In the same line as other changes, move settings of config
file to template, and expose the settings on manifest,
so it can be easily configurable.
Depends-On: I78962555c9a9ec1a96ce19810a463a5d619b04f9
Change-Id: I673c9c177bf2fdb3e6428e3ad4252ee76b53309c
Currently the puppetmaster was hardcoded on a template.
Add the matching vars to the manifests that use them,
to make that setting configurable.
Change-Id: I2b641ec11284f325c22c242fabba26d0433bf85b
This reverts commit 5be2e2f18ac1f4489be760717519252ba20d4fba.
Yay! We've sucessfully upgraded to puppet3 and the sun is shining!
Start managing apt pins for puppet again, and also, set the default
to be 3.x everywhere.
Change-Id: I80db5b5e154a3849914aa348e1eabadd0a2ad936
This change modifies install_puppet.sh to accept a --three option
setting it to install the latest puppet available. It also creates
a node definition for the puppetmaster.o.o node, the new 3 master,
and the master of the future. Changes were made to various classes
to allow the pinning to version 2.x to be turned off.
Change-Id: I805d6dc50b9de0d8a99cf818d22d06c2dea6090a
The rest of the tree, literally everwhere, calls this value
sysadmins - but the exim module calls it sysadmin. This doesn't
really matter of course, but I noticed it while looking in to a
review on another patch and couldn't not fix it. Also, there are
two comments that are clearly remnants from having used exim.pp
as a starting point.
Change-Id: I184701c8c4d4b1e9d93d746b2ad0c5fc53443866
Puppet doesn't allow non unique namevars. Having mutliple rsyslog
service definitions violates this rule. Work around this by
consolidating all rsyslog configs in openstack_project::template.
In the process of doing this it became apparent that the ensure whoopsie
was absent resource should be consolidated in to template.pp as well so
this was done as part of the larger consolidation.
Change-Id: I7effed7bacb85386f0cf36edffe442e2cad944d0
The iptables class allowed specifying a list of public UDP ports,
just like it has support for TCP. However, a couple of places needed
to be updated to pass through the UDP port list to make it usable.
Change-Id: I00764bf1d7baff862fa51a6cd03211fe9a29ecdd
We've seen the whoopsie process eating many gigs of virtual memory
on servers, and it has a history of memory leaks. It's also more of
a desktop-oriented application geared for reporting backtraces to
Canonical when programs crash, so we don't need it on our servers
anyway.
Change-Id: I83a16b557d2601acdfcbe4c342bb05d325df77c9
Reviewed-on: https://review.openstack.org/29117
Reviewed-by: James E. Blair <corvus@inaugust.com>
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Approved: Clark Boylan <clark.boylan@gmail.com>
Tested-by: Jenkins
The osfamily fact is more flexible when we want to support more
GNU/Linux distributions while avoiding unnecessary code duplication.
Change-Id: Iea4c73c19e7f94df8daccf25c764b6a4539a1ea0
Reviewed-on: https://review.openstack.org/27400
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Reviewed-by: James E. Blair <corvus@inaugust.com>
Approved: Jeremy Stanley <fungi@yuggoth.org>
Reviewed-by: Jeremy Stanley <fungi@yuggoth.org>
Tested-by: Jenkins
The default rsyslog configuration on Ubuntu attempts to open
/dev/xconsole if it exists, and logs an error if it doesn't (which
it normally won't on a headless server anyway). This change installs
a modified configuration with the xconsole-related lines commented
out. This configuration file is valid at least on Ubuntu Oneiric,
Precise and Quantal, which covers the releases we currently use.
Change-Id: I68594d489ab50ef25d351162b9dcb50ca003c409
Reviewed-on: https://review.openstack.org/22394
Reviewed-by: James E. Blair <corvus@inaugust.com>
Approved: Clark Boylan <clark.boylan@gmail.com>
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Tested-by: Jenkins
A list of iptables commands that come after the "-A OPENSTACK-INPUT"
bit.
Change-Id: Iee595d9267738365c208f8ecb6f0fd4941b357e3
Reviewed-on: https://review.openstack.org/17172
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Reviewed-by: Jeremy Stanley <fungi@yuggoth.org>
Approved: Jeremy Stanley <fungi@yuggoth.org>
Tested-by: Jenkins
Now with extra unwrap!
Change-Id: I7c622ffa77821f33f911793fc6b6cdaaba37904a
Reviewed-on: https://review.openstack.org/15052
Reviewed-by: Clark Boylan <clark.boylan@gmail.com>
Approved: Jeremy Stanley <fungi@yuggoth.org>
Reviewed-by: Jeremy Stanley <fungi@yuggoth.org>
Tested-by: Jenkins
Pass the sysadmins list into each node definition. This allows us to
retrieve the data from hiera rather than hard coding it in the puppet
manifests. Also, update test script to use bogus sysadmin data when
testing.
Change-Id: Ide3560f16bce4d66fb95cc5021fc879476e6a712
Reviewed-on: https://review.openstack.org/12512
Reviewed-by: James E. Blair <corvus@inaugust.com>
Approved: Monty Taylor <mordred@inaugust.com>
Reviewed-by: Monty Taylor <mordred@inaugust.com>
Tested-by: Jenkins
Use puppet agent --test for puppet cron.
We don't need the private ssh or gpg key on the slaves anymore.
We do need the glance testing stuff, so stick that into hiera.
Change-Id: If94fc3f150bf569efe9461f80d3565f9825eebce
Reviewed-on: https://review.openstack.org/10851
Approved: Monty Taylor <mordred@inaugust.com>
Reviewed-by: Monty Taylor <mordred@inaugust.com>
Tested-by: Jenkins
