system-config/playbooks/service-review.yaml
Ian Wienand 8607ff7d81 review02: move out of staging group
This moves review02 out of the review-staging group and into the main
review group.  At this point, review01.openstack.org is inactive so we
can remove all references to openstack.org from the groups.  We update
the system-config job to run against a focal production server, and
remove the unneeded rsync setup used to move data.

This additionally enables replication; this should be a no-op when
applied as part of the transition process is to manually apply this,
so that DNS setup can pull zone changes from opendev.org.

It also switches to the mysql connector, as noted inline we found some
issues with mariadb.

Note backups follow in a separate step to avoid doing too much at
once, hence dropping the backup group from the testing list.

Change-Id: I7ee3e3051ea8f3237fd5f6bf1dcc3e5996c16d10
2021-07-18 19:45:35 -07:00

44 lines
1.4 KiB
YAML

- hosts: "review:!disabled"
name: "Configure gerrit"
roles:
- iptables
- install-docker
- gerrit
# NOTE(ianw) 2021-04-09 This is a workaround for RA leaks seen in
# vexxhost which is currently unresolved. This pins the ipv6 config
# and ensures we don't listen to RA's. See:
# http://lists.opendev.org/pipermail/service-discuss/2021-April/000200.html
# https://launchpad.net/bugs/1844712
# We do not want this to be created when we are testing gerrit.
- hosts: "review02.opendev.org"
tasks:
- name: Install RA rejection
when: gerrit_under_test is not defined or not gerrit_under_test
copy:
dest: '/etc/netplan/50-cloud-init.yaml'
owner: 'root'
group: 'root'
mode: '0644'
content: |
network:
version: 2
ethernets:
ens3:
dhcp4: true
dhcp6: false
accept-ra: false
addresses:
- '2604:e100:1:0:f816:3eff:fe52:22de/64'
routes:
- to: '::/0'
via: 'fe80::ce2d:e0ff:fe0f:74af'
metric: 100
- to: '::/0'
via: 'fe80::ce2d:e0ff:fe5a:d84e'
metric: 100
match:
macaddress: fa:16:3e:52:22:de
mtu: 1500
set-name: ens3