Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

openqa: try and stick new aarch64 workers to qa network

Browse source 
This involves disabling the interface connected to the arm
network and renaming references to them. This should simplify
networking and avoid firewall issues. I hope.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
This commit is contained in:
Adam Williamson 2020-03-03 17:31:35 -08:00 • committed by Pierre-Yves Chibon
parent ee006a8d3e
commit 1081f7243e
4 changed files with 12 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

6
inventory/host_vars/openqa-aarch64-01.arm.fedoraproject.org → inventory/host_vars/openqa-aarch64-01.qa.fedoraproject.org
View file

@ -21,9 +21,9 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
# disabling all but the one we want to use (eth0), and leave everything
# else alone. We use a variable definition here so the firewall config
# (in the openqa_tap_workers group_vars) can reuse it.
openqa_tap_iface: eth0
ansible_ifcfg_whitelist: ['{{ openqa_tap_iface }}', 'eth1', 'eth2']
ansible_ifcfg_disabled: ['eth1', 'eth2']
openqa_tap_iface: eth1
ansible_ifcfg_whitelist: [''eth0', {{ openqa_tap_iface }}', 'eth2']
ansible_ifcfg_disabled: ['eth0', 'eth2']
# this is a powerful machine, can handle more openQA workers
openqa_workers: 8

2
inventory/host_vars/openqa-aarch64-02.arm.fedoraproject.org → inventory/host_vars/openqa-aarch64-02.qa.fedoraproject.org
View file

@ -17,6 +17,8 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
# we seem to have an eth2 plugged in that isn't configured here,
# which breaks "copy ifcfg files - non virthost" role
ansible_ifcfg_whitelist: ['eth0', 'eth1']
# we just want the eth1 (qa network) interface active
ansible_ifcfg_disabled: ['eth0']
# this is a powerful machine, can handle more openQA workers
openqa_workers: 8

2
inventory/host_vars/openqa-aarch64-03.arm.fedoraproject.org → inventory/host_vars/openqa-aarch64-03.qa.fedoraproject.org
View file

@ -17,6 +17,8 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
# we seem to have an eth2 plugged in that isn't configured here,
# which breaks "copy ifcfg files - non virthost" role
ansible_ifcfg_whitelist: ['eth0', 'eth1']
# we just want the eth1 (qa network) interface active
ansible_ifcfg_disabled: ['eth0']
# this is a powerful machine, can handle more openQA workers
openqa_workers: 8

10
inventory/inventory
View file

@ -515,23 +515,23 @@ aarch64-c27n1-oqa.arm.fedoraproject.org
aarch64-c28n1-oqa.arm.fedoraproject.org
aarch64-c29n1-oqa.arm.fedoraproject.org
aarch64-c30n1-oqa.arm.fedoraproject.org
openqa-aarch64-01.arm.fedoraproject.org
openqa-aarch64-02.arm.fedoraproject.org
openqa-aarch64-03.arm.fedoraproject.org
openqa-aarch64-01.qa.fedoraproject.org
openqa-aarch64-02.qa.fedoraproject.org
openqa-aarch64-03.qa.fedoraproject.org
# the workers that can run networked jobs. each server should have *one* of these per arch
[openqa_tap_workers]
qa01.qa.fedoraproject.org
qa02.qa.fedoraproject.org
openqa-ppc64le-02.qa.fedoraproject.org
openqa-aarch64-01.arm.fedoraproject.org
openqa-aarch64-01.qa.fedoraproject.org
# the workers that need rw access to the factory share to run createhdds. again,
# only one per arch per instance should be present. usually x86_64 images are created
# on the server, images for other arches on a worker.
[openqa_hdds_workers]
openqa-ppc64le-02.qa.fedoraproject.org
openqa-aarch64-01.arm.fedoraproject.org
openqa-aarch64-01.qa.fedoraproject.org
qa01.qa.fedoraproject.org
qa02.qa.fedoraproject.org