Once we are satisfied that we have disabled the inputs to firehose we
can land this change to stop managing it in config management. Once that
is complete the server can be removed.
Change-Id: I7ebd54f566f8d6f940a921b38139b54a9c4569d8
Now that we've got base server stuff rewritten in ansible, remove the
old puppet versions.
Depends-On: https://review.openstack.org/588326
Change-Id: I5c82fe6fd25b9ddaa77747db377ffa7e8bf23c7b
If Exim checks the default "localuser" router before our custom
"cyrus" router, then the lpmqtt account's messages will get
delivered to its system mbox rather than its Cyrus IMAP inbox. To
fix this ordering problem, disable the default localuser router and
define our own after cyrus.
Change-Id: I08b024f1b4097bf651b4c3ed97a319f579869ce4
Depends-On: https://review.openstack.org/577893
Since we re-enabled the websockets port in change
Id9bb77ef9a2ac70eec74db4ea64423b5d6351a06 things having quite stable.
Connections to mosquitto over websockets hasn't crashed. Since things
have been stable this commit unblocks the tls websockets port for
firehose.o.o and switches it to the standard 443 for https instead of
the default 8080 we were using before. This should enable websites
trying to use the firehose over websockets from https server.
Change-Id: I1b08eabf22f5345a9b4ebfae5d3dab08270efbf9
For some reason we were setting the websocket_port to true, which is not
a valid port number. This commit fixes this to just use the default and
removes that field from the config.
Change-Id: I0ac2e0919a59590182c6da7442883a6edca66a60
This commit re-enables the websockets listener on mosquitto for
firehose.o.o but without a separate tls port. The websockets connections
will just not be encrypted.
Change-Id: Ibdf1e38fa990d3fd78bfe9dead28f6ec385c0e1a
Depends-On: I2bb806210dbe5c40cfda5ac205f3659c2085f0e1
To get metrics on MQTT usage into graphite/grafana this commit adds
running mqtt_statsd on firehose
Change-Id: I90bb2c4fc7e409e9af24ca7cec7ad9d7926739e9
Depends-On: I28058bf6eac2354e3ceba0011464509ed6bdd869
So that we can set up the firehose.o.o MX records.
Change-Id: Ia8dd76fc3b1067cc2f32a0406999c9dac3a2c5b9
Depends-On: Ie6ac9e87b69b93b6e121dad8ceae5fde7931877a
We need to conserve space on the disk of firehose, this commit sets
lpmqtt to delete emails after it processes them.
Change-Id: I3c917df78e27762efcbf5ce07766702380ae2cc5
This commit adds deploying a running lpmqtt to firehose nodes.
Change-Id: Ia9d659e282a2a992b8c1a7a48577f3e59793effa
Depends-On: I613330e2bff2e6fe1cacd7e53f3c189584978ea2
A requirement for running lpmqtt is to have an imap server that is
subscribed to launchpad notifications to use as a source for the event
stream. However there is no preexisting imap server setup anywhere to
use for this. This commit deploys the necessary components for the imap
server. Setting up the launchpad user and the subscription will be a
manual process.
Change-Id: I063ac9da89d227ac59ca1cb8765e3615d7bfdbba
This commit adds the necessary configuration to pass the tls certs
to the puppet-mosquitto module to configure 2 tls enabled ports on
the mosquitto server.
Change-Id: I128b2bb5d061794746bedd7541988c65abcaafff
Depends-On: I7c77285e347d8c1b2c3318360258246b78f885a8
For unidentified reasons, mosquitto is unable to log to
/var/log/mosquitto.log when running as root but will happily log to
/var/log/mosquitto/mosquitto.log. Luckily that's already the
default in our Puppet module, so just drop the unwarranted override.
Change-Id: Ifbd39b280f089b9e18bfe8e372f180bb8ad4d1e4
This commit adds the policy to configure firehose nodes which will run
mosquitto and a germqtt daemon.
Depends-On: Ibec91fd0abc637ea7087872cab1ec8487c73acae
Depends-On: I24a0cdb6a41f6e440db8e68216b19ca61b4cba31
Change-Id: Ie3be71e16c42c32a9f479da468db6c53ebae52ac
Clark Boylan