Add OVH GRA1 mirror

This mirror will be manually configured with kafs (see
https://review.opendev.org/623974).  This should be a nice distant
geographic counterpoint to the IAD RAX server.

This will need to be manually configured with a custom kernel for now,
but fixes are making their way upstream and this host will be
converted when available.

Depends-On: https://review.opendev.org/667529
Change-Id: I6a22933029c096c781c93c33e6edf03bf59223c9

hiera/common.yaml

@@ -326,6 +326,7 @@ cacti_hosts:
 - mirror02.ca-ymq-1.vexxhost.openstack.org
 - mirror02.regionone.limestone.openstack.org
 - mirror.bhs1.ovh.openstack.org
+- mirror.gra1.ovh.opendev.org
 - mirror.gra1.ovh.openstack.org
 - mirror.mtl01.inap.openstack.org
 - mirror02.us-west-1.packethost.openstack.org

inventory/openstack.yaml

@@ -426,6 +426,16 @@ all:
         region_name: BHS1
       public_v4: 158.69.80.87
       public_v6: 2607:5300:201:2000::c:5fa4
+    mirror01.gra1.ovh.opendev.org:
+      ansible_host: 149.202.161.140
+      location:
+        cloud: openstackci-ovh
+        region_name: GRA1
+      public_v4: 149.202.161.140
+      # Note: assigned, but not setup as it needs to be manually
+      # applied; info is not provided to server metadata for
+      # auto configuration.
+      #public_v6: 2001:41d0:302:1000::f1f
     mirror01.gra1.ovh.openstack.org:
       ansible_host: 147.135.133.8
       location:

playbooks/host_vars/mirror01.gra1.ovh.opendev.org.yaml

@@ -0,0 +1,5 @@
+ansible_python_interpreter: python3
+letsencrypt_certs:
+  mirror01-gra1-ovh-main:
+    - mirror01.gra1.ovh.opendev.org
+    - mirror.gra1.ovh.opendev.org

playbooks/roles/letsencrypt-create-certs/handlers/main.yaml

@@ -28,6 +28,9 @@
 - name: letsencrypt updated mirror01-ord-rax-main
   include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
 
+- name: letsencrypt updated mirror01-gra1-ovh-main
+  include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
+
 # Gate testing hosts:
 - name: letsencrypt updated letsencrypt01-main-service
   include_tasks: roles/letsencrypt-create-certs/handlers/touch_file.yaml