vault: Setup new vangogh server
ClosedPublic
Actions

Authored by ardumont on May 22 2019, 9:58 AM.

Details

Reviewers

olasd
ftigeot
douardda

Group Reviewers

Reviewers

Commits

rSPSITEe689acbdd0dc: vault: Remove no longer needed objstorage profile
rSPSITE116ecd489e24: orangerie/orangeriedev: Remove duplicated setup
rSPSITEddf2ded5a201: vault: Remove no longer needed postgres profile
rSPSITEa0a0185ec271: vault: Setup new vangogh server

Summary

Prepare the vault vm to expose the vault api.

The vault api is plugged to:

db in prado
"azure" objstorage
"remote" storage already setuped in azure (storage0)

The objstorage is plugged to an azure blobstorage (as defined in D1495)

Note:

As the db used is no longer installed on the same node, the postgres profile has been removed from the vault role
The objstorage cache backend was exposed but unused, this was removed. As such, the vault role has been updated to remove the objstorage profile as well.

Related T1716

Test Plan

$ cd puppet-environment
$ bin/octocatalog-diff --octocatalog-diff-args --no-truncate-details --to update_configuration vangogh.euwest.azure.internal.softwareheritage.org

Output: P404

Diff Detail

Repository

rSPSITE puppet-swh-site

Branch

production

Lint

No Linters Available

Unit

No Unit Test Coverage

Build Status

Buildable 5871
Build 8041: arc lint + arc unit

Event Timeline

ardumont created this revision.May 22 2019, 9:58 AM

Harbormaster completed remote builds in B5867: Diff 4926.May 22 2019, 9:59 AM

ardumont edited the test plan for this revision. (Show Details)May 22 2019, 10:05 AM

ardumont retitled this revision from vault: Prepare new vangogh vault vm to vault: Setup new vangogh server.May 22 2019, 10:12 AM

ardumont added projects: Vault, Puppet recipes.

Thanks for this change!

I think there's a lot more opportunity for cleanup here which I've outlined :)

data/defaults.yaml
1374	I don't think this comment is accurate (I'm also not sure it's all that useful)
data/hostname/vangogh.euwest.azure.internal.softwareheritage.org.yaml
2	Is this really used? I think all "cache objstorage" requests are proxied through the vault rpc server. I don't think we need the objstorage rpc server deployed at all on this machine, actually, as your previous change makes the deployed vault backend use the objstorage backend config directly.
5	Does anything on that machine really use the `swh::remote_service::vault` variables?
18–20	Can be dropped if the objstorage rpc server deployment isn't needed.
24–25	Not sure that's needed?
site-modules/role/manifests/swh_vault.pp
3–4	Can be dropped if we don't need remote access to the objstorage directly.

This revision now requires changes to proceed.May 22 2019, 11:06 AM

ardumont marked 2 inline comments as done.May 22 2019, 11:27 AM

ardumont added inline comments.

data/defaults.yaml
1374	The comment is wrong indeed.
data/hostname/vangogh.euwest.azure.internal.softwareheritage.org.yaml
2	Possibly, i ported the existing orangerie setup. I'll check.
5	i misunderstood its use ;) So to answer, no, nothing uses that. I will remove it. It will have to be defined in a next step in the defaults.yaml as the real switch between orangerie and this machine happens.
24–25	It's because that node runs on azure. By default there, we have lots of indexer workers running.
site-modules/role/manifests/swh_vault.pp
3–4	Right, that must be leftovers from some time ;)