17167 Commits

Author SHA1 Message Date
Ian Wienand
4ffcc89c8a statusbot: don't use opendevstatus name in testing
Currently when we run tests, this connects to OFTC and tries to use
the opendevstatus nick as it is the default.  Replace this with a
random username.  Also override the channels list, so it only joins

Limnoria was already using a non-conflicting name, but switch it to a
random one for consistency and possible parallel running.  This also
already only joins #opendev-sandbox.

Change-Id: I860b0f1ed4f99140dda0f4d41025f0b5fb844115
2021-06-11 22:59:24 +10:00
Ian Wienand
f95b139be5 limnoria: fix nicks syntax
This was introduced with I9b5fdf484b6e5d8c9af60708ff02d3c60e427fbd

Change-Id: I4d8726ad519f0faf03c2de9d566529491edcfb8a
2021-06-11 21:15:05 +10:00
Ian Wienand
ff899732b4 limnoria: disable flush (really this time) and don't join until nickserv
Change-Id: Ibb352ded6b913d73a1e8b5621c4f01e9d8548f6f
2021-06-11 20:09:44 +10:00
Ian Wienand
868a42a85a Move statusbot channels out of hiera
This makes I246b2723372594e65bcd1ba90215d6831d4c0c72 active

Change-Id: I5a9efa2edc2fe6fb70e21d4b58fd4283d2d5972d
2021-06-11 18:15:48 +10:00
Zuul
b9d885ff2d Merge "Run statusbot from eavesdrop01.opendev.org" 2021-06-11 07:45:55 +00:00
Zuul
fe6581f89f Merge "Cleanup eavesdrop puppet references" 2021-06-11 07:45:46 +00:00
Zuul
048aa39ef0 Merge "static: enable SSLProxyEngine for meetings" 2021-06-11 05:02:34 +00:00
Ian Wienand
438d5037af static: enable SSLProxyEngine for meetings
I4a422bb9589c8a8761191313a656f8377e93422f switched this to proxy via
SSL, however this is required for that to work.

Change-Id: I9b9150b7b1ed53a3e8f742156b686daf156a15b9
2021-06-11 13:42:10 +10:00
Ian Wienand
b2ca63c3b7 limnoria: production fixes
Don't flush the config.  We don't want limnoria to overwrite our
config, and we dont' configure it manually via interaction.

Make sure the Services plugin is loaded to identify with nickserv.

Set the logs2html job to 15 minutes, same as the old puppet setting.

Set the logging level to INFO to avoid verbose logging.

Set the flush option to True so logs are written immediately

Setup rotation on the logfile

Change-Id: I9b5fdf484b6e5d8c9af60708ff02d3c60e427fbd
2021-06-11 13:14:42 +10:00
Zuul
f80ab86043 Merge "Move meetbot config to eavesdrop01.opendev.org" 2021-06-11 00:10:56 +00:00
Zuul
a17e7a6b81 Merge "Add Fedora 34 mirrors" 2021-06-10 22:27:19 +00:00
Ian Wienand
23fac31c92 Run statusbot from eavesdrop01.opendev.org
This installs statusbot on eavesdrop01.opendev.org.

Otherwise it's just config translation and bringing up the daemon.

Change-Id: I246b2723372594e65bcd1ba90215d6831d4c0c72
2021-06-11 07:52:51 +10:00
Zuul
bfaa4713eb Merge "Remove system-config-legacy-logstash-filters job" 2021-06-10 17:29:17 +00:00
Ian Wienand
6a04c1ea9e limnoria: fix some minor typos
Fix some spelling issues, incorrectly copy/pasted code and comment-out
an unnecessary config option that makes the connection fail.

Change-Id: If558fb15adbd4d598b5bea6f51a888c87c381561
2021-06-10 16:06:30 +10:00
Zuul
084879c1fa Merge "limnoria/meetbot setup on eavesdrop01.opendev.org" 2021-06-10 02:04:53 +00:00
Zuul
c51b860620 Merge "Create ircbot container" 2021-06-10 01:04:32 +00:00
Ian Wienand
8a1f6d9764 Cleanup eavesdrop puppet references
Cleanup documenation, puppet references and the eavesdrop_opendev
group.

Change-Id: I67096d8eced0be54db9b1ee277b24602d8c20f00
2021-06-10 09:02:23 +10:00
Ian Wienand
ccda6d08a1 Move meetbot config to eavesdrop01.opendev.org
This enables the new eavesdrop01.opendev.org server in all current
channels.  Puppet has been disabled on the old server and we will
manually stop supybot/meetbot and mirgrate logs before this applies.

Change-Id: I4a422bb9589c8a8761191313a656f8377e93422f
2021-06-10 09:02:23 +10:00
Ian Wienand
403773d55a limnoria/meetbot setup on eavesdrop01.opendev.org
This installs our Limnoira/meetbot container and configures it on
eavesdrop01.opendev.org.  I have ported the configuration from the old
puppet as best I can (it is very verbose); my procedure was to use the
Limnoira wizard to start a new config file then backport everything
from the old file.  I felt this was best to not miss any new options.

This does channel logging (via built-in ChannelLogger plugin, along
with a cron job for logs2html) and runs our fork of meetbot.

It exports the channel logs via HTTP to /irclogs and meetings logs to
/meetings.  meetings.opendev.org will proxy to these two locations
when the server is active.

Note this has not ported the channel list; so the bot will not be
listening in our channels.

Change-Id: I9f9a466c271e1a706f9f98f816de0e84047519f1
2021-06-10 09:02:16 +10:00
Ian Wienand
0d00b28da8 Create ircbot container
This container installs Limnoria, the supybot replacement as the
generic ircbot container.  We install meetbot plugin as a sibling
project.

Previously we've conflated supybot with meetbot, which is a bit
confusing because meetbot is a plugin, but we also use other plugins
such as the channel logger.  We also hope to convert some of our other
bots to Limnoria (ptgbot?) to consolidate everything.  For this reason
I've called this the more generic "ircbot".  The image installs
meetbot as a sibling project, with the idea being any other plugins
would also be installed as siblings.

The siblings install expects the work directory to be a relative
directory.  I'm not sure we run this from other projects, but this
will work the same if we do.

Depends-On: https://review.opendev.org/c/opendev/meetbot/+/793876
Change-Id: Icee4c6bbb5ea235ba69c10f800a14bbf5beef3d5
2021-06-10 09:00:43 +10:00
Mohammed Naser
2e4858e596 Add Fedora 34 mirrors
Change-Id: I157484236c3dd8783066d9b1b6d7906ed3649c3e
2021-06-09 13:30:33 -04:00
Zuul
632b2f9df7 Merge "Cleanup ask.openstack.org" 2021-06-09 05:42:26 +00:00
Clark Boylan
3639d7b535 Remove special x/ handling patch in gerrit
Upstream Gerrit has been fixing this up. It's in 3.2 as of
https://gerrit-review.googlesource.com/c/gerrit/+/306519

Change-Id: Ie8196c38629b4893364b969aeb6ac466cff0c93f
2021-06-08 13:07:19 -07:00
Clark Boylan
b53914f812 Update Gerrit plugin versions for Gerrit 3.2 and 3.3
This updates our plugin versions to keep up with Gerrit releases. We
build from the stable branch which means we need to periodically bump
plugin tagged versions to keep up when stable branches for the plugins
are not available.

Change-Id: I5bb50d8610ebdbdb9c6a70ad8dde732067cc368f
2021-06-08 13:06:00 -07:00
Zuul
39731fd614 Merge "Forward openstack-security ML to openstack-discuss" 2021-06-08 17:50:23 +00:00
Ian Wienand
f66efc0d9c Restore eavesdrop01.openstack.org to webservers group
This host is no longer under puppet control, but should still be a
webserver to export the logs it is still collecting until we finish
moving that to the new server.  Restore the match to open*

See I809f9af3e78f566362142790f6c79654ef5b8959

Change-Id: I524c0a7c5cc93313c180eca68b67a0f0582474df
2021-06-08 16:07:55 +10:00
Ian Wienand
7de885b5ee Cleanup ask.openstack.org
This was retired with I8a31f8fcf9b3064c0ae58e463a6014dc14b518a7

Change-Id: Ieafac856b0feb91f41f05084aa669e2ccb92569d
2021-06-08 14:35:28 +10:00
Zuul
1077849a52 Merge "Move gerritbot/accessbot to new eavesdrop server" 2021-06-08 04:23:45 +00:00
Zuul
11267f50c1 Merge "Add eavesdrop01.opendev.org server" 2021-06-08 00:40:42 +00:00
Zuul
b5423352d5 Merge "Disable puppet runs on eavesdrop" 2021-06-08 00:34:26 +00:00
Zuul
77a175175d Merge "Disable eavesdrop direct publishing job" 2021-06-08 00:34:18 +00:00
Ian Wienand
fec8018581 Move gerritbot/accessbot to new eavesdrop server
This moves these services to eavesdrop01.opendev.org, a new
Focal-based server to host IRC services.

We have stopped running puppet on eavesdrop01.openstack.org so there
is nothing left for it to do (note the server is still running
meetbot/ptgbot).  Remove the commented out puppet run, and remove the
server from puppet groups.  Update the host in the Zuul jobs to the
new node.

Change-Id: I809f9af3e78f566362142790f6c79654ef5b8959
2021-06-08 08:16:56 +10:00
Ian Wienand
372e58bec1 test_static: fix StarlingX match
It looks like something changed in a header field that makes this not
match.  Use a less specific string that should.

Change-Id: I55b2c63e026bf2b68821a9a0302a82d5728ab114
2021-06-07 14:47:05 +10:00
Ian Wienand
fb94b79e82 Add eavesdrop01.opendev.org server
This adds a new server to take over from eavesdrop01.openstack.org.

We limit the puppet installs, etc. to the openstack.org server.  The
new server is in the group eavesdrop_opendev as we cut over services.
A stub for basic installation is added to the service playbook.

Depends-On: https://review.opendev.org/c/opendev/zone-opendev.org/+/795004
Change-Id: I88c3059532e4d6ab267fdec5b390daefa5b0c4a1
2021-06-07 12:59:02 +10:00
Ian Wienand
7e80f08a62 Disable puppet runs on eavesdrop
As noted inline, we want to merge Python 3 fixes to meetbot master and
don't want the production server to try installing it any more.
eavesdrop01.opendev.org will be the replacement.

Changes to install Limnoria/meetbot and perform meeting and channel
logging on eavesdrop01.opendev.org follow.  This will leave ptgbot as
the last service running in-situ on eavesdrop01.  This should be moved
to the opendev server when it is updated to move to OFTC.

Change-Id: I663fccff0a2be40e59b453738ce0404b7a21d9e5
2021-06-07 12:59:02 +10:00
Ian Wienand
2678dd6240 Disable eavesdrop direct publishing job
eavesdrop.openstack.org is now a CNAME to meetings.opendev.org, and
the meeting information is published by the irc-meetings repository
jobs directly via AFS.  There is no need for the zuul-user login any
more.

Change-Id: I88d3cb5c5e33da7efb56b4f7ca4956c9adf82ee0
Depends-On: https://review.opendev.org/c/openstack/project-config/+/794091
2021-06-07 12:58:58 +10:00
Zuul
6ad774ad60 Merge "Explain when to add admins and ops with accessbot" 2021-06-07 01:33:33 +00:00
Zuul
312c6cd7b6 Merge "Update IRC bot nick registration process for OFTC" 2021-06-07 01:33:00 +00:00
Zuul
e65181e67d Merge "Update IRC bot troubleshooting doc for OFTC" 2021-06-07 01:32:53 +00:00
Zuul
b8b72cf589 Merge "Update doc on banning disruptive users for OFTC" 2021-06-07 01:32:21 +00:00
Zuul
5d16b493bc Merge "Update basic IRC operator commands doc for OFTC" 2021-06-07 01:32:04 +00:00
Zuul
04163b9e75 Merge "Update accessbot instructions for OFTC" 2021-06-07 01:31:56 +00:00
Zuul
d64e6f2581 Merge "Update channel renaming instructions for OFTC" 2021-06-07 01:30:37 +00:00
Jeremy Stanley
05c9b06f24 Explain when to add admins and ops with accessbot
We're happy for teams to manage their individual IRC channel access
lists through our accessbot configuration if they want, so explain
the situations in which they might choose to add channel ops or
admins, and the differences between them.

Change-Id: I4ae4463fe5017176d2d93cbaac6820fe11350899
2021-06-03 19:18:26 +00:00
Jeremy Stanley
84c63ff1bf Forward openstack-security ML to openstack-discuss
The openstack-security mailing list is officially closing, and wants
future attempts at posting to end up on openstack-discuss instead:

http://lists.openstack.org/pipermail/openstack-security/2021-June/006077.html

This was also the only remaining user of the notify-impact Gerrit
hook, so we can stop installing/running it.

Change-Id: Id60b781beb072366673b32326e32fd79637c1219
2021-06-03 17:57:54 +00:00
Zuul
791d027c64 Merge "Add static eavesdrop.openstack.org site" 2021-06-03 06:47:47 +00:00
Ian Wienand
0cfedd2318 Add static eavesdrop.openstack.org site
We are trying to replace eavesdrop01.openstack.org

The main landing page serves meeting information which has been moved
to a static site served from AFS at meeting.opendev.org.  Redirect
everything to there.

The IRC logs are currently still hosted on eavesdrop01, so while we
work on migrating these, proxy meeting.opendev.org/<irclogs|meetings>
to this server.

Note this will be a no-op until we move the DNS, but we should make
the eavesdrop acme records before merging.

Change-Id: I5c9c23e619dbe930a77f657b5cd6fdd862034301
2021-06-03 14:34:20 +10:00
Zuul
4f51156785 Merge "Serve meetings.opendev.org" 2021-06-03 00:33:03 +00:00
Jeremy Stanley
f56b1f29a9 Update IRC bot nick registration process for OFTC
The IRC bot nick registration process had Freenode-specific examples
and references, so switch those to reflect we're now using OFTC.
Also the weechat command-line syntax was outdated and did not work
with newer versions of the client, so fix that.

Change-Id: I74b60e997b32cc51e8db6e5b7a76d6f281dfc211
2021-06-02 17:27:14 +00:00
Jeremy Stanley
c6137dce82 Update IRC bot troubleshooting doc for OFTC
The troubleshooting section of our IRC doc had examples specific to
Freenode, update those. Further, drop the bit about /etc/hosts on
eavesdrop, since OFTC offers an IPv4-only round-robin name we can
use directly in our meetbot configuration to work around the
TwistedPython+SSL+IPv6 DNS resolution bug without resorting to
hard-coding addresses on the server.

Change-Id: I7ac1542dcd0a4f088b8c475756338851994f5433
2021-06-02 17:27:14 +00:00