Commit Graph

69 Commits

Author SHA1 Message Date
Jeremy Stanley 24a3c65e32 Work around CVE-2018-12532
https://codewhitesec.blogspot.com/2018/05/poor-richfaces.html

Change-Id: I2c6cd13e0aeb71e5bebc680568fdf9f6f0656b74
2019-11-08 04:52:41 +00:00
OpenDev Sysadmins 7047152960 OpenDev Migration Patch
This commit was bulk generated and pushed by the OpenDev sysadmins
as a part of the Git hosting and code review systems migration
detailed in these mailing list posts:

http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003603.html
http://lists.openstack.org/pipermail/openstack-discuss/2019-April/004920.html

Attempts have been made to correct repository namespaces and
hostnames based on simple pattern matching, but it's possible some
were updated incorrectly or missed entirely. Please reach out to us
via the contact information listed at https://opendev.org/ with any
questions you may have.
2019-04-19 19:25:36 +00:00
Colleen Murphy 7a76e77d6b Update Gemfile for Zuulv3
The logic in the Gemfile was relying on Zuulv2 variables to find out
whether the spec helper gem was already available on disk, and since
Zuulv3 has changed things it was failing to find it and downloading the
master version instead. This patch ensures the Gemfile looks for the gem
in the right place when running in CI.

Change-Id: I6dbe35f271daa41012045c7425644571f0bbe95b
2018-07-12 09:57:46 +02:00
Frank Kloeker e1fb24b955 Preparation for Zanata 4 version upgrade
There are some different changes in standalone.xml between
Zanata version 3 and 4. A version flag is implemented to
rollout the right version from template dir. For backwards
compatibility Zanata version 3 and 4 are supported yet.
Wildfly 9 stuff is removed because we have still Wildfly 10
running. That simplifies the manifest. Switch download URLs
to github, so there is also a standard to fetch files.

Change-Id: I5ada09cad7a19296802b22c2c3488ca547f2f14e
hint: http://docs.zanata.org/en/release/release-notes/#400
2017-11-27 22:32:41 +01:00
Colleen Murphy 1619f290d7 Depend on helper gem for spec_helper_acceptance
Instead of keeping a local copy of spec_helper_acceptance.rb and
requiring updates to all modules for any change, we can move it into the
common helper gem and require it from there. This will make it easier to
create and review changes that affect all puppet modules. Also change
the Gemfile to look for the gem in the local workspace if running in a
zuul environment.

Change-Id: I5c79b9661db5bec8c2de1763dc96568c9b3bba54
2017-08-18 10:41:45 +02:00
Colleen Murphy ece1848afa Update beaker setup for xenial
Add a xenial nodeset and update the spec helper to install puppet 3 from
the Ubuntu repos instead of from puppetlabs.

Change-Id: I577b70ff634478d28a54f708649269593da8bf73
2017-06-11 20:34:18 +02:00
Clark Boylan 9228961f0d Add cron to clean out logs
Wildfly by default rotates logs daily for us. It however does not delete
logs after so many days. This leads disk filling up and unhappy servers.

We had similar issues with elasticsearch as well. Rather than sort out
how to configure logging to delete old files (if even possible) we just
added a daily cron entry that uses find to delete files more than 2
weeks old. Run a similar find via cron against the wildfly logs.

Change-Id: Ia6f262afd723aca0a4d6d981326880878436d518
2017-06-09 08:23:16 -07:00
Clark Boylan 1a13f760ed Fix lint issues
This fixes linter issues with parameter ordering. Required parameters
must come first.

Change-Id: I31f1cc51ade2ac95087af3b2cdc8843396c23c12
2017-06-09 08:23:09 -07:00
Jenkins b83241f180 Merge "Install newer versions of Zanata" 2017-02-14 18:06:07 +00:00
Jenkins e34f250f87 Merge "Reduce diff between upstream and our standlone.xml files" 2017-02-14 18:06:01 +00:00
Clark Boylan f07a5492d3 Install newer versions of Zanata
This installs newer versions of zanata by unpacking published zip files
over the top of the wildfly install instead of manually injecting
specific war files.

Do this because the zip file includes the other dependencies that we
need like hibernate and the mysql connector.

Change-Id: I7632bbb30c8e3780836df65a47d35ca42b0b3f3c
2017-02-14 09:44:46 -08:00
Clark Boylan 7db140f1f4 Reduce diff between upstream and our standlone.xml files
A lot of this is equivalent xml with updated whitespace to reduce the
diff. This made it easier to see the actual differences between
upstream's config and ours.

With the whitespace changes out of the way I was able to update a few
things that were different between the two. The use db connection cache
manager value went from false to true, there was some added websocket
config, a missing weld section, and added back in our config for
specific openid source.

Change-Id: I11dd81a97662e8f24fdc364b353c7375407cfa30
2017-01-26 15:50:41 -08:00
Clark Boylan 794780091a Remove now unneeded systemd sysv compat hack
With the upgrade to the wildfly puppet module we should no longer need
this hack to get systemd sysv compat working. Remove it as it is now
dead code and conflicts with the wildfly update.

Change-Id: I39453506821ff7073290a4e5696eda8575b6cb06
2017-01-24 12:54:15 -08:00
Ian Y. Choi f4dde552a2 standalone.xml.erb for Wildfly 10 & Zanata 3.9.6
Change-Id: Iea29eba84b83879dd5e7b2e7522efc3f20ca7058
Co-Authored-By: Alex Eng <aeng@redhat.com>
2017-01-19 09:48:40 -08:00
Clark Boylan 5ced64b2bc Wildfly >=10 support
Wildfly includes these libs so we don't need to install them separately.
Check what version of wildfly is being installed and only add the libs
if necessary.

Prepare to have a different config file for 10

Change-Id: Idc09ef9d6d7200d86daad586719c2d4f6e143f1c
2017-01-19 09:48:33 -08:00
Clark Boylan 4e86b746c3 Set the mysql driver name based on ubuntu package
The different versions of ubuntu packaging use different driver names
for the mysql jdbc connector. Ensure we use the correct one on trusty
and on xenial.

Change-Id: I2cb154925bd67decd21fd440c13d3aafc4d8d982
2016-12-02 15:24:14 -08:00
Clark Boylan 51062019a4 Use correct path to systemctl
We need to run daemon-reload and that only works if the path to
systemctl is correct. Change /usr/bin/systemctl to /bin/systemctl.

Change-Id: Ib3fb1b3dfa895b6b56adb19c22adc8b148c8c540
2016-12-02 11:00:29 -08:00
Clark Boylan c5bddd9e19 Hack to support service on xenial
Xenial uses systemd which does have a sysv init script compatbility
layer but you must instruct systemd to reload its config after
installing any init scripts for this to work. Hack this in by adding an
exec for `systemctl daemon-reload` between writing the file and starting
the wildlfy service. Ideally the wildfly module would do this for us but
this should work for now (and eventually will become redundant).

Change-Id: If5c09c0be7714ce7d03ebf364823164a34c29ae4
2016-11-23 09:48:55 -08:00
Frank Kloeker 3d264a2e2b Change package install from openjdk-7-jre-headless to default-jre-headless.
This will install as depedency the right
Java package:
openjdk-6-jre-headless on Ubuntu 12.04
openjdk-7-jre-headless on Ubuntu 14.04
openjdk-8-jre-headless on Ubuntu 16.04

Java home is already set to /usr/lib/jvm/default-java

Change-Id: I834a3f3eb2f7d509be05aae9011748687f786745
2016-10-14 21:17:24 +02:00
Spencer Krum dc2b832f3b Use new infra_spec_helper for gem dependencies
Change-Id: I310c449eb8219871fc38ea0d3298515ea420d452
2016-06-21 23:33:35 -07:00
Spencer Krum f947c8248d Pin google-api-client; sanitize Gemfile
Change-Id: I30d9ebc5af6b3e3682e83f82815f8fbdebf11e62
2016-04-14 15:25:56 -07:00
Steve Kowalik 2f141c5326 Rewrite use of ::mysql::server in zanata::mysql
::mysql::server has dropped use of config_hash to tune aspects of the
deployed mysql service. Rewrite the class included inside zanata::mysql
to use overrides.

Change-Id: I6dae4744812dc2469afc947e272cc9aa14e70788
2016-01-28 16:22:51 +11:00
Steve Kowalik 68138b5240 Update Zanata client to 3.8.1
A new version of the Zanata client has been released. We should use
it.

Change-Id: I9e9470b4dd5de6bcf12480efcbc1d9c372d882a5
2015-11-23 16:13:25 +11:00
Steve Kowalik 8d25c78dc7 Switch the checksum type to SHA-1
Change-Id: Ib4b59866bdfe449918be35a443b898e58dd7e432
Depends-On: Ic98b9a76f2d2b7a9c3ca42f704a62336e8e0050c
2015-10-30 10:31:17 +09:00
Steve Kowalik ca412cf50f Move to Zanata server 3.7.3
Zanata server 3.7.3 has been released, switch to it.

Change-Id: If794ec02cbecfde370304c41bad8cd011800fb2e
2015-10-27 17:37:13 +09:00
Steve Kowalik 11cee48cf2 Move to Zanata server 3.7.2
Zanata server 3.7.2 has been released, switch to it.

Change-Id: I978369ed2b78313e4c95e8b5cb2e28e62afe47e9
2015-10-06 15:31:16 +11:00
Elizabeth K. Joseph 9453528bee Bump java_xmx from 2G to 4G
The java_xmx value in Puppet for the -Xmx JAVA_OPTS variable was
increased 10 days ago following a timeout on the dev server with an
upload.  Ran into it again during a large branching of Horizon
translations, so now increasing it to 4G following analysis of
server usage to confirm it can take the load.

Change-Id: Iee63c91456ad8f17b0a32732f6610416b6c5b987
2015-09-25 11:09:27 -07:00
Elizabeth K. Joseph 9ee18e3ba3 Set @java_xmx for Wildfly
Zanata can sometimes run into a "GC overhead limit exceeded" error
when running with the default 512m of RAM for the -Xmx JAVA_OPTS
variable.

Fortunately the Wildfly module we use has this as a variable for
it, using that (see manifests/install.pp for in the biemond-wildfly
module and associated standalone template for details).

Change-Id: I5d1f03c9d5cd57bb6bbf6650292173a3325cec4d
2015-09-15 18:14:36 +00:00
Elizabeth K. Joseph 2e4c4cce6e Rewrite install logic for modules and ROOT.war
Wildfly modules and the Zanata ROOT.war file installations were written with
execs for downloads and extraction. Switch to using the archive module.

Note: Use of md5sum for the war file is good practice and it's easy to find on
sourceforge when we update the module, but also has the added benefit of making
the archive module update our ROOT.war file if the md5sum changes, as it would
when we update the download URL for a new version. Just changing the URL won't
trigger an update to this file.

We should consider and test adding md5sum check for the Wildfly modules later,
but they aren't required right now.

Change-Id: I4223d37f5dcff5c53bd7166291eb2f3915cd9546
2015-08-25 10:55:30 -07:00
Jenkins 803dbf11dd Merge "Jump to Wildfly 9.0.1" 2015-08-21 19:48:41 +00:00
Jenkins 1a9214cc66 Merge "Switch to a class require for deployment" 2015-08-21 03:26:33 +00:00
Steve Kowalik 0931b3b547 Jump to Wildfly 9.0.1
Wildfly has released a new major version, which is verified
working by Zanata upstream, we should switch to it.

Change-Id: I612add9df4c300b9c1108296608b999f42fc728e
2015-08-21 11:24:28 +10:00
Spencer Krum e262d38157 Fix target path for regular git clone during tests
Use same target directory for zuul-cloner and
the regular git command.

Change-Id: I35f5397c943f4e1024182bf6c75fd34fa11f8edd
Co-Authored-By: Fabien Boucher <fabien.boucher@enovance.com>
2015-08-19 16:43:40 -07:00
Steve Kowalik 9e6fb0ae89 Switch to a class require for deployment
Currently the second requirement for the ROOT.war deployment is an
Exec requirement that comes deep from within biemond-wildfly. This
is a layering violation and makes it impossible to upgrade the module.
Require the install class itself, rather than a part of its internals.

Change-Id: Ie381fcddd98a65c019a44cbde9054db6fafb88f4
2015-08-18 17:00:29 +10:00
Jenkins 6e818df2c3 Merge "Move to Zanata 3.7.1" 2015-08-17 01:08:56 +00:00
Colleen Murphy abdf9b79ce Add Gemfile and puppet 4 checks
In anticipation of puppet 4, start trying to deal with puppet 4 things
that can be helpfully predicted by puppet lint plugins. Also fix errors
caught by the puppet-lint-absolute_classname-check gem and arrow
alignment errors now caught by the bundle-installed puppet-lint. Avoid
trying to catch empty_string errors for now.

Change-Id: Ie881a8ac7539fbcbc283c3a572efe2e7562ac426
2015-08-14 14:36:51 -07:00
Jenkins b697601a4b Merge "Add the Zanata server CRT into the Java keystore" 2015-08-04 21:05:07 +00:00
Jenkins df8f084120 Merge "Add second requirement for the ROOT.war deployment" 2015-08-04 16:23:39 +00:00
Steve Kowalik e84aa3e90a Add the Zanata server CRT into the Java keystore
Java does not like to make connections to untrusted HTTPS hosts, and
makes it rather difficult to not verify the certificate and its CA
chain, like our Python scripts are currently doing. To that end, drag
down the CRT for the configured Zanata server, and inject it into the
default Java keystore -- since passing a non-default keystore would
also require changes to Zanata.

Change-Id: If6aaf4d560acc25e626027d82ed103dd46328802
Depends-On: I32ef72eba436c338052be2eb83ce39e4400d047c
2015-07-29 00:17:05 +10:00
Spencer Krum 5d486e2b05 Boilerplate beaker-rspec files
Change-Id: I1984e4599064d8b9a63306ba1aaf3e8de990c5d0
2015-07-28 02:06:30 -07:00
Steve Kowalik 298946de03 Move to Zanata 3.7.1
Zanata has released 3.7.1, we should use it. I have tested it on a VM,
and aside from unable to login, it looks fine. Carlos has checked the
configuration changes for the move, and none look to be required.

Change-Id: Iaba85f6b049a191c0a753a95c07e7a875848fcb6
2015-07-27 12:48:40 +10:00
Jenkins b54e390e88 Merge "Migrate to puppet-httpd module" 2015-07-23 20:41:05 +00:00
Steve Kowalik 0ad03dc5e0 Add second requirement for the ROOT.war deployment
Deploying puppet-zanata from scratch can sometimes fail because
wildfly has yet to be unpacked when puppet goes to copy the ROOT.war
into the deployment directory, which does not yet exist. Fix this
issue by adding a requirement for tar to run as well.

Change-Id: Id0229864b64ce39c70b559e1eb5d94822f1988ec
Co-Authored-By: Colleen Murphy <colleen@gazlene.net>
2015-07-22 16:47:09 +10:00
Paul Belanger 27240c64bc Migrate to puppet-httpd module
puppet-httpd is the openstack-infra version of puppetlabs-apache
(0.0.4) release.

This patchset will remove the puppetlabs-apache namespace from -infra
allowing for possible future patchsets to use newer puppetlabs-apache
modules.

Change-Id: Id258092e1c1e21800c24512b5bdfee45b0939bca
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
2015-07-16 15:43:05 -04:00
Steve Kowalik 52d2ebc5c2 Update Zanata client to 3.7.3
A new version of the Zanata client has been released. We should use
it.

Change-Id: I922cc54aeaf1990063ec2de8bb9709b975d737a0
2015-07-14 17:15:45 +10:00
Steve Kowalik 553733379f Update Zanata client to 3.7.1
A new version of the Zanata client has been released. We should use
it.

Change-Id: I8e3e3f354087ec13cb35eb3136b18340d19875ce
2015-06-25 12:47:24 +10:00
Elizabeth K. Joseph 71b9503369 Sync template with automatic changes
The jboss.bind.address.management variable keeps being
automatically flipped to 0.0.0.0 so it's triggering a
template refresh with every puppet run. Just put that
in the template.

Change-Id: Id7faae2b9937bd1bd016b2cea7329702d0b951e2
2015-06-17 10:37:49 -07:00
Steve Kowalik 9e0edabed4 Correctly determine the server id
Due to using an undefined variable when determining the server id,
the client manifest was writing an incorrectly formatted zanata.ini
file. Furthermore, the intent of the change did not go far enough,
since it would not strip off the URI scheme or port. Due to the
complexities of parsing URIs in regular expressions, use a Puppet
function for the heavy lifting.

Change-Id: I754ee54f805c91f5548b2cf270b23c68eed3959c
2015-06-12 16:09:55 +10:00
Jenkins 81545418af Merge "Update to 3.6.2" 2015-04-24 17:56:25 +00:00
stephane 2add5b119d Update to 3.6.2
Update the version of zanata that the module installs to 3.6.2. I've
tested the resulting install and Zanata launches.

Change-Id: I7c02cf208bb744fd0f259e85d6757ed924470d54
2015-04-22 19:00:32 -07:00