The debian packaging team will need access to the source packages when
doing builds. This is the last step needed to have our debian images
use our AFS mirrors.
Change-Id: I7ad8c083e690e222ab1a77a07a89e29f59fb3c9b
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Thanks to OSIC, we now have access to osic-cloud8. Here we are adding
the required credentials so we can start launching infrastructure on
it.
Change-Id: If278a06c66830e2fd5cb580109eff3884de7a7b8
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Since it is possible to run more then 1 cloud from OSIC, lets expand
our info to reference osic-cloud1.
Change-Id: I3466779f59a0075516a6f2a584f5f3a111e03826
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We need to log gear at a debug level temporarily in order to debug a
gear communication issue between zuul and nodepool. tcpdump shows the
data is moving between the hosts we just aren't making use of it
properly.
Change-Id: I40e957452721a0e3e82cca4e39f9c56825736d38
This will future proof us when we bring chocolate online.
Change-Id: Idff46d33ef7be81be07149b000937e912c67a7e2
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We'll need to do this rename over a series of patches. Start with
puppetmaster.o.o first.
Change-Id: Ia76a257d48a16bf4513643adce6241f4ec209b9e
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Now that our AFS mirror is online in mtl01, we can start the process
to enable mtl01 in nodepool.
Change-Id: Iee808936a65e0f0c794f8c46c086f83e52d0251e
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We are working to bring tripleo-test-cloud-rh2 back online, which will
have different user credentials. So, make sure triple-test-cloud-rh1
has specific credentials.
Change-Id: I9c6ac1a49d54077173540b9b800e123f3e9d93d7
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Internap has offered up a new region for openstack-infra to use. Add
the region to puppetmaster first so we can start bootstrapping the
cloud.
We also update our configuration to reflect the different networks in
each region.
Change-Id: I2a135c19753f79c5ab24fb821af37d7e1eae9485
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Now that the admin oscc cloud has merged and the cloud launcher
created the openstackci/openstackzuul projects on the infracloud,
adding them to all-clouds.yaml.
Change-Id: I045a9f8e92f9b6c5f2f9076fdfbffa8ed8e2d199
We need to explicitly tell that we do want to use the ca-certificates
file on this cloud, since it has a self-signed certificate.
Change-Id: Id1227c5b47e5a5177272231dd3f768ccb436bf72
This is a follow up patch to our previous attempt to mirror source
packages, we forgot to actually download the first pass of packages.
We have correctly added the code to update them.
Change-Id: Ia2776d60f2b6d8b526b6866462299c7bf2f6bc5a
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
OSIC Cloud1 has two different provider gateway networks. One is an IPv4
network, and one is dual stack with global IPv6 and private IPv4. List
those in the config.
The routes_externally: True entry is so that we can land the change
before the new shade release and not break old code.
Change-Id: I39d71d853290f217859a060e8a2706624550a22e
Refactor and rename our Launchpad "sync" credentials (they haven't
been used to synchronize group membership from LP to Gerrit for
nearly 4 years now) which currently perform bug updates for
new/merged changes, so that they can be reused in the future to
update bugs as a part of release automation jobs.
Change-Id: Icd08dffef88fc8e99683d991ac6ac88b93bcb3e6
shade will figure this out and do the right thing, but it'll be at the
expense of a bunch more API calls. We konw we don't need them, so short
circuit the detection.
Change-Id: Id893bfec1c5c0abcc5b448899e04de20f7f41363
We do not use the data in the expanded hostvars, so it results in a
bunch of completely unneccessary api calls.
Change-Id: I61bb7610e1dc46a6305a1b3f32f19d2e8ee8394c
Tripleo-test-cloud-rh1 support v3 apis, we should use them when
possible.
Change-Id: Ic7fa1bde3881a13678a24e384c6ca0910f35929f
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Today, tripleo-test-cloud-rh1 is running some private infrastructure
in the same project that nodepool is currently running. This is a
problem because is create additional warning message in our logs about
unknown servers.
I've obtained a new user / project which we'll eventually with
nodepool. But first, lets add the credentials so we can run cloud
launcher.
Change-Id: Ic87a9f3f7eccb44396d3e1f30ced9d6e70d186a9
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Add separate HTTPS cert/key/chain files for the
releases.openstack.org site since our current certificate vendor
requires us to renew a cert to update the SubjectAltNames list in
it. Note that this depends on RFC 4366 (Server Name Indication)
support in browsers, but basically all "modern" browsers should be
fine with it (if someone is still using IE6, I'll be happy to print
out and mail them a copy of the site). Also, the relatively strict
TLS options we've been using for the other HTTPS sites on this
server basically already preclude browsers of that vintage, so it's
unlikely to come up at all.
This site can be folded into the static.openstack.org multi-site
cert when it's renewed next year and switched to the normal
static-https-redirect.vhost.erb template at that time.
Change-Id: I92f7fd163fc36ab06116233622a9a07c5f20440d
This is a cosmetic change to replace openstackjenkins-bluebox with
openstackzuul-bluebox. Hiera will be updated accordingly.
Change-Id: Ibfbf95ca8e23bf4bd491591f69b55a2417713fbd
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We need to launch an AFS server in openstackci-bluebox, this gives the
abilty for ansible-playbook on puppetmaster.o.o to run puppet on the
server.
Change-Id: Iddfc5bfe8b1c19ef186c8f8997ebdca81789887f
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This is part of our effort to bring bluebox back online for nodepool.
As such, we need to update shade with the new defaults.
Change-Id: I6e8644ac1de739bf1be084e53d2e4deab1fa9100
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Because openstackci-tripleo-test-cloud-rh2 is using a single tennat,
puppetmaster is now trying to connect into nodepool slaves. So,
remove openstackci-tripleo-test-cloud-rh2 until it has been migrated
into a 2 tenant setup.
Change-Id: I6c6f21fdb4360d244feaa25238945c7e71562ad1
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This is needed to bring the tripleo-test-cloud AFS mirrors under
the control of puppet.
Change-Id: Id17c49c4189961f2b776a4d05d571ff0506a88da
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
It looks like this is breaking tox jobs on ubuntu-precise, which is used by openstack-infra. We are reverting until we can better debug the issues.
This reverts commit 10b0305fe275f4225eb635f0e71128ed5cd22950.
Change-Id: I1f64e8e83ed08fd358ccf5fcd2fffdbe9215966a
This was requested by the Package-Deb team, which will contain
non-openstack package backports needed to build OpenStack packages.
Change-Id: Ife0b5cb8ece69aaca0c0c5e8140809f1da091fc9
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This reverts the combined commits
c640ca2d975a0b9e423ad76bf0ce2bc4397d2e98 and
ce7d4b37484ad1cc5fae1ba034b68cbbf1c7cfdc.
The newly released bandersnatch 1.11 fixes these layout issues (see
I2b5822a7383b8f2f49958c8268453333dabe52cc)
Depends-On: I6a1f213a3127f57b41b4ec7e3f128b1bbde2ae37
Change-Id: Ia06cb56b510e2ac5fa232323f97db1b1b18a4519
This fixes a typo in our reprepro configuration for debian security.
Now we're use the jessie-security as the distribution file.
Change-Id: I87d70b160fcfd1321cd07f7594bdc18cd98ba5a3
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This patch adds a mirror for MariaDB packages. The releases
mirrored is selective, only covering the currently supported
Ubuntu and MariaDB versions for OpenStack-Ansible.
Having this mirror available aids deployment projects which
consume these packages by ensuring that all apt packages needed
are available in mirror local to the nodepool cloud provider.
Change-Id: Ic549bbbd4f5dafc6555174f3ef3bd713b9a727d4
Change I37337b9d07ace4 disabled the use of jeepyb's trivial rebase
script however the puppet for it still exists. There's really no need
to keep the option around in the puppet manifest so this change just
removes it.
Change-Id: I101e385823a110a74b3060ad11e3e528d5048d9f
