabled                       => true,

  459.     cloud_storage_base_url                       => hiera('openstackid_dev_cloud_storage_base_url'),

  460.     cloud_storage_auth_url                       => 'https://auth.vexxhost.net/v3',

  461.     cloud_storage_app_credential_id              => hiera('openstackid_dev_cloud_storage_app_credential_id'),

  462.     cloud_storage_app_credential_secret          => hiera('openstackid_dev_cloud_storage_app_credential_secret'),

  463.     cloud_storage_project_name                   => hiera('openstackid_dev_cloud_storage_project_name'),

  464.     cloud_storage_region                         => 'ca-ymq-1',

  465.     cloud_storage_container                      => 'idp-osf',

  466.   }

  467. }

  468. 

  469. # Node-OS: xenial

  470. node /^kdc03\.open.*\.org$/ {

  471.   class { 'openstack_project::server': }

  472. 

  473.   class { 'openstack_project::kdc': }

  474. }

  475. 

  476. # Node-OS: xenial

  477. node /^kdc04\.open.*\.org$/ {

  478.   class { 'openstack_project::server': }

  479. 

  480.   class { 'openstack_project::kdc':

  481.     slave => true,

  482.   }

  483. }

  484. 

  485. # Node-OS: xenial

  486. node /^afsdb01\.open.*\.org$/ {

  487.   $group = "afsdb"

  488. 

  489.   class { 'openstack_project::server': }

  490. 

  491.   include openstack_project::afsdb

  492. }

  493. 

  494. # Node-OS: xenial

  495. node /^afsdb.*\.open.*\.org$/ {

  496.   $group = "afsdb"

  497. 

  498.   class { 'openstack_project::server': }

  499. 

  500.   include openstack_project::afsdb

  501. }

  502. 

  503. # Node-OS: xenial

  504. node /^afs.*\..*\.open.*\.org$/ {

  505.   $group = "afs"

  506. 

  507.   class { 'openstack_project::server': }

  508. 

  509.   include openstack_project::afsfs

  510. }

  511. 

  512. # Node-OS: xenial

  513. node /^ask\d*\.open.*\.org$/ {

  514. 

  515.   class { 'openstack_project::server': }

  516. 

  517.   class { 'openstack_project::ask':

  518.     db_user                      => hiera('ask_db_user', 'ask'),

  519.     db_password                  => hiera('ask_db_password'),

  520.     redis_password               => hiera('ask_redis_password'),

  521.     site_ssl_cert_file_contents  => hiera('ask_site_ssl_cert_file_contents', undef),

  522.     site_ssl_key_file_contents   => hiera('ask_site_ssl_key_file_contents', undef),

  523.     site_ssl_chain_file_contents => hiera('ask_site_ssl_chain_file_contents', undef),

  524.   }

  525. }

  526. 

  527. # Node-OS: xenial

  528. node /^ask-staging\d*\.open.*\.org$/ {

  529.   class { 'openstack_project::server': }

  530. 

  531.   class { 'openstack_project::ask_staging':

  532.     db_password                  => hiera('ask_staging_db_password'),

  533.     redis_password               => hiera('ask_staging_redis_password'),

  534.   }

  535. }

  536. 

  537. # Node-OS: xenial

  538. node /^translate\d+\.open.*\.org$/ {

  539.   $group = "translate"

  540.   class { 'openstack_project::server': }

  541.   class { 'openstack_project::translate':

  542.     admin_users                => 'aeng,cboylan,eumel8,ianw,ianychoi,infra,jaegerandi,mordred,stevenk',

  543.     openid_url                 => 'https://openstackid.org',

  544.     listeners                  => ['ajp'],

  545.     from_address               => 'noreply@openstack.org',

  546.     mysql_host                 => hiera('translate_mysql_host', 'localhost'),

  547.     mysql_password             => hiera('translate_mysql_password'),

  548.     zanata_server_user         => hiera('proposal_zanata_user'),

  549.     zanata_server_api_key      => hiera('proposal_zanata_api_key'),

  550.     zanata_wildfly_version     => '10.1.0',

  551.     zanata_wildfly_install_url => 'https://repo1.maven.org/maven2/org/wildfly/wildfly-dist/10.1.0.Final/wildfly-dist-10.1.0.Final.tar.gz',

  552.     zanata_main_version        => 4,

  553.     zanata_url                 => 'https://github.com/zanata/zanata-platform/releases/download/platform-4.3.3/zanata-4.3.3-wildfly.zip',

  554.     zanata_checksum            => 'eaf8bd07401dade758b677007d2358f173193d17',

  555.     project_config_repo        => 'https://opendev.org/openstack/project-config',

  556.     ssl_cert_file_contents     => hiera('translate_ssl_cert_file_contents'),

  557.     ssl_key_file_contents      => hiera('translate_ssl_key_file_contents'),

  558.     ssl_chain_file_contents    => hiera('translate_ssl_chain_file_contents'),

  559.     vhost_name                 => 'translate.openstack.org',

  560.   }

  561. }

  562. 

  563. # Node-OS: xenial

  564. node /^translate-dev\d*\.open.*\.org$/ {

  565.   $group = "translate-dev"

  566.   class { 'openstack_project::translate_dev':

  567.     admin_users           => 'aeng,cboylan,eumel,eumel8,ianw,ianychoi,infra,jaegerandi,mordred,stevenk',

  568.     openid_url            => 'https://openstackid-dev.openstack.org',

  569.     listeners             => ['ajp'],

  570.     from_address          => 'noreply@openstack.org',

  571.     mysql_host            => hiera('translate_dev_mysql_host', 'localhost'),

  572.     mysql_password        => hiera('translate_dev_mysql_password'),

  573.     zanata_server_user    => hiera('proposal_zanata_user'),

  574.     zanata_server_api_key => hiera('proposal_zanata_api_key'),

  575.     project_config_repo   => 'https://opendev.org/openstack/project-config',

  576.     vhost_name            => 'translate-dev.openstack.org',

  577.   }

  578. }

  579. 

  580. # vim:sw=2:ts=2:expandtab:textwidth=79