1749 Commits

Author SHA1 Message Date
Zuul
94bcf05de6 Merge "Add OSU OSL to nodepool configuration" 2021-04-14 04:48:44 +00:00
Ian Wienand
efdaa9a12a Add OSU OSL to nodepool configuration
Change-Id: Id97345595a4463617bc1a93675d35e32cfff7d08
2021-04-14 12:34:06 +10:00
Zuul
213b01db37 Merge "Fix typo on OSU OSL password template" 2021-04-14 02:11:14 +00:00
Zuul
bb2188d298 Merge "Add planet.openstack.org redirect to static" 2021-04-14 02:01:02 +00:00
Ian Wienand
f705d90166 Fix typo on OSU OSL password template
Change-Id: I738b78321fb855eb84435be9af80a112b39a3aec
2021-04-14 11:09:11 +10:00
Zuul
c2ba9ae565 Merge "Add zuul keystore password" 2021-04-13 17:15:09 +00:00
Ian Wienand
609986634f Add planet.openstack.org redirect to static
This handles planet.openstack.org and redirects it to the
opendev.org/openstack/planet-openstack repo, where we will put a
README and the OPML file of the last state as we deprecate this
service.

Change-Id: If141aca5efbdbe60c91ceefaa4e05c98cd0ba5bb
2021-04-13 16:17:09 +10:00
Zuul
d2553bf4e8 Merge "Add OSUOSL mirror" 2021-04-13 06:15:41 +00:00
Zuul
be2fa27be8 Merge "all-clouds: add OSU OSL project_id as well" 2021-04-13 05:04:47 +00:00
Ian Wienand
8e9d250293 Add OSUOSL mirror
Change-Id: Ia065fb30cfd69c5ab3fe96541d168b5722ff59ce
Depends-On: https://review.opendev.org/c/opendev/zone-opendev.org/+/786003
2021-04-13 14:19:10 +10:00
Ian Wienand
81db207d33 all-clouds: add OSU OSL project_id as well
Otherwise you get

 BadRequest: Expecting to find domain in project - the server could
 not comply with the request since it is either malformed or otherwise
 incorrect. The client is assumed to be in error.

Change-Id: If8869fe888c9f1e9c0a487405574d59dd3001b65
2021-04-13 13:31:49 +10:00
Zuul
40b87510db Merge "all-clouds: correct typo in OSU configuration" 2021-04-13 02:39:23 +00:00
Ian Wienand
441c40ccf9 all-clouds: correct typo in OSU configuration
Change-Id: I087971f1eb2e4fe83896add8ce4381ec2506ad67
2021-04-13 11:35:24 +10:00
Zuul
0dd5621d9b Merge "review02: pin ipv6 configuration" 2021-04-12 23:18:06 +00:00
Zuul
fed7f02543 Merge "Add OSUOSL cloud" 2021-04-12 23:17:48 +00:00
Zuul
b092fb9089 Merge "haproxy: write to container log files" 2021-04-12 23:17:39 +00:00
James E. Blair
4505baf9f9 Add zuul keystore password
This matches the proposal in https://review.opendev.org/785972

It's safe to merge now (secret storage on bridge is updated) and get
ahead of the curve.  It's harmless to add unused items.

Change-Id: I942ef5f95f9f1afe39b7d9a044276bfb338d6760
2021-04-12 14:58:07 -07:00
Ian Wienand
f4d43af312 review02: pin ipv6 configuration
As discussed in the thread mentioned inline, this pins the ipv6
configuration to avoid listening to RA's on the review02 server.

Change-Id: I17b0e049fcc1e975e8b4383957b020c11d9b89f0
2021-04-12 21:53:50 +00:00
Ian Wienand
28ffbfb12c Add OSUOSL cloud
The Oregon State University Open Source Lab (OSUOSL;
https://osuosl.org/) has kindly donated some ARM64 resources.  Add
initial cloud config.

Change-Id: I43ed7f0cb0b193db52d9908e39c04e351b3887e3
2021-04-12 09:31:51 +10:00
Zuul
14450f58e2 Merge "Set MaxConnectionsPerChild 8192 for Gitea backends" 2021-04-09 02:13:34 +00:00
Zuul
b5f3f7ef49 Merge "zuul-summary-status : handle SKIPPED and ERROR jobs" 2021-04-09 02:08:58 +00:00
Jeremy Stanley
c4be87753f Set MaxConnectionsPerChild 8192 for Gitea backends
When we added Apache as a filtering proxy on our Gitea backends in
order to more easily mitigate resource starvation, we did not set
any tuning to tell it when to recycle worker processes. As a result,
backends may continue serving requests with workers which pre-date
certificate rotation. This problem has also become more broadly
prevalent throughout our services with the introduction of Let's
Encrypt's 3-month certificate expirations as compared to our
previous 2-year certificates.

Add the same MaxConnectionsPerChild tuning to our Gitea backend
proxies as we use for our static sites and mirror servers.

Change-Id: I77d89385178a30f7dc5d04bedd0ab3772865c09f
2021-04-07 15:38:35 +00:00
Zuul
5e6cfa7472 Merge "Run update-bug on patchset-created again" 2021-04-06 21:23:14 +00:00
Zuul
691708f668 Merge "Revert "Temporarily serve tarballs site from AFS R+W vols"" 2021-04-02 17:08:18 +00:00
Jeremy Stanley
4bd752f222 Revert "Temporarily serve tarballs site from AFS R+W vols"
The sync to our new ORD replica has completed and we're back to the
typical vos release cadence for this volume again.

This reverts commit 542c898021af20f4ad48fa04b78b65c8f6fff0b6.

Change-Id: I4bb2ddcc46c6c56c7124acc52dce6a60da1662b2
2021-04-02 14:46:14 +00:00
Zuul
0d5a00d739 Merge "Clean up OpenEdge configuration" 2021-04-01 18:43:31 +00:00
Jeremy Stanley
542c898021 Temporarily serve tarballs site from AFS R+W vols
We're in progress replicating the AFS volume for tarballs to a
remote location for added redundancy, but this is blocking updates
of all the read-only replicas until it completes and we're unsure
how long that will take. In the meantime, serve content from the
writeable path instead of the read-only replica path so we're not
stuck with outdated content on the site.

Change-Id: I6e0333bdb9717a724fd29adffc3df6e6c5da1558
2021-04-01 14:10:56 +00:00
Jeremy Stanley
2d33597b03 Correct debian-security repo codename for bullseye
Starting in bullseye, Debian's security suite will add -security to
dist codenames, meaning we have stretch, buster, and
bullseye-security entries. Looks inconsistent, but is actually
correct.

Change-Id: I34806145f099868c2cdd95893b69cb1f4915f56f
2021-03-31 21:30:16 +00:00
Jeremy Stanley
08af9a5ab8 Explicitly create empty reprepro dists
Call `reprepro export` to always recreate indices, even for empty
dists. This is sort of a shotgun approach, local testing on the
server indicates it increases total time of a noop update by ~5.5
minutes for the "debian" repo, which is by far the worst case of
anything we mirror.

If this proves problematic, we can engineer a more targeted solution
to check for empty dists and only export those.

Change-Id: I7e39e427e1941f055fae0408e4c1f2a2f2b35547
2021-03-31 19:26:43 +00:00
Jeremy Stanley
fd98a1750d Clean up OpenEdge configuration
The OpenEdge cloud has been offline for five months, initially
disabled in I4e46c782a63279d9c18ff4ba2944c15b3027114b, so go ahead
and clean up lingering references. If it is restored later, this can
be reverted fairly easily.

Depends-On: https://review.opendev.org/783989
Depends-On: https://review.opendev.org/783990
Change-Id: I544895003344bc8202363993b52f978e1c07d061
2021-03-31 01:42:36 +00:00
Zuul
b0ff8c64bb Merge "review01.openstack.org: add key for gerrit data copying" 2021-03-31 00:30:35 +00:00
Zuul
9331c59029 Merge "dstat-logger: redirect stdout to /dev/null" 2021-03-30 23:57:29 +00:00
Ian Wienand
60f3554dcd review01.openstack.org: add key for gerrit data copying
Adding this key allows us to safely rsync data in a R/O fashion from
the production server to the new server and will be useful as we
deploy review02.opendev.org.  The key is hard-coded for one on the new
server.

Change-Id: I227876afafcb48715324ca35afdc0bff2492b29a
2021-03-31 09:33:55 +11:00
Ian Wienand
75ecf2cfbf gerrit: remove mysql-client-core-5.7 package
This doesn't install of Focal; moving forward we'll either use H2 or a
container database.  Just remove this package for now.

Change-Id: I69cdcdddc1ba0e0cf4ef5f8ba705bcd3a2afa689
2021-03-30 13:09:39 +11:00
Zuul
27d58d3b57 Merge "Add review02.opendev.org" 2021-03-30 00:48:54 +00:00
Zuul
39d8010055 Merge "openafs-server-config: install UserList" 2021-03-29 23:43:07 +00:00
Zuul
0800f4040e Merge "Upgrade gitea to 1.13.6" 2021-03-29 23:42:59 +00:00
Ian Wienand
ce7ef6536a openafs-server-config: install UserList
This was missed during recent updates; this UserList needs to be on
all servers to allow bos, vos and backup commands.

Update the documentation to reflect the centralised copy.

Change-Id: I8ada3d5035bb7ef77b19ce6aaffb48335974a124
2021-03-30 09:49:53 +11:00
Zuul
3180086559 Merge "Rename refstack group variables" 2021-03-29 21:33:02 +00:00
Clark Boylan
a08f65632f Upgrade gitea to 1.13.6
This picks up a variety of bug fixes and ensures we're keeping up.
The diff of the template files we modify between gitea v1.13.1, v1.13.4,
and v1.13.6 is empty. The diff between our modifications at v1.13.4
looks about how I would expect (implying that v1.13.6 is also fine).
Reviews should double check though.

We also add in setup for the system-config repo on the test gitea as
this will give us something to look at for verification purposes.

Change-Id: Idb3568a9d287a2d46d568ab7d8d3a7108739d23e
2021-03-29 11:03:59 -07:00
Zuul
d9723fda95 Merge "reprepo debian : fix line-ending" 2021-03-29 11:01:05 +00:00
Zuul
62ea8d1289 Merge "reprepro: add dist for Ubuntu UCA Wallaby" 2021-03-29 05:44:07 +00:00
Ian Wienand
9457b010f8 reprepo debian : fix line-ending
reprepro warns about lack of a trailing newline

Change-Id: I01c0cc2104cb1b3891ea55b6e4a3eab63885331a
2021-03-29 16:41:26 +11:00
Zuul
fff346ea32 Merge "Add Debian Bullseye to the reprepro config" 2021-03-29 05:30:21 +00:00
Ian Wienand
8541605595 Stop mirroring Fedora 31
Nodes were stopped with I0dde34ab005f48ac521d91e407ac437d3cec965f

Change-Id: Ib9cbc3f5388e668923ff7eadb3e81703875f64c0
2021-03-29 11:55:14 +11:00
Ian Wienand
525d5d1c19 Add review02.opendev.org
review02.opendev.org is a much larger replacement server for review01
provided by Vexxhost.  It is up and running, with gerrit2 volume
attached and DNS entries.

This adds it to the staging group with no replication and a local h2
database configured for initial bringup.  There's quite a bit to
consider for full migration, but this will let us start experimenting.

Change-Id: I3638a5c0c7028dcc800ada42431b75395cff0c42
2021-03-26 14:53:31 +11:00
Ian Wienand
633c4c51ec haproxy: write to container log files
This moves the haproxy containers to syslog with tags that will get
each container's output filtered into /var/log/containers.

Change-Id: I65294baec3c092ede5ee97856d8d879174b0d8d4
2021-03-26 10:16:13 +11:00
Ian Wienand
d0f2e12f85 dstat-logger: redirect stdout to /dev/null
The dstat-logger service puts a lot of info into the syslog/journal.
The --output command to write CSV files doesn't appear to suppress the
console output, and I can't see a flag to make it do that.  So
redirect the stdout to /dev/null.

Change-Id: Ib99f8199ebc3c9d89c2b3aa92dff5ff298d03e45
2021-03-24 22:23:13 +00:00
Ian Wienand
163d5b6133 Create review-staging group
Create a review-staging group so we can bring up a new server but
avoid running the project-management steps on it.

Change-Id: I93d2a36edcd58a48a36031f0692be3273a36f07c
2021-03-24 11:40:33 +11:00
Ian Wienand
9f11fc5c75 Remove references to review-dev
With our increased ability to test in the gate, there's not much use
for review-dev any more.  Remove references.

Change-Id: I97e9865e0b655cd157acf9ffa7d067b150e6fc72
2021-03-24 11:40:31 +11:00