Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
7003 commits 9 branches 0 tags 111 MiB
Commit graph

7003 commits

This branch
This branch
All branches
Author SHA1 Message Date
Miroslav Suchý
4dc92de6d9 typo 2015-03-04 15:49:04 +00:00
Kevin Fenzi
d3d2ec9b36 Fix up this url 2015-03-04 15:46:36 +00:00
Miroslav Suchý
1552cde456 add haproxy.conf which I missed in 8af53bd 2015-03-04 15:42:19 +00:00
Kevin Fenzi
f55752b2c3 Rebuild mirrorlist-osuosl over on osuosl02 2015-03-04 15:40:53 +00:00
Miroslav Suchý
178fc3859c typo 2015-03-04 12:57:19 +00:00
Miroslav Suchý
8af53bd559 move neutron to port 8696 and set haproxy as stunell 2015-03-04 12:38:37 +00:00
Miroslav Suchý
5b18f32123 tell horizon where is ca cert 2015-03-03 20:17:25 +00:00
Kevin Fenzi
31e19f5df6 Add last mustang to dhcp 2015-03-03 18:56:24 +00:00
Miroslav Suchý
69df075e3f neutron is unable to read ssl key, put there its own copy 2015-03-03 12:10:37 +00:00
Miroslav Suchý
67e982781d typo 2015-03-03 10:28:02 +00:00
Miroslav Suchý
a86f5d4473 this does not work due rules: section 2015-03-03 10:27:27 +00:00
Miroslav Suchý
0658a5c14e specify auth_url for rest of modules 
due used https
 2015-03-03 10:24:44 +00:00
Miroslav Suchý
eb0be78765 specify auth_url for nova_flavour module 
due used https
 2015-03-03 10:08:50 +00:00
Miroslav Suchý
b341df3533 specify auth_url for glance_image module 
due used https
 2015-03-03 09:59:17 +00:00
Miroslav Suchý
5e7059b1f6 replace ip by FQDN on places where we use SSL 2015-03-03 09:33:39 +00:00
Miroslav Suchý
03f4921381 put controller hostname into variable 2015-03-03 09:33:39 +00:00
Miroslav Suchý
2049b15c37 try this 2015-03-03 09:33:39 +00:00
Patrick Uiterwijk
0fc0109420 No cancel button 2015-03-03 02:54:56 +00:00
Patrick Uiterwijk
d28b1bdac0 Update Ipsilon config slightly 2015-03-03 02:01:51 +00:00
Patrick Uiterwijk
6b785e3722 Add login templates 2015-03-03 01:52:35 +00:00
Luke Macken
2318ccb429 bodhi: Add the f22 pre/post beta thresholds to the frontend 2015-03-02 19:19:02 +00:00
Miroslav Suchý
2db4f31139 change attr to 644 so other services can read this cert 2015-03-02 16:24:37 +00:00
Miroslav Suchý
fd16828ca3 fix documentation link 2015-03-02 15:47:20 +00:00
Miroslav Suchý
872f91da1c try to enable vnc 2015-03-02 15:45:27 +00:00
Miroslav Suchý
c8ce683903 switch glance-scrubber to SSL too 2015-03-02 15:15:40 +00:00
Miroslav Suchý
6a693aac4f neutron needs certs to start SSL 2015-03-02 15:05:33 +00:00
Miroslav Suchý
cf0dbcd318 enable ssl on all openstack services 2015-03-02 14:29:29 +00:00
Miroslav Suchý
bab06f6301 enable ssl for keystone on compute nodes (take 2) 2015-03-02 13:18:19 +00:00
Miroslav Suchý
2c68232188 copy cacert to compute nodes 2015-03-02 13:01:36 +00:00
Miroslav Suchý
db16bd3dc4 enable ssl for keystone on compute nodes 2015-03-02 12:52:48 +00:00
Miroslav Suchý
1dee9ba400 enable SSL for keystone 2015-03-02 12:35:02 +00:00
Kevin Fenzi
ee27bc5155 environment is a reserved word in ansible, we use env. 2015-02-28 22:43:23 +00:00
Kevin Fenzi
b76471700d And the rest of these internal nets too 2015-02-28 03:40:24 +00:00
Kevin Fenzi
db986bcd0f Set nameservers for internal zone so instances get dns 2015-02-28 03:38:12 +00:00
Kevin Fenzi
d934cf11ef Fold in new private cloud work from today. Gets things pretty working. 2015-02-28 03:15:15 +00:00
Patrick Uiterwijk
6e98a2dc66 Fix setup_git_package to handle setting up after gitolite setup a broken repo 
setup_git_package did the same check as pkgdb_sync did [1].

Also, if gitolite already came by, it will have created an update hook, which blocks us from pushing the initial commit (since gitolite has no idea who we are).
So in that case, we will just remove the update hook: gitolite will recreate it when it comes by the repo with genacls.sh.

The change to mkdir -p is just synto make it not print an error in case the directory already existed.

[1]: https://lists.fedoraproject.org/pipermail/infrastructure/2015-February/015600.html

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-02-27 23:44:20 +00:00
Patrick Uiterwijk
6bb938abfe Make pkgdb_sync more resilient by always calling SETUP_PACKAGE if master does not exist 
This should make it recover in case there are any repos in a weird state (aka, no master branch).
This could for example happen if the package was created in pkgdb after pkgdb_sync ran, but before
genacls.pkgdb runs, because then gitolite will see it as a new repo, and create a totally blank repo.
Especially since pkgdb_sync will abort after the first error, it would then leave all later created
repos broken as well.

Calling setup_git_package in a repo without master branch has no ill effect:
- Running git init on a pre-initialized repo is a no-op (or at least doesn't destroy current git data)
- Since it doesn't have master, it didn't run the script, so adding the first commit and hooks etc are
  what we want the script to do

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-02-27 23:26:49 +00:00
Kevin Fenzi
87d4c994c2 Host1plus mirrorlist is back online and should be in inventory 2015-02-27 20:22:06 +00:00
Kevin Fenzi
4db79efba8 Commit the squid.conf thats currently being used in production. 2015-02-27 20:21:44 +00:00
Ralph Bean
8163343351 Turn alembic upgrade steps into async operations. 2015-02-27 16:10:12 +00:00
Ralph Bean
cd2ba75d78 First take on a datanommer upgrade playbook. 2015-02-27 15:46:40 +00:00
Martin Krizek
c327d141d3 buildmaster: expand filenames fully in artifacts dir listing 2015-02-27 08:37:40 +00:00
Martin Krizek
d6445b8bff buildmaster: change aritfacts dir perms on master instead of slave 2015-02-27 07:58:46 +00:00
Tim Flink
f38370fe93 moving taskotron-client27.qa to x86_64 2015-02-26 17:14:03 +00:00
Tim Flink
f0554838b7 changing order of buildsteps to get desired permissions on master's copy of artifacts 2015-02-26 17:08:53 +00:00
Tim Flink
dddcbb09bf changing dir for chmod in taskotron master to be appropriate for slave 2015-02-26 16:43:23 +00:00
Martin Krizek
0fa35e4b67 buildmaster: fix missing ) 2015-02-26 15:44:06 +00:00
Martin Krizek
94ee6ab9f7 buildmaster: change permissions properly this time 2015-02-26 15:27:50 +00:00
Ralph Bean
bccc632e51 Merge branch 'master' of /git/ansible 2015-02-26 15:15:09 +00:00
Ralph Bean
378bf4854a Declare fedmsg_fqdn for notifs-web02.stg since its being weird. 2015-02-26 15:14:20 +00:00