9315d1465e
This patch addresses: LDAP not requiring username or password (anonymous bind) This is required to support configurations where LDAP is on a secure network, and anonymous bind is enabled. LDAP using a self signed SSL cert (verify ssl on or off) This is required to support configurations where LDAP requires SSL, but ssl is using an internal or self signed certificate, and therefore fails cert checks. This also covers testing conditions where a consumer might use OS with LDAP+ssl unsigned. LDAP using a nonstandard cn naming convention (ie email address). This is required to deal with an edge case where 'cn' in ldap might be something other than a bare username. Gerrit pulls the ssh username from that value and will not accept a non-alphanumeric address. By setting 'accountSshUserName' in puppet, that is setable. LDAP prepopulating account Full name. Gerrit has a configuration option to pull Full Name from LDAP, this change exposes that option. Change-Id: Ibd41d59ff98e406b42e1e14cc17e23b3d6211d58
These are a set of puppet manifests and modules that are currently being used to manage the OpenStack Project infrastructure.
The main entry point is in manifests/site.pp.
In general, most of the modules here are designed to be able to be run either in agent or apply mode.
These puppet modules require puppet 2.7 or greater. Additionally, the site.pp manifest assumes the existence of hiera.
See http://ci.openstack.org for more information.