2545dfd73a
Inside the VEXXHOST tenant, we have a need to be able to use build Docker images in many different places. Therefore, we need the ability to have secrets inside of a repository which other repos can just use the jobs for, avoiding the need of encrypting the Docker credentials for every single repository. However, due to the current limitation in Zuul, it's not possible to accomplish this without having a config-project, and by being a config-project, that provides an elevated set of access. As an interim solution until Zuul has the ability to do this without using a config-project, this change makes the project a config project however changes the ACLs to include project-config-core. The rationale was that I (mnaser) is already part of that group and therefore this wouldn't be providing me any more access to make changes to config projects. This would be an interim solution until we're able to do this natively with Zuul and the ACLs can return to VEXXHOST. In this change, we also move opendev/project-config to only load jobs, secrets and nodesets and to avoid loading the project so we don't end up reporting to changes to opendev/project-config. Change-Id: I6baefcae3e23767aeeaa2d572b1a17fd2aa5ebe6 |
||
|---|---|---|
| accessbot | ||
| dev/gerrit | ||
| docs-site | ||
| gerrit | ||
| gerritbot | ||
| grafana | ||
| nodepool | ||
| playbooks | ||
| roles | ||
| specs | ||
| tests | ||
| tools | ||
| zuul | ||
| zuul.d | ||
| .ansible-lint | ||
| .gitignore | ||
| .gitreview | ||
| CONTRIBUTING.rst | ||
| LICENSE | ||
| README.rst | ||
| REVIEWING.rst | ||
| bindep.txt | ||
| setup.cfg | ||
| setup.py | ||
| tox.ini | ||
README.rst
OpenStack Infra Config Files
This repo contains a set of config files that are consumed by the openstack-infra/system-config puppet modules in order to deploy and configure the OpenStack Infrastructure. You should edit these files to make configuration changes to the OpenStack Infrastructure.
accessbot
This dir contains the IRC access bot channel config. This config file is used to specify which channels are managed by the infra team and the permissions assigned to nicks in those channels.
gerrit
This dir contains the main project registry in projects.yaml along with all of the gerrit project ACLs in the acls subdir. You will need to edit these files to add new projects to Gerrit.
See the Creator's Guide in the OpenDev Manual for info on adding projects.
gerritbot
This dir contains the gerritbot channel config file. Edit this file to add the gerritbot to your IRC channels for gerrit event messages.
grafana
This dir contains dashboards to display at http://grafana.openstack.org/. Add new files to create additional dashboards or edit the existing ones to enhance the dashboards.
nodepool
This dir contains the nodepool scripts and nodepool disk image builder elements that are used to build the images we boot build nodes off of. Edit these files if you need to modify the base images that Nodepool creates for Zuul to run content on.
specs
This dir contains the index.html file for the https://specs.openstack.org site. Edit this file if you are adding and removing projects from that site.
Static Web Hosting Documentation
zuul
This dir contains the zuul main.yaml file which defines the Zuul tenants and the system-variables.yaml file which contains some global variables. Edit these files to add, remove or rename a project from Zuul.
dev
This dir contains config files for the development deployments of the above services.