System configuration for OpenStack Infrastructure
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

898 lines
28 KiB

  1. - job:
  2. name: system-config-run
  3. description: |
  4. Run the "base" playbook for system-config hosts.
  5. This is a parent job designed to be inherited.
  6. abstract: true
  7. pre-run: playbooks/zuul/run-base-pre.yaml
  8. run: playbooks/zuul/run-base.yaml
  9. post-run: playbooks/zuul/run-base-post.yaml
  10. vars:
  11. install_ansible_ara_enable: true
  12. zuul_copy_output: "{{ copy_output | combine(host_copy_output | default({})) }}"
  13. stage_dir: "{{ ansible_user_dir }}/zuul-output"
  14. copy_output:
  15. '/var/log/syslog': logs_txt
  16. '/var/log/messages': logs_txt
  17. '/var/log/docker': logs
  18. '/var/log/containers': logs
  19. '/etc/iptables/rules.v4': logs_txt
  20. '/etc/iptables/rules.v6': logs_txt
  21. host-vars:
  22. bridge.openstack.org:
  23. host_copy_output:
  24. '{{ zuul.project.src_dir }}/junit.xml': logs
  25. '{{ zuul.project.src_dir }}/test-results.html': logs
  26. '{{ zuul.project.src_dir }}/inventory/base/gate-hosts.yaml': logs
  27. # Note: the following two jobs implement the variant-based multiple
  28. # inheritance trick. Both of these variants will always apply,
  29. # therefore both parents will appear in the inheritance hierarchy).
  30. - job:
  31. name: system-config-run-containers
  32. parent: system-config-run
  33. # Note: see above re multiple-inheritance.
  34. - job:
  35. name: system-config-run-containers
  36. parent: opendev-buildset-registry-consumer
  37. description: |
  38. Run the "base" playbook for system-config hosts which use
  39. containers.
  40. This is a parent job designed to be inherited. Use this job if
  41. the service in question is container-based. It expects a
  42. buildset registry and pulls images from the intermediate
  43. registry.
  44. - job:
  45. name: system-config-run-base
  46. parent: system-config-run
  47. description: |
  48. Run the "base" playbook on each of the node types
  49. currently in use.
  50. nodeset:
  51. nodes:
  52. - name: bridge.openstack.org
  53. label: ubuntu-bionic
  54. - name: xenial
  55. label: ubuntu-xenial
  56. - name: bionic
  57. label: ubuntu-bionic
  58. - name: focal
  59. label: ubuntu-focal
  60. files:
  61. - tox.ini
  62. - playbooks/
  63. - roles/
  64. - testinfra/
  65. - job:
  66. name: system-config-run-base-ansible-devel
  67. parent: system-config-run-base
  68. description: |
  69. Run the base playbook with the latest ansible.
  70. required-projects:
  71. - name: github.com/ansible/ansible
  72. override-checkout: devel
  73. - name: github.com/pytest-dev/pytest-testinfra
  74. - name: openstack/openstacksdk
  75. - name: recordsansible/ara
  76. # NOTE(ianw): 2019-06-11 pinned to stable branch until we handle 1.0
  77. # http://lists.openstack.org/pipermail/openstack-infra/2019-June/006400.html
  78. override-checkout: stable/0.x
  79. - name: github.com/ansible-collections/ansible.posix
  80. override-checkout: main
  81. - name: github.com/ansible-collections/ansible.netcommon
  82. override-checkout: main
  83. - name: github.com/ansible-collections/community.crypto
  84. override-checkout: main
  85. - name: github.com/ansible-collections/community.general
  86. override-checkout: main
  87. vars:
  88. bridge_ansible_name: '{{ ansible_user_dir}}/src/github.com/ansible/ansible'
  89. bridge_ansible_version: null
  90. bridge_openstacksdk_name: '{{ ansible_user_dir }}/src/opendev.org/openstack/openstacksdk'
  91. bridge_openstacksdk_version: null
  92. bridge_ara_name: '{{ ansible_user_dir}}/src/opendev.org/recordsansible/ara'
  93. bridge_ara_version: null
  94. # Although we don't have an arm64 based bridge; Zuul can't currently
  95. # allocate a mixed x86/arm64 situation across clouds. Thus it helps
  96. # to keep this clean so we can run the other tests.
  97. - job:
  98. name: system-config-run-base-arm64
  99. parent: system-config-run
  100. description: |
  101. Run the "base" playbook on ARM64.
  102. nodeset:
  103. nodes:
  104. - name: bridge.openstack.org
  105. label: ubuntu-bionic-arm64
  106. - name: bionic
  107. label: ubuntu-bionic-arm64
  108. - name: focal
  109. label: ubuntu-focal-arm64
  110. files:
  111. - playbooks/
  112. - roles/
  113. - testinfra/
  114. - job:
  115. name: system-config-run-eavesdrop
  116. parent: system-config-run-containers
  117. description: |
  118. Run the playbook for an eavesdrop server.
  119. required-projects:
  120. - opendev/ansible-role-puppet
  121. - opendev/system-config
  122. - openstack/project-config
  123. requires:
  124. - accessbot-container-image
  125. - gerritbot-container-image
  126. nodeset:
  127. nodes:
  128. - name: bridge.openstack.org
  129. label: ubuntu-bionic
  130. - name: eavesdrop01.openstack.org
  131. label: ubuntu-xenial
  132. vars:
  133. run_playbooks:
  134. - playbooks/service-eavesdrop.yaml
  135. files:
  136. - playbooks/service-eavesdrop.yaml
  137. - playbooks/run-accessbot.yaml
  138. - inventory/service/group_vars/eavesdrop.yaml
  139. - inventory/service/group_vars/puppet.yaml
  140. - playbooks/roles/zuul-user
  141. - playbooks/roles/install-docker
  142. - playbooks/roles/puppet-install/
  143. - playbooks/roles/disable-puppet-agent/
  144. - playbooks/roles/accessbot
  145. - playbooks/roles/logrotate
  146. - playbooks/zuul/templates/group_vars/eavesdrop.yaml.j2
  147. - modules/openstack_project/manifests/eavesdrop.pp
  148. - manifests/eavesdrop.pp
  149. - docker/accessbot/
  150. - testinfra/test_eavesdrop.py
  151. - job:
  152. name: system-config-run-letsencrypt
  153. parent: system-config-run
  154. description: |
  155. Run the playbook for letsencrypt key acquisition
  156. nodeset:
  157. nodes:
  158. - name: bridge.openstack.org
  159. label: ubuntu-bionic
  160. - name: adns-letsencrypt.opendev.org
  161. label: ubuntu-bionic
  162. - name: letsencrypt01.opendev.org
  163. label: ubuntu-bionic
  164. - name: letsencrypt02.opendev.org
  165. label: ubuntu-bionic
  166. vars:
  167. run_playbooks:
  168. - playbooks/service-nameserver.yaml
  169. - playbooks/letsencrypt.yaml
  170. host-vars:
  171. bridge.openstack.org:
  172. host_copy_output:
  173. '/var/lib/certcheck': logs
  174. letsencrypt01.opendev.org:
  175. host_copy_output:
  176. '/var/log/acme.sh': logs
  177. letsencrypt02.opendev.org:
  178. host_copy_output:
  179. '/var/log/acme.sh': logs
  180. files:
  181. - playbooks/install-ansible.yaml
  182. - inventory/service/group_vars/letsencrypt.yaml
  183. - playbooks/roles/letsencrypt
  184. - job:
  185. name: system-config-run-lists
  186. parent: system-config-run
  187. description: |
  188. Run the playbook for a list server.
  189. nodeset:
  190. nodes:
  191. - name: bridge.openstack.org
  192. label: ubuntu-bionic
  193. - name: lists.openstack.org
  194. label: ubuntu-xenial
  195. required-projects:
  196. - opendev/ansible-role-puppet
  197. - opendev/system-config
  198. files:
  199. - playbooks/install-ansible.yaml
  200. - modules/openstack_project/manifests/lists.pp
  201. - inventory/service/host_vars/lists.openstack.org.yaml
  202. - inventory/service/group_vars/puppet
  203. - playbooks/roles/run-puppet/
  204. - playbooks/roles/install-ansible-roles/
  205. - playbooks/roles/base/exim
  206. vars:
  207. run_playbooks:
  208. - playbooks/remote_puppet_else.yaml
  209. - job:
  210. name: system-config-run-nodepool
  211. parent: system-config-run
  212. description: |
  213. Run the playbook for nodepool.
  214. timeout: 3600
  215. nodeset:
  216. nodes:
  217. - name: bridge.openstack.org
  218. label: ubuntu-bionic
  219. - name: zk01.opendev.org
  220. label: ubuntu-bionic
  221. - name: nl01.openstack.org
  222. label: ubuntu-xenial
  223. - name: nb01.opendev.org
  224. label: ubuntu-bionic
  225. required-projects:
  226. - opendev/ansible-role-puppet
  227. - opendev/system-config
  228. - openstack/project-config
  229. host-vars:
  230. nl01.openstack.org:
  231. host_copy_output:
  232. '/etc/nodepool/nodepool.yaml': logs
  233. '/var/log/nodepool/launcher-debug.log': logs
  234. nb01.opendev.org:
  235. host_copy_output:
  236. '/etc/nodepool/nodepool.yaml': logs
  237. '/var/log/nodepool/builder-debug.log': logs
  238. vars:
  239. run_playbooks:
  240. - playbooks/letsencrypt.yaml
  241. - playbooks/service-zookeeper.yaml
  242. - playbooks/service-nodepool.yaml
  243. - playbooks/remote_puppet_else.yaml
  244. # Test our ad hoc restart playbook works
  245. - playbooks/nodepool_restart.yaml
  246. files:
  247. - playbooks/install-ansible.yaml
  248. - inventory/service/group_vars/nodepool.yaml
  249. - inventory/service/group_vars/nodepool-builder.yaml
  250. - inventory/service/group_vars/nodepool-launcher.yaml
  251. - inventory/service/group_vars/puppet
  252. - playbooks/roles/run-puppet/
  253. - playbooks/roles/install-ansible-roles/
  254. - playbooks/roles/configure-openstacksdk/
  255. - playbooks/roles/nodepool
  256. - playbooks/templates/clouds/
  257. - playbooks/nodepool_restart.yaml
  258. - testinfra/test_nodepool.py
  259. - job:
  260. name: system-config-run-dns
  261. parent: system-config-run
  262. description: |
  263. Run the playbook for dns.
  264. required-projects:
  265. - opendev/zone-opendev.org
  266. - opendev/zone-zuul-ci.org
  267. nodeset:
  268. nodes:
  269. - name: bridge.openstack.org
  270. label: ubuntu-bionic
  271. - name: adns1.opendev.org
  272. label: ubuntu-bionic
  273. - name: ns1.opendev.org
  274. label: ubuntu-bionic
  275. vars:
  276. run_playbooks:
  277. - playbooks/service-nameserver.yaml
  278. host-vars:
  279. adns1.opendev.org:
  280. host_copy_output:
  281. '/etc/bind/named.conf': logs
  282. '/var/lib/bind/zones': logs
  283. files:
  284. - playbooks/install-ansible.yaml
  285. - inventory/service/group_vars/adns.yaml
  286. - inventory/service/group_vars/dns.yaml
  287. - inventory/service/host_vars/(ad)?ns\d+.opendev.org.yaml
  288. - playbooks/zuul/templates/group_vars/adns.yaml.j2
  289. - playbooks/zuul/templates/group_vars/ns.yaml.j2
  290. - playbooks/roles/master-nameserver/
  291. - playbooks/roles/nameserver/
  292. - testinfra/test_adns.py
  293. - testinfra/test_ns.py
  294. - job:
  295. name: system-config-run-backup
  296. parent: system-config-run
  297. description: |
  298. Run the playbook for backup configuration
  299. nodeset:
  300. nodes:
  301. - name: bridge.openstack.org
  302. label: ubuntu-bionic
  303. - name: backup01.region.provider.opendev.org
  304. label: ubuntu-bionic
  305. - name: backup-test01.opendev.org
  306. label: ubuntu-bionic
  307. - name: backup-test02.opendev.org
  308. label: ubuntu-xenial
  309. vars:
  310. run_playbooks:
  311. - playbooks/service-backup.yaml
  312. files:
  313. - playbooks/install-ansible.yaml
  314. - playbooks/roles/backup
  315. - playbooks/zuul/templates/host_vars/backup
  316. - testinfra/test_backups.py
  317. - job:
  318. name: system-config-run-borg-backup
  319. parent: system-config-run
  320. description: |
  321. Run the playbook for borg backup configuration
  322. nodeset:
  323. nodes:
  324. - name: bridge.openstack.org
  325. label: ubuntu-bionic
  326. - name: borg-backup01.region.provider.opendev.org
  327. label: ubuntu-focal
  328. - name: borg-backup-test01.opendev.org
  329. label: ubuntu-focal
  330. - name: borg-backup-test02.opendev.org
  331. label: ubuntu-bionic
  332. vars:
  333. run_playbooks:
  334. - playbooks/service-borg-backup.yaml
  335. files:
  336. - playbooks/install-ansible.yaml
  337. - playbooks/roles/install-borg
  338. - playbooks/roles/borg-backup
  339. - playbooks/zuul/templates/host_vars/borg-backup
  340. - testinfra/test_borg_backups.py
  341. host-vars:
  342. borg-backup-test01.opendev.org:
  343. host_copy_output:
  344. '/var/log/borg-backup-borg-backup01.region.provider.opendev.org.log': logs
  345. borg-backup-test02.opendev.org:
  346. host_copy_output:
  347. '/var/log/borg-backup-borg-backup01.region.provider.opendev.org.log': logs
  348. - job:
  349. name: system-config-run-mirror-base
  350. parent: system-config-run
  351. abstract: true
  352. description: |
  353. Run the playbook for a mirror node
  354. vars:
  355. run_playbooks:
  356. - playbooks/letsencrypt.yaml
  357. - playbooks/service-mirror.yaml
  358. host-vars:
  359. mirror01.openafs.provider.opendev.org:
  360. host_copy_output:
  361. '/var/log/apache2/': logs
  362. '/var/log/acme.sh': logs
  363. '/etc/apache2/sites-available/mirror.conf': logs
  364. mirror02.openafs.provider.opendev.org:
  365. host_copy_output:
  366. '/var/log/apache2/': logs
  367. '/var/log/acme.sh': logs
  368. '/etc/apache2/sites-available/mirror.conf': logs
  369. files:
  370. - playbooks/install-ansible.yaml
  371. - roles/
  372. - playbooks/roles/base/
  373. - inventory/service/group_vars/mirror.yaml
  374. - playbooks/roles/mirror/
  375. - playbooks/roles/letsencrypt
  376. - playbooks/letsencrypt.yaml
  377. - playbooks/service-mirror.yaml
  378. - playbooks/zuul/templates/group_vars/mirror.yaml.j2
  379. - testinfra/test_mirror.py
  380. - job:
  381. name: system-config-run-mirror-x86
  382. parent: system-config-run-mirror-base
  383. timeout: 3600
  384. nodeset:
  385. nodes:
  386. - name: bridge.openstack.org
  387. label: ubuntu-bionic
  388. - name: mirror01.openafs.provider.opendev.org
  389. label: ubuntu-bionic
  390. - name: mirror02.openafs.provider.opendev.org
  391. label: ubuntu-focal
  392. - job:
  393. name: system-config-run-mirror-arm64
  394. parent: system-config-run-mirror-base
  395. timeout: 3600
  396. nodeset:
  397. nodes:
  398. - name: bridge.openstack.org
  399. label: ubuntu-bionic-arm64
  400. - name: mirror01.openafs.provider.opendev.org
  401. label: ubuntu-focal-arm64
  402. - job:
  403. name: system-config-run-mirror-update
  404. parent: system-config-run
  405. description: |
  406. Run the playbook for a mirror update node
  407. nodeset:
  408. nodes:
  409. - name: bridge.openstack.org
  410. label: ubuntu-bionic
  411. - name: mirror-update01.opendev.org
  412. label: ubuntu-focal
  413. vars:
  414. run_playbooks:
  415. - playbooks/service-mirror-update.yaml
  416. files:
  417. - playbooks/install-ansible.yaml
  418. - roles/
  419. - playbooks/roles/mirror-update/
  420. - playbooks/roles/reprepro/
  421. - playbooks/service-mirror-update.yaml
  422. - testinfra/test_mirror-update.py
  423. - job:
  424. name: system-config-run-docker-registry
  425. parent: system-config-run
  426. description: |
  427. Run the playbook for the docker registry.
  428. nodeset:
  429. nodes:
  430. - name: bridge.openstack.org
  431. label: ubuntu-bionic
  432. - name: insecure-ci-registry01.opendev.org
  433. label: ubuntu-bionic
  434. vars:
  435. run_playbooks:
  436. - playbooks/letsencrypt.yaml
  437. - playbooks/service-registry.yaml
  438. host-vars:
  439. insecure-ci-registry01.opendev.org:
  440. host_copy_output:
  441. '/var/registry/auth': logs
  442. '/var/registry/certs': logs
  443. files:
  444. - playbooks/install-ansible.yaml
  445. - inventory/service/group_vars/registry.yaml
  446. - inventory/service/host_vars/insecure-ci-registry\d+.opendev.org.yaml
  447. - playbooks/zuul/templates/group_vars/registry.yaml.j2
  448. - playbooks/roles/letsencrypt-create-certs/handlers/restart_zuul_registry.yaml
  449. - playbooks/roles/registry/
  450. - playbooks/roles/pip3/
  451. - playbooks/roles/install-docker/
  452. - testinfra/test_registry.py
  453. - job:
  454. name: system-config-run-codesearch
  455. parent: system-config-run-containers
  456. description: |
  457. Run the playbook for the codesearch server.
  458. timeout: 3600
  459. requires: codesearch-container-image
  460. required-projects:
  461. - opendev/system-config
  462. nodeset:
  463. nodes:
  464. - name: bridge.openstack.org
  465. label: ubuntu-bionic
  466. - name: codesearch01.opendev.org
  467. label: ubuntu-focal
  468. vars:
  469. run_playbooks:
  470. - playbooks/letsencrypt.yaml
  471. - playbooks/service-codesearch.yaml
  472. files:
  473. - playbooks/bridge.yaml
  474. - playbooks/letsencrypt.yaml
  475. - playbooks/service-codesearch.yaml
  476. - playbooks/roles/codesearch/
  477. - playbooks/roles/install-docker/
  478. - playbooks/roles/pip3/
  479. - docker/codesearch/
  480. - testinfra/test_codesearch.py
  481. - job:
  482. name: system-config-run-etherpad
  483. parent: system-config-run-containers
  484. description: |
  485. Run the playbook for the etherpad servers.
  486. timeout: 3600
  487. requires: etherpad-container-image
  488. nodeset:
  489. nodes:
  490. - name: bridge.openstack.org
  491. label: ubuntu-bionic
  492. - name: etherpad01.opendev.org
  493. label: ubuntu-bionic
  494. vars:
  495. run_playbooks:
  496. - playbooks/letsencrypt.yaml
  497. - playbooks/service-etherpad.yaml
  498. files:
  499. - playbooks/bridge.yaml
  500. - playbooks/letsencrypt.yaml
  501. - playbooks/service-etherpad.yaml
  502. - playbooks/roles/etherpad/
  503. - playbooks/roles/install-docker/
  504. - playbooks/roles/pip3/
  505. - docker/etherpad/
  506. - testinfra/test_etherpad.py
  507. - job:
  508. name: system-config-run-gitea
  509. parent: system-config-run-containers
  510. description: |
  511. Run the playbook for the gitea servers.
  512. timeout: 3600
  513. nodeset:
  514. nodes:
  515. - name: bridge.openstack.org
  516. label: ubuntu-bionic
  517. - name: gitea-lb01.opendev.org
  518. label: ubuntu-bionic
  519. - name: gitea99.opendev.org
  520. label: ubuntu-bionic
  521. required-projects:
  522. - openstack/project-config
  523. - opendev/system-config
  524. vars:
  525. run_playbooks:
  526. - playbooks/letsencrypt.yaml
  527. - playbooks/service-gitea-lb.yaml
  528. - playbooks/service-gitea.yaml
  529. - playbooks/manage-projects.yaml
  530. - playbooks/test-update-zuul-description.yaml
  531. # Run twice to ensure that we noop properly when
  532. # all projects are created in gitea. We also update
  533. # zuul's description to ensure that descriptions are
  534. # updated
  535. - playbooks/manage-projects.yaml
  536. run_test_playbook: playbooks/test-gitea.yaml
  537. host-vars:
  538. gitea99.opendev.org:
  539. host_copy_output:
  540. '/var/gitea/conf': logs
  541. '/var/gitea/certs': logs
  542. '/var/gitea/logs': logs
  543. gitea-lb01.opendev.org:
  544. host_copy_output:
  545. '/var/haproxy/etc': logs
  546. files:
  547. - playbooks/install-ansible.yaml
  548. - playbooks/letsencrypt.yaml
  549. - playbooks/service-gitea-lb.yaml
  550. - playbooks/service-gitea.yaml
  551. - playbooks/manage-projects.yaml
  552. - playbooks/test-gitea.yaml
  553. - inventory/service/group_vars/gitea.yaml
  554. - inventory/service/group_vars/gitea-lb.yaml
  555. - inventory/service/host_vars/gitea
  556. - playbooks/zuul/templates/group_vars/gitea.yaml.j2
  557. - playbooks/zuul/templates/group_vars/gitea-lb.yaml.j2
  558. - playbooks/roles/pip3/
  559. - playbooks/roles/install-docker/
  560. - playbooks/roles/letsencrypt
  561. - playbooks/roles/gerrit/
  562. - playbooks/roles/gitea/
  563. - playbooks/roles/gitea-git-repos/
  564. - playbooks/roles/haproxy/
  565. - playbooks/roles/letsencrypt-create-certs/handlers/restart_gitea.yaml
  566. - testinfra/test_gitea.py
  567. - testinfra/test_gitea_lb.py
  568. # From gitea_files -- If we rebuild the image, we want to run
  569. # this job as well.
  570. - docker/gitea/
  571. # From haproxy-statsd_files -- If we rebuild the image, we want
  572. # to run this job as well.
  573. - docker/haproxy-statsd/
  574. - job:
  575. name: system-config-run-grafana
  576. parent: system-config-run-containers
  577. description: |
  578. Run the playbook for the etherpad servers.
  579. timeout: 3600
  580. requires: grafana-container-image
  581. required-projects:
  582. - opendev/system-config
  583. - openstack/project-config
  584. nodeset:
  585. nodes:
  586. - name: bridge.openstack.org
  587. label: ubuntu-bionic
  588. - name: grafana01.opendev.org
  589. label: ubuntu-focal
  590. vars:
  591. run_playbooks:
  592. - playbooks/letsencrypt.yaml
  593. - playbooks/service-grafana.yaml
  594. files:
  595. - playbooks/bridge.yaml
  596. - playbooks/letsencrypt.yaml
  597. - playbooks/service-grafana.yaml
  598. - playbooks/roles/grafana/
  599. - playbooks/roles/install-docker/
  600. - playbooks/roles/pip3/
  601. - docker/grafana/
  602. - testinfra/test_grafana.py
  603. - job:
  604. name: system-config-run-graphite
  605. parent: system-config-run
  606. description: |
  607. Run the playbook for the graphite servers.
  608. timeout: 3600
  609. required-projects:
  610. - opendev/system-config
  611. nodeset:
  612. nodes:
  613. - name: bridge.openstack.org
  614. label: ubuntu-bionic
  615. # NOTE(ianw): 01 is a half-puppet opendev.org
  616. # server
  617. - name: graphite02.opendev.org
  618. label: ubuntu-focal
  619. vars:
  620. run_playbooks:
  621. - playbooks/letsencrypt.yaml
  622. - playbooks/service-graphite.yaml
  623. host-vars:
  624. graphite02.opendev.org:
  625. host_copy_output:
  626. '/var/log/graphite': logs
  627. files:
  628. - playbooks/bridge.yaml
  629. - playbooks/letsencrypt.yaml
  630. - playbooks/service-graphite.yaml
  631. - playbooks/roles/graphite
  632. - playbooks/roles/install-docker/
  633. - playbooks/roles/pip3/
  634. - testinfra/test_graphite.py
  635. - job:
  636. name: system-config-run-meetpad
  637. parent: system-config-run-containers
  638. requires: jitsi-meet-container-image
  639. description: |
  640. Run the playbook for jitsi-meet.
  641. nodeset:
  642. nodes:
  643. - name: bridge.openstack.org
  644. label: ubuntu-bionic
  645. - name: meetpad01.opendev.org
  646. label: ubuntu-bionic
  647. - name: jvb01.opendev.org
  648. label: ubuntu-bionic
  649. vars:
  650. run_playbooks:
  651. - playbooks/letsencrypt.yaml
  652. - playbooks/service-meetpad.yaml
  653. host-vars:
  654. meetpad01.opendev.org:
  655. host_copy_output:
  656. '/var/jitsi-meet': logs
  657. jvb01.opendev.org:
  658. host_copy_output:
  659. '/var/jitsi-meet': logs
  660. files:
  661. - playbooks/install-ansible.yaml
  662. - inventory/service/group_vars/meetpad.yaml
  663. - inventory/service/host_vars/meetpad\d+.opendev.org.yaml
  664. - playbooks/roles/letsencrypt-create-certs/handlers/restart_jitsi_meet.yaml
  665. - playbooks/roles/jitsi-meet/
  666. - playbooks/roles/pip3/
  667. - playbooks/roles/install-docker/
  668. - playbooks/zuul/templates/group_vars/meetpad.yaml.j2
  669. - testinfra/test_meetpad.py
  670. - docker/jitsi-meet/
  671. - job:
  672. name: system-config-run-zookeeper
  673. parent: system-config-run
  674. description: |
  675. Run the playbook for the zookeeper cluster.
  676. nodeset:
  677. nodes:
  678. - name: bridge.openstack.org
  679. label: ubuntu-bionic
  680. - name: zk01.opendev.org
  681. label: ubuntu-bionic
  682. vars:
  683. run_playbooks:
  684. - playbooks/service-zookeeper.yaml
  685. files:
  686. - playbooks/install-ansible.yaml
  687. - inventory/service/group_vars/zookeeper.yaml
  688. - ^inventory/service/host_vars/zk\d+\..*
  689. - playbooks/roles/zookeeper/
  690. - playbooks/roles/pip3/
  691. - playbooks/roles/install-docker/
  692. - testinfra/test_zookeeper.py
  693. - job:
  694. name: system-config-run-zuul-preview
  695. parent: system-config-run
  696. description: |
  697. Run the playbook for the zuul-preview service.
  698. nodeset:
  699. nodes:
  700. - name: bridge.openstack.org
  701. label: ubuntu-bionic
  702. - name: zp01.opendev.org
  703. label: ubuntu-bionic
  704. vars:
  705. run_playbooks:
  706. - playbooks/service-zuul-preview.yaml
  707. files:
  708. - playbooks/install-ansible.yaml
  709. - playbooks/roles/zuul-preview/
  710. - playbooks/roles/pip3/
  711. - playbooks/roles/install-docker/
  712. - testinfra/test_zuul_preview.py
  713. - job:
  714. name: system-config-run-zuul
  715. parent: system-config-run
  716. description: |
  717. Run the playbook for the main Zuul cluster.
  718. timeout: 3600
  719. nodeset:
  720. nodes:
  721. - name: bridge.openstack.org
  722. label: ubuntu-bionic
  723. - name: zk01.opendev.org
  724. label: ubuntu-bionic
  725. - name: zm01.openstack.org
  726. label: ubuntu-xenial
  727. - name: ze01.opendev.org
  728. label: ubuntu-focal
  729. - name: ze01.openstack.org
  730. label: ubuntu-xenial
  731. - name: zuul01.openstack.org
  732. label: ubuntu-xenial
  733. required-projects:
  734. - openstack/project-config
  735. - opendev/system-config
  736. vars:
  737. run_playbooks:
  738. - playbooks/letsencrypt.yaml
  739. - playbooks/service-zookeeper.yaml
  740. - playbooks/service-zuul.yaml
  741. # Test our ad hoc restart playbook works
  742. - playbooks/zuul_restart.yaml
  743. host-vars:
  744. zm01.openstack.org:
  745. host_copy_output:
  746. '/etc/hosts': logs
  747. '/etc/zuul/zuul.conf': logs
  748. '/var/log/zuul/merger-debug.log': logs
  749. ze01.opendev.org:
  750. host_copy_output:
  751. '/etc/hosts': logs
  752. '/etc/zuul/zuul.conf': logs
  753. '/var/log/zuul/executor-debug.log': logs
  754. ze01.openstack.org:
  755. host_copy_output:
  756. '/etc/hosts': logs
  757. '/etc/zuul/zuul.conf': logs
  758. '/var/log/zuul/executor-debug.log': logs
  759. zuul01.openstack.org:
  760. host_copy_output:
  761. '/etc/hosts': logs
  762. '/etc/zuul/zuul.conf': logs
  763. '/var/log/zuul/debug.log': logs
  764. bridge.openstack.org:
  765. host_copy_output:
  766. '/etc/hosts': logs
  767. files:
  768. - playbooks/install-ansible.yaml
  769. - playbooks/service-zookeeper.yaml
  770. - playbooks/service-zuul.yaml
  771. - inventory/service/group_vars/zuul
  772. - inventory/service/group_vars/zookeeper.yaml
  773. - inventory/service/host_vars/zk\d+
  774. - inventory/service/host_vars/zuul01.openstack.org
  775. - playbooks/roles/zookeeper/
  776. - playbooks/roles/install-apt-repo
  777. - playbooks/roles/zuul
  778. - playbooks/zuul/templates/group_vars/zuul
  779. - playbooks/zuul/templates/group_vars/zookeeper.yaml
  780. - playbooks/zuul/templates/host_vars/zk\d+
  781. - playbooks/zuul/templates/host_vars/zuul01.openstack.org
  782. - playbooks/zuul_restart.yaml
  783. - testinfra/test_zuul_executor.py
  784. - testinfra/test_zuul_scheduler.py
  785. - testinfra/test_zuul_merger.py
  786. - testinfra/util.py
  787. - job:
  788. name: system-config-run-review
  789. parent: system-config-run-containers
  790. description: |
  791. Run the playbook for gerrit (in a container).
  792. requires: gerrit-3.2-container-image
  793. nodeset:
  794. nodes:
  795. - name: bridge.openstack.org
  796. label: ubuntu-bionic
  797. - name: review01.openstack.org
  798. label: ubuntu-xenial
  799. - name: review-dev01.opendev.org
  800. label: ubuntu-xenial
  801. required-projects:
  802. - openstack/project-config
  803. - opendev/system-config
  804. vars:
  805. run_playbooks:
  806. - playbooks/letsencrypt.yaml
  807. - playbooks/service-review-dev.yaml
  808. - playbooks/service-review.yaml
  809. host-vars:
  810. review-dev01.opendev.org:
  811. host_copy_output:
  812. '/home/gerrit2/review_site/etc': logs
  813. '/home/gerrit2/review_site/logs': logs
  814. '/var/log/apache2/': logs
  815. '/var/log/acme.sh': logs
  816. review01.openstack.org:
  817. host_copy_output:
  818. '/home/gerrit2/review_site/etc': logs
  819. '/home/gerrit2/review_site/logs': logs
  820. '/var/log/apache2/': logs
  821. '/var/log/acme.sh': logs
  822. files:
  823. - playbooks/install-ansible.yaml
  824. - playbooks/letsencrypt.yaml
  825. - playbooks/service-review.*.yaml
  826. - inventory/service/group_vars/review.yaml
  827. - inventory/service/host_vars/review\d+.openstack.org.yaml
  828. - inventory/service/group_vars/review-dev.yaml
  829. - inventory/service/host_vars/review-dev\d+.opendev.org.yaml
  830. - playbooks/roles/pip3/
  831. - playbooks/roles/install-docker/
  832. - playbooks/roles/letsencrypt
  833. - playbooks/roles/gerrit/
  834. - playbooks/zuul/templates/group_vars/review-dev.yaml.j2
  835. - playbooks/zuul/templates/group_vars/review.yaml.j2
  836. - testinfra/test_gerrit.py
  837. - docker/gerrit/
  838. - job:
  839. name: system-config-run-static
  840. parent: system-config-run
  841. description: |
  842. Run the playbook for a static node.
  843. timeout: 3600
  844. nodeset:
  845. nodes:
  846. - name: bridge.openstack.org
  847. label: ubuntu-bionic
  848. - name: static01.opendev.org
  849. label: ubuntu-bionic
  850. vars:
  851. run_playbooks:
  852. - playbooks/letsencrypt.yaml
  853. - playbooks/service-static.yaml
  854. files:
  855. - playbooks/install-ansible.yaml
  856. - playbooks/roles/static/
  857. - playbooks/roles/letsencrypt
  858. - playbooks/letsencrypt.yaml
  859. - playbooks/service-static.yaml
  860. - testinfra/test_static.py
  861. host-vars:
  862. static01.opendev.org:
  863. host_copy_output:
  864. '/var/log/acme.sh/': logs
  865. '/etc/apache2/': logs
  866. '/var/log/apache2/': logs