opendev/system-config
Code Issues Proposed changes
system-config/playbooks/roles
History
Clark Boylan f6a0bf7be5 Improve gerrit known_hosts management 
Previously we were only managing root's known_hosts via ansible but even
then this wasn't happening because the gerrit_self_hostkey var wasn't
set anywhere. On top of that we need to manage multiple known_hosts
because gerrit must recognize itself and all of the gitea servers.
Update the code to take a dict of host key values and add each entry to
known_hosts for both the root and gerrit2 user.

We remove keyscans from tests to ensure that this update is actually
working.

Change-Id: If64c34322f64c1fb63bf2ebdcc04355fff6ebba2
2021-08-02 09:53:27 -07:00
..
accessbot
Update accessbot config to use OFTC
2021-05-28 18:37:33 +00:00
afs-release
Serve meetings.opendev.org
2021-06-02 13:56:19 +10:00
afsmon
afsmon: install python3-pip
2020-02-12 16:39:11 +11:00
apache-ua-filter
Block restricted user agents for the tarballs site
2020-10-16 17:45:12 +00:00
base
Add support for Xenial ESM repos to our base roles
2021-05-04 08:46:06 -07:00
borg-backup
borg-backup: exclude /var/lib/snapd
2021-06-23 15:37:15 +10:00
borg-backup-server
borg-backup-server: set SHELL for verification script
2021-03-23 14:53:56 +11:00
codesearch
codesearch: Add robots.txt
2020-11-20 19:13:32 +11:00
configure-kubectl
Configure .kube/config on bridge
2019-02-06 15:43:19 -08:00
configure-openstacksdk
Add inmotion cloud to cloud launcher
2021-04-21 11:18:40 -07:00
disable-puppet-agent
Stop running mcollective
2020-05-05 15:00:04 -05:00
dstat-logger
dstat-logger: redirect stdout to /dev/null
2021-03-24 22:23:13 +00:00
edit-secrets-script
Add edit-secrets script to bridge.o.o
2019-02-27 08:45:11 -08:00
etherpad
Merge "etherpad: fix robots.txt"
2021-02-24 00:02:04 +00:00
gerrit
Improve gerrit known_hosts management
2021-08-02 09:53:27 -07:00
gerritbot
Assort IRC TODOs
2021-05-29 17:18:55 +00:00
gitea
Update gitea to 1.14.4
2021-07-12 11:04:36 -07:00
gitea-git-repos
Don't always update gitea project descriptions
2021-03-16 13:06:16 -07:00
grafana
grafana: update to 7.4.2
2021-02-19 09:54:31 +11:00
graphite
graphite: also deny account page
2020-12-10 09:21:48 +11:00
haproxy
Run haproxy as root user
2021-05-17 14:28:37 +10:00
import-gpg-key
reprepro: convert to Ansible
2020-10-19 14:06:57 +11:00
install-ansible
backups: add review02.opendev.org
2021-07-19 15:29:42 +10:00
install-ansible-roles
puppet: don't run module install steps multiple times
2020-09-03 09:23:05 +10:00
install-apt-repo
Vendor the apt repo gpg keys used for Zuul
2020-05-20 13:17:09 -07:00
install-borg
borg-backup: add fuse
2020-11-05 11:56:46 +11:00
install-certcheck
Generate ssl check list directly from letsencrypt variables
2020-05-20 14:27:14 +10:00
install-docker
install-docker: install build-essential for cffi on Xenial
2021-07-12 14:49:17 +10:00
install-kubectl
Remove snap cleanup tasks
2020-04-16 12:45:36 -05:00
install-osc-container
Use openstackclient from container
2020-04-23 07:46:28 -05:00
install-podman
Run a gerrit container on review-dev01
2019-10-29 08:29:17 +09:00
iptables
Run iptables in service playbooks instead of base
2020-06-04 07:44:22 -05:00
jitsi-meet
Revert "Enable jitsi-meet xmpp websockets"
2021-03-18 15:33:20 -07:00
kerberos-kdc
Merge "kerberos-kdc: quote some integers to avoid string/int confusion"
2021-03-22 22:56:26 +00:00
letsencrypt-acme-sh-install
Be explicit about server used in acme.sh
2021-06-18 08:48:35 -07:00
letsencrypt-config-certcheck
Generate ssl check list directly from letsencrypt variables
2020-05-20 14:27:14 +10:00
letsencrypt-create-certs
Remove review-test
2021-07-21 13:12:43 +10:00
letsencrypt-install-txt-record
Remove some unnecessary debug: statements
2021-05-07 11:11:56 +10:00
letsencrypt-request-certs
Generate ssl check list directly from letsencrypt variables
2020-05-20 14:27:14 +10:00
limnoria
Update HTML channel logs every 15 minutes
2021-06-28 14:32:35 +00:00
lodgeit
Update docker-compose restart flags
2021-07-22 08:35:52 +10:00
logrotate
reprepro: convert to Ansible
2020-10-19 14:06:57 +11:00
mailman
Ansible mailman configs
2021-05-11 08:40:01 -07:00
mailman-list
Ansible mailman configs
2021-05-11 08:40:01 -07:00
mailman-site
Fixup openstack mailman template perms
2021-05-19 12:21:14 -07:00
master-nameserver
Don't log the public loop on master-nameserver
2020-04-08 16:38:15 -05:00
mirror
Add cdn0{1,2}.quay.io
2021-07-26 21:01:57 +00:00
mirror-update
Trim yum-puppetlabs content
2021-07-20 13:33:40 -07:00
nameserver
nameserver: Allow master server to notify via ipv6
2020-10-28 09:26:14 +00:00
nodepool-base
nodepool-base: prefer ZK IPv6 addresses
2021-04-21 16:56:07 +10:00
nodepool-base-legacy
Add initial Ansible for nodepool hosts
2020-03-06 14:02:52 +11:00
nodepool-builder
nodepool-builder: add volume for /var/lib/containers
2021-06-15 09:24:08 +10:00
nodepool-launcher
Add pull tasks for nodepool/zuul
2021-02-19 15:42:40 -08:00
openafs-db-server
openafs-<db|file>-server: fix role name
2021-02-10 13:49:12 +11:00
openafs-file-server
openafs-<db|file>-server: fix role name
2021-02-10 13:49:12 +11:00
openafs-server-config
openafs-server-config: install UserList
2021-03-30 09:49:53 +11:00
pip3
Install pbr in pip3 role to fix issue xenial
2021-05-27 12:35:25 +02:00
puppet-run
puppet: don't run module install steps multiple times
2020-09-03 09:23:05 +10:00
puppet-setup-ansible
install-ansible: move install_modules.sh to puppet-setup-ansible
2020-09-03 09:28:16 +10:00
rax-dns-backup
rax-dns-backup : fix cron output capture
2021-04-15 07:15:09 +10:00
refstack
refstack: fix backup script typo
2021-03-16 15:12:41 +11:00
registry
Install docker-compose from pypi
2020-04-16 12:08:00 -07:00
reprepro
Use tmpfiles.d to create /var/run/reprepro
2021-06-11 15:35:56 -07:00
root-keys
roles: Add README.rst and lint
2018-08-23 21:34:42 +10:00
run-selenium
run-selenium: run selenium on a node
2021-01-18 07:58:23 -08:00
static
static: enable SSLProxyEngine for meetings
2021-06-11 13:42:10 +10:00
statusbot
statusbot: don't use opendevstatus name in testing
2021-06-11 22:59:24 +10:00
sync-project-config
Stop logging the rsync of puppet
2020-04-30 16:11:42 -05:00
vos-release
Add missing newline in vos_release.sudo
2019-11-21 19:08:30 +00:00
zk-ca
Zookeeper: listen on plain and TLS ports
2020-06-17 10:38:59 -07:00
zookeeper
Update docker-compose restart flags
2021-07-22 08:35:52 +10:00
zuul
Fixup small issues on new zuul scheduler
2021-05-14 08:20:56 -07:00
zuul-executor
Update zuul-executor shutdown handling
2021-02-26 08:12:30 -08:00
zuul-merger
Add pull tasks for nodepool/zuul
2021-02-19 15:42:40 -08:00
zuul-preview
Install docker-compose from pypi
2020-04-16 12:08:00 -07:00
zuul-scheduler
Sync zuul status json backup list with current tenants
2021-05-14 10:32:07 -07:00
zuul-status-backup
Add --fail flag to zuul status backup curl
2020-04-28 08:33:05 -05:00
zuul-user
Split eavesdrop into its own playbook
2020-04-23 14:34:28 -05:00
zuul-web
Fixup small issues on new zuul scheduler
2021-05-14 08:20:56 -07:00
set-hostname
Split eavesdrop into its own playbook
2020-04-23 14:34:28 -05:00