-
Notifications
You must be signed in to change notification settings - Fork 56
(PE-39577) Optimise legacy compiler support #536
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
(PE-39577) Optimise legacy compiler support #536
Conversation
4b1a560 to
b5b9ca5
Compare
b5b9ca5 to
9888996
Compare
9e5efc3 to
1431087
Compare
0cec740 to
81e986a
Compare
|
Just to note, commits will be squashed |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I tested this out with a PE 2021.7.10 -> 2023.8.2 upgrade and it resolved most issues outlined in PE-39577.
One item that still remains unresolved is:
Ensure that running
puppet infra configuredoes not remove classification rules
But, that can be split off to a separate ticket. The fix to that likely spans changes to both peadm and the puppet-enterprise-modules.
55d852f to
7c6170f
Compare
4d13520 to
90a1318
Compare
7a09089 to
10634e0
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Tested all the scenarios you laid out and all looks good
e71a2f8 to
4479baf
Compare
This commit:
- Adds the `node_group_unpin` task.
- `node_group_unpin` task is called in the convert plan to remove
legacy compilers from from the PE Master node group.
- Legacy compilers `pp_auth_role` changed to `pe_compiler_legacy`.
- Changes the PEADM config to use the PE Certificate Authority node group.
- Removes peadm_legacy_compiler OID extension.
- Adds a task to update PE Master rules to support 'pe_compiler_legacy'
as a pp_auth_role.
- Adds a task to check if PE Master rules have been updated to support
the new method of legacy compiler identification.
- This task is being used in the `add_compilers` and
`convert_compiler_to_legacy` plans to check if the infrastructure
has been converted to support this new method of legacy compiler
identification. If the infrastructure has not been converted, it will
fail each plan and tell the user to run the Convert plan.
4479baf to
146b1ad
Compare
Summary
This PR will:
node_group_unpintask.node_group_unpintask is called in the convert plan to removelegacy compilers from from the PE Master node group.
pp_auth_rolechanged tope_compiler_legacy.as a pp_auth_role.
the new method of legacy compiler identification.
add_compilersandconvert_compiler_to_legacyplans to check if the infrastructurehas been converted to support this new method of legacy compiler
identification. If the infrastructure has not been converted, it will
fail each plan and tell the user to run the Convert plan.
Additional Context
Add any additional context about the problem here.
Related Issues (if any)
Mention any related issues or pull requests.
Checklist
Changes include test coverage?
Have you updated the documentation?