From c1ed9e068448b249151763d5f65b04f305dc5b44 Mon Sep 17 00:00:00 2001 From: Paul Belanger Date: Wed, 14 Mar 2018 15:01:14 -0400 Subject: [PATCH] Create review-dev for hieradata Rather then creating per fqdn hiera entries for secrets, move to use a group. This avoids the need to duplicate data. Change-Id: I748314f52aeb6d288a1b133b3c20402c236dfb45 Signed-off-by: Paul Belanger --- manifests/site.pp | 2 ++ modules/openstack_project/files/puppetmaster/groups.txt | 1 + 2 files changed, 3 insertions(+) diff --git a/manifests/site.pp b/manifests/site.pp index f0754fdde6..49ed6e5d4d 100644 --- a/manifests/site.pp +++ b/manifests/site.pp @@ -67,6 +67,8 @@ node 'review.openstack.org' { # Node-OS: xenial node /^review-dev\d*\.openstack\.org$/ { + $group = "review-dev" + $iptables_rules = ['-p tcp --syn --dport 29418 -m connlimit --connlimit-above 100 -j REJECT'] class { 'openstack_project::server': diff --git a/modules/openstack_project/files/puppetmaster/groups.txt b/modules/openstack_project/files/puppetmaster/groups.txt index f0c9f53246..490ef32df9 100644 --- a/modules/openstack_project/files/puppetmaster/groups.txt +++ b/modules/openstack_project/files/puppetmaster/groups.txt @@ -12,6 +12,7 @@ git-loadbalancer ~git(-fe\d+)?\.openstack\.org git-server ~git\d+\.openstack\.org logstash-worker ~logstash-worker\d+\.openstack\.org nodepool nodepool*.openstack.org:nb*.openstack.org:nl*.openstack.org +review-dev ~review-dev\d*\.openstack\.org subunit-worker ~subunit-worker\d+\.openstack\.org translate ~translate\d+\.openstack\.org translate-dev ~translate-dev\d*\.openstack\.org