Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
40085 commits 9 branches 0 tags 111 MiB
Commit graph

40085 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
9996fb44a9 bodhi: increase liveness timeout 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-12-08 11:00:46 -08:00
Kevin Fenzi
e682afbb3e postgresql: tune db01 to handle higher loads 
We have been running on the defaults on db01 for a while here, but bodhi
seems to be having db query speed issues, so lets try and beef up the
postgresql config.

Increase shared_buffers as we have a lot of memory.
Increase workers as we have 24 cpus and 8 workers (default) might be a
bottleneck. Increase the related worker settings with base workers.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-12-08 10:18:21 -08:00
Ryan Lerch
19a153b828 add deps for maubot update 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2023-12-08 12:52:33 +10:00
Kevin Fenzi
a3996e0553 koschei: allow frontend pods more memory limits 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-12-07 12:16:40 -08:00
Kevin Fenzi
e94e7019ee koschei: allow frontend pods more memory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-12-07 12:06:46 -08:00
Siteshwar Vashisht
9cfca2ab54 openscanhub: try to fix keytab host for staging 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2023-12-07 17:07:39 +01:00
Siteshwar Vashisht
7dd07af1d1 openscanhub: remove name for staging pvc instance 
This should be automatically generated for `ocs-storagecluster-cephfs`.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2023-12-06 17:07:05 +01:00
Michal Srb
dcb66ebc18 retrace: Fedora 37 is EOL 
Also add forgotten f39 repositories.

Signed-off-by: Michal Srb <michal@redhat.com>
 2023-12-06 06:58:41 +01:00
Siteshwar Vashisht
3e91ad138c openscanhub: fix key field in keytab role 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2023-12-05 23:08:28 +01:00
Siteshwar Vashisht
ae6b285537 openscanhub: generate keytab files for FAS logins 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2023-12-05 22:25:04 +01:00
Siteshwar Vashisht
14b561e2d5 openscanhub: add pvc for /var/lib/osh path 
This path stores all the files generated for a task and it is going to
expand in size over time.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2023-12-05 20:58:45 +00:00
Kevin Fenzi
0d7e4db134 proxies: all the proxies were moved to 39 a bit ago 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-12-05 10:59:46 -08:00
Kevin Fenzi
5caafb1fa5 debuginfod: these were moved to f39 a bit ago 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-12-05 10:07:35 -08:00
Tomas Hrcka
2d4220c9e9 Fedora 37 is EOL 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-12-05 17:09:44 +01:00
Aurélien Bompard
666db4daca
Rebase discourse2fedmsg on Python 3.9 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-12-05 14:48:05 +01:00
Fabio Valentini
bf26338f22 bodhi: set createrepo_deltas to False for Fedora 40+ in pungi config 2023-12-04 22:03:58 +00:00
Kevin Fenzi
f16a2ffb50 koji-hub: adjust wsgi parameters to match upstream 
We missed changing our local config when upstream made some wsgi
changes. This mostly results in confusing logs, but might have some
other unknown effects.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-12-04 09:15:38 -08:00
Aurélien Bompard
64da337e67
Use fedora-messaging-git-hook on dist-git 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-12-04 17:58:49 +01:00
Lukas Holecek
e4bc707e12 resultsdb-frontend: Use up-to-date stage image 2023-12-04 14:33:01 +00:00
Aurélien Bompard
4442a309aa
Use the fedora-messaging-git-hook package on batcave 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-12-04 12:05:00 +01:00
David Kirwan
beb09a8835
zabbix: debugging iptables config 
- add zabbix agent to RabbitMQ hosts

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-12-04 07:01:22 +00:00
Kevin Fenzi
837a1283b2 people01: drop for now, will readd later 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-12-01 10:29:59 -08:00
Pavel Raiskup
fa3499d30d copr-be-dev: don't let actions eat all I/O 2023-12-01 11:27:19 +01:00
Kevin Fenzi
2524e7c258 nagios: stop trying to monitor start.fedoraproject.org, as its now under fedoraproject.org/start 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-30 14:52:03 -08:00
Pedro Moura
eec1e262ef Redirect fedora start page 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
 2023-11-30 19:08:30 +00:00
Michal Konecny
c1637139c6 [IPA] Set ipa01 as master server on staging 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-30 10:37:35 +01:00
Seddik Alaoui Ismaili
5529ede252 drop output message. START and FINISH 2023-11-29 23:48:33 +00:00
Kevin Fenzi
2c8c8dc8d8 people01: setup as rhel9 instance 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-29 14:11:04 -08:00
Kevin Fenzi
e292c8c42b torrent02: goodbye rhel7 torrent server 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-29 13:54:38 -08:00
Michal Konecny
dd2093e4c6 [ipa/server] Move ipa-rewrite.conf to templates 
There are some variables that need to be filled in ipa-rewrite.conf, but it was
not in template directory, so that didn't happen.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-29 21:57:19 +01:00
Kevin Fenzi
39fb630d97 torrent: set config for torrent01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-29 12:07:05 -08:00
Michal Konecny
77b00429d4 [IPA] Fix syntax issue 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-29 17:37:29 +01:00
Michal Konecny
df9d9a0d51 [IPA] Use ipa_server variable where posible 
Don't use hardcoded ipa01, use ipa_server variable instead that is set in group_vars.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-29 17:29:15 +01:00
Michal Konecny
3858d5841d [IPA] Prepare for staging ipa01 update to RHEL 9 
To deploy the ipa01 again we need to remove it from server first. This will need
to be reverted after deployment.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-29 17:15:54 +01:00
Michal Konecny
da21ad9d9d [IPA] Move ipa01.stg to RHEL 9 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-29 16:51:53 +01:00
Michal Konecny
f4ebb6d0d7 [ipa/server] Fix the parameters for topologysegment-add 
I forgot to use the '--' for the flags and used
`hostvars[item]['ansible_hostname']` instead of just item.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-29 13:20:03 +01:00
Michal Konecny
315ff4be8a [ipa/server] Concatenate the strings correctly 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-29 13:03:19 +01:00
Michal Konecny
3d200881c4 [ipa/server] Explicitly mark '-' as string 
Previous change split the argument to two, which caused error in number of
parameters for the command. Let's try if this will fix it.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-29 12:48:56 +01:00
Michal Konecny
f7cb379e43 [ipa/server] Fix AnsibleUnsafeText error 
The `-` character was evaluated as subtract operation, this should fix that issue.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-29 12:34:53 +01:00
Michal Konecny
3d47ce35e4 [ipa/server] Add missing topology segments 
This command adds missing topology segments to already existing IPA nodes.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-29 08:40:57 +00:00
Kevin Fenzi
c1187db20b torrent: setup torrent user/group 
This used to get setup by the bittorrent package, but we don't use that
anymore, so lets do it manually here. We need these to own various
torrent content.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-28 16:01:21 -08:00
Kevin Fenzi
8d89c61c89 torrent01: setup vpn ip 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-28 15:21:25 -08:00
Kevin Fenzi
ec0dc97b36 torrent01: setup rhel9 torrent server 
This will replace the existing rhel7 torrent02.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-28 15:02:05 -08:00
Kevin Fenzi
7a1029651d inventory: remove some leftover osbs staging aarch64 group entries 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-28 11:50:21 -08:00
Pavel Raiskup
467db445e0 inventory: comment-out last copr-be-temp 
Otherwise we push Nagios to check the temp host, too.
 2023-11-28 20:22:16 +01:00
Pavel Raiskup
7522685175 copr: enable serviecs after the upgrade to F39 2023-11-28 17:03:30 +01:00
Pavel Raiskup
6c86044b65 copr-be: drop birthday, we are on F39 now 2023-11-28 17:00:16 +01:00
Pavel Raiskup
de074f5502 copr: drop birthdays, except for copr-be 
copr-be needs one more run with birthday against the "real" hostname.
 2023-11-28 16:28:02 +01:00
Pavel Raiskup
6c80a870ff copr-be: new private IP address 2023-11-28 15:35:41 +01:00
Pavel Raiskup
a1e1195829 copr-dist-git & copr-keygen: birthday=yes for new F39 boxes 2023-11-28 15:26:43 +01:00