opendev/system-config
Code Issues Proposed changes
e2dbda1bec
system-config/playbooks
History
Jeremy Stanley e2dbda1bec Block outbound SMTP connections from test jobs 
Our deployment tests don't need to send E-mail messages. More to the
point, they may perform actions which would like to send E-mail
messages. Make sure, at the network level, they'll be prevented from
doing so. Also allow all connections to egress from the loopback
interface, so that services like mailman can connect to the Exim MTA
on localhost.

Add new rolevars for egress rules to support this, and also fix up
some missing related vars in the iptables role's documentation.

Change-Id: If4acd2d3d543933ed1e00156cc83fe3a270612bd
2021-12-09 18:46:38 +00:00
..
filter_plugins
group_vars certcheck: also check linaro API 2021-07-07 12:39:40 +10:00
k8s
module_utils/facts/system
periodic Remove old 404 checker job 2020-03-11 15:15:00 -07:00
roles Block outbound SMTP connections from test jobs 2021-12-09 18:46:38 +00:00
templates/clouds Introduce iweb cloud configs 2021-08-31 13:42:22 -07:00
zuul Block outbound SMTP connections from test jobs 2021-12-09 18:46:38 +00:00
apply-package-updates.yaml
base.yaml Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
bootstrap-k8s-nodes.yaml
gitea-rename-setup-org.yaml
gitea-rename-tasks.yaml Use the gitea api in the gitea renaming playbook 2021-08-03 08:47:16 -07:00
install_puppet.yaml
install-ansible.yaml bridge: upgrade to Ansible 4.0.0 2021-06-02 06:33:51 +10:00
letsencrypt.yaml Rename service-letsencrypt to just letsencrypt 2020-06-04 07:44:36 -05:00
manage-projects.yaml Add comments to manage-projects about project-config syncing 2021-10-21 11:44:02 -07:00
nodepool_pull.yaml Add pull tasks for nodepool/zuul 2021-02-19 15:42:40 -08:00
nodepool_restart.yaml Add stop and start playbooks for nodepool 2020-06-16 15:48:47 -05:00
nodepool_start.yaml Remove nodepool builder puppetry and nb03.openstack.org 2020-09-09 15:09:43 -07:00
nodepool_stop.yaml Remove nodepool builder puppetry and nb03.openstack.org 2020-09-09 15:09:43 -07:00
remote_puppet_adhoc.yaml
remote_puppet_else.yaml Cleanup eavesdrop puppet references 2021-06-10 09:02:23 +10:00
rename_repos.yaml Merge "Accomodate zuul's new key management system" 2021-09-01 15:56:40 +00:00
run_cloud_launcher.yaml Use zuul checkouts of ansible roles from other repos 2020-04-30 12:39:12 -05:00
run-accessbot.yaml Sync project-config before deploying accessbot 2021-07-09 23:15:52 +00:00
service-afs.yaml Refactor AFS groups 2021-02-11 13:35:16 +11:00
service-borg-backup.yaml service-borg-backup: preload backup server facts 2021-02-23 13:04:20 +11:00
service-bridge.yaml Add tool to export Rackspace DNS domains to bind format 2020-06-12 16:49:23 +10:00
service-codesearch.yaml Migrate codesearch site to container 2020-11-20 07:41:12 +11:00
service-dstatlogger.yaml Use dstat to record performance of system-config-run hosts 2021-02-16 14:31:30 -08:00
service-eavesdrop.yaml ptgbot: setup web interface 2021-10-06 15:39:25 +11:00
service-etherpad.yaml Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
service-gitea-lb.yaml Make haproxy role more generic 2021-12-01 09:55:45 +11:00
service-gitea.yaml Use the apache-ua-filter role on Gitea servers 2020-10-16 17:45:19 +00:00
service-grafana.yaml Cleanup grafana.openstack.org 2020-10-29 07:59:42 +11:00
service-graphite.yaml Cleanup graphite01 2020-09-30 11:55:24 +10:00
service-kerberos.yaml kerberos-kdc: role to manage Kerberos KDC servers 2021-03-17 08:30:52 +11:00
service-keycloak.yaml Add a keycloak server 2021-12-03 14:17:23 -08:00
service-lists.yaml Ansible mailman configs 2021-05-11 08:40:01 -07:00
service-meetpad.yaml Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
service-mirror-update.yaml Add kerberos-client group 2021-03-18 11:59:30 +11:00
service-mirror.yaml Add kerberos-client group 2021-03-18 11:59:30 +11:00
service-nameserver.yaml Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
service-nodepool.yaml Remove nodepool builder puppetry and nb03.openstack.org 2020-09-09 15:09:43 -07:00
service-paste.yaml Remove paste01.openstack.org 2021-07-15 23:25:10 +00:00
service-refstack.yaml refstack: cleanup old puppet 2021-03-17 07:06:53 +11:00
service-registry.yaml Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
service-review.yaml review02: move out of staging group 2021-07-18 19:45:35 -07:00
service-static.yaml Add kerberos-client group 2021-03-18 11:59:30 +11:00
service-zookeeper.yaml Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
service-zuul-preview.yaml Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
service-zuul.yaml Add kerberos-client group 2021-03-18 11:59:30 +11:00
set-hostnames.yaml Split eavesdrop into its own playbook 2020-04-23 14:34:28 -05:00
start-mergers-executors.yaml Update zuul-executor stop/start playbook 2020-07-17 16:18:26 -07:00
stop-mergers-executors.yaml Update zuul-executor stop/start playbook 2020-07-17 16:18:26 -07:00
sync-gitea-projects.yaml Revert "Allow gitea_create_repos always_update to be list" 2021-10-15 13:03:59 -07:00
test-borg-backup.yaml borg-backup: implement saving a stream, use for database backups 2021-02-03 11:43:12 +11:00
test-gitea.yaml Revert "Allow gitea_create_repos always_update to be list" 2021-10-15 13:03:59 -07:00
test-grafana.yaml grafana: take some screenshots during testing 2021-02-17 10:43:26 +11:00
test-kerberos.yaml kerberos-kdc: role to manage Kerberos KDC servers 2021-03-17 08:30:52 +11:00
test-manage-projects.yaml Don't always update gitea project descriptions 2021-03-16 13:06:16 -07:00
test-paste.yaml Remove paste01.openstack.org 2021-07-15 23:25:10 +00:00
test-review.yaml gerrit: test reviewed flag add/delete/add cycle 2021-11-10 06:50:49 +11:00
test-update-zuul-description.yaml Update gitea project descriptions 2020-09-23 14:33:26 -07:00
unattended_upgrades.yml
update_puppet_version.yaml Fix URLs after OpenDev rename 2020-03-18 18:23:17 +01:00
zuul_pull.yaml Add pull tasks for nodepool/zuul 2021-02-19 15:42:40 -08:00
zuul_reconfigure.yaml
zuul_restart.yaml Rework zuul start/stop/restart playbooks for docker 2020-04-27 09:34:50 -05:00
zuul_start.yaml Limit zuul stop/start playbooks to zuul02 2021-10-27 15:00:03 -07:00
zuul_stop.yaml Limit zuul stop/start playbooks to zuul02 2021-10-27 15:00:03 -07:00