system-config/manifests/site.pp
Monty Taylor 3fd190ed4e Move hiera calls into site.pp.
Secret info should be parameters to modules. It makes for easier testing.

Change-Id: I66034387094b2a24c6fae57fec3af1dae3dd1d3a
2012-07-26 18:59:08 -05:00

133 lines
3.2 KiB
Puppet

#
# Default: should at least behave like an openstack server
#
node default {
include openstack_project::puppet_cron
include openstack_project::server
}
#
# Long lived servers:
#
node "review.openstack.org" {
include openstack_project::remove_cron
class { 'openstack_project::review':
github_oauth_token => hiera('gerrit_github_token'),
mysql_password => hiera('gerrit_mysql_password'),
email_private_key => hiera('gerrit_email_private_key'),
gerritbot_password => hiera('gerrit_gerritbot_password'),
}
}
node "gerrit-dev.openstack.org", "review-dev.openstack.org" {
include openstack_project::remove_cron
class { 'openstack_project::review_dev':
github_oauth_token => hiera('gerrit_dev_github_token'),
mysql_password => hiera('gerrit_dev_mysql_password'),
email_private_key => hiera('gerrit_dev_email_private_key')
}
}
node "jenkins.openstack.org" {
include openstack_project::remove_cron
class { 'openstack_project::jenkins':
jenkins_jobs_password => hiera('jenkins_jobs_password'),
}
}
node "jenkins-dev.openstack.org" {
include openstack_project::remove_cron
include openstack_project::jenkins_dev
}
node "community.openstack.org" {
include openstack_project::remove_cron
include openstack_project::community
}
node "ci-puppetmaster.openstack.org" {
include openstack_project::remove_cron
include openstack_project::puppetmaster
}
node "lists.openstack.org" {
include openstack_project::remove_cron
class { 'openstack_project::lists':
listadmins => hiera('listadmins'),
}
}
node "paste.openstack.org" {
include openstack_project::remove_cron
include openstack_project::paste
}
node "planet.openstack.org" {
include openstack_project::remove_cron
include openstack_project::planet
}
node "eavesdrop.openstack.org" {
include openstack_project::remove_cron
class { 'openstack_project::eavesdrop':
nickpass => hiera('openstack_meetbot_password'),
}
}
node "pypi.openstack.org" {
include openstack_project::remove_cron
include openstack_project::pypi
}
node 'etherpad.openstack.org' {
include openstack_project::remove_cron
class { 'openstack_project::etherpad':
etherpad_crt => hiera('etherpad_crt'),
etherpad_key => hiera('etherpad_key'),
database_password => hiera('etherpad_db_password'),
}
}
node 'wiki.openstack.org' {
include openstack_project::remove_cron
include openstack_project::wiki
}
# A bare machine, but with a jenkins user
node /^.*\.template\.openstack\.org$/ {
include openstack_project::slave_template
}
# A backup machine. Don't run cron or puppet agent on it.
node /^ci-backup-.*\.openstack\.org$/ {
include openstack_project::backup_server
}
#
# Jenkins slaves:
#
# Rollout cgroups to precise slaves.
node /^precise.*\.slave\.openstack\.org$/ {
include openstack_project::puppet_cron
include openstack_project::slave
include ulimit
ulimit::conf { 'limit_jenkins_procs':
limit_domain => 'jenkins',
limit_type => 'hard',
limit_item => 'nproc',
limit_value => '256'
}
include jenkins_slave::cgroups
}
node /^.*\.slave\.openstack\.org$/ {
include openstack_project::puppet_cron
include openstack_project::slave
}
node /^.*\.jclouds\.openstack\.org$/ {
include openstack_project::jclouds_slave
}