ea17fc43a6
This removes the SSH keys from the wheel mirror slaves, and replaces them with the AFS share. It does not yet add afs credentials. As we have not yet provisioned our wheel slaves, no manual updates of the servers should be required. Hiera keys for the previous approach should be removed. Change-Id: Ifebf5d53d80e934674704078f7dd675f77aef5aa
49 lines
1.1 KiB
Puppet
49 lines
1.1 KiB
Puppet
# == Class: openstack_project::slave
|
|
#
|
|
class openstack_project::slave (
|
|
$thin = false,
|
|
$certname = $::fqdn,
|
|
$ssh_key = '',
|
|
$sysadmins = [],
|
|
$jenkins_gitfullname = 'OpenStack Jenkins',
|
|
$jenkins_gitemail = 'jenkins@openstack.org',
|
|
$project_config_repo = 'https://git.openstack.org/openstack-infra/project-config',
|
|
$afs = false,
|
|
) {
|
|
|
|
include openstack_project
|
|
include openstack_project::tmpcleanup
|
|
|
|
class { 'openstack_project::server':
|
|
iptables_public_tcp_ports => [],
|
|
iptables_public_udp_ports => [],
|
|
certname => $certname,
|
|
sysadmins => $sysadmins,
|
|
afs => $afs
|
|
}
|
|
|
|
class { 'jenkins::slave':
|
|
ssh_key => $ssh_key,
|
|
gitfullname => $jenkins_gitfullname,
|
|
gitemail => $jenkins_gitemail,
|
|
}
|
|
|
|
include jenkins::cgroups
|
|
include ulimit
|
|
ulimit::conf { 'limit_jenkins_procs':
|
|
limit_domain => 'jenkins',
|
|
limit_type => 'hard',
|
|
limit_item => 'nproc',
|
|
limit_value => '256'
|
|
}
|
|
|
|
class { 'openstack_project::slave_common':
|
|
project_config_repo => $project_config_repo,
|
|
}
|
|
|
|
if (! $thin) {
|
|
include openstack_project::thick_slave
|
|
}
|
|
|
|
}
|