diff --git a/inventory/host_vars/db-fas01.iad2.fedoraproject.org b/inventory/host_vars/db-fas01.iad2.fedoraproject.org new file mode 100644 index 0000000000..bb0f59fad8 --- /dev/null +++ b/inventory/host_vars/db-fas01.iad2.fedoraproject.org @@ -0,0 +1,46 @@ +--- +nm: 255.255.255.0 +gw: 10.3.163.254 +dns: 10.3.163.33 +volgroup: /dev/vg_guests +eth0_ip: 10.3.163.42 +vmhost: vmhost-x86-01.iad2.fedoraproject.org +datacenter: iad2 + +ks_url: http://209.132.181.6/repo/rhel/ks/kvm-rhel-8-ext +ks_repo: http://209.132.181.6/repo/rhel/RHEL8-x86_64/ + +# This is a generic list, monitored by collectd +databases: +- fas2 + +# This is a more strict list, to be made publicly available +dbs_to_backup: +- fas2 + +# These are normally group variables, but in this case db servers are often different +lvm_size: 100000 +mem_size: 16384 +num_cpus: 8 +fas_client_groups: sysadmin-dba,sysadmin-noc,sysadmin-veteran + +# +# Only allow postgresql access from the frontend nodes and hosted. +# +custom_rules: [ + # Openshift nodes (egress policy will block connection from non-authorized projects) + '-A INPUT -p tcp -m tcp -s 10.3.163.69 --dport 5432 -j ACCEPT', + '-A INPUT -p tcp -m tcp -s 10.3.163.70 --dport 5432 -j ACCEPT', + '-A INPUT -p tcp -m tcp -s 10.3.163.71 --dport 5432 -j ACCEPT', + '-A INPUT -p tcp -m tcp -s 10.3.163.72 --dport 5432 -j ACCEPT', + '-A INPUT -p tcp -m tcp -s 10.3.163.73 --dport 5432 -j ACCEPT', +] +# +# Large updates pushes cause lots of db threads doing the tag moves, so up this from default. +# +nrpe_procs_warn: 600 +nrpe_procs_crit: 800 + +db_backup_dir: ['/backups'] +shared_buffers: "2GB" +effective_cache_size: "6GB" diff --git a/inventory/inventory b/inventory/inventory index a1e6086653..d8fb8efa02 100644 --- a/inventory/inventory +++ b/inventory/inventory @@ -224,6 +224,7 @@ autosign01.stg.phx2.fedoraproject.org db01.phx2.fedoraproject.org db03.phx2.fedoraproject.org db-fas01.phx2.fedoraproject.org +db-fas01.iad2.fedoraproject.org db-datanommer02.phx2.fedoraproject.org db-koji01.phx2.fedoraproject.org db-koji02.phx2.fedoraproject.org