Avoid using the private management address for rabbitmq, which was the
only service using this address, and instead use the public address
with SSL for security.
Change-Id: I6a00fed66dc8f3202ff31b6905011cfd95b528b8
Depends-On: I5a25a5e4aa70db66db2d9331d7f5e4ac8b785002
Update the system-config manifest to support the simplifying changes
made in the puppet-infracloud module.
This patch will require updates to hiera. We need keys
hpuswest_ssl_cert_file_contents and ssl_key_file_contents added, and
hpuswest_ssl_cert_file_contents must be in the 'infracloud' hiera group
since it is shared to the compute nodes.
Change-Id: I39c70b1077e8b467e0a7e123a694d037ffc77f7a
Depends-On: Ibeea608e965e58c496a95b2f02a4bf6b13e15f0e
This commit removes the retry-get parameters from the subunit file
collection in the logstash gearman client. These were cargo-culted
from elsewhere in the yaml file and doesn't add anything useful in
this case. The param is only there to workaround jenkins limitations
with the console log uploading.
Change-Id: Ic751d5e295e605b20386ad9cde6500bae44f34d8
This commit will enable collection of subunit results from all subunit
emitting jobs in the gate and periodic pipelines. Now that we prune
the database to only 6 months of history we should have plenty of
headroom for the extra data generated by non-tempest-dsvm jobs.
(hopefully)
Depends-On: I58a640f804313e1e4b80680f0e39b86d76cb29da
Change-Id: If5691af792409f02352f25b1498dd78294a7cd74
Without this patch, we would run infracloud in its playbook, then again
in the 'everybody else' playbook.
Co-Authored-By: Colleen Murphy <colleen@gazlene.net>
Change-Id: I3de1de8f0f74e52a443c0b7a6ef6ae0a2cf7e801
We started collecting these things... and never stopped.
exmaple:
find /var/lib/puppet/reports/zm08.openstack.org/ -mtime +5 | wc -l
690
Change-Id: I72dc2bb32c76ae8f2ebd22801e8d3e9924c25d4d
Some infracloud machines do not respond to ssh. Comment them out here
so they don't fill up our logs with errors that aren't actionable.
Change-Id: If56e773e3fe8beb0aad42e079eb8cb8492cde652
We cannot use default guest/guest as it has been disabled
on our rabbit. So we need to generate a pass in hiera for that,
and pass it properly to the manifest.
Change-Id: I407119383b232f07888dc9821771f1ece383a431
Depends-On: I9582d68ca93f2f7b5742523e273ebf6b5a9c0c13
Add separate playbook for infacloud nodes to ensure they run in the
correct order - baremetal -> controller -> compute.
Baremetal is intentionally left out, it is not ready yet.
All 'disabled' flags on infracloud hosts are turned off. This patch
landing turns on management of the infracloud.
Co-Authored-By: Yolanda Robla <info@ysoft.biz>
Co-Authored-By: Spencer Krum <nibz@spencerkrum.com>
Change-Id: Ieeda072d45f7454d6412295c2c6a0cf7ce61d952
We only need one infracloud right now. Technically the controller
doesn't need to be in 'infracloud' because its secrets are duplicated.
This aligns the groups at any rate.
Change-Id: Ibc056505a4ef397c2adeae6a3b4afb21db9b4a02
k5start prints:
"Kerberos initialization for service/reprepro@OPENSTACK.ORG"
This then gets redirected into the list of files to remove on the next
run - which is an error, since that's not a filename. Put the
redirection inside of a bash command so that only the data gets
redirected.
Change-Id: Icae10763b4bce78c7b674715826547c228980dd6
We can't colocation debian and ubuntu - so allow for each having their
own pool independent pool structure.
Change-Id: I9fe0fa9769a5c0f6a852844b2db0dfb620e91375
The packages in restricted and multiverse are either non-free or
unsupported. While they're usually useful for desktop, they aren't
something that OpenStack should grow a dependency on.
Also remove non-free and contrib from debian. We don't do anything with
debian yet - but if we did, I'm pretty sure we would not want these.
Note: The existing restricted and multiverse dirs should be purged,
although it's not urgent to do so. 'reprepro --delete clearvanished'
Change-Id: I1d98ab1dea52598d01e3ce3d9a24306280a190fe
Now that the db files are in AFS, we need k5start because we need to be
able to write lockfiles for them.
Change-Id: I5c9554ca505ed56e84b601e40476527ef4af98fb
We need the gpg signing keys for the upstream repos in root's keyring.
Fuel uses golja-gnupg for importing keys - so seems like a good thing
for us to use too.
Change-Id: I343be9397ba53f494485d1ff0f1e1e4c96c0273f
