Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
38328 commits 9 branches 0 tags 111 MiB
Commit graph

38328 commits

This branch
This branch
All branches
Author SHA1 Message Date
Dusty Mabe
8d70d287ca
fedora-coreos-pipeline: add Adam Piasecki (c4rt0) drop some others 
The few we're dropping are either inactive or have moved on.
 2022-12-06 09:59:24 -05:00
Jakub Kadlcik
8f59bfd6cb copr: ipv6.never-default yes 
Don't use IPv6 gateway. It breaks OpenID login for us

https://github.com/fedora-copr/copr/issues/2418
https://pagure.io/fedora-infrastructure/issue/11025
 2022-12-06 14:27:14 +01:00
Kevin Fenzi
dfa13ef9c7 Revert "Add elif to sshd_config template for EL7" 
This reverts commit 3437042944.

This doesn't work on rhel8 machines:
/etc/crypto-policies/back-ends/opensshserver.config: line 1: Bad configuration option: CRYPTO_POLICY
/etc/crypto-policies/back-ends/opensshserver.config: terminating, 1 bad configuration options
 2022-12-05 16:59:49 -08:00
Kevin Fenzi
e2a6f6ea5c main: remove os-cluster from main 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-05 16:39:59 -08:00
Kevin Fenzi
f46beef7ac base: update list of build machines 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-05 16:35:48 -08:00
Kevin Fenzi
147459b7b0 proxies_stg: disable zabbix for now as it is not installable 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-05 14:26:25 -08:00
Francois Andrieu
9000dd6def docs: remove docs-old 2022-12-05 22:08:18 +00:00
Stephen Smoogen
3437042944 Add elif to sshd_config template for EL7 
EL6 and EL7 have a limited set of algorithms, but EL8 and Fedora use
system configs set in a different file. Added an elif to better try
and show this.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2022-12-05 12:36:38 -05:00
Pavel Raiskup
cee1d4f43c copr-dist-git: drop the projects-list option 
That was non-working for some time, since:
2e64a15058

Relates: https://github.com/fedora-copr/copr/pull/2423
 2022-12-05 16:13:11 +01:00
Aurélien Bompard
d1bbf7ee5a
FMN: add the topic prefix to the API FM sender 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-12-05 15:08:59 +01:00
Aurélien Bompard
9fef897903
FMN: fixup ee872446 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-12-05 14:56:02 +01:00
Aurélien Bompard
283bb9a7ea
FMN: fix the github webhook 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-12-05 14:55:13 +01:00
Aurélien Bompard
ee87244619
FMN: Add a F-M config for the API 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-12-05 14:55:13 +01:00
Michal Konečný
05c8f26f1d [release-monitoring] Use the correct folder for pushd 
My mistake, let's fix this.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-12-05 14:18:59 +01:00
Michal Konečný
31c1c7bca7 [release-monitoring] Add npm to build config - staging 
Javascript and CSS dependencies for Anitya are now managed by npm. Let's reflect
this in Anitya buildconfig.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-12-05 14:07:34 +01:00
Pavel Raiskup
ed39dbd82b copr-fe-dev: open port 5000 
This will allow us to run a testing web-server (without Apache and
wsgi), and e.g. trace using 'import pdb'.
 2022-12-04 15:07:09 +01:00
Pavel Raiskup
361deff545 inventory/copr: drop unused host vars 
Complements: 2667ac065f
 2022-12-04 15:05:35 +01:00
Pavel Raiskup
2667ac065f inventory/copr: drop unused hosts/vars 
The non-aws variant is not used for a looong time.  It just confuses
contributors now.  The stg is not used either.
 2022-12-04 15:02:29 +01:00
Kevin Fenzi
70530bf832 proxies: drop some old openshift3 things 
fas, openshift kerneltest and the old openshift console/api are no more.
Remove them now to fix up reverseproxy templates.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-03 20:47:00 -08:00
Kevin Fenzi
531eee95d3 proxies / reverseproxy: try and fix template to be correct. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-03 20:39:13 -08:00
Kevin Fenzi
3c5ae163f9 proxy: simplify reverseproxy template 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-03 20:29:36 -08:00
Adam Williamson
3fc8903111 openQA: install from updates-testing on prod and stg again 
I think the recent git builds are good and I want them everywhere
so I can merge a bunch of things and clean up before the weekend.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-12-02 14:40:21 -08:00
Kevin Fenzi
823fadedf8 notifs: use localhost for smtp in prod too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-01 16:29:07 -08:00
Kevin Fenzi
249886e228 move compose-x86-01 to f37 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-01 10:54:11 -08:00
Kevin Fenzi
55d5bc5502 compose-rawhide01/compose-branched01: move to f37 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-01 10:48:25 -08:00
Stephen Smoogen
aef2250f24 update the mirrorsdate graph to 2023 2022-12-01 12:24:11 -05:00
Kevin Fenzi
bc0abc5594 kojipkgs: move to f37 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-30 17:01:01 -08:00
Kevin Fenzi
ed584bc419 proxies: remove stray copy-pasta 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-30 16:36:11 -08:00
Kevin Fenzi
9e9215b934 f37 uplift 
Upgraded proxies and builders to f37. We have a reduced timeframe to get
this done before the holidays, so this time we just upgraded them in
place. Usually we do a full reinstall. We will try and do that next
cycle.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-30 16:31:23 -08:00
Kevin Fenzi
b20a65e4fa koji-hub: try moving webkitgtk to heavybuilder for aarch64 builders 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-30 11:23:57 -08:00
Adam Williamson
bf501ee013 openqa: disable updates-testing on lab for now 
Due to https://progress.opensuse.org/issues/121054 , waiting for
upstream review on my proposed fix.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-11-30 08:59:43 -08:00
Pavel Raiskup
207719282e copr-be-dev: fix public IP 2022-11-30 13:27:02 +01:00
Pavel Raiskup
aa6c08f1bc copr-keygen-dev: fix backend's private IP (incoming iptables rules) 2022-11-30 13:12:19 +01:00
Pavel Raiskup
89018eecac copr-be-dev: fix the private IP address 
This is needed to correctly configure iptables rules on the keygen side.
 2022-11-30 13:03:50 +01:00
Pavel Raiskup
d4f86e3364 copr-be-dev/copr-fe-dev: drop birthday 
This was a leftover.
 2022-11-30 10:50:38 +01:00
Lukas Holecek
c6df495552 waiverdb: Set fixed number of processes ans threads 
New waiverdb container image starts 8 gunicorn web worker processes by
default using WEB_CONCURRENCY environment variable. This causes memory
to spike (over 500MiB) and workers to get terminated.

Instead of increasing memory limits, a better solution is to decrease
the number of processes and increase number of threads since the app
mostly waits on DB requests to finish and waiverdb workers themselves
are thread-safe.
 2022-11-30 09:47:52 +00:00
Pavel Raiskup
cb2908cc48 copr-dist-git: don't re-add SWAP volume 
This volume has been dropped, we now use the /swap swap-file, same as
the other Copr servers.
 2022-11-30 09:55:30 +01:00
Kevin Fenzi
337548123a koji01/02 t0 f37 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-29 15:36:46 -08:00
Jakub Kadlcik
dec22b4762 copr: install lvm2 package on copr-backend 2022-11-29 23:03:37 +01:00
Jakub Kadlcik
ee1f6638a6 copr: restart systemd-oomd after changing its config 2022-11-29 22:46:43 +01:00
Jakub Kadlcik
1e56a328b8 copr: use SwapUsedLimit=80 for systemd-oomd on all copr servers 2022-11-29 22:25:55 +01:00
Pavel Raiskup
5107c13c9c copr/base: better detect ipv6 config 
Check the connection configuration, not the actual device setup (device
setup might be automatically configured, but still non-working).
 2022-11-29 21:43:11 +01:00
Pavel Raiskup
e21db9be97 copr-dist-git: typo in the restart_services.yml import 2022-11-29 17:54:00 +01:00
Michal Konečný
febe7abd90 [the-new-hotness] Fix the syntax error in config 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-11-29 15:05:32 +00:00
Pavel Raiskup
6dc43e2d23 copr: disable zram0 swap 
We maintain swap partitions ourselves, and zram0 complicates our lives
for multi-swap use-cases:
https://bugzilla.redhat.com/show_bug.cgi?id=2051154
 2022-11-29 16:04:07 +01:00
Pavel Raiskup
b69b07c110 copr-dist-git: use the default swap layout 2022-11-29 16:04:07 +01:00
Michal Konečný
851f1474f8 [the-new-hotness] Add new templates to config 
Reflect changes introduced in https://github.com/fedora-infra/the-new-hotness/pull/537

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-11-29 15:34:28 +01:00
Kevin Fenzi
b1b0923af0 openshift 3.11: raise a glass! 
Our openshift 3.11 cluster(s) served us long and well.

Now we have everything finally moved to the openshift 4 clusters (fas2
was the last holdout). We can finally retire this. :)

🎉🥂

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-28 13:08:01 -08:00
Pavel Raiskup
4948de43a3 copr-keygen: fix "private" ipv4 address to fix firewall 2022-11-28 19:50:04 +01:00
Jakub Kadlcik
4bdce0d462 copr: drop birthday and enable services 2022-11-28 19:17:33 +01:00