Hi Elizabeth,
We do need to protect the administrator account. This will be a
password we store in the hiera key/value store and only infra root
will have access to it by default. As you can see for something line
Zanata, we also have private data that's pulled in from hiera:
http://git.openstack.org/cgit/openstack-infra/system-config/tree/manifests/site.pp#n1061
When a patch is up for launching the server itself, I can get this
password added for you.
many thanks for the advises. A proposal for site.pp can you found here:
http://paste.openstack.org/show/486021/
I think you can generate random passwords and handover to Daisy as
project coordinator.
3. Do we need to deal with the health check or monitoring of openstack
instance ?
This has not been determined yet.
We can use the passive monitoring with Cacti
(http://cacti.openstack.org) that we use for most of our systems, but
if you want to do a more active health check of this server you'll
likely need to write or leverage some tooling that's DevStack-specific
to track whatever you want to track.
thanks, we will think about it.
4. The puppet module has two cron jobs and a list of parameters.
I don't know how to configure the parameters.
Are there a web UI to configure ?
I haven't had a close look at the Puppet module yet (I'm traveling
this week), but you will want to create a custom .pp file in
system-config under modules/openstack_project/manifests/ with the name
translations_checksite.pp or similar that has the values we want for
our own instance. For example, here's the custom .pp file for our
Zanata configuration:
http://git.openstack.org/cgit/openstack-infra/system-config/tree/modules/openstack_project/manifests/translate.pp
Question was: if you use Puppet Enterprise are configuration options
like used branch in Zanata are acessable with web UI or how we handle
this in the future, if we want later change things?
Anyway: the manifest for our puppet module are also ready for review:
https://review.openstack.org/#/c/276466/
It would be nice, if you have time to take a look.
kind regards
Frank
_______________________________________________
OpenStack-Infra mailing list
[email protected]
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-infra
