Page MenuHomePhabricator
Create Task
Maniphest T108625

Remove reliance on ldap $::projectid from shinkengen
Closed, ResolvedPublic
Actions

Description

Probably this should use novaobserver instead, if/when that ever exists.

Details

ProjectBranchLines +/-Subject
operations/puppetproduction+13 -58Shinkengen: Get project hosts from openstack and not from ldap.
Customize query in gerrit

Related Objects
Search...

Event Timeline

Andrew created this task.Aug 10 2015, 8:50 PM
Andrew claimed this task.
Andrew raised the priority of this task from to Medium.
Andrew updated the task description. (Show Details)
Andrew added projects: Labs-Sprint-109, Patch-For-Review, Cloud-Services.
Andrew added a subtask: T104588: Give 'novaobserver' keystone account rights to read everything, everywhere, write or change nothing.
Andrew added subscribers: gerritbot, • yuvipanda, coren and 2 others.
Krenair added a comment.Oct 11 2015, 4:21 AM

Sounds like T85612 would be necessary?

Andrew removed Andrew as the assignee of this task.Nov 16 2015, 5:51 PM
Luke081515 removed a project: Patch-For-Review.Mar 25 2016, 4:15 PM
Luke081515 added a subscriber: Luke081515.

Seems like there is no patch here?

Luke081515 moved this task from Triage to Backlog on the Cloud-Services board.Mar 25 2016, 4:15 PM
• AlexMonk-WMF added a comment.Sep 18 2016, 2:05 AM

(see also T93684)
maybe this meant $::instanceproject, which I'm getting rid of in https://gerrit.wikimedia.org/r/#/c/309008/2 ?

scfc added a subscriber: scfc.Dec 22 2016, 8:05 AM

(Assuming this task is really about "Make shinkengen not rely on LDAP":) @AlexMonk-WMF, does the OpenStack API (as it is now exposed) allow to query the Puppet roles for each instance?

• AlexMonk-WMF added a comment.EditedDec 22 2016, 9:30 AM

I'm doing it in https://gerrit.wikimedia.org/r/#/c/328611/ - the roles thing is not exactly an OpenStack API, but it is an API that lets you query puppet roles for a given instance. And you can now use the OpenStack APIs to get lists of projects and instances.

scfc added a comment.Dec 22 2016, 12:35 PM

Ha! I'm not watching changes to the shinken module, so I hadn't noticed get_instance_roles() before (and all the other stuff you did there). So: Thanks! :-)

• AlexMonk-WMF claimed this task.Dec 22 2016, 5:12 PM

I think this was done by my previous puppet patch (https://gerrit.wikimedia.org/r/#/c/309008/). I think we should re-purpose it as 'remove reliance on ldap from shinkengen' and close it when my new puppet patch (https://gerrit.wikimedia.org/r/#/c/328611/) is done. @Andrew?

Krenair claimed this task.Jan 5 2017, 10:22 PM
Andrew added a parent task: T148781: Clean up ldap host entries and references.Jan 6 2017, 9:26 PM

I wrote an alternative fix for this, and I'm not sure which I like better. Probably Krenair's, in theory, although there may be package dependency issues. I'll test both.

gerritbot added a comment.Jan 6 2017, 9:28 PM

Change 331005 had a related patch set uploaded (by Andrew Bogott):
Shinkengen: Get project hosts from openstack and not from ldap.

https://gerrit.wikimedia.org/r/331005

gerritbot added a comment.Jan 7 2017, 2:51 AM

Change 331005 abandoned by Andrew Bogott:
Shinkengen: Get project hosts from openstack and not from ldap.

Reason:
Dropping in favor of https://gerrit.wikimedia.org/r/#/c/328611/

https://gerrit.wikimedia.org/r/331005

Content licensed under Creative Commons Attribution-ShareAlike 3.0 (CC-BY-SA) unless otherwise noted; code licensed under GNU General Public License (GPL) or other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL