opendev/system-config
Code Issues Proposed changes
52943f7094
system-config/playbooks/service-bridge.yaml

18 lines
484 B
YAML
Raw Normal View History

Split the base playbook into services This is a first step toward making smaller playbooks which can be run by Zuul in CD. Zuul should be able to handle missing projects now, so remove it from the puppet_git playbook and into puppet. Make the base playbook be merely the base roles. Make service playbooks for each service. Remove the run-docker job because it's covered by service jobs. Stop testing that puppet is installed in testinfra. It's accidentally working due to the selection of non-puppeted hosts only being on bionic nodes and not installing puppet on bionic. Instead, we can now rely on actually *running* puppet when it's important, such as in the eavesdrop job. Also remove the installation of puppet on the nodes in the base job, since it's only useful to test that a synthetic test of installing puppet on nodes we don't use works. Don't run remote_puppet_git on gitea for now - it's too slow. A followup patch will rework gitea project creation to not take hours. Change-Id: Ibb78341c2c6be28005cea73542e829d8f7cfab08
2019-05-02 15:07:32 -06:00
- hosts: bridge.openstack.org:!disabled
name: "Bridge: configure the bastion host"
roles:
- edit-secrets-script
Use openstackclient from container We have multiple places, such as bridge, where we use openstackclient as a utility. The current practice tends to be installing it into a venv somewhere. On bridge there are 16 venvs in /root - and in some of them but not all exist a working openstack client. Since it's purely an API interaction tool, all it needs is the clouds.yaml files bind-mounted in. The openstackclient project now publishes a container image. Install a wrapper script for calling it into /usr/local on bridge. Change-Id: I4c64125d5dd3c89275e259a57b0efa0847ac6fc2
2020-03-03 10:51:03 -06:00
- install-docker
- install-osc-container
Split the base playbook into services This is a first step toward making smaller playbooks which can be run by Zuul in CD. Zuul should be able to handle missing projects now, so remove it from the puppet_git playbook and into puppet. Make the base playbook be merely the base roles. Make service playbooks for each service. Remove the run-docker job because it's covered by service jobs. Stop testing that puppet is installed in testinfra. It's accidentally working due to the selection of non-puppeted hosts only being on bionic nodes and not installing puppet on bionic. Instead, we can now rely on actually *running* puppet when it's important, such as in the eavesdrop job. Also remove the installation of puppet on the nodes in the base job, since it's only useful to test that a synthetic test of installing puppet on nodes we don't use works. Don't run remote_puppet_git on gitea for now - it's too slow. A followup patch will rework gitea project creation to not take hours. Change-Id: Ibb78341c2c6be28005cea73542e829d8f7cfab08
2019-05-02 15:07:32 -06:00
- install-kubectl
- configure-kubectl
tasks:
- include_role:
name: configure-openstacksdk
vars:
openstacksdk_config_template: clouds/bridge_all_clouds.yaml.j2
Get rid of all-clouds.yaml We had the clouds split from back when we used the openstack dynamic inventory plugin. We don't use that anymore, so we don't need these to be split. Any other usage we have directly references a cloud. Change-Id: I5d95bf910fb8e2cbca64f92c6ad4acd3aaeed1a3
2020-04-09 15:00:25 -05:00
- name: Get rid of all-clouds.yaml
file:
state: absent
path: '/etc/openstack/all-clouds.yaml'
Copy Permalink