opendev/system-config
Code Issues Proposed changes
system-config/inventory/service/group_vars/bastion.yaml
Clark Boylan e66eeb8c3c Remove most linaro cloud resources 
This removes ansible configuration for the linaro cloud itself and the
linaro cloud mirror. This cloud is in the process of going away and
having these nodes in our inventory is creating base jobs failures due
to unreachable nodes. This then dominoes into not running the LE refresh
job and now some certs are not getting renewed. Clean this all up so
that the rest of our systems are happy.

Note that we don't fully clean up the idea of an unmanaged group as
there may be other locations we want to do something similar (OpenMetal
perhaps?). We also don't remove the openstack clouds.yaml entries for
the linaro cloud yet. It isn't entirely clear when things will go
offline, but it may be as late as August 10 so we keep those credentials
around as they may be useful until then.

Change-Id: Idd6b455de8da2aa9901bf989b1d131f1f4533420
2024-08-02 09:21:11 -07:00

245 lines
9.2 KiB
YAML
Raw Blame History

bastion_key_exclusive: false
kube_config_template: clouds/bridge_kube_config.yaml.j2
extra_users:
- zuul
cloud_launcher_profiles:
# Profile to launch AFS server for nodepool.
- name: openstackci-projects
projects:
- name: openstackci
description: OpenStack CI project
domain: default
- name: openstackzuul
description: OpenStack zuul project
domain: default
- name: openstackci-security
security_groups:
- name: default
description: Default security group
security_groups_rules:
- security_group: default
ethertype: IPv4
remote_group: default
state: absent
- security_group: default
ethertype: IPv6
remote_group: default
state: absent
- security_group: default
ethertype: IPv4
remote_ip_prefix: 0.0.0.0/0
- security_group: default
ethertype: IPv6
remote_ip_prefix: ::/0
- name: openstackci-keypairs
keypairs:
- name: infra-root-keys-2020-05-13
public_key: |
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDLsTZJ8hXTmzjKxYh/7V07mIy8xl2HL+9BaUlt6A6TMsL3LSvaVQNSgmXX5g0XfPWSCKmkZb1O28q49jQI2n7n7+sHkxn0dJDxj1N2oNrzNY7pDuPrdtCijczLFdievygXNhXNkQ2WIqHXDquN/jfLLJ9L0jxtxtsUMbiL2xxZEZcaf/K5MqyPhscpqiVNE1MjE4xgPbIbv8gCKtPpYIIrktOMb4JbV7rhOp5DcSP5gXtLhOF5fbBpZ+szqrTVUcBX0oTYr3iRfOje9WPsTZIk9vBfBtF416mCNxMSRc7KhSW727AnUu85hS0xiP0MRAf69KemG1OE1pW+LtDIAEYp mordred@camelot
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvKYcWK1T7e3PKSFiqb03EYktnoxVASpPoq2rJw2JvhsP0JfS+lKrPzpUQv7L4JCuQMsPNtZ8LnwVEft39k58Kh8XMebSfaqPYAZS5zCNvQUQIhP9myOevBZf4CDeG+gmssqRFcWEwIllfDuIzKBQGVbomR+Y5QuW0HczIbkoOYI6iyf2jB6xg+bmzR2HViofNrSa62CYmHS6dO04Z95J27w6jGWpEOTBjEQvnb9sdBc4EzaBVmxCpa2EilB1u0th7/DvuH0yP4T+X8G8UjW1gZCTOVw06fqlBCST4KjdWw1F/AuOCT7048klbf4H+mCTaEcPzzu3Fkv8ckMWtS/Z9Q== jeblair@operational-necessity
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCnfoVhOTkrY7uoebL8PoHXb0Fg4jJqGCbwkxUdNUdheIdbnfyjuRG3iL8WZnzf7nzWnD+IGo6kkAo8BkNMK9L0P0Y+5IjI8NH49KU22tQ1umij4EIf5tzLh4gsqkJmy6QLrlbf10m6UF4rLFQhKzOd4b2H2K6KbP00CIymvbW3BwvNDODM4xRE2uao387qfvXZBUkB0PpRD+7fWPoN58gpFUm407Eba3WwX5PCD+1DD+RVBsG8maIDXerQ7lvFLoSuyMswv1TfkvCj0ZFhSFbfTd2ZysCu6eryFfeixR7NY9SNcp9YTqG6LrxGA7Ci6wz+hycFHXlDrlBgfFJDe5At clark@work
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQD3KnRBTH5QPpKjf4RWu4akzYt2gwp796cMkFl5vu8e7G/cHuh4979FeNJXMVP6F3rvZB+yXDHLCU5LBVLq0K+1GbAZT/hH38hpMOIvniwKIquvI6C/drkVPHO6YmVlapw/NI530PGnT/TAqCOycHBO5eF1bYsaqV1yZqvs9v7UZc6J4LukoLZwpmyWZ5P3ltAiiy8+FGq3SLCKWDMmv/Bjz4zTsaNbSWThJi0BydINjC1/0ze5Tyc/XgW1sDuxmmXJxgQp4EvLpronqb2hT60iA52kj8lrmoCIryRpgnbaRA7BrxKF8zIr0ZALHijxEUeWHhFJDIVRGUf0Ef0nrmBv fungi-openstack-2015
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILOjz+dkwRWTJcW9Gt3iGHSzRBsvVlTAK6G2oH3+0D41 iwienand+osinfra@redhat.com
ssh-rsa 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 pabelanger@redhat.com
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGmc5fbzMptjAb5D86zSH13ZYCbf3QuV1jk9hL0r1qHw frickler@os-infra-2017
- name: infra-root-keys-2024-04-08
public_key: |
ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAvKYcWK1T7e3PKSFiqb03EYktnoxVASpPoq2rJw2JvhsP0JfS+lKrPzpUQv7L4JCuQMsPNtZ8LnwVEft39k58Kh8XMebSfaqPYAZS5zCNvQUQIhP9myOevBZf4CDeG+gmssqRFcWEwIllfDuIzKBQGVbomR+Y5QuW0HczIbkoOYI6iyf2jB6xg+bmzR2HViofNrSa62CYmHS6dO04Z95J27w6jGWpEOTBjEQvnb9sdBc4EzaBVmxCpa2EilB1u0th7/DvuH0yP4T+X8G8UjW1gZCTOVw06fqlBCST4KjdWw1F/AuOCT7048klbf4H+mCTaEcPzzu3Fkv8ckMWtS/Z9Q== jeblair@operational-necessity
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPMd15RqqpUqBp2f+17HOQEJkPCwpismoKDisVOsFXEr id_ed25519_clarkbwork2024
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEcArU//VFneyQE82/JbzRx/VRDzFm+gCLX5rK1VMbp7 fungi-opendev-2024
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILOjz+dkwRWTJcW9Gt3iGHSzRBsvVlTAK6G2oH3+0D41 iwienand+osinfra@redhat.com
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIW7n3n1zAG8VM/ZfIB8tf1191/Ee6DgsOHUzv+9PB8k frickler@os-infra-2024
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICEGSGGtTSLe/fEU5bH44XHdT6g0arzPFTHobs6F9z6l tonyb@opendev
- name: bridge-root-2014-09-15
public_key: |
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDSLlN41ftgxkNeUi/kATYPwMPjJdMaSbgokSb9PSkRPZE7GeNai60BCfhu+ky8h5eMe70Bpwb7mQ7GAtHGXPNU1SRBPhMuVN9EYrQbt5KSiwuiTXtQHsWyYrSKtB+XGbl2PhpMQ/TPVtFoL5usxu/MYaakVkCEbt5IbPYNg88/NKPixicJuhi0qsd+l1X1zoc1+Fn87PlwMoIgfLIktwaL8hw9mzqr+pPcDIjCFQQWnjqJVEObOcMstBT20XwKj/ymiH+6p123nnlIHilACJzXhmIZIZO+EGkNF7KyXpcBSfv9efPI+VCE2TOv/scJFdEHtDFkl2kdUBYPC0wQ92rp puppet-remote-2014-09-15
- name: openstackci-flavors
flavors:
- name: nodepool
ram: 8192
vcpus: 8
disk: 80
- name: mirror
ram: 8192
vcpus: 4
disk: 250
- name: admin-roles
roles:
- name: Member
- name: openstackci-user-roles
user_roles:
- role: Member
user: openstackci
project: openstackci
- name: openstackzuul-user-roles
user_roles:
- role: Member
user: openstackzuul
project: openstackzuul
- name: openstackci-networking
networks:
- name: openstackci-network1
subnets:
- name: openstackci-subnet1
network_name: openstackci-network1
cidr: '10.0.1.0/24'
- name: openstackzuul-networking
networks:
- name: openstackzuul-network1
subnets:
- name: openstackzuul-subnet1
network_name: openstackzuul-network1
cidr: '10.0.1.0/24'
- name: opendevci-networking
networks:
- name: opendevci-network1
subnets:
- name: opendevci-subnet1
network_name: opendevci-network1
cidr: '10.0.1.0/24'
- name: opendevzuul-networking
networks:
- name: opendevzuul-network1
subnets:
- name: opendevzuul-subnet1
network_name: opendevzuul-network1
cidr: '10.0.1.0/24'
cloud_launcher_clouds:
# ovh
- name: openstackci-ovh-bhs1
oscc_cloud: openstackci-ovh
region_name: BHS1
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackjenkins-ovh-bhs1
oscc_cloud: openstackjenkins-ovh
region_name: BHS1
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackci-ovh-gra1
oscc_cloud: openstackci-ovh
region_name: GRA1
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackjenkins-ovh-gra1
oscc_cloud: openstackjenkins-ovh
region_name: GRA1
profiles:
- openstackci-keypairs
- openstackci-security
# vexxhost
- name: openstackci-vexxhost-mtl1
oscc_cloud: openstackci-vexxhost
region_name: ca-ymq-1
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackjenkins-vexxhost-mtl1
oscc_cloud: openstackjenkins-vexxhost
region_name: ca-ymq-1
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackci-vexxhost-sjc1
oscc_cloud: openstackci-vexxhost
region_name: sjc1
profiles:
- openstackci-keypairs
- openstackci-security
- name: openstackjenkins-vexxhost-sjc1
oscc_cloud: openstackjenkins-vexxhost
region_name: sjc1
profiles:
- openstackci-keypairs
- openstackci-security
# rackspace
- name: openstackci-rax-dfw
oscc_cloud: openstackci-rax
region_name: DFW
profiles:
- openstackci-keypairs
- name: openstackjenkins-rax-dfw
oscc_cloud: openstackjenkins-rax
region_name: DFW
profiles:
- openstackci-keypairs
- name: openstackci-rax-ord
oscc_cloud: openstackci-rax
region_name: ORD
profiles:
- openstackci-keypairs
- name: openstackjenkins-rax-ord
oscc_cloud: openstackjenkins-rax
region_name: ORD
profiles:
- openstackci-keypairs
- name: openstackci-rax-iad
oscc_cloud: openstackci-rax
region_name: IAD
profiles:
- openstackci-keypairs
- name: openstackjenkins-rax-iad
oscc_cloud: openstackjenkins-rax
region_name: IAD
profiles:
- openstackci-keypairs
# OSUOSL
- name: opendevci-osuosl
oscc_cloud: opendevci-osuosl
region_name: RegionOne
profiles:
- openstackci-keypairs
- openstackci-security
- name: opendevzuul-osuosl
oscc_cloud: opendevzuul-osuosl
region_name: RegionOne
profiles:
- openstackci-keypairs
- openstackci-security
# OpenMetal Cloud
- name: opendevci-openmetal
oscc_cloud: opendevci-openmetal
region_name: IAD3
profiles:
- openstackci-keypairs
- openstackci-security
- name: opendevzuul-openmetal
oscc_cloud: opendevzuul-openmetal
region_name: IAD3
profiles:
- openstackci-keypairs
- openstackci-security
View Git Blame Copy Permalink