Page MenuHomePhabricator

Remove reliance on ldap $::projectid from shinkengen
Closed, ResolvedPublic


Probably this should use novaobserver instead, if/when that ever exists.

Related Objects

Event Timeline

Luke081515 subscribed.

Seems like there is no patch here?

(see also T93684)
maybe this meant $::instanceproject, which I'm getting rid of in ?

(Assuming this task is really about "Make shinkengen not rely on LDAP":) @AlexMonk-WMF, does the OpenStack API (as it is now exposed) allow to query the Puppet roles for each instance?

I'm doing it in - the roles thing is not exactly an OpenStack API, but it is an API that lets you query puppet roles for a given instance. And you can now use the OpenStack APIs to get lists of projects and instances.

Ha! I'm not watching changes to the shinken module, so I hadn't noticed get_instance_roles() before (and all the other stuff you did there). So: Thanks! :-)

I think this was done by my previous puppet patch ( I think we should re-purpose it as 'remove reliance on ldap from shinkengen' and close it when my new puppet patch ( is done. @Andrew?

I wrote an alternative fix for this, and I'm not sure which I like better. Probably Krenair's, in theory, although there may be package dependency issues. I'll test both.

Change 331005 had a related patch set uploaded (by Andrew Bogott):
Shinkengen: Get project hosts from openstack and not from ldap.

Change 331005 abandoned by Andrew Bogott:
Shinkengen: Get project hosts from openstack and not from ldap.

Dropping in favor of