Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
34634 commits 9 branches 0 tags 111 MiB
Commit graph

134 commits

Author SHA1 Message Date
Stephen Smoogen
da105b0f3b NS13 needs a openvpn ccd file to work 
Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
 2021-03-30 16:42:30 -04:00
Mark O'Brien
f952b7a715 add ipsilon02 2021-03-22 15:38:28 +00:00
Mark O'Brien
63ef253011 ipsilon: new prod vm 2021-03-22 11:54:33 +00:00
Kevin Fenzi
02eac50add Add a ipa03 host. 
We want to add another ipa server host in case the load gets large when
we migrate from fas. We can always nuke this one or add more.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-19 21:14:42 +00:00
Kevin Fenzi
4b067c6fec openvpn / server / ccd files: Fix hosts that had the old transition iad2 vpn 
When we moved datacenters we had iad2 pointing to 192.168.20 at various
points to migrate things. We should no longer have any hosts using that
ip range. Move them all back.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-10-02 08:44:33 -07:00
Stephen Smoogen
d0a5454a59 add in vpn files for proxy101/proxy110 to get them from erroring 2020-09-21 12:39:51 -04:00
Mark O'Brien
9f7b9f5d54 [proxies] add host vars proxy39/40 2020-09-16 11:41:47 +01:00
Kevin Fenzi
87d5bc23de openvpn / server: Add ccd file for pagure02 
Note that this just needs to add a new ccd file, nothing has to be
restarted and it can't possibly be used by anything but
'pagure02.fedoraproject.org' so it should not affect freeze on bastion.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 13:48:56 -07:00
Kevin Fenzi
350f52aea9 rename vmhosts in rdu-cc so they don't overlap with hosts in iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-04 13:46:41 -07:00
Mark O'Brien
e4e6ede45b [proxies] add proxy37/38 2020-09-01 15:45:29 +01:00
Kevin Fenzi
1cf024e37f Freeze break request: add vpn ccd file and vpn role to retrace 
We need retrace03 on the vpn at least for now, or else 2fa won't work.
At some point when fasClient is gone we may be able to drop this
when we switch to sssd or something else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-25 14:12:12 -07:00
Mark O'Brien
5f114a7c98 [proxies] setup for proxy35/36 2020-08-24 17:21:00 +01:00
Mark O'Brien
1189897518 [proxies] allow outside servers access to infrastructure 2020-08-06 15:15:31 +01:00
Kevin Fenzi
e6fc2e998b openvpn / server: add 02 instances to vpn 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-14 14:55:02 -07:00
Kevin Fenzi
882d40f9d3 actually check in the nuancier ccd files 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-29 16:34:45 -07:00
Kevin Fenzi
0ec52f5297 openvpn / server: add nuancier and fedocal ccd files 
Also, remove all the old phx2 ones that were left.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-29 16:32:56 -07:00
Stephen Smoogen
ef902cc3c6 openvpn variable is needed for proxy32 2020-06-27 11:09:31 -04:00
Kevin Fenzi
3f84700606 openvpn server / pdc-web02: add ccd file 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-22 14:02:05 -07:00
Stephen Smoogen
7b93b2fe2c ODCS: Change odcs vpn to use the iad2 server versus the phx2 one. This 
will allow odcs to work with new colocation.
 2020-06-16 07:49:54 -04:00
Kevin Fenzi
9dc73b3764 mbs: fix the mbs openvpn endpoint 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 20:48:17 -07:00
Kevin Fenzi
07f8385e19 openvpn: move badges 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-12 13:57:17 -07:00
Kevin Fenzi
89dafdc841 iad2: openvpn/server: switch kerneltest over to iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 14:06:25 -07:00
Kevin Fenzi
a455c31b31 iad2: blockerbugs adjustments for iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 13:43:58 -07:00
Stephen Smoogen
2a4fd4eccc remove mailman.phx2 and openqa.qa as they use iad2 or are not needed 2020-06-11 16:36:09 -04:00
Kevin Fenzi
40c3281a51 iad2: try and enable datacepper 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 07:37:09 -07:00
Kevin Fenzi
5f99c9b1e3 iad2: move github2fedmsg over vpn wise 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-10 14:52:43 -07:00
Stephen Smoogen
b5565f45f8 add items for a oci-registry02 2020-06-10 17:26:46 -04:00
Stephen Smoogen
dafc2e6520 move mailman01 to iad box 2020-06-10 16:53:41 -04:00
Ralph Bean
d421297641 iad2: move resultsdb over to iad2 2020-06-10 16:52:52 -04:00
Stephen Smoogen
0816164593 remove proxy01.phx2/proxy10.phx2 from vpn 2020-06-10 15:44:57 -04:00
Kevin Fenzi
e17539032e iad2: move busgateway over to iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-10 09:33:22 -07:00
Stephen Smoogen
d28f1e6022 remove backup01/log01.phx2 2020-06-10 12:13:37 -04:00
Stephen Smoogen
028dd4d4cf and we remove more items so we can say did something today 2020-06-09 22:01:25 -04:00
Stephen Smoogen
a2dcaec155 comment out for time being 2020-06-09 21:49:05 -04:00
Stephen Smoogen
13565206ef change sundries 2020-06-09 21:40:57 -04:00
Stephen Smoogen
c9ce239460 undo the way I was doing ccd files 2020-06-09 21:40:57 -04:00
Stephen Smoogen
99a60b6ec9 Revert "fix ccd files to move phx2 services to iad2" 
This reverts commit 5af91a294d.
 2020-06-09 21:40:57 -04:00
Stephen Smoogen
5af91a294d fix ccd files to move phx2 services to iad2 2020-06-09 21:28:00 -04:00
Kevin Fenzi
d4ae08ee63 iad2-move: switch pdc-web over to iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-08 18:03:47 -07:00
Kevin Fenzi
2e5c60fe5c iad2-move: switch openshift masters to the iad2 cluster. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-08 17:37:46 -07:00
Kevin Fenzi
05fa0e2933 iad2-move: move vpn on ipa hosts. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-08 15:56:42 -07:00
Kevin Fenzi
b52cfbef47 iad2-move: move the vpn to the iad2 nodes. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-08 15:06:43 -07:00
Kevin Fenzi
7374b4aef4 iad2-move: move iad2 mirrormanager instances into vpn ips to bring live. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-08 12:45:37 -07:00
Kevin Fenzi
a683215e0c openvpn / server: Adjust vpns for migrated services. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-06 09:49:19 -07:00
Kevin Fenzi
b26ca7f8c2 iad2: just switch wiki01 to use the wiki01.vpn endpoint, since dns hasn't updated right everywhere. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-04 17:47:00 -07:00
Kevin Fenzi
d2ea3fdb00 openvpn / server: add ccd files for all the iad2 hosts. 
This will allow the iad2 hosts to connect to the phx2 vpn and use
a different ip from their phx2 counterparts. This way we can change
haproxy/httpd to point to the new iad2 service and migrate it, but
still have the rest of services point to phx2.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-04 12:50:49 -07:00
Kevin Fenzi
cdac99e6b5 openvpn / server / ccd files: clean up tons of old stuff and make sure iad2 is in sync with phx2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-01 17:48:51 -07:00
Kevin Fenzi
1f6fa204be iad2: add a openvpn ccd file for proxy10.iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-26 10:27:22 -07:00
Kevin Fenzi
8f9eeac667 ad2 / busgateway01.iad2: ALso setup ccd vpn file for busgateway01.iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-23 13:06:41 -07:00
Kevin Fenzi
759ba407fa iad2: blockerbugs: create a blockerbugs01.iad2. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-23 10:05:19 -07:00