5 Commits

Author SHA1 Message Date
Ian Wienand
312b9bec24 Refactor AFS groups
Both the filesevers and db servers have common key material deployed
by the openafs-server-config role.  Put both types of server in a new
group "afs-server-common" so we can define this key material in just
one group file on bridge.

Then separate out the two into afs-<file|db>-server groups for
consistent naming.

Rename afs-admin for consistent naming.

The service file is updated to reflect the new groups.

Change-Id: Ifa5f251fdfb8de737ad2ed96491d45294ce23a0c
2021-02-11 13:35:16 +11:00
Ian Wienand
c98505c8f2 Manage afsdb servers with Ansible
Move common setup steps into a openafs-server-config role, and create
openafs-file-server and openafs-db-server roles to manage fileserver
and db servers respectively.

Modify the playbook to run these roles against the AFS servers.

Change-Id: I4e80ad8ffe1d4992e405ea516b8762109758d7eb
2021-01-21 07:08:37 +11:00
Ian Wienand
92250eca82 Remove afs-1.8 group
With all AFS file-servers upgraded to 1.8, we can move afs01.dfw back
and rename the group to just "afs".

Change-Id: Ib31bde124e01cd07d6ff7eb31679c55728b95222
2021-01-21 07:08:29 +11:00
Ian Wienand
2e2e34bdf9 openafs-server: ensure vos_release keys installed on new servers
Add the afs-1.8 group in so that the vos release keys get installed.
Doesn't make a difference now when all servers already have the keys,
but would if a server is re-created.

Change-Id: Ic3902170d29ada1d23a446cc4d7eec39b371f733
2021-01-19 09:32:06 +11:00
Ian Wienand
7683fa11b3 openafs-server : add ansible roles for OpenAFS servers
This starts at migrating OpenAFS server setup to Ansible.

Firstly we split up the groups and explicitly name hosts, as we will
me migrating each one step-by-step.  We split out 1.8 hosts into a new
afs-1.8 group; the first host is afs01.ord.openstack.org which already
has openafs 1.8 installed manually.

An openafs-server role is introduced that does the same setup as the
extant puppet.

The AFS job is renamed to infra-prod-afs as the puppet component will
eventually disappear.  Otherwise it runs in the same way, but also
runs the openafs-server role for the 1.8 servers.

Once this is merged, we can run it against afs01.ord.openstack.org to
ensure it works and is idempotent.  We can then take on upgrading the
other file servers, and work further on the database servers.

Change-Id: I7998af43961999412f58a78214f4b5387713d30e
2021-01-19 08:08:33 +11:00