Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
36519 commits 9 branches 0 tags 111 MiB
Commit graph

148 commits

Author SHA1 Message Date
Mark O Brien
57fa4c40bc add vpn info for el9-test 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-12-20 15:23:05 +00:00
Mikolaj Izdebski
137f156d5a openvpn/server: Add config for value02.iad2.fedoraproject.org 2021-11-03 16:24:20 +01:00
Mark O Brien
59fa8cb866 maintainer-test: create f35 instance and vpn settings 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-10-13 13:10:09 +00:00
Kevin Fenzi
738c89d04d vmhost-p08-copr02: add second power8 box in rdu-cc 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-07-12 19:07:52 -07:00
Kevin Fenzi
6571c326ee Storinator01.rdu-cc: add host back in 
We add vpn to it to make ipa work, drop old openshift volumes, change
the name and in general get it ready to add to ansible.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-07-01 14:19:59 -07:00
Kevin Fenzi
07fd9a34aa add vmhost-p08-copr01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-06-26 10:50:51 -07:00
Kevin Fenzi
b87ea6573f add vpn endpoint for vmhost-a64-cc01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-06-24 15:54:14 -07:00
Kevin Fenzi
8626857460 cloud-noc-os01: add vpn 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-06-18 09:50:57 -07:00
Kevin Fenzi
8a59695693 Add maintainer_test and copr vmhosts to vpn 
We need to add these hosts to the vpn to use ipa for auth on them.
They are in the 192.168.100 network, which is the 'more restricted'
subnet of vpn. After the freeze we will probibly want to lock this down
more with a rule on all hosts except ipa* to reject everything from
them. In the mean time the firewall rules blocking most things should be
ok for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-16 11:38:26 -07:00
Kevin Fenzi
658df6e677 debuginfod: move to port 8002 and add vpn 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 15:30:01 -07:00
Stephen Smoogen
da105b0f3b NS13 needs a openvpn ccd file to work 
Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
 2021-03-30 16:42:30 -04:00
Mark O'Brien
f952b7a715 add ipsilon02 2021-03-22 15:38:28 +00:00
Mark O'Brien
63ef253011 ipsilon: new prod vm 2021-03-22 11:54:33 +00:00
Kevin Fenzi
02eac50add Add a ipa03 host. 
We want to add another ipa server host in case the load gets large when
we migrate from fas. We can always nuke this one or add more.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-19 21:14:42 +00:00
Kevin Fenzi
4b067c6fec openvpn / server / ccd files: Fix hosts that had the old transition iad2 vpn 
When we moved datacenters we had iad2 pointing to 192.168.20 at various
points to migrate things. We should no longer have any hosts using that
ip range. Move them all back.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-10-02 08:44:33 -07:00
Stephen Smoogen
d0a5454a59 add in vpn files for proxy101/proxy110 to get them from erroring 2020-09-21 12:39:51 -04:00
Mark O'Brien
9f7b9f5d54 [proxies] add host vars proxy39/40 2020-09-16 11:41:47 +01:00
Kevin Fenzi
87d5bc23de openvpn / server: Add ccd file for pagure02 
Note that this just needs to add a new ccd file, nothing has to be
restarted and it can't possibly be used by anything but
'pagure02.fedoraproject.org' so it should not affect freeze on bastion.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 13:48:56 -07:00
Kevin Fenzi
350f52aea9 rename vmhosts in rdu-cc so they don't overlap with hosts in iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-04 13:46:41 -07:00
Mark O'Brien
e4e6ede45b [proxies] add proxy37/38 2020-09-01 15:45:29 +01:00
Kevin Fenzi
1cf024e37f Freeze break request: add vpn ccd file and vpn role to retrace 
We need retrace03 on the vpn at least for now, or else 2fa won't work.
At some point when fasClient is gone we may be able to drop this
when we switch to sssd or something else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-25 14:12:12 -07:00
Mark O'Brien
5f114a7c98 [proxies] setup for proxy35/36 2020-08-24 17:21:00 +01:00
Mark O'Brien
1189897518 [proxies] allow outside servers access to infrastructure 2020-08-06 15:15:31 +01:00
Kevin Fenzi
e6fc2e998b openvpn / server: add 02 instances to vpn 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-14 14:55:02 -07:00
Kevin Fenzi
882d40f9d3 actually check in the nuancier ccd files 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-29 16:34:45 -07:00
Kevin Fenzi
0ec52f5297 openvpn / server: add nuancier and fedocal ccd files 
Also, remove all the old phx2 ones that were left.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-29 16:32:56 -07:00
Stephen Smoogen
ef902cc3c6 openvpn variable is needed for proxy32 2020-06-27 11:09:31 -04:00
Kevin Fenzi
3f84700606 openvpn server / pdc-web02: add ccd file 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-22 14:02:05 -07:00
Stephen Smoogen
7b93b2fe2c ODCS: Change odcs vpn to use the iad2 server versus the phx2 one. This 
will allow odcs to work with new colocation.
 2020-06-16 07:49:54 -04:00
Kevin Fenzi
9dc73b3764 mbs: fix the mbs openvpn endpoint 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 20:48:17 -07:00
Kevin Fenzi
07f8385e19 openvpn: move badges 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-12 13:57:17 -07:00
Kevin Fenzi
89dafdc841 iad2: openvpn/server: switch kerneltest over to iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 14:06:25 -07:00
Kevin Fenzi
a455c31b31 iad2: blockerbugs adjustments for iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 13:43:58 -07:00
Stephen Smoogen
2a4fd4eccc remove mailman.phx2 and openqa.qa as they use iad2 or are not needed 2020-06-11 16:36:09 -04:00
Kevin Fenzi
40c3281a51 iad2: try and enable datacepper 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 07:37:09 -07:00
Kevin Fenzi
5f99c9b1e3 iad2: move github2fedmsg over vpn wise 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-10 14:52:43 -07:00
Stephen Smoogen
b5565f45f8 add items for a oci-registry02 2020-06-10 17:26:46 -04:00
Stephen Smoogen
dafc2e6520 move mailman01 to iad box 2020-06-10 16:53:41 -04:00
Ralph Bean
d421297641 iad2: move resultsdb over to iad2 2020-06-10 16:52:52 -04:00
Stephen Smoogen
0816164593 remove proxy01.phx2/proxy10.phx2 from vpn 2020-06-10 15:44:57 -04:00
Kevin Fenzi
e17539032e iad2: move busgateway over to iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-10 09:33:22 -07:00
Stephen Smoogen
d28f1e6022 remove backup01/log01.phx2 2020-06-10 12:13:37 -04:00
Stephen Smoogen
028dd4d4cf and we remove more items so we can say did something today 2020-06-09 22:01:25 -04:00
Stephen Smoogen
a2dcaec155 comment out for time being 2020-06-09 21:49:05 -04:00
Stephen Smoogen
13565206ef change sundries 2020-06-09 21:40:57 -04:00
Stephen Smoogen
c9ce239460 undo the way I was doing ccd files 2020-06-09 21:40:57 -04:00
Stephen Smoogen
99a60b6ec9 Revert "fix ccd files to move phx2 services to iad2" 
This reverts commit 5af91a294d.
 2020-06-09 21:40:57 -04:00
Stephen Smoogen
5af91a294d fix ccd files to move phx2 services to iad2 2020-06-09 21:28:00 -04:00
Kevin Fenzi
d4ae08ee63 iad2-move: switch pdc-web over to iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-08 18:03:47 -07:00
Kevin Fenzi
2e5c60fe5c iad2-move: switch openshift masters to the iad2 cluster. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-08 17:37:46 -07:00