ansible-lint now supports settings in a file, including exclude_paths.
This lets us simplfy the ansible-lint command. Also, stop installing
zuul and just use a fake zuul_return to fake out ansible-lint.
Change-Id: I40291d4e861fe9e6e3341b075ab7d6c9f5315275
Use files.openstack.org instead of git.openstack.org for traceroute
test.
Update use-cached-repos tests to use new orgs.
Update fetch-zuul-cloner to use opendev.org as path, fix a typo.
Continue to use the legacy names since fetch-zuul-cloner is a legacy
tool.
Change-Id: Ia57bda9e6a36e3c98a28382c19703bc01fa8e8d9
We're adding a git_mirror_credentials.host_key variable and we're
renaming git_mirror_credentials.key to git_mirror_credentials.ssh_key.
We need the integration tests to support both formats while we undergo
these changes in order to keep the tests green.
Change-Id: Ia6e0f5b3972ecffae517eaec0e3531b8fb376bad
This is a mechanically generated change to replace openstack.org
git:// URLs with https:// equivalents.
This is in aid of a planned future move of the git hosting
infrastructure to a self-hosted instance of gitea (https://gitea.io),
which does not support the git wire protocol at this stage.
This update should result in no functional change.
For more information see the thread at
http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003825.html
Change-Id: Ica1893f47f01e57674f5d3dbac54ef6bcb8c206f
This role now lives in opendev/base-jobs so to reduce confusion we clean
it out of ozj.
Depends-On: https://review.openstack.org/635900
Change-Id: I27971ad1bd3ef93ea04aaede76e51afe9d770b5b
We've added two new base-job roles, let's also add integration tests.
Depends-On: https://review.openstack.org/628734
Change-Id: I8b9b10983b2bc7bba37a19d2eb0d4107241d168c
This role is currently in project-config where it is untested. Move
it to o-z-j, and rename to prepare-zanata-client for consistency with
other names. Add integration test. We will migrate the jobs to the
new name when this merges.
Change-Id: I26ee7057b9ad70507959286acc17d9c7bc1471db
Add validate-host to our zuul role integration job. This will allow us
to test changes to the validate host role and be more confident in
making those changes.
Depends-On: https://review.openstack.org/563790
Change-Id: If2db235d143e3edace75db724928c9e482720b93
Several places assume nodepool.[private|public]_ipv4 are set, which
may not be true in ipv6 environments like limestone. Rework several
of the setup and checks to not assume they are there.
Depends-On: https://review.openstack.org/556784
Change-Id: I8cbe78bc127652229917d9e7f531a95f4b6fb0f7
As our mirrors aren't signed, we need to set this flag in order for
tests to pass when running on Ubuntu Bionic.
Change-Id: I2cbbda65e69f1f055d62e06286add215f9182102
This patch effectively works around an issue we're seeing with
Ansible's var precedence with the "include -- with_first_found"
pattern.
TL;DR of what is happening is that a role, configure-unbound, has a
"vars" directory which is meant to be used by an "include_vars --
with_first_found" task.
However, since we have a "vars" directory at the playbook level, this
directory has precedence over the one in the role. This makes it so
the var files from the playbook directory are included instead of the
one in the role.
We wanted to address that by using {{ role_path }} within roles, but
it turns out that Zuul's protection mechanisms is actually
interfering [1]. Work around this for the time being.
Since this is all not very straightforward, it ought to be documented
properly somewhere -- this is in the README.rst file for the time
being. Let's figure out a better place later.
[1]: http://eavesdrop.openstack.org/irclogs/%23zuul/%23zuul.2018-01-15.log.html#t2018-01-15T22:44:13
Change-Id: Ia79a793200fcb89161783ff641b85106936084b5
Given the volume and ephemeral nature of the nodes we are running jobs
on, we're interested in raising the minimum TTL to ensure we're not
needlessly querying domains all the time.
Some domains such as github.com or fedoraproject.org have low TTLs and
we suspect there is a correlation between their low TTLs and the fact
that we're seeing increased DNS lookup rates for these domains.
Change-Id: I6d9656cb07a694fc2f54f256a63af814c034ffb8
- Improve README
- Improve integration test coverage
- Prefix variable names with "unbound_" to avoid clashes between
different roles
- Unbound will very likely be installed but don't assume it is.
Add an assertion to fail early if it isn't.
Change-Id: Ib8ca105938afdc0ccb1f524df3cae916c845efb8
If we restart iptables or the instance, we want the firewall rules
to persist.
Change-Id: Ic32614790eea04079b02b0e4cc8642f7c46cd415
Depends-On: I9d90f55323a33d6a0f0dda1f7ab25d10984fa6cb
When this job is ran against other repositories such as project-config
or zuul-jobs, the project being prepared won't be o-z-j.
Change-Id: I8487680ad573b1127e5d2e73fafbd0442e003c62
This tests that we are indeed able to use the zuul cloner shim
and that it works as expected with and without required projects.
Change-Id: I537ce7ff417558edb3260acb6424a4a2b54046e4
These two roles are included by default in base jobs, we don't want
to merge a regression that would break every job. Let's test them.
Change-Id: I8d014464b3ed580d4a0fc6dbdc9a42601ff107e5
Limit when to run multinode integration.
Update base-integration for current tests.
Add notes to update the files section when updating.
Change-Id: I4e055511cb10113b93a0a18bab6d72aacf782e11
This role is included by default in base jobs. We don't want to
merge a regression that would break every job. Let's test it.
Change-Id: Icb37cb43c40358719157ef7278b5e4df67574edb
As mentioned in the README, this adds the dynamic configuration for
unbound on hosts. If there is a ipv6 route, it will set forwarding to
ipv6 servers, otherwise use ipv4. This is ported from the
configure_mirror.sh script.
We add a basic test to integration tests
Change-Id: I70b41e45f3d53b191742533c2f3b6c0b6e6c2339
We're running mirror-info before configure-mirrors in the base job.
Let's keep the role execution order the same so we don't run into
errors because of that.
Change-Id: Ia86c497f9e6788461fbdab8af1247f770dc2c302
This adds the required framework to test the 'multinode' job and adds
a first integration tested role: multi-node-known-hosts.
The groups 'switch' and 'peers' are bound to be used when integration
testing the 'multi-node-bridge' role.
Change-Id: Ia84189ce3e1b273ca8509d2a9796970750191977
Depends-On: Ia7480dab0f357b5710d1962a40499381837942b3
The mirror info script is sourced by various jobs so needs to be
around for broad compatability. Since it's full of openstack only
mirrors, this seems like the place for it.
Change-Id: I66164920642a6015a6524fdc3105e4099d26deff
We're in the process of adding jobs to test our base job on different
distributions and ensure there's no regressions.
These are openstack-specific so let's move them from zuul-jobs.
Change-Id: Ic04c48d7a0e15459632b91bce81e777d12622222
Depends-On: Ie29ee24b631f659f3330f5c631e2850f6b8cb463
It is possible we are going to depend on roles in other repos (like
the next patch). Move this to using an environmental variable to make
it easier to depend on external roles.
Change-Id: Ia90ac5674188d38a6a749c92de957430d5a5403c
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Syntax check our playbooks / roles when we run pep8. This way we can
quickly tests if our playbooks are valid.
Change-Id: I2f4e3f617922c8578adb53e2c4a418488fcf230b
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Did didn't have ansible-lint setup properly, as a results our roles
weren't actually linted properly.
Switch run-docs to command task, since we are not using any shell
variables.
Ignore ANSIBLE0012 for now.
Change-Id: Id184f7eb5dd67117e7dde9c8eb38a3a8af9dd892
Signed-off-by: Paul Belanger <pabelanger@redhat.com>