X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fganeti2%2Fmanifests%2Finit.pp;h=1708ba8570ccfccf92eab05f33ceca7a9617dd79;hb=06dfef3de1f760360c8cfb573220ec5c1625f48a;hp=79a2ba16a608b75334f94774a3255288d40d8bec;hpb=2bb51a5d76d106f4ea097f5a075e24a848de5bd5;p=mirror%2Fdsa-puppet.git diff --git a/modules/ganeti2/manifests/init.pp b/modules/ganeti2/manifests/init.pp index 79a2ba16a..1708ba857 100644 --- a/modules/ganeti2/manifests/init.pp +++ b/modules/ganeti2/manifests/init.pp @@ -1,42 +1,76 @@ +# = Class: ganeti2 +# +# Standard ganeti2 config debian.org hosts +# +# == Sample Usage: +# +# include ganeti2 +# class ganeti2 { - package { 'ganeti2': - ensure => installed - } + include ganeti2::params + include ganeti2::firewall - package { 'drbd8-utils': - ensure => installed - } + $drbd = $ganeti2::params::drbd - package { 'ganeti-instance-debootstrap': + package { 'ganeti': ensure => installed } - package { 'ganeti-htools': - ensure => installed - } + site::linux_module { 'tun': } - @ferm::rule { 'dsa-ganeti-noded-v4': - description => 'allow ganeti-noded communication between', - rule => 'proto tcp mod state state (NEW) dport (1811) @subchain \'ganeti-noded\' { saddr ($HOST_GANETI_V4) daddr ($HOST_GANETI_V4) ACCEPT; }', - notarule => true, + file { '/etc/cron.hourly/puppet-cleanup-watcher-pause-file': + source => 'puppet:///modules/ganeti2/cleanup-watcher-pause-file', + mode => '0555', } - @ferm::rule { 'dsa-ganeti-confd-v4': - description => 'allow ganeti-confd communication', - rule => 'proto udp mod state state (NEW) dport (1814) @subchain \'ganeti-confd\' { saddr ($HOST_GANETI_V4) daddr ($HOST_GANETI_V4) ACCEPT; }', - notarule => true, + if $::debarchitecture == 'arm64' { + file { '/usr/local/bin/qemu-system-aarch64-wrapper': + source => 'puppet:///modules/ganeti2/qemu-system-aarch64-wrapper', + mode => '0555', + } } - - @ferm::rule { 'dsa-ganeti-rapi-v4': - description => 'allow ganeti-rapi communication', - rule => 'proto tcp mod state state (NEW) dport (5080) @subchain \'ganeti-rapi\' { saddr ($HOST_GANETI_V4) daddr ($HOST_GANETI_V4) ACCEPT; }', - notarule => true, + if $::cluster == 'ganeti.bm.debian.org' { + file { '/usr/local/sbin/crazy-multipath-restart': + source => 'puppet:///modules/ganeti2/crazy-multipath-restart', + mode => '0555', + } + file { '/etc/cron.d/puppet-crazy-multipath-restart': ensure => absent, } + concat::fragment { 'dsa-puppet-stuff--multipath-restart': + target => '/etc/cron.d/dsa-puppet-stuff', + content => @("EOF"), + */15 * * * * root /usr/local/sbin/crazy-multipath-restart + | EOF + } + } + file { '/usr/local/sbin/ganeti-reboot-cluster': + source => 'puppet:///modules/ganeti2/ganeti-reboot-cluster', + mode => '0555', } - @ferm::rule { 'dsa-drbd-v4': - description => 'allow drbd communication', - rule => 'proto tcp mod state state (NEW) dport (11000:11999) @subchain \'drbd\' { saddr ($HOST_GANETI_BACKEND_V4) daddr ($HOST_GANETI_BACKEND_V4) ACCEPT; }', - notarule => true, + package { ['python-dbus', 'systemd-container']: ensure => installed } + file { '/usr/local/sbin/ganeti-machined-register-instances': + source => 'puppet:///modules/ganeti2/ganeti-machined-register-instances', + mode => '0555', + } + file { [ + '/etc/ganeti/hooks', + '/etc/ganeti/hooks/instance-reboot-post.d', + '/etc/ganeti/hooks/instance-migrate-post.d', + '/etc/ganeti/hooks/instance-start-post.d', + '/etc/ganeti/hooks/instance-failover-post.d', + '/etc/ganeti/hooks/instance-add-post.d', + ]: + ensure => directory, + } + file { [ + '/etc/ganeti/hooks/instance-reboot-post.d/00-ganeti-machined-register-instances', + '/etc/ganeti/hooks/instance-migrate-post.d/00-ganeti-machined-register-instances', + '/etc/ganeti/hooks/instance-start-post.d/00-ganeti-machined-register-instances', + '/etc/ganeti/hooks/instance-failover-post.d/00-ganeti-machined-register-instances', + '/etc/ganeti/hooks/instance-add-post.d/00-ganeti-machined-register-instances', + ]: + ensure => link, + target => '/usr/local/sbin/ganeti-machined-register-instances', } }