76163b2f7b
If you want to use Javascript to include status.json within the context of a page served via HTTPS, browsers will basically insist that the status.json be served via HTTPS as well. This patch provides an option to add HTTPS for the Apache proxy vhost if desired. Change-Id: I9799f39bf170f660bcbc17719937e1e87b68ac4a
424 lines
10 KiB
Puppet
424 lines
10 KiB
Puppet
# Copyright 2012-2013 Hewlett-Packard Development Company, L.P.
|
|
# Copyright 2012 Antoine "hashar" Musso
|
|
# Copyright 2012 Wikimedia Foundation Inc.
|
|
# Copyright 2013 OpenStack Foundation
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
# == Class: zuul
|
|
#
|
|
class zuul (
|
|
$vhost_name = $::fqdn,
|
|
$serveradmin = "webmaster@${::fqdn}",
|
|
$gearman_server = '127.0.0.1',
|
|
$internal_gearman = true,
|
|
$gerrit_server = '',
|
|
$gerrit_user = '',
|
|
$gerrit_baseurl = '',
|
|
$zuul_ssh_private_key = '',
|
|
$url_pattern = '',
|
|
$status_url = "https://${::fqdn}/",
|
|
$zuul_url = '',
|
|
$git_source_repo = 'https://git.openstack.org/openstack-infra/zuul',
|
|
$job_name_in_report = false,
|
|
$revision = 'master',
|
|
$statsd_host = '',
|
|
$git_email = '',
|
|
$git_name = '',
|
|
$smtp_host = 'localhost',
|
|
$smtp_port = 25,
|
|
$smtp_default_from = "zuul@${::fqdn}",
|
|
$smtp_default_to = "zuul.reports@${::fqdn}",
|
|
$swift_authurl = '',
|
|
$swift_auth_version = '',
|
|
$swift_user = '',
|
|
$swift_key = '',
|
|
$swift_tenant_name = '',
|
|
$swift_region_name = '',
|
|
$swift_default_container = '',
|
|
$swift_default_logserver_prefix = '',
|
|
$swift_default_expiry = 7200,
|
|
$proxy_ssl_cert_file_contents = '',
|
|
$proxy_ssl_key_file_contents = '',
|
|
$proxy_ssl_chain_file_contents = '',
|
|
) {
|
|
include apache
|
|
include pip
|
|
|
|
$packages = [
|
|
'gcc', # yappi requires this to build
|
|
'python-paste',
|
|
'python-webob',
|
|
]
|
|
|
|
package { $packages:
|
|
ensure => present,
|
|
}
|
|
|
|
package { 'yappi':
|
|
ensure => present,
|
|
provider => pip,
|
|
require => Class['pip'],
|
|
}
|
|
|
|
# needed by python-keystoneclient, has system bindings
|
|
# Zuul and Nodepool both need it, so make it conditional
|
|
if ! defined(Package['python-lxml']) {
|
|
package { 'python-lxml':
|
|
ensure => present,
|
|
}
|
|
}
|
|
|
|
# A lot of things need yaml, be conservative requiring this package to avoid
|
|
# conflicts with other modules.
|
|
if ! defined(Package['python-yaml']) {
|
|
package { 'python-yaml':
|
|
ensure => present,
|
|
}
|
|
}
|
|
|
|
if ! defined(Package['python-paramiko']) {
|
|
package { 'python-paramiko':
|
|
ensure => present,
|
|
}
|
|
}
|
|
|
|
if ! defined(Package['python-daemon']) {
|
|
package { 'python-daemon':
|
|
ensure => present,
|
|
}
|
|
}
|
|
|
|
if ! defined(Package['yui-compressor']) {
|
|
package { 'yui-compressor':
|
|
ensure => present,
|
|
}
|
|
}
|
|
|
|
user { 'zuul':
|
|
ensure => present,
|
|
home => '/home/zuul',
|
|
shell => '/bin/bash',
|
|
gid => 'zuul',
|
|
managehome => true,
|
|
require => Group['zuul'],
|
|
}
|
|
|
|
group { 'zuul':
|
|
ensure => present,
|
|
}
|
|
|
|
vcsrepo { '/opt/zuul':
|
|
ensure => latest,
|
|
provider => git,
|
|
revision => $revision,
|
|
source => $git_source_repo,
|
|
}
|
|
|
|
exec { 'install_zuul' :
|
|
command => 'pip install /opt/zuul',
|
|
path => '/usr/local/bin:/usr/bin:/bin/',
|
|
refreshonly => true,
|
|
subscribe => Vcsrepo['/opt/zuul'],
|
|
require => [
|
|
Class['pip'],
|
|
Package['gcc'],
|
|
Package['python-daemon'],
|
|
Package['python-lxml'],
|
|
Package['python-paramiko'],
|
|
Package['python-paste'],
|
|
Package['python-webob'],
|
|
Package['python-yaml'],
|
|
Package['yappi'],
|
|
Package['yui-compressor'],
|
|
],
|
|
}
|
|
|
|
file { '/etc/zuul':
|
|
ensure => directory,
|
|
}
|
|
|
|
# TODO: We should put in notify either Service['zuul'] or Exec['zuul-reload']
|
|
# at some point, but that still has some problems.
|
|
file { '/etc/zuul/zuul.conf':
|
|
ensure => present,
|
|
owner => 'zuul',
|
|
mode => '0400',
|
|
content => template('zuul/zuul.conf.erb'),
|
|
require => [
|
|
File['/etc/zuul'],
|
|
User['zuul'],
|
|
],
|
|
}
|
|
|
|
file { '/etc/default/zuul':
|
|
ensure => present,
|
|
mode => '0444',
|
|
content => template('zuul/zuul.default.erb'),
|
|
}
|
|
|
|
file { '/var/log/zuul':
|
|
ensure => directory,
|
|
owner => 'zuul',
|
|
require => User['zuul'],
|
|
}
|
|
|
|
file { '/var/run/zuul':
|
|
ensure => directory,
|
|
owner => 'zuul',
|
|
group => 'zuul',
|
|
require => User['zuul'],
|
|
}
|
|
|
|
file { '/var/run/zuul-merger':
|
|
ensure => directory,
|
|
owner => 'zuul',
|
|
group => 'zuul',
|
|
require => User['zuul'],
|
|
}
|
|
|
|
file { '/var/lib/zuul':
|
|
ensure => directory,
|
|
owner => 'zuul',
|
|
group => 'zuul',
|
|
}
|
|
|
|
file { '/var/lib/zuul/git':
|
|
ensure => directory,
|
|
owner => 'zuul',
|
|
require => File['/var/lib/zuul'],
|
|
}
|
|
|
|
file { '/var/lib/zuul/ssh':
|
|
ensure => directory,
|
|
owner => 'zuul',
|
|
group => 'zuul',
|
|
mode => '0500',
|
|
require => File['/var/lib/zuul'],
|
|
}
|
|
|
|
file { '/var/lib/zuul/ssh/id_rsa':
|
|
owner => 'zuul',
|
|
group => 'zuul',
|
|
mode => '0400',
|
|
require => File['/var/lib/zuul/ssh'],
|
|
content => $zuul_ssh_private_key,
|
|
}
|
|
|
|
file { '/var/lib/zuul/www':
|
|
ensure => directory,
|
|
require => File['/var/lib/zuul'],
|
|
}
|
|
|
|
package { 'libjs-jquery':
|
|
ensure => present,
|
|
}
|
|
|
|
file { '/var/lib/zuul/www/jquery.min.js':
|
|
ensure => link,
|
|
target => '/usr/share/javascript/jquery/jquery.min.js',
|
|
require => [File['/var/lib/zuul/www'],
|
|
Package['libjs-jquery']],
|
|
}
|
|
|
|
vcsrepo { '/opt/twitter-bootstrap':
|
|
ensure => latest,
|
|
provider => git,
|
|
revision => 'v3.1.1',
|
|
source => 'https://github.com/twbs/bootstrap.git',
|
|
}
|
|
|
|
file { '/var/lib/zuul/www/bootstrap':
|
|
ensure => link,
|
|
target => '/opt/twitter-bootstrap/dist',
|
|
require => [File['/var/lib/zuul/www'],
|
|
Package['libjs-jquery'],
|
|
Vcsrepo['/opt/twitter-bootstrap']],
|
|
}
|
|
|
|
vcsrepo { '/opt/jquery-visibility':
|
|
ensure => latest,
|
|
provider => git,
|
|
revision => 'master',
|
|
source => 'https://github.com/mathiasbynens/jquery-visibility.git',
|
|
}
|
|
|
|
exec { 'install-jquery-visibility':
|
|
command => 'yui-compressor -o /var/lib/zuul/www/jquery-visibility.min.js /opt/jquery-visibility/jquery-visibility.js',
|
|
path => 'bin:/usr/bin',
|
|
refreshonly => true,
|
|
subscribe => Vcsrepo['/opt/jquery-visibility'],
|
|
require => [File['/var/lib/zuul/www'],
|
|
Package['yui-compressor'],
|
|
Vcsrepo['/opt/jquery-visibility']],
|
|
}
|
|
|
|
vcsrepo { '/opt/graphitejs':
|
|
ensure => latest,
|
|
provider => git,
|
|
revision => 'master',
|
|
source => 'https://github.com/prestontimmons/graphitejs.git',
|
|
}
|
|
|
|
file { '/var/lib/zuul/www/jquery.graphite.js':
|
|
ensure => link,
|
|
target => '/opt/graphitejs/jquery.graphite.js',
|
|
require => [File['/var/lib/zuul/www'],
|
|
Vcsrepo['/opt/graphitejs']],
|
|
}
|
|
|
|
file { '/var/lib/zuul/www/index.html':
|
|
ensure => link,
|
|
target => '/opt/zuul/etc/status/public_html/index.html',
|
|
require => File['/var/lib/zuul/www'],
|
|
}
|
|
|
|
file { '/var/lib/zuul/www/styles':
|
|
ensure => link,
|
|
target => '/opt/zuul/etc/status/public_html/styles',
|
|
require => File['/var/lib/zuul/www'],
|
|
}
|
|
|
|
file { '/var/lib/zuul/www/zuul.app.js':
|
|
ensure => link,
|
|
target => '/opt/zuul/etc/status/public_html/zuul.app.js',
|
|
require => File['/var/lib/zuul/www'],
|
|
}
|
|
|
|
file { '/var/lib/zuul/www/jquery.zuul.js':
|
|
ensure => link,
|
|
target => '/opt/zuul/etc/status/public_html/jquery.zuul.js',
|
|
require => File['/var/lib/zuul/www'],
|
|
}
|
|
|
|
file { '/var/lib/zuul/www/images':
|
|
ensure => link,
|
|
target => '/opt/zuul/etc/status/public_html/images',
|
|
require => File['/var/lib/zuul/www'],
|
|
}
|
|
|
|
file { '/etc/init.d/zuul':
|
|
ensure => present,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0555',
|
|
source => 'puppet:///modules/zuul/zuul.init',
|
|
}
|
|
|
|
file { '/etc/init.d/zuul-merger':
|
|
ensure => present,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0555',
|
|
source => 'puppet:///modules/zuul/zuul-merger.init',
|
|
}
|
|
|
|
if $proxy_ssl_cert_file_contents == '' {
|
|
$ssl = false
|
|
} else {
|
|
$ssl = true
|
|
file { '/etc/ssl/certs':
|
|
ensure => directory,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0755',
|
|
}
|
|
file { '/etc/ssl/private':
|
|
ensure => directory,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0700',
|
|
}
|
|
file { "/etc/ssl/certs/${vhost_name}.pem":
|
|
ensure => present,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
content => $proxy_ssl_cert_file_contents,
|
|
require => File['/etc/ssl/certs'],
|
|
before => Apache::Vhost[$vhost_name],
|
|
}
|
|
file { "/etc/ssl/private/${vhost_name}.key":
|
|
ensure => present,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0600',
|
|
content => $proxy_ssl_key_file_contents,
|
|
require => File['/etc/ssl/private'],
|
|
before => Apache::Vhost[$vhost_name],
|
|
}
|
|
if $proxy_ssl_chain_file_contents != '' {
|
|
file { "/etc/ssl/certs/${vhost_name}_intermediate.pem":
|
|
ensure => present,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
content => $proxy_ssl_cert_file_contents,
|
|
require => File['/etc/ssl/certs'],
|
|
before => Apache::Vhost[$vhost_name],
|
|
}
|
|
}
|
|
}
|
|
|
|
apache::vhost { $vhost_name:
|
|
port => 443, # Is required despite not being used.
|
|
docroot => 'MEANINGLESS ARGUMENT',
|
|
priority => '50',
|
|
ssl => $ssl,
|
|
template => 'zuul/zuul.vhost.erb',
|
|
}
|
|
if ! defined(A2mod['rewrite']) {
|
|
a2mod { 'rewrite':
|
|
ensure => present,
|
|
}
|
|
}
|
|
if ! defined(A2mod['proxy']) {
|
|
a2mod { 'proxy':
|
|
ensure => present,
|
|
}
|
|
}
|
|
if ! defined(A2mod['proxy_http']) {
|
|
a2mod { 'proxy_http':
|
|
ensure => present,
|
|
}
|
|
}
|
|
if ! defined(A2mod['cache']) {
|
|
a2mod { 'cache':
|
|
ensure => present,
|
|
}
|
|
}
|
|
if ! defined(A2mod['cgi']) {
|
|
a2mod { 'cgi':
|
|
ensure => present,
|
|
}
|
|
}
|
|
|
|
case $::lsbdistcodename {
|
|
'precise': {
|
|
if ! defined(A2mod['mem_cache']) {
|
|
a2mod { 'mem_cache':
|
|
ensure => present,
|
|
}
|
|
}
|
|
}
|
|
default: {
|
|
if ! defined(A2mod['cache_disk']) {
|
|
a2mod { 'cache_disk':
|
|
ensure => present,
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
}
|