8063a02c8f
The latest version of beaker tries to manage sshd_config[1] in order to pass through environment variables. JJB also tries to manage sshd_config by adding Match blocks to securely allow root SSH[2]. When beaker tries to append the PermitUserEnvironment line after the Match blocks, SSH fails to open port 22 and beaker can't SSH in to the node[3]. This patch unpins beaker-rspec and adds set_env: false to the nodepool nodesets so that the set_env method is never called and does not try to mess with the sshd_config. [1] https://github.com/puppetlabs/beaker/blob/master/lib/beaker/host_prebuilt_steps.rb#L528 [2] http://git.openstack.org/cgit/openstack-infra/project-config/tree/jenkins/jobs/puppet-module-jobs.yaml#n42 [3] http://logs.openstack.org/61/185161/1/check/gate-puppet-nova-puppet-beaker-rspec-dsvm-centos7/cd81608/console.html.gz#_2015-05-22_22_05_46_933 [4] https://github.com/puppetlabs/beaker/blob/master/lib/beaker/host_prebuilt_steps.rb#L502 Change-Id: If157cc889e98d6dd9b7ab4096589c93ff30b7d90
puppet-trove
Table of Contents
- Overview - What is the trove module?
- Module Description - What does the module do?
- Setup - The basics of getting started with trove
- Implementation - An under-the-hood peek at what the module is doing
- Limitations - OS compatibility, etc.
- Development - Guide for contributing to the module
- Contributors - Those with commits
- Release Notes - Notes on the most recent updates to the module
Overview
The trove module is a part of Stackforge, an effort by the Openstack infrastructure team to provide continuous integration testing and code review for Openstack and Openstack community projects not part of the core software. The module itself is used to flexibly configure and manage the database service for Openstack.
Module Description
Setup
What the trove module affects:
- trove, the database service for Openstack.
Implementation
trove
trove is a combination of Puppet manifest and ruby code to delivery configuration and extra functionality through types and providers.
Limitations
Security
For security reasons, a separate in-cloud RabbitMQ cluster should be set up for Trove to use. The reason for this is that the guest agent needs to communicate with RabbitMQ, so it is not advisable to give instances access to the same RabbitMQ server that the core OpenStack services are using for communication.
Please note that puppet-trove cannot check if this rule is being followed, so it is the deployer's responsibility to do it.
Beaker-Rspec
This module has beaker-rspec tests
To run:
shell bundle install bundle exec rspec spec/acceptance
Development
Developer documentation for the entire puppet-openstack project.