10 Commits

Author SHA1 Message Date
Colleen Murphy
5663093aa3 Turn on the future parser for ethercalc.o.o
ethercalc doesn't have a dev site to use as a canary, but it does have
passing puppet 4 tests so go go go

Change-Id: Ifec4bf00d4c966653455e567abbdc9bd500ae2ef
2018-09-10 19:15:37 +02:00
Colleen Murphy
4d104f8127 Turn on the future parser for etherpad.o.o
Change-Id: Ic55210667d7158da0e889a291335c6de9ba5b29a
2018-09-10 19:15:21 +02:00
Zuul
5cb8af4744 Merge "Install limestone CA on hosts using openstacksdk" 2018-09-04 23:05:35 +00:00
Clark Boylan
24c67ecb0e Run puppet on mirror02 in packethost
We have made some mirror config changes that are not being deployed here
because we have disabled puppet on this node. I do not think we need to
disable puppet here so go ahead and reenable it.

Change-Id: If7da76d24ea64db3c038bc60f64fa39a4f5f6f72
2018-09-03 09:03:40 -07:00
Monty Taylor
eb086094a8 Install limestone CA on hosts using openstacksdk
In order to talk to limestone clouds we need to configure a custom CA.
Do this in ansible instead of puppet.

A followup should add writing out clouds.yaml files.

Change-Id: I355df1efb31feb31e039040da4ca6088ea632b7e
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
2018-08-31 12:17:35 -07:00
James E. Blair
09b1ff4bc3 Add system-config-run-eavesdrop
Add a job which runs testinfra for the eavesdrop server.  When we
have a per-hostgroup playbook, we will add it to this job too.

The puppet group is removed from the run-base job because the
groups.yaml file is now used to construct groups (as it does
in production) and will construct the group correctly.

The testinfra iptables module may throw an error if it's run
multiple times simultaneously on the same host.  To avoid this,
stop using parallel execution.

Change-Id: I1a7bab5c14b0da22393ab568000d0921c28675aa
2018-08-30 10:25:23 -07:00
Jeremy Stanley
f119cc5aab Correct inventory pattern for planet.openstack.org
The planet.openstack.org service is currently provided by the
planet01.openstack.org server, so correct the inventory pattern for
the webservers group accordingly. This was spotted as the firewall
rules for planet ceased allowing HTTP/HTTPS connections.

Change-Id: I4e3353e8f1a73db13c54dfe93a6a26fc618d2aa4
2018-08-28 19:01:19 +00:00
Monty Taylor
15663daaf7 Add iptables role
Co-Authored-By: James E. Blair <corvus@inaugust.com>
Change-Id: Id8b347483affd710759f9b225bfadb3ce851333c
Depends-On: https://review.openstack.org/596503
2018-08-27 14:33:32 +00:00
Monty Taylor
5cccc7a902
Add non-working hosts to disabled list
These hosts are not currently working with ansible from bridge. Let's
explicitly disable them so that it doesn't look like issues are
happening.

Change-Id: Iaad69df2d8666285f12f201e2c9913e84bde9a26
2018-08-20 11:03:55 -05:00
Monty Taylor
03d09b777e
Use openstack and groups inventory from system-config
Rather than copying these out of system-config inside of
install-ansible, just point the ansible.cfg to them in the system-config
location. This way as changes come in that have group updates we don't
have to first apply them to the system.

Change-Id: I1cefd7848b7f3f1adc8fbfa080eb9831124a297b
2018-08-17 11:47:13 -05:00