The opendev project has been moving away from puppet and this is one of
the puppet modules that is no longer used. To simplify things for us we
are taking the extra step of retiring this repo.
Change-Id: I0d5dd508af2482bc43db9c25bf197dfb7d0eadc4
This is a mechanically generated change to replace openstack.org
git:// URLs with https:// equivalents.
This is in aid of a planned future move of the git hosting
infrastructure to a self-hosted instance of gitea (https://gitea.io),
which does not support the git wire protocol at this stage.
This update should result in no functional change.
For more information see the thread at
http://lists.openstack.org/pipermail/openstack-discuss/2019-March/003825.html
Change-Id: I52a3f382c5059a03d9c61662a48d06e20014ec4c
This simplification takes advantage of the fact that ensure => running
is equivalent to ensure => true (and similar for stopped and false) to
reduce the number of variables we have to track to ensure a service is
both enabled and running or disabled and stopped.
This also fixes krb5-kpropd to run on boot without waiting for a puppet
pulse.
Change-Id: I7255cd6bd719946b7525bcbbff983038d81b48a6
Since ubuntu 16.04 or so the krb5-admin-server package is broken in the
postinst scripts. What happens is they try to set a debconf value if the
defaults file for this service sets RUN_KADMIND to false. Unfortunately
the key/question debconf is setting has no associated templates entry so
package install fails.
We work around this by not setting this value in the defaults file on
newer ubuntu and instead rely on our init system to manage that state.
Change-Id: I0ffe2a2acbe76acb0069df18253367ed2528241f
Add tests to ensure the manifests apply cleanly and a kerberos ticket
can be granted.
The krb5-admin-server service won't start without the realm being
manually set up, so add those steps in between running the manifest once
and checking for idempotency. Once the realm is set up, the service will
automatically start and puppet shouldn't try to start it again.
Change-Id: I7f8aea80ea40bf4ff28fafa6a53c9d26e9c303ec
Add a systemd script, which is backported from Artful. So good news if
we are still running puppet when ubuntu 18.04 upgrades happen, we can
delete this code.
Change-Id: I806abac132efedfd2b97dea1d0954e6235f26673
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
Instead of keeping a local copy of spec_helper_acceptance.rb and
requiring updates to all modules for any change, we can move it into the
common helper gem and require it from there. This will make it easier to
create and review changes that affect all puppet modules. Also change
the Gemfile to look for the gem in the local workspace if running in a
zuul environment.
Change-Id: I2dea0aa652ce3aa6323c533e3c61cb4f28fe2dd1
Add a xenial nodeset and update the spec helper to install puppet 3 from
the Ubuntu repos instead of from puppetlabs.
Change-Id: Ib4b6a09d50f1e9a2eaa9ae32c70b1fed1f02ae4e
This prohibits the client being installed some other way. If we
want to install afs on a kerberos server, it will want to include
the client. If we don't want to install afs but we do want to
install kerb clients, we will need to add kerberos::client to the
kdc definition.
Change-Id: I6f2a370b521da08184e388ae0f4ceff363af5c0b
Order and intendation of those parameters are changed
to follow Puppet Style Guide recommendation [0].
Moreover, it will allow to an user to find much faster
a variable in a list of variables.
[0]. https://docs.puppetlabs.com/guides/style_guide.html
Change-Id: I80d176298cd8897f0d6e8b056823f4ad97fbef44
Use same target directory for zuul-cloner and
the regular git command.
Change-Id: I7e37bd92432ae54eca3fa447fad4ed3b4fb7db6f
Co-Authored-By: Fabien Boucher <fabien.boucher@enovance.com>
In anticipation of puppet 4, start trying to deal with puppet 4 things
that can be helpfully predicted by puppet lint plugins. Also fix lint
errors caught by the puppet-lint-absolute_classname-check gem as well
as arrow alignment errors not caught before.
Change-Id: I0b891a9f89508bca8cd30cb2fb2253779a3661b4
The http://ci.openstack.org/ documentation site has been deprecated,
replaced by redirects to corresponding paths within
http://docs.openstack.org/infra/ where other Project Infrastructure
documentation already resides.
Change-Id: Ib3ee9656df85c71a6a4c7592b3b94c3ac6f77ca8
The content of this project is Apache 2 licensed, but we should
include a standard LICENSE file just to be clear about that.
Change-Id: Iee6320b9d7e35fbe8d3b0a9794f3e485c18ef2c8
The space around the '=' was resulting in:
/usr/local/bin/run-kprop.sh: 2: /usr/local/bin/run-kprop.sh: kdclist: not found
Change-Id: I7e1b5499cb324a5b7986e8fd98d5f8492eed3390
Step one in an AFS cell is getting kerberos working. This does not
provide end-to-end KDC management - the realm still needs to be
created by hand.
Change-Id: I891d784d676ab79e7aca9c883dd9e705a30db6e5
Clark Boylan