Commit graph

43075 commits

Author SHA1 Message Date
Kevin Fenzi
f136cfec2a mariadb: set single-transaction on backups
We are seeing the backups here cause the wiki to become unresponsive.
This might help it out and prevent it locking things while doing the
backups.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-01 08:02:12 -07:00
Kevin Fenzi
2cc8fabdbf virthost: no collectd client packages on rhel10 yet
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 20:06:07 -07:00
Kevin Fenzi
56c8dcc832 virthost: no zabbix client packages on rhel10 yet
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 19:56:43 -07:00
Kevin Fenzi
1052da754a virthost: no nagios client packages on rhel10 yet
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 19:49:57 -07:00
Kevin Fenzi
8f0ce956eb virthost: no rkhunter on rhel10 yet
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 19:43:30 -07:00
Kevin Fenzi
8494306377 repos: we have not yet setup epel10 infra tags and need to
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 19:29:26 -07:00
Kevin Fenzi
59cc796960 repos: add rhel10.repo and epel10.repo for rhel10 hosts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 18:58:07 -07:00
Kevin Fenzi
ea63e24fc2 vmhost-x86-02.rdu3 enters the ring
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 18:55:38 -07:00
Kevin Fenzi
fe94cbe274 kickstarts: add rhel10 post script
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 18:38:52 -07:00
Kevin Fenzi
d4ab1ab9b8 kickstarts: dhclient is no more in rhel10
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 18:35:39 -07:00
Kevin Fenzi
c6c6e2ec3c kickstarts: auth has been removed
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 18:27:00 -07:00
Kevin Fenzi
6c6e0461cd kickstarts: actually install the kickstart to be useable
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 18:24:19 -07:00
Kevin Fenzi
7c2ce45f4f kickstarts: add rhel 10 initial kickstarts
This is based on the rhel9 one, and likely will require adjusting.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 18:12:43 -07:00
Kevin Fenzi
ec71d98801 db03.iad2: double cpus to 8
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 18:09:49 -07:00
Kevin Fenzi
ec28dcbcb9 os-control: install unzip and tar as they are used later in playbooks
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 17:15:48 -07:00
Kevin Fenzi
105b8d394f os-control01.stf.rdu3: override dns for virt-install
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 16:58:47 -07:00
Kevin Fenzi
8ffd2aef29 nagios: update gateways for iad2/rdu3, they need to be one hop up from the actual external ip
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 16:45:19 -07:00
Kevin Fenzi
1132f16d8a os-control01.stg.rdu3: use correct nameservers
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 16:34:30 -07:00
Adam Williamson
4c997fbe70 Enable nftables on openQA prod workers
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-05-30 14:52:42 -07:00
Mark Rosenbaum
7a10ef14d3 Added Nagios rdu3 configs 2025-05-30 17:24:36 +00:00
Kevin Fenzi
836d79193c pagure: update ansible for latest blocks from ai
Update the latest project blocks that were added.

Also, extend the bot block to docs.pagure.io, which was
being hammered by scrapers.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 10:02:24 -07:00
Kevin Fenzi
77384338e5 os-control.stg.rdu3: add new staging os control host to rdu3
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-30 09:38:41 -07:00
Kevin Fenzi
07c894ea21 pkgs: drop recursive call to facl setting
In a0046b5b4b there was a bunch of fixes for ansible lint to the
distgit/pagure roles.

However, it seems like a
recursive: true
was added to the facl call, when it wasn't present before.

I noticed this when my playbook run on pkgs was running for several
hours. ;(

I don't think there's any reason to run this recursively,
as permissions should inherit from the top level one and have always
worked without it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-29 15:28:21 -07:00
Kevin Fenzi
3b3dfae944 os-control.rdu3: add openshift control vm
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-29 14:53:57 -07:00
Kevin Fenzi
f9e5b67953 kickstarts: fix a syntax error
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-29 14:11:50 -07:00
Kevin Fenzi
e5b1bc8e52 vmhost-x86-01.stg.rdu3: add to ansible
New staging virthost in rdu3

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-29 14:02:03 -07:00
Kevin Fenzi
0d5abc773c dns: drop duplicate zone entry
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-29 13:48:12 -07:00
Kevin Fenzi
93bb03acc6 add stg.rdu3 zone to nameservers
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-29 13:37:39 -07:00
Kevin Fenzi
ed701ebbf3 kickstarts: some misc improvements
Move the vnc password into ansible-private and change it
Set post script to pull via https instead of http.
http gets redirected and curl doesn't follow the redirect by default.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-29 13:29:57 -07:00
Kevin Fenzi
cf68c038f5 openvpn / ccd: add ccd file for proxy01.rdu3
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-29 12:02:04 -07:00
Kevin Fenzi
1ab76f84c8 fedora-web: move sync script to /usr/local/bin
In f42+, there's no longer a /usr/local/sbin, everything should be in
/usr/local/bin. Move this last script there.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-29 11:16:17 -07:00
Greg Sutcliffe
f2c9d257c1
DHCPd: Semicolons matter 2025-05-29 17:27:05 +01:00
Greg Sutcliffe
224c5ef15c
DHCPd: Get the UEFI shimname right 2025-05-29 17:20:54 +01:00
Greg Sutcliffe
13d746e528
DHCPd: Update leftover iad2 ranges to rdu3 2025-05-29 17:07:05 +01:00
Greg Sutcliffe
a3fb4884ad
TFTP: add default pxelinux files for noc01 iad2 & rdu3 2025-05-29 15:50:59 +01:00
Greg Sutcliffe
63c5654cec
DHCPd: Add RDU prod mac addresses / ips to dhcpd.conf 2025-05-29 10:43:45 +01:00
Akashdeep Dhar
057e02bd1e Add client config for W2FM test environment
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-05-29 09:36:41 +00:00
Lenka Segura
cdf6c65af3 [ipaserver] Add toddlers tag to Get admin ticket
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2025-05-29 11:26:50 +02:00
Lenka Segura
82354291b6 [ipaserver] Include toddlers setup for prod
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2025-05-29 10:26:09 +02:00
Kevin Fenzi
d42014c740 httpd: set a few conf files as optional for initial installs
Due to ordering, these config files don't get copied over before the
first time httpd gets restarted. Setting them as optional should allow
initial runs to work better.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-28 19:49:32 -07:00
Kevin Fenzi
0819fe8c0b mirrormanager_proxy: drop call trying to us mm-backend01
mm-backend01 no longer exists, the application has moved into openshift.

So, just drop this and the files will get synced.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-28 17:35:07 -07:00
Kevin Fenzi
60c4bdd9d0 zabbix / templates: just use inventory_hostname not short
This causes an issue where we have a proxy01.iad2 and a proxy01.rdu3.
They are different hosts, but if it uses the short name then the second
one fails because it has the same name as the first.

Lets just use fqdn for now and see if causes any problems in
display in the interface. If it does, we can change it to
perhaps include the second octet.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-28 15:48:03 -07:00
Kevin Fenzi
76bda7e176 New kickstarts role
Move kickstarts into ansible from the side repo they were in before.
Hopefully this will make it easier for people to contibute to them
and see what they are. All sensitive info here should be templated
out from the private repo.

note that before we merge/run this, we need to move the old repo
out of the way in the location we are syncing to.
We can gradually move other kickstarts out of the old repo into this
role as we need them to build rdu3 out.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-28 21:57:12 +00:00
Greg Sutcliffe
e74727c5dd tools: add Dell iDRAC XML generator 2025-05-28 21:52:22 +00:00
Kevin Fenzi
3553166073 dns / rdu3: turns out we need the rdu3 zone in rdu3
Was missing from the RDU3 view. Adding this will let rdu3 hosts resolve
rdu3.fedoraproject.org addresses.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-28 13:13:56 -07:00
Aurélien Bompard
f4de93c8ed
Planet: avoid duplicate route name
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-05-28 12:17:48 +02:00
Aurélien Bompard
adc11a9235
Planet: fix the keytab
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-05-28 12:13:44 +02:00
Kevin Fenzi
8d37c36f92 rdu3 / proxy01.rdu3: correct ip
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-27 17:42:50 -07:00
Kevin Fenzi
93edb6fb70 rdu3 / proxy01.rdu3: try and setup an initial proxy
We need this up and working in order to install the prod openshift
cluster since it uses a proxy to talk to the api and communicate with
the control plane.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-27 17:39:39 -07:00
Kevin Fenzi
8c5b664a03 dns: do not match all of 10.x.x.x or first one wins
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-27 17:20:31 -07:00