Page MenuHomePhabricator

cloudvps: keystone extra services
Closed, ResolvedPublic

Description

In T201504: cloudvps: main/eqiad1 keystone merge, there was some code that wasn't retained for some reason I can't remember.

Specifically:

  • nova spread check: to check if instances of a project are spread enough
  • keystone toke cleanups
  • keystone monitoring of projects and users

Shall we reintroduce them?

Note: they have been running because they weren't cleaned up from main when puppet code was removed.

Event Timeline

aborrero triaged this task as Medium priority.Nov 28 2018, 10:52 AM
aborrero created this task.

hey @Andrew, do you see any problem with adding now these extra services?

Change 476232 had a related patch set uploaded (by Arturo Borrero Gonzalez; owner: Arturo Borrero Gonzalez):
[operations/puppet@production] openstack: eqiad1: activate keystone extra services

https://gerrit.wikimedia.org/r/476232

@chasemp did the big puppet refactor; it's likely that those things were forgotten by accident but he may know more. I certainly don't object to those things being replaced -- in particular the token cleanup is pretty important.

The spread check I'm unsure about; that must've been running for only select projects?

Looking at https://phabricator.wikimedia.org/T210595 and https://phabricator.wikimedia.org/T201504, not sure why those things fell through the cracks during keystone merge, I think probably just bad handoff as it's right when I was leaving for vacation (I didn't actually do the keystone merge I think?), but def that's wanted afaik :)

(I think probably those things could not be added meaningfully before keystone was moved to cloudcontrol* and then after it wasn't thought about)

Change 476232 merged by Arturo Borrero Gonzalez:
[operations/puppet@production] openstack: eqiad1: activate keystone extra services

https://gerrit.wikimedia.org/r/476232

Change 476360 had a related patch set uploaded (by GTirloni; owner: GTirloni):
[labs/private@master] openstack: Move spread_check password to eqiad1

https://gerrit.wikimedia.org/r/476360

Change 476360 merged by GTirloni:
[labs/private@master] openstack: Move spread_check password to eqiad1

https://gerrit.wikimedia.org/r/476360