opendev/system-config
Code Issues Proposed changes
207d4dc828
system-config/doc/source/git.rst
Ian Wienand 882b730fdf Update to openstackdocstheme 
This modernises the openstack-infra documentation by switching to
openstackdocstheme.  Update dependencies as required.

To remove non-relevant stuff from conf.py, I have just taken the demo
file from openstackdocstheme and lightly modified it.

It seems later sphinx has included it's own ":file:" role which now
conflicts.  Change it it ":cgit_file:" in our documentation.  Remove
the custom header template which no longer applies.  Add the
post-2.0-pbr sphinx-based warning-as-error, which fixes the original
problem that I actually noticed that errors could slip through the
gate tests :)

Change-Id: Ic7bec57b971bb4c75fc839e7269d1f69a576b85c
2018-06-25 11:19:43 +10:00

2.7 KiB
Raw Blame History

title

Git

Git

The web frontend cgit is running on git.openstack.org.

At a Glance

Hosts
Puppet
Configuration
Projects
Bugs

Overview

The OpenStack git repositories are hosted on a pool of CentOS servers with the EPEL repository that includes the cgit package. They are served up via https using cgit and via git:// by git-daemon behind HAProxy which handles load balancing across the nodes.

SELinux is enabled on these nodes and requires restorecon to be run against /var/lib/git to set the appropriate SELinux security context. SELinux rules are also in place to allow for Apache to run on a non-standard port so it can sit behind HAProxy. This is all handled by puppet.

In order to mitigate potential problems with HTTP(S) responses, HAProxy is configured using the source balance method so that every request from a single host will be served by one backend node unless nodes are added or removed.

The jeepyb script create-cgitrepos runs against projects.yaml to generate the /etc/cgitrepos file listing all the git repositories. The git repositories are synced to all the nodes from the Gerrit server.

Backend Maintenance

To temporarily remove a git backend from the HAProxy load balancer, you can put it in "maintenance" mode. This can be done interactively on the HAProxy host. Note that long-term changes to the topology should be made via configuration management. These commands must be run as root.

To see the current status of all servers:

echo "show stat" | socat /var/lib/haproxy/stats stdio

To disable a server (eg, git08):

echo "disable server balance_git_daemon/git08.openstack.org" | socat /var/lib/haproxy/stats stdio
echo "disable server balance_git_http/git08.openstack.org" | socat /var/lib/haproxy/stats stdio
echo "disable server balance_git_https/git08.openstack.org" | socat /var/lib/haproxy/stats stdio

To re-enable a server:

echo "enable server balance_git_daemon/git08.openstack.org" | socat /var/lib/haproxy/stats stdio
echo "enable server balance_git_http/git08.openstack.org" | socat /var/lib/haproxy/stats stdio
echo "enable server balance_git_https/git08.openstack.org" | socat /var/lib/haproxy/stats stdio

To run these commands and others interactively, issue the prompt command to haproxy:

socat readline /var/lib/haproxy/stats
prompt