Page MenuHomePhabricator

Remove reliance on ldap $::projectid from shinkengen
Closed, ResolvedPublic


Probably this should use novaobserver instead, if/when that ever exists.

Related Objects

Event Timeline

Andrew created this task.Aug 10 2015, 8:50 PM
Andrew claimed this task.
Andrew raised the priority of this task from to Medium.
Andrew updated the task description. (Show Details)
Andrew added subscribers: gerritbot, yuvipanda, coren and 2 others.

Sounds like T85612 would be necessary?

Andrew removed Andrew as the assignee of this task.Nov 16 2015, 5:51 PM
Luke081515 added a subscriber: Luke081515.

Seems like there is no patch here?

Luke081515 moved this task from Triage to Backlog on the Cloud-Services board.Mar 25 2016, 4:15 PM

(see also T93684)
maybe this meant $::instanceproject, which I'm getting rid of in ?

scfc added a subscriber: scfc.Dec 22 2016, 8:05 AM

(Assuming this task is really about "Make shinkengen not rely on LDAP":) @AlexMonk-WMF, does the OpenStack API (as it is now exposed) allow to query the Puppet roles for each instance?

AlexMonk-WMF added a comment.EditedDec 22 2016, 9:30 AM

I'm doing it in - the roles thing is not exactly an OpenStack API, but it is an API that lets you query puppet roles for a given instance. And you can now use the OpenStack APIs to get lists of projects and instances.

scfc added a comment.Dec 22 2016, 12:35 PM

Ha! I'm not watching changes to the shinken module, so I hadn't noticed get_instance_roles() before (and all the other stuff you did there). So: Thanks! :-)

I think this was done by my previous puppet patch ( I think we should re-purpose it as 'remove reliance on ldap from shinkengen' and close it when my new puppet patch ( is done. @Andrew?

Krenair claimed this task.Jan 5 2017, 10:22 PM

I wrote an alternative fix for this, and I'm not sure which I like better. Probably Krenair's, in theory, although there may be package dependency issues. I'll test both.

Change 331005 had a related patch set uploaded (by Andrew Bogott):
Shinkengen: Get project hosts from openstack and not from ldap.

Change 331005 abandoned by Andrew Bogott:
Shinkengen: Get project hosts from openstack and not from ldap.

Dropping in favor of