Dzahn has submitted this change and it was merged.
Change subject: installserver: split squid proxy to own class
......................................................................
installserver: split squid proxy to own class
Split squid proxy part out of the old installserver role
and into a separate role.
Bug: T132757
Change-Id: Ib462d470277f6c1676ecd273b63d0e83be75a6ed
---
M manifests/site.pp
M modules/role/manifests/installserver.pp
A modules/role/manifests/installserver/proxy.pp
3 files changed, 34 insertions(+), 29 deletions(-)
Approvals:
Dzahn: Looks good to me, approved
jenkins-bot: Verified
diff --git a/manifests/site.pp b/manifests/site.pp
index 14ddba2..ee26ed8 100644
--- a/manifests/site.pp
+++ b/manifests/site.pp
@@ -227,6 +227,7 @@
installserver::tftp_server,
installserver::dhcp,
installserver::http,
+ installserver::proxy,
aptrepo::wikimedia)
$cluster = 'misc'
diff --git a/modules/role/manifests/installserver.pp
b/modules/role/manifests/installserver.pp
index 3c93294..1b41bed 100644
--- a/modules/role/manifests/installserver.pp
+++ b/modules/role/manifests/installserver.pp
@@ -30,38 +30,9 @@
include role::backup::host
include install_server::preseed_server
- if os_version('ubuntu >= trusty') or os_version('debian >= jessie') {
- $config_content = template('role/caching-proxy/squid.conf.erb')
- } else {
- $config_content = template('role/squid3/precise_acls_conf.erb',
'role/caching-proxy/squid.conf.erb')
- }
-
- class { 'squid3':
- config_content => $config_content,
- }
-
- cron { 'squid-logrotate':
- ensure => 'present',
- command => '/usr/sbin/squid3 -k rotate',
- user => 'root',
- hour => '17',
- minute => '15',
- }
-
- ferm::service { 'proxy':
- proto => 'tcp',
- port => '8080',
- srange => '$PRODUCTION_NETWORKS',
- }
-
# Backup
$sets = [ 'srv-autoinstall',
]
backup::set { $sets : }
- # Monitoring
- monitoring::service { 'squid':
- description => 'Squid',
- check_command => 'check_tcp!8080',
- }
}
diff --git a/modules/role/manifests/installserver/proxy.pp
b/modules/role/manifests/installserver/proxy.pp
new file mode 100644
index 0000000..da9a3b1
--- /dev/null
+++ b/modules/role/manifests/installserver/proxy.pp
@@ -0,0 +1,33 @@
+# Installs a proxy server for the install server
+class role::installserver::proxy {
+
+ if os_version('ubuntu >= trusty') or os_version('debian >= jessie') {
+ $config_content = template('role/caching-proxy/squid.conf.erb')
+ } else {
+ $config_content = template('role/squid3/precise_acls_conf.erb',
'role/caching-proxy/squid.conf.erb')
+ }
+
+ class { 'squid3':
+ config_content => $config_content,
+ }
+
+ cron { 'squid-logrotate':
+ ensure => 'present',
+ command => '/usr/sbin/squid3 -k rotate',
+ user => 'root',
+ hour => '17',
+ minute => '15',
+ }
+
+ ferm::service { 'proxy':
+ proto => 'tcp',
+ port => '8080',
+ srange => '$PRODUCTION_NETWORKS',
+ }
+
+ # Monitoring
+ monitoring::service { 'squid':
+ description => 'Squid',
+ check_command => 'check_tcp!8080',
+ }
+}
--
To view, visit https://gerrit.wikimedia.org/r/322830
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ib462d470277f6c1676ecd273b63d0e83be75a6ed
Gerrit-PatchSet: 3
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
