opendev/system-config
Code Issues Proposed changes

Merge "Cleanup ssl_cert_check puppet components"

Browse Source
This commit is contained in:
Zuul 2021-05-12 06:02:37 +00:00 committed by Gerrit Code Review
commit 4403289ef7
3 changed files with 0 additions and 80 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
manifests/site.pp
View File

@ -11,9 +11,6 @@ node /^health\d*\.openstack\.org$/ {
# Node-OS: xenial # Node-OS: xenial
node /^cacti\d+\.open.*\.org$/ { node /^cacti\d+\.open.*\.org$/ {
$group = "cacti" $group = "cacti"
# NOTE(ianw) 2020-05 : disabled pending removal, migrated to
# ansible.
# include openstack_project::ssl_cert_check
class { 'openstack_project::cacti': class { 'openstack_project::cacti':
cacti_hosts => hiera_array('cacti_hosts'), cacti_hosts => hiera_array('cacti_hosts'),
vhost_name => 'cacti.openstack.org', vhost_name => 'cacti.openstack.org',

61
modules/openstack_project/files/ssl_cert_check/ssldomains
View File

@ -1,61 +0,0 @@
ask.openstack.org 443
ci.openstack.org 443
cinder.openstack.org 443
developer.openstack.org 443
devstack.org 443
docs.opendev.org 443
docs.openstack.org 443
docs.starlingx.io 443
ethercalc.openstack.org 443
etherpad.openstack.org 443
files.openstack.org 443
git.airshipit.org 443
git.openstack.org 443
git.starlingx.io 443
git.zuul-ci.org 443
gitea01.opendev.org 3000
gitea02.opendev.org 3000
gitea03.opendev.org 3000
gitea04.opendev.org 3000
gitea05.opendev.org 3000
gitea06.opendev.org 3000
gitea07.opendev.org 3000
gitea08.opendev.org 3000
glance.openstack.org 443
governance.openstack.org 443
graphite.opendev.org 443
horizon.openstack.org 443
insecure-ci-registry.opendev.org 5000
keystone.openstack.org 443
meetpad.opendev.org 443
mirror.dfw.rax.opendev.org 443
mirror.bhs1.ovh.opendev.org 443
mirror.gra1.ovh.opendev.org 443
mirror.mtl01.inap.opendev.org 443
mirror.ord.rax.opendev.org 443
mirror.regionone.linaro-us.opendev.org 443
mirror.sjc1.vexxhost.opendev.org 443
mirror.ca-ymq-1.vexxhost.opendev.org 443
mirror.regionone.limestone.opendev.org 443
nova.openstack.org 443
opendev.org 443
openstackid-dev.openstack.org 443
openstackid.org 443
refstack.openstack.org 443
review.opendev.org 443
review.openstack.org 443
security.openstack.org 443
static.openstack.org 443
storyboard.openstack.org 443
summit.openstack.org 443
static.opendev.org 443
static.openstack.org 443
swift.openstack.org 443
tarballs.opendev.org 443
tarballs.openstack.org 443
translate.openstack.org 443
wiki.openstack.org 443
www.openstack.org 443
zuul-ci.org 443
zuul.opendev.org 443
zuul.openstack.org 443

16
modules/openstack_project/manifests/ssl_cert_check.pp
View File

@ -1,16 +0,0 @@
# Class to configure ssl-cert-check on a node.
class openstack_project::ssl_cert_check {
class { '::ssl_cert_check':
domainlist_file => '/var/lib/certcheck/ssldomains',
email => 'root',
days => '30'
}
file { '/var/lib/certcheck/ssldomains':
ensure => present,
owner => 'certcheck',
group => 'certcheck',
mode => '0444',
source => 'puppet:///modules/openstack_project/ssl_cert_check/ssldomains'
}
}