Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
39807 commits 9 branches 0 tags 111 MiB
Commit graph

39807 commits

This branch
This branch
All branches
Author SHA1 Message Date
Michal Konecny
405c6a4953 [IPA] Clean client installation before running replica on RHEL 9 
On RHEL9 ipa-replica-install fails if there is already client installed with
"Your system is partly configured." To prevent this we need to uninstall the
existing installation before trying to do replica.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-16 13:56:55 +01:00
Michal Konecny
84c25cad71 [IPA] Fix syntax issue 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-16 12:54:53 +01:00
Michal Konecny
a3112de954 [IPA] Remove creates parameter from deploy replica 
The deploy replica step wasn't executed because it's checking if
`/etc/ipa/default.conf` exists. Remove that and use only the return code from
ipactl to check if the replication is done.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-16 12:39:36 +01:00
Michal Konecny
0969fed462 [IPA] Ignore errors when determining replication status 
The ipactl status returns non 0 code when the IPA server is not set yet. We need
to ignore the error code when checking that.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-16 12:22:01 +01:00
Michal Konecny
3e349c80ec [IPA] Use ipactl status output for replication check 
As the /etc/ipa/default.conf is already created by ipa/client role, we need to
find another way to check if replication is needed. Calling `ipactl status`
should be more reliable.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-16 12:06:22 +01:00
Michal Konecny
4025b4d158 [IPA] Move ipa02.stg to RHEL9 
The ipa02.stg is currently behaving strangely, let's try to move it to RHEL9, as
discussed in https://pagure.io/fedora-infrastructure/issue/10358, to solve the
issue.

The backup is available on vmhost-x86-02.stg in case anything goes wrong.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-16 11:12:54 +01:00
Kevin Fenzi
88683eef68 notifs: clean up some more missed parts from retirement 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 18:16:06 -08:00
Kevin Fenzi
4cd2c924c3 smtp-auth: actually install the master.cf file too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 17:51:16 -08:00
Kevin Fenzi
ddd0913262 smtp-auth: rename this to explicit hostname 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 17:48:24 -08:00
Michal Konecny
e48db0aabb Allow port 587 as well 
To fix https://pagure.io/fedora-infrastructure/issue/11623

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-16 01:38:59 +00:00
Michael Scherer
bdd76ae138 Add master.cf with submission enabled 
Copied from base master.cf, fix #11623
 2023-11-16 01:38:59 +00:00
Kevin Fenzi
d727ee47ea nagios: remove another old notifs remnant 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 13:12:36 -08:00
Kevin Fenzi
20dc948173 notifs (old fmn): retire 
We are retiring this in favor of the new service.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 12:28:28 -08:00
Kevin Fenzi
3808d867de value01/value01.stg: retire 
These are old rhel7 instances. The only thing left on them is fedmsg-irc
(sending to one irc channel, fedora-releng). Move everything to use the
newer rhel8 value02 instead.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 12:13:38 -08:00
Kevin Fenzi
af8f9531a9 haproxy: fix issue with non iad2 proxies 
Turns out zabbix is only in iad2, so we need to not set it up on non
iad2 proxies.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 11:14:27 -08:00
Kevin Fenzi
a60ca7159f nuancier: retire and remove from ansible 
See https://pagure.io/fedora-infrastructure/issue/11371
This service is retired.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 10:44:00 -08:00
Tomas Hrcka
ea8c50232c Keep communishift-lightspeed-build project until the migration is done 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-11-15 15:49:59 +01:00
Jakub Kadlcik
7c0d1a2335 communishift: rename the project to communishift-log-detective 
The upstream was renamed as well
https://github.com/fedora-copr/log-detective-website
 2023-11-15 14:27:30 +01:00
David Kirwan
cc19d32d67
zabbix: enable the zabbix prod hosts in the playbook 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-15 09:07:47 +00:00
David Kirwan
6461430ae3
zabbix: remove conditions on zabbix configration 
Rename host zabbix/zabbix.stg to zabbix01

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-15 08:10:44 +00:00
Kevin Fenzi
aaf8fec811 zabbix_agent / rhel7: package seems to be just policycoreutils-python in rhel7 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-14 16:06:10 -08:00
Miro Hrončok
9d5c2b84a8 Switch the weekly FTBFS reminders to F39 
Signed-off-by: Miro Hrončok <miro@hroncok.cz>
 2023-11-14 23:32:18 +00:00
Kevin Fenzi
292db92153 koji_builder / buildhw-a64: try and get core dumps another way 
We tried to override the machine scope, but that didn't work in this
case, so instead lets tell mock to pass a new core limit to
systemd-nspawn and see if that gets us cores.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-14 10:53:53 -08:00
Aurélien Bompard
f76ff54b1f
bugzilla2fedmsg: use a more recent python builder image 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-11-14 09:16:25 +01:00
Kevin Fenzi
58183eb8ee proxies / staging: move stg proxies to f39 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 17:09:50 -08:00
Kevin Fenzi
24a237ad3d releng-compose: move a bunch of composers to f39 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 16:41:39 -08:00
Kevin Fenzi
f9eac86c72 batcave01: ansible-core now switches back to python-3.9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 14:15:25 -08:00
Kevin Fenzi
9b42cd8cbf haproxy: fix template typo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 13:53:56 -08:00
Kevin Fenzi
e56810a7dd proxies: drop free on later plays 
This just causes confusion and doesn't really help make the playbook any
faster.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 10:42:54 -08:00
Leo Puvilland
9f0cfc0502 redirect discussions.fedoraproject.org to discussion.fedoraproject.org, and add to proxy and LE cert 2023-11-13 18:33:39 +00:00
Pavel Raiskup
e80b1e1050 copr/hypervisor: typo in task name 2023-11-13 16:51:28 +01:00
Pavel Raiskup
8e6de8396e nagios: send notifications to copr-team@redhat.com 
Instead of separate members.  This is just to align with:
https://accounts.fedoraproject.org/group/copr-sig/
 2023-11-13 15:32:26 +01:00
Pavel Raiskup
87959ce5e6 copr: cleanup credentials: old openstack 
Complements: 1623f42fea
 2023-11-13 09:12:55 +01:00
Pavel Raiskup
1623f42fea copr: cleanup credentials: old openstack 
Complements 4792241cfe
 2023-11-13 09:04:30 +01:00
Kevin Fenzi
bf3a64f286 resultdb: add coreos user to submit results from coreos 
Just add another user here to be allowed to submit results for coreos
tests. Creds sent out of band.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-10 11:03:30 -08:00
Kevin Fenzi
766e2d39c7 bodhi / backend / koji_sync: f40-flatpak does not exist yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-10 10:34:20 -08:00
Pavel Raiskup
bb04ae62ad copr: credential cleanup: drop log for "static" SSL 
We are for quite some time using the roles/copr/certbot also for
backend production.
 2023-11-10 13:45:19 +01:00
Pavel Raiskup
8abbdbaea5 sopr: credential cleanup: drop an unused task file 2023-11-10 13:45:17 +01:00
Pavel Raiskup
4792241cfe copr: credential cleanup: drop unused openstack/passwords.yml 
Drop the use of credentials to (now) non-existing OpenStack.
 2023-11-10 13:35:17 +01:00
Pavel Raiskup
63e9812149 backend: explain the reason for generating ssh key on VM 2023-11-10 13:28:28 +01:00
Pavel Raiskup
47b91aae1f copr: credential cleanup: drop copr-sudoers use 
This never worked.  We have to add appropriate FAS integration.
 2023-11-10 11:20:56 +01:00
Pavel Raiskup
41af546c0d copr: credential cleanup: drop unused openstack/passwords.yml 2023-11-10 11:15:03 +01:00
Kevin Fenzi
deef8d3b35 bodhi-backend01.stg: was moved to f38 a while ago 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-09 13:09:19 -08:00
Nils Philippsen
aac912e4c9 Set nullglob for combining HTTP log files 
This can cause files named '*' in places where you wouldn’t expect it
otherwise.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2023-11-09 20:42:31 +00:00
Kalev Lember
0064e09bff kojipkgs: slightly relax openh264 blocking/redirect rules 
Allow access to gstreamer1-plugin-openh264 package and new noopenh264
stub package that don't contain non-distributable code, while keeping
openh264* and mozilla-openh264* blocked.

See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=2247274 for
"noopenh264" stub package review that makes it possible to build/ship
the gstreamer plugin in Fedora proper while keeping the
non-distributable openh264 package in Cisco repos.
 2023-11-09 21:28:13 +01:00
Kevin Fenzi
9314b70862 db-koji01: more tuning 
Tweak some of the knobs to try and get things more happy with the heavy
load it's under. Note that cpus change will need a reboot before it's
active. The other changes have all been applied and it seems to be doing
a little better with this. Perhaps with some more cpus we can get it
stable (but yet not swamping i/o).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-09 10:09:24 -08:00
David Kirwan
21b43ab931
zabbix: reworking apache config 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-09 15:15:48 +00:00
David Kirwan
8b0581bcad
zabbix: haproxy config reworking 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-09 14:52:30 +00:00
David Kirwan
ee3bac3470
zabbix: haproxy config zabbix production 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-09 14:04:13 +00:00
David Kirwan
9c3a24e79a
zabbix: Zabbix production configuration 2023-11-09 12:55:26 +00:00