Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
36519 commits 9 branches 0 tags 111 MiB
Commit graph

291 commits

Author SHA1 Message Date
Kevin Fenzi
eb991fa9c1 base / big network cleanup 
Everything should now be using linux-system-roles/network, so we drop
our hacky nmcli calls and everything that referred to them, including
exclude variables. Also, lets just let NM handle resolv.conf so it's not
wrong all the time on reboots.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-01-26 12:14:23 -08:00
T.C. Williams
995f499a6d Adjust rsyslog imjournal rate-limiting settings to prevent dropped messages under load. fedora-infrastructure-9512 2021-11-19 00:30:32 +00:00
Nils Philippsen
c782eceae1 Move syncHttpLogs.sh into web-data-analysis role 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-07-23 13:06:23 +02:00
Adam Saleh
eb42244c28 Remove the comment, timeouts should be sufficient. 2021-07-22 21:34:00 +02:00
Adam Saleh
be40017d00 Change the syncHttp timeout to 2h max, comment out the misbehaving proxy09 2021-07-22 21:34:00 +02:00
Adam Saleh
721e3e9864 Add 3 times retry and 30m+30m rsync timeout to syncHttpLogs 2021-07-22 21:34:00 +02:00
Pierre-Yves Chibon
2b46beed2c fedocal: drop everything related to fedocal in VM 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-06-23 17:30:27 +02:00
Pavel Raiskup
a2d65ff508 Move devel servers to elastic IPs, too 2021-01-18 14:58:58 +01:00
Pavel Raiskup
f14b897b1f copr: point playbooks to new set of (elastic) IPs 2020-11-13 10:05:21 +01:00
Jakub Kadlcik
e043b62c5a reprovisioning copr-fe-dev from a new instance 2020-11-11 14:12:15 +01:00
Stephen Smoogen
522c62c273 try to make the postfix milter part better searched and some debugging to opendkim and turn off the sending of reports 2020-10-06 12:20:09 -04:00
Kevin Fenzi
c5f4e27746 roles/base/postfix: add a rdu-cc postfix main.cf 
This one just uses the vpn endpoint for bastion to avoid dns and ipv6
issues.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-10-05 16:03:55 -07:00
Pierre-Yves Chibon
8a13932c66 postfix: Drop the main.cf for pagure02 - never worked 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-02 09:50:42 +02:00
Pierre-Yves Chibon
5383f87f30 pagure: adjust pagure's postfix configuration to rhel8 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-01 11:06:52 +02:00
Pierre-Yves Chibon
200282de8d pagure: add a dedicated postfix configuration file for pagure02 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-25 12:10:31 +02:00
Silvie Chlupova
3ded4aae28 Fix DKIM signing 2020-09-24 10:58:17 +00:00
Mark O'Brien
1b787aef8b add proxy39/40 to http log sync 2020-09-22 11:08:31 +01:00
Mark O'Brien
e4e6ede45b [proxies] add proxy37/38 2020-09-01 15:45:29 +01:00
Stephen Smoogen
15348981f8 try to fix part of ticket #9273 by increasing the number of open files allowed on log servers and people as they have a large number of files to deal with. 2020-08-28 08:26:19 -04:00
Mark O'Brien
5f114a7c98 [proxies] setup for proxy35/36 2020-08-24 17:21:00 +01:00
Stephen Smoogen
25d3faff49 put in a relay host for copr 2020-08-13 14:55:18 -04:00
Stephen Smoogen
17965d6ea7 merge and remove duplicate gateway file that bastion.iad2 had. add in copr addresses to allow for relay 2020-08-13 14:53:33 -04:00
Stephen Smoogen
04efbcf732 add in correct main.cf also 2020-08-12 20:45:14 -04:00
Stephen Smoogen
c9cb4a5d5f fix postfix entries so that they use 10.3.160.0/19 network versus phx2 networks 2020-08-12 20:42:57 -04:00
Mark O'Brien
f7ba779b61 [proxies] add proxy34 2020-08-04 15:41:04 +01:00
Mark O'Brien
6994fef4f8 [proxies] new proxy33 in aws capetown 2020-07-28 15:34:59 +01:00
Kevin Fenzi
3c340cf69b base / resolv.conf: fix staging to adjust for iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-18 15:46:37 -07:00
Stephen Smoogen
c1c1905ce4 fix syntax error in syncHttpLogs causing it to fail on log01. File needed } at the end of variable. Consolidated debug statements 2020-07-14 13:54:31 -04:00
Kevin Fenzi
971d49a426 base / resolv.conf / rdu: increase timeout to 5s at rdu 
The nameserver there seems slow, it takes more than a second to resolve
things sometimes.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-11 10:17:48 -07:00
Stephen Smoogen
5674c1e0ad try to fix syncHttpLogs so it doesnt try to download files whcih do not exist. The rsync command has entries like speedup and data and we just want the logs 2020-07-10 17:07:22 -04:00
Stephen Smoogen
fdf96ef734 fix bug in syncHttpLogs causing them to fail 2020-07-10 09:29:41 -04:00
Kevin Fenzi
11ec8e6adf base / resolv.conf / rdu2: vpn has to come first 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-06 14:10:15 -07:00
Stephen Smoogen
736b3db7d1 make the syncHttpLogs a little less noisy and hopefully more useful 2020-07-02 08:54:57 -04:00
Kevin Fenzi
7984b46eb7 The great phx2 pruning run (1st cut). 
Since we no longer have any machines in phx2, I have tried to remove
them from ansible. Note that there are still some places where we need
to remove them still: nagios, dhcp, named were not touched, and in cases
where it wasn't pretty clear what a conditional was doing I left it to
be cleaned up later.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 14:14:31 -07:00
Adam Williamson
1a3ee7c6a1 Minimize another use of blacklist 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-12 09:45:20 -07:00
Stephen Smoogen
6cbe68f288 make firewall change to openshift so nagios can be accepted. make change to syncHttp for new ips 2020-06-12 12:33:13 -04:00
Stephen Smoogen
0816164593 remove proxy01.phx2/proxy10.phx2 from vpn 2020-06-10 15:44:57 -04:00
Stephen Smoogen
0f6bde6666 make it so s390 uses iad2 dns 2020-06-09 20:30:01 -04:00
Stephen Smoogen
9fbe3df30b put the right item into the postfix main.cf 2020-06-09 14:16:22 -04:00
Stephen Smoogen
da3bb01bb8 make it so ipv4 is used for iad2 systems 2020-06-09 14:11:26 -04:00
Stephen Smoogen
d89168a30f clean up download usage 2020-06-06 15:23:40 -04:00
Stephen Smoogen
16875c357d try to get this to work for builders in iad2 2020-06-06 10:39:09 -04:00
Mark O'Brien
cb9302cb6a [postfix] update gateway conf for postfix3 2020-06-02 08:16:55 +00:00
Mark O'Brien
c8e322e49a [postfix] update main config file for postfix3 config 2020-06-02 08:16:55 +00:00
Kevin Fenzi
d5b4bef21b iad2: bkernel01 should use the iad resolv.conf, and we shouldn't try and put template conditionals in a file. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-30 18:21:39 -07:00
Kevin Fenzi
189194a7d1 iad2: fix kojibuilder resolv.conf for iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 14:40:04 -07:00
Stephen Smoogen
5407472e84 move iad2 in front of vpn so that hosts aren't trying to reach vpn hosts when they aren't on vpn 2020-05-22 15:24:31 -04:00
Stephen Smoogen
d8188e7417 turn off ipv6 on bastion until we get ipv6 fulling deployed 2020-05-22 14:07:59 -04:00
Stephen Smoogen
5b9d2b927d put in an updated postfix.main for bastion-iad01 2020-05-22 13:56:34 -04:00
Mark O'Brien
851d898e01 [rsyslog] add rsyslog8/rhel8 conf file 2020-05-21 11:37:48 +01:00