system-config/playbooks/roles
Ian Wienand 368466730c Migrate codesearch site to container
The hound project has undergone a small re-birth and moved to

 https://github.com/hound-search/hound

which has broken our deployment.  We've talked about leaving
codesearch up to gitea, but it's not quite there yet.  There seems to
be no point working on the puppet now.

This builds a container than runs houndd.  It's an opendev specific
container; the config is pulled from project-config directly.

There's some custom scripts that drive things.  Some points for
reviewers:

 - update-hound-config.sh uses "create-hound-config" (which is in
   jeepyb for historical reasons) to generate the config file.  It
   grabs the latest projects.yaml from project-config and exits with a
   return code to indicate if things changed.

 - when the container starts, it runs update-hound-config.sh to
   populate the initial config.  There is a testing environment flag
   and small config so it doesn't have to clone the entire opendev for
   functional testing.

 - it runs under supervisord so we can restart the daemon when
   projects are updated.  Unlike earlier versions that didn't start
   listening till indexing was done, this version now puts up a "Hound
   is not ready yet" message when while it is working; so we can drop
   all the magic we were doing to probe if hound is listening via
   netstat and making Apache redirect to a status page.

 - resync-hound.sh is run from an external cron job daily, and does
   this update and restart check.  Since it only reloads if changes
   are made, this should be relatively rare anyway.

 - There is a PR to monitor the config file
   (https://github.com/hound-search/hound/pull/357) which would mean
   the restart is unnecessary.  This would be good in the near and we
   could remove the cron job.

 - playbooks/roles/codesearch is unexciting and deploys the container,
   certificates and an apache proxy back to localhost:6080 where hound
   is listening.

I've combined removal of the old puppet bits here as the "-codesearch"
namespace was already being used.

Change-Id: I8c773b5ea6b87e8f7dfd8db2556626f7b2500473
2020-11-20 07:41:12 +11:00
..
accessbot Split eavesdrop into its own playbook 2020-04-23 14:34:28 -05:00
afs-release Add a new docs.airshipit.org vhost on static01 2020-03-20 19:09:13 +00:00
afsmon afsmon: install python3-pip 2020-02-12 16:39:11 +11:00
apache-ua-filter Block restricted user agents for the tarballs site 2020-10-16 17:45:12 +00:00
backup Update bup excludes for zuul-scheduler 2020-05-07 08:44:58 -07:00
backup-server Exclude disabled group from backup-server loop 2020-04-11 14:53:20 -05:00
base Remove rsyslogd xconsole workaround 2020-10-19 16:06:03 +11:00
borg-backup borg-backup: excludes updates 2020-11-12 15:25:34 +11:00
borg-backup-server Add borg-backup roles 2020-07-21 17:36:50 +10:00
codesearch Migrate codesearch site to container 2020-11-20 07:41:12 +11:00
configure-kubectl Configure .kube/config on bridge 2019-02-06 15:43:19 -08:00
configure-openstacksdk Update the limestone cert in our clouds.yaml 2020-08-25 15:25:25 -07:00
disable-puppet-agent Stop running mcollective 2020-05-05 15:00:04 -05:00
edit-secrets-script Add edit-secrets script to bridge.o.o 2019-02-27 08:45:11 -08:00
etherpad etherpad: reduce backup rotations 2020-11-10 09:24:34 +11:00
gerrit Add gerrit static files that were lost in ansiblification 2020-10-09 10:38:45 -07:00
gerritbot Couple of gerritbot role cleanups 2020-08-10 10:42:20 -07:00
gitea Don't recompress db backups 2020-10-19 07:06:47 -07:00
gitea-git-repos Make gitea description update failures nonfatal 2020-09-30 10:15:04 -07:00
grafana grafana: redirect http to CNAME 2020-11-05 13:27:09 +11:00
graphite graphite: add cleanup job 2020-09-29 16:20:11 +10:00
haproxy Remove the tcplog option from haproxy configs 2020-06-30 22:22:28 +00:00
import-gpg-key reprepro: convert to Ansible 2020-10-19 14:06:57 +11:00
install-ansible Merge "Add all backup hosts to borg backups" 2020-11-09 23:39:51 +00:00
install-ansible-roles puppet: don't run module install steps multiple times 2020-09-03 09:23:05 +10:00
install-apt-repo Vendor the apt repo gpg keys used for Zuul 2020-05-20 13:17:09 -07:00
install-borg borg-backup: add fuse 2020-11-05 11:56:46 +11:00
install-certcheck Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
install-docker Add dev packages on arm64 for docker-compose installation 2020-09-08 13:01:34 -07:00
install-kubectl Remove snap cleanup tasks 2020-04-16 12:45:36 -05:00
install-osc-container Use openstackclient from container 2020-04-23 07:46:28 -05:00
install-podman Run a gerrit container on review-dev01 2019-10-29 08:29:17 +09:00
iptables Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
jitsi-meet Merge "Indicate firefox is suboptimal in meetpad" 2020-06-03 17:48:46 +00:00
letsencrypt-acme-sh-install ansible-lint : disable 503 2020-03-06 09:57:00 +11:00
letsencrypt-config-certcheck Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
letsencrypt-create-certs Migrate codesearch site to container 2020-11-20 07:41:12 +11:00
letsencrypt-install-txt-record letsencrypt-install-txt-record: pause after adding TXT records 2020-10-30 16:49:31 +11:00
letsencrypt-request-certs Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
logrotate reprepro: convert to Ansible 2020-10-19 14:06:57 +11:00
master-nameserver Don't log the public loop on master-nameserver 2020-04-08 16:38:15 -05:00
mirror mirror: remove old ceph links 2020-10-28 14:18:24 +11:00
mirror-update Switch CentOS 7 mirror source to kernel.org mirror 2020-11-16 11:34:07 +01:00
nameserver nameserver: Allow master server to notify via ipv6 2020-10-28 09:26:14 +00:00
nodepool-base Revert "Revert "Add Zookeeper TLS support"" 2020-07-15 15:45:48 -07:00
nodepool-base-legacy Add initial Ansible for nodepool hosts 2020-03-06 14:02:52 +11:00
nodepool-builder Increate nodepool builder upload workers from 4 to 8 2020-08-04 12:36:01 -07:00
nodepool-launcher Add stop and start playbooks for nodepool 2020-06-16 15:48:47 -05:00
pip3 Install pip3 for docker-compose installation 2020-04-17 13:28:03 -07:00
puppet-run puppet: don't run module install steps multiple times 2020-09-03 09:23:05 +10:00
puppet-setup-ansible install-ansible: move install_modules.sh to puppet-setup-ansible 2020-09-03 09:28:16 +10:00
rax-dns-backup rax-dns-backup: fix copy file typo 2020-06-17 09:29:11 +10:00
registry Install docker-compose from pypi 2020-04-16 12:08:00 -07:00
reprepro Merge "mirror-update/reprepro : use common functions" 2020-11-10 00:59:37 +00:00
root-keys roles: Add README.rst and lint 2018-08-23 21:34:42 +10:00
static Merge "Update static Apache configs to 2.4 ACL primitives" 2020-10-16 21:06:28 +00:00
sync-project-config Stop logging the rsync of puppet 2020-04-30 16:11:42 -05:00
vos-release Add missing newline in vos_release.sudo 2019-11-21 19:08:30 +00:00
zk-ca Zookeeper: listen on plain and TLS ports 2020-06-17 10:38:59 -07:00
zookeeper Zookeeper: listen on plain and TLS ports 2020-06-17 10:38:59 -07:00
zuul Revert "Revert "Add Zookeeper TLS support"" 2020-07-15 15:45:48 -07:00
zuul-executor Start zuul-executor after afsd and /afs is mounted 2020-07-27 18:47:52 +00:00
zuul-merger Fix a few missing zuul_user usages 2020-05-23 09:05:16 -05:00
zuul-preview Install docker-compose from pypi 2020-04-16 12:08:00 -07:00
zuul-scheduler Fix a few missing zuul_user usages 2020-05-23 09:05:16 -05:00
zuul-status-backup Add --fail flag to zuul status backup curl 2020-04-28 08:33:05 -05:00
zuul-user Split eavesdrop into its own playbook 2020-04-23 14:34:28 -05:00
zuul-web zuul-web: fix zuul.openstack.org location match 2020-09-15 08:34:10 +10:00
set-hostname Split eavesdrop into its own playbook 2020-04-23 14:34:28 -05:00