This fixes Debian's Release file headers when mirrored by reprepro.
Especially, this patch adds NotAutomatic and ButAutomaticUpgrades
headers needed to correctly setup a backport repository.
Change-Id: I5e0c2f11362cdb59bfd0c36ee148bf5d8aab43db
This template was previously set to use the local hosts fqdn for the
jeepyb gerrit-host config item. Now that we've switched to indexed hosts
for review.o.o that ends up as review01.openstack.org.
This would work fine for network connectivity to the ssh server and
otherwise we wouldn't notice except that this is the value we write into
the .gitreview files. To make them more accurate switch to
review.openstack.org as the explicit value.
Note I considered making this configurable but we already assume so many
other openstack specific values in this file I don't think its super
necessary.
Change-Id: I065af01b2793639453562d924e58ba7c769dcd38
This adds the puppet5 pools for puppetlabs apt mirror.
We need these two pools to get latest puppet5 versions
on Debian and Ubuntu:
* http://apt.puppetlabs.com/pool/xenial/puppet5/
* http://apt.puppetlabs.com/pool/stretch/puppet5/
The yum puppetlabs mirror is correct and after this fix
we can properly use the latest version available in CI.
Change-Id: Ic5f7a20bcc8181f1dc55dedfaa60c622defe9c43
Infracloud is sadly deceased. The upside is we can delete a lot of code
we don't need anymore. This patch removes infracloud nodes from
site.pp so that the puppet-apply test no longer bothers to validate
them, removes the infracloud modules from modules.env so that we don't
bother to install those modules in puppet-apply and puppet functional
tests, and removes the infracloud-specific data from the public hiera.
Additionally stop the puppetmaster from trying to run the infracloud
ansible playbook and finally remove the chocolate region from nodepool's
clouds.yaml (vanilla was already done).
This patch leaves the run_infracloud.sh script and the
infracloud-specific ansible playbooks as well as the infracloud
manifests in the openstack_project puppet module. It's possible those
tools could come in handy in the future if we ever have another
infracloud, and leaving those tools in place doesn't add confusion about
which hosts are actually active nor does it leave cruft that gets
unnecessarily tested.
Change-Id: Ic760cc55f8e17fa7f39f2dd0433f5560aa8e2d65
Using local ruby variables in puppet ERB templates was deprecated in
puppet 3 and doesn't work any more in puppet 4. Access these values as
ruby instance variables instead.
Change-Id: I12f294d353066ff4af211b9823398a5084a585ee
Currently this is broken on mirror-update.o.o, the reason seems to be
upstream security.debian.org is a separate pool, but we are trying to
add it into a single pool.
This is causing checksum issues on files we download.
For now, remove debian-security and update jobs to pull directly from
security.debian.org. A follow up patch will move this into its own
pool for reprepro creating mirror.debian-security.
Change-Id: Id918597aecc5114791811c7f30b6109da6a8d0af
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Our previous patch didn't work as expected, this is because the repo
data for security is not in the toplevel directory. This was the
reason for using suite.
This then means we need 2 stanza's for jessie and stretch, since the
suite field only supports a single entry.
Change-Id: I29944191beff261c79f819e434da35e2848877cb
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Because of ipv6 support in limestone-region one, we don't actually
need to ask for FIPs. Stop doing this so we can bring more servers
online.
Change-Id: I48fe176c4a78683834246f59850276133c26e19f
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Copy/pasta from puppetmaster.o.o meant that we tried to put and use
the certificate in /etc/openstack/ which is not a thing on nodepool
nodes.
Fix that to be the right location and update the nodepool clouds.yaml.
Change-Id: Ib9c17a58fc2aa9ad5eb9091a6a3fd23ff5825731
This makes the credentials available so nodepool launcher and builder
can use them.
The limestone credentials have been added to hiera for the nodepool
group.
Change-Id: Idb56db19110e6b30f6231869ff278b90caf99f4b
Limestone provides both ipv4 and ipv6 addresses. Add the necessary
configuration to clouds.yaml to make it work.
Change-Id: I3c717132a42f44aaed6568de6780b1972cbf63d0
A request from mnaser to use raw images for the provider. There is
also a proposed change to os-client-config to add this, but will need
to be tagged as a new release.
See: https://review.openstack.org/554351
We can revert once os-client-config has been released to pypi.
Change-Id: Ifc3d5656b7b972d5978b4d806c41bf2cc3443842
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We're happy to welcome Limestone as a new infrastructure donor and
add the following cloud configurations:
- openstackci-limestone (control plane)
- openstackzuul-limestone (nodepool/testing nodes)
The proper credentials have been committed to hiera.
Change-Id: Iba7813f9c90a4ac84fd37ebb6556c6a98c03a079
Change Ia7415d2fbbb320f8eddc4e46c3a055414df5f997 removed per-image
logging from nodepool; it now keeps a series of named log files. The
"image" logger is removed, along with all the specific build logs.
I972a66f9c153f52df934d25ab2f77596bb2e5429 removed the
image_log_document_root argument; which wasn't doing anything in
nodepool::builder, but was actually being used to fill-out the
builder-logging.conf file. Thus we need this to not have a bad path
in the config file.
Change-Id: I6fdc3b622454b069f3ad2cf42da584d8df23a110
Using a URI has not be allowed for many years [0], however this code was
not enforced until 17.10 docker [1].
Sadly, we need to setup 2 different vhost ports for this, old 1.13.1
clients will not work properly if they are combined with new. Keep
original logic working on 8081 and move 17.10+ clients to 8082.
[0] https://github.com/docker/docker-ce/blob/17.06/components/engine/registry/config.go#L339
[1] 1cc36398f9
Change-Id: I837f562331603a7c00f9ba8554b6aa2975169eeb
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We longer have any jobs or need to manage VMs in
tripleo-test-cloud-rh(1|2). This hardware still eventually be removed
so lets also remove it from our configuration.
Change-Id: I588ae945df15beceaf7a60bf6a65b1615b2074f0
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We no longer have infracloud or tripleo-test-cloud-rh1 online, we can
remove them from nodepool-builder logging.
Change-Id: Ie71b5bd1ee56417846b2a62c40dbd2fd4fa8221e
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Follow-on from Ibf5bd302b121abd64b3c74a6ec0cf8fecc455e6b
The name in the updates file is actually "puppetlabs-debs-pc1". After
correcting this manually on mirror-update I got a good mirror run.
Change-Id: Icb06102730135ee33cc1dc29024f600e1d09fb04
Currently infracloud controllers are down, as such we no longer are
able to get dynamic inventory from it. Remove the provider for now
and revert if possible.
Change-Id: I5d2c27de04d7036d49e183cbd3ec3063083da42e
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Linaro has kindly provided us with resources for aarch64 based
testing. This adds two new providers; openstackci-linaro for control
plane, and openstackzuul-linaro for testing nodes.
Change-Id: I166d9f669ea88663d4ffe70e25a6e908d11cf35f
Update our nodepool_log_config.py script and remove support for
snapshots.
Generate latest version of nodepool-builder logging.
Change-Id: Ib87e8c352b56f63ca44668f43fa440645fab9f37
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
And the zuul-ci.org website. Note changes like this need ssl
certs added to private hiera before merging. Creating the AFS
volume would also be a good idea.
The SSL certs are in hiera, and the AFS volume is mounted.
Change-Id: I1eccee119bf169fea265c53af4c8c016c13c03ec
Depends-On: Ic92726dc341af5802ad803d239bd547ef5068043
Story: 2001382
Task: 6093
Update the overrides allowed for governance.openstack.org so that
the list of governance directories can perform Redirect or
RedirectMatch with .htaccess files instead of needing to involve
system-config reviewers when they want to move content between URLs
within the site.
Change-Id: Ifb70d119588ce8973d0f86fe555f95853259ba06
In preparation for replacing the zuulv3.openstack.org host with a
larger instance, set up the necessary support in
Puppet/Hiera/Ansible. While we're here, remove or replace old
references to the since-deleted zuul.openstack.org instance, and
where possible update documentation and configuration to refer to
the new zuul.openstack.org CNAME instead of the zuulv3.openstack.org
FQDN so as to smooth the future transition.
Change-Id: Ie51e133afb238dcfdbeff09747cbd2e53093ef84
The controller for infracloud-vanilla is no longer working, remove
access to it from our services.
Change-Id: Ic2a44f74493d3f328398b67262ae93253714bf67
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This reverts commit fc889368515687a0957002b2b3886b75e4f74aeb.
Change-Id: I0bd6705335f8915cf1e59ffb33c959d634ceedda
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
We are getting authentication errors from OVH at the moment, for now
remove them from clouds.yaml so dynamic inventory from ansible works
again.
Change-Id: Ief1613b281cd51863119b7ce8b6e8dda78badb12
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
This runs bind as a hidden master nameserver so we can do all the
keysigning there, and then use nsd (or bind) as public authoritative
slaves.
Change-Id: Ifb2ad109103051fa13c4af1c7be1ca0ae98bb1a1
It seems there have been some changes to how javascript libraries are
installed in ubuntu xenial. Add an alias to /usr/share/javascript.
Change-Id: I1ea75cd5c9fddc04515414427f9f322d83f14ecb
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
The npm mirror was removed with
Id539d336814cce2ce18898526e561b8b6977f62f. This change is "inspired"
by a proposed puppet-nodejs update in
Ia7966fb9578d0d79f3a7f9480e3a956555737dc8. Rather than fixing it up
for the new version, remove it (also, puppet is failing trying to
access /afs/.openstack.org/mirror/npm).
I believe the npmrc.erb file is actually a vestige of prior release
methods and is also no longer required.
Change-Id: I6fa48e4700779d2c90194f0129c770bf2d6d865f
Currently puppetdb and puppetboard have been broken for some time (+1
year) and with ubuntu precise becoming EOL it is prime for deleting.
This leaves openstack-infra with a gap in reporting for non-root
users. As such, as proposal is in the works to maybe use ARA.
Change-Id: Ifc73a2dba3b37ebe790a29c0daa948d6bad0aa33
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
By default the elasticsearch output plugin for logstash has no timeout.
I think this is the cause of logstash daemons hanging when we have
elasticsearch node outages. Goal here is to have the timeout force the
request to be retried again (ideally against a different server entirely
but even if it is simply retried to the same server we should operate
properly again once the server that went down is back up).
Change-Id: I0511f32f8ee3f0c40987cab3e2528a85595785b2
