c5db057901
Add a connlimit stanza to the firewall rules on Gerrit servers limiting access to its SSH API port to 100 concurrent connections per source IP address. This has been running in production on review.openstack.org for a few months now, in the wake of a number of incidents where runaway third-part CI systems resulted in a denial of service incidents for our Gerrit deployment there. Change-Id: Id92cef93c115faf88cc822ecd8e3df9ebd6fd9c3
Puppet Modules
These are a set of puppet manifests and modules that are currently being used to manage the OpenStack Project infrastructure.
The main entry point is in manifests/site.pp.
In general, most of the modules here are designed to be able to be run either in agent or apply mode.
These puppet modules require puppet 2.7 or greater. Additionally, the site.pp manifest assumes the existence of hiera.
See http://docs.openstack.org/infra/system-config for more information.
Documentation
The documentation presented at http://docs.openstack.org/infra/system-config comes from git://git.openstack.org/openstack-infra/system-config repo's docs/source. To build the documentation use
$ tox -evenv python setup.py build_sphinx