Infrastructure/ansible
5
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions

db-fas01 migrates to db-fas02

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2024-05-14 13:22:01 -07:00
parent e8fffa4e1d
commit c26999a629
4 changed files with 5 additions and 46 deletions
Download patch file Download diff file Expand all files Collapse all files

6
inventory/host_vars/db-fas01.iad2.fedoraproject.org
View file

@ -22,8 +22,8 @@ dbs_to_backup:
effective_cache_size: "6GB"
eth0_ipv4_gw: 10.3.163.254
eth0_ipv4_ip: 10.3.163.42
ks_repo: http://38.145.60.16/repo/rhel/RHEL7-x86_64/
ks_url: http://38.145.60.16/repo/rhel/ks/kvm-rhel-7-ext
ks_repo: http://38.145.60.16/repo/rhel/RHEL9-x86_64/
ks_url: http://38.145.60.16/repo/rhel/ks/kvm-rhel
# These are normally group variables, but in this case db servers are often different
lvm_size: 100000
max_stack_depth: "4MB"
@ -36,5 +36,5 @@ nrpe_procs_warn: 600
num_cpus: 8
shared_buffers: "2GB"
temp_buffers: "8MB"
vmhost: vmhost-x86-01.iad2.fedoraproject.org
vmhost: vmhost-x86-08.iad2.fedoraproject.org
volgroup: /dev/vg_guests

40
inventory/host_vars/db-fas02.iad2.fedoraproject.org
View file

@ -1,40 +0,0 @@
---
#
# Only allow postgresql access from the frontend nodes and hosted.
#
custom_rules: [
# Openshift nodes (egress policy will block connection from non-authorized projects)
'-A INPUT -p tcp -m tcp -s 10.3.163.69 --dport 5432 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.3.163.70 --dport 5432 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.3.163.71 --dport 5432 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.3.163.72 --dport 5432 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.3.163.73 --dport 5432 -j ACCEPT',
# noc01 needs to connect to check the db
'-A INPUT -p tcp -m tcp -s 10.3.163.10 --dport 5432 -j ACCEPT',
# Ipsilon VMs
'-A INPUT -p tcp -m tcp -s 10.3.163.105 --dport 5432 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 10.3.163.106 --dport 5432 -j ACCEPT']
# This is a generic list, monitored by collectd
databases:
- fas2
- ipsilon
datacenter: iad2
db_backup_dir: ['/backups']
# This is a more strict list, to be made publicly available
dbs_to_backup:
- fas2
- ipsilon
effective_cache_size: "6GB"
eth0_ipv4_gw: 10.3.163.254
eth0_ipv4_ip: 10.3.163.115
ks_repo: http://38.145.60.16/repo/rhel/RHEL9-x86_64/
ks_url: http://38.145.60.16/repo/rhel/ks/kvm-rhel
# These are normally group variables, but in this case db servers are often different
lvm_size: 100000
max_stack_depth: "4MB"
mem_size: 16384
nrpe_procs_crit: 800
#
# Large updates pushes cause lots of db threads doing the tag moves, so up this from default.
#
nrpe_procs_warn: 600
num_cpus: 8
shared_buffers: "2GB"
temp_buffers: "8MB"
vmhost: vmhost-x86-08.iad2.fedoraproject.org
volgroup: /dev/vg_guests

1
inventory/inventory
View file

@ -162,7 +162,6 @@ db02.iad2.fedoraproject.org
db03.iad2.fedoraproject.org
db04.iad2.fedoraproject.org
db-fas01.iad2.fedoraproject.org
db-fas02.iad2.fedoraproject.org
db-datanommer01.iad2.fedoraproject.org
db-datanommer02.iad2.fedoraproject.org
db-koji01.iad2.fedoraproject.org

4
playbooks/groups/postgresql-server.yml
View file

@ -4,12 +4,12 @@
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "db-fas01.stg.iad2.fedoraproject.org:db01.stg.iad2.fedoraproject.org:db-koji01.stg.iad2.fedoraproject.org:db-fas01.iad2.fedoraproject.org:db01.iad2.fedoraproject.org:db-datanommer01.iad2.fedoraproject.org:db-koji01.iad2.fedoraproject.org:db-openqa01.iad2.fedoraproject.org:db-datanommer01.stg.iad2.fedoraproject.org:db-datanommer02.iad2.fedoraproject.org:db02.iad2.fedoraproject.org:db-fas02.iad2.fedoraproject.org"
myhosts: "db-fas01.stg.iad2.fedoraproject.org:db01.stg.iad2.fedoraproject.org:db-koji01.stg.iad2.fedoraproject.org:db-fas01.iad2.fedoraproject.org:db01.iad2.fedoraproject.org:db-datanommer01.iad2.fedoraproject.org:db-koji01.iad2.fedoraproject.org:db-openqa01.iad2.fedoraproject.org:db-datanommer01.stg.iad2.fedoraproject.org:db-datanommer02.iad2.fedoraproject.org:db02.iad2.fedoraproject.org"
# Once the instance exists, configure it.
- name: configure postgresql server system
hosts: db-fas01.stg.iad2.fedoraproject.org:db01.stg.iad2.fedoraproject.org:db-koji01.stg.iad2.fedoraproject.org:db-fas01.iad2.fedoraproject.org:db01.iad2.fedoraproject.org:db-datanommer01.iad2.fedoraproject.org:db-koji01.iad2.fedoraproject.org:db-openqa01.iad2.fedoraproject.org:db-datanommer01.stg.iad2.fedoraproject.org:db-datanommer02.iad2.fedoraproject.org:db02.iad2.fedoraproject.org:db-fas02.iad2.fedoraproject.org
hosts: db-fas01.stg.iad2.fedoraproject.org:db01.stg.iad2.fedoraproject.org:db-koji01.stg.iad2.fedoraproject.org:db-fas01.iad2.fedoraproject.org:db01.iad2.fedoraproject.org:db-datanommer01.iad2.fedoraproject.org:db-koji01.iad2.fedoraproject.org:db-openqa01.iad2.fedoraproject.org:db-datanommer01.stg.iad2.fedoraproject.org:db-datanommer02.iad2.fedoraproject.org:db02.iad2.fedoraproject.org
user: root
gather_facts: True