Probably this should use novaobserver instead, if/when that ever exists.
Description
Description
Details
Details
| Project | Branch | Lines +/- | Subject | |
|---|---|---|---|---|
| operations/puppet | production | +13 -58 | Shinkengen: Get project hosts from openstack and not from ldap. |
Event Timeline
Comment Actions
(see also T93684)
maybe this meant $::instanceproject, which I'm getting rid of in https://gerrit.wikimedia.org/r/#/c/309008/2 ?
Comment Actions
(Assuming this task is really about "Make shinkengen not rely on LDAP":) @AlexMonk-WMF, does the OpenStack API (as it is now exposed) allow to query the Puppet roles for each instance?
Comment Actions
I'm doing it in https://gerrit.wikimedia.org/r/#/c/328611/ - the roles thing is not exactly an OpenStack API, but it is an API that lets you query puppet roles for a given instance. And you can now use the OpenStack APIs to get lists of projects and instances.
Comment Actions
Ha! I'm not watching changes to the shinken module, so I hadn't noticed get_instance_roles() before (and all the other stuff you did there). So: Thanks! :-)
Comment Actions
I think this was done by my previous puppet patch (https://gerrit.wikimedia.org/r/#/c/309008/). I think we should re-purpose it as 'remove reliance on ldap from shinkengen' and close it when my new puppet patch (https://gerrit.wikimedia.org/r/#/c/328611/) is done. @Andrew?
Comment Actions
I wrote an alternative fix for this, and I'm not sure which I like better. Probably Krenair's, in theory, although there may be package dependency issues. I'll test both.
Comment Actions
Change 331005 had a related patch set uploaded (by Andrew Bogott):
Shinkengen: Get project hosts from openstack and not from ldap.
Comment Actions
Change 331005 abandoned by Andrew Bogott:
Shinkengen: Get project hosts from openstack and not from ldap.
Reason:
Dropping in favor of https://gerrit.wikimedia.org/r/#/c/328611/