Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
32863 commits 9 branches 0 tags 111 MiB
Commit graph

32863 commits

This branch
This branch
All branches
Author SHA1 Message Date
Stephen Smoogen
b91f19565a comment out various wsgi_fedmsg_service variables for systems no longer running fedmsg listeners. try to cut down noise of problems so we can determine mbs and pdc issues 2020-07-23 15:08:13 -04:00
Kevin Fenzi
9aaa7dd60c postgresql: db01: adjust varaibles to try and improve performance 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-23 11:56:24 -07:00
Kevin Fenzi
ea3a6e37a5 inventory: move 20 datacenters, from 22 back to 2. :) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-23 11:52:11 -07:00
Kevin Fenzi
15f6d3d520 inventory: proxy01.stg fix missed s/phx/iad/ 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-23 11:50:43 -07:00
Kevin Fenzi
aac19d714c inventory: add proxy01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-23 11:49:06 -07:00
Kevin Fenzi
103210fb36 koji / hub: set MissingPolicyOk False 
This will mean that anything we don't have a policy for will be denied
instead of allowed. We want this (safer) default.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-23 09:43:26 -07:00
Pierre-Yves Chibon
daa2d739b8 toddlers: add a tag for appowners 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-23 17:51:47 +02:00
Michal Konečný
6f9747baea Toddlers: Add myself to appowners 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2020-07-23 15:56:34 +02:00
Pierre-Yves Chibon
43a68e2c57 distgit/pagure: another clean up of old cruft from another time (py2/rhel7) 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-23 13:15:24 +02:00
Pierre-Yves Chibon
745e7b04ce distgit/pagure: remove old cruft from another time (py2/rhel7) 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-23 13:14:19 +02:00
Pierre-Yves Chibon
22662d79b5 Clean up inventory files for odcs and pkgs for the fedmsg-related variables and comments 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-23 13:11:50 +02:00
Pierre-Yves Chibon
d0452479ed Revert "remove fedmsg variables which define endpoints on other fedmsg systems" 
We need to keep these variables defined as they are used in the .wsgi files
to set the number of procs and threads for apache.

This reverts commit 6e92ba25a7.
 2020-07-23 13:09:24 +02:00
Pierre-Yves Chibon
5aa15e44e3 distgit/pagure: Do not allow packagers to create the 'master' branch if it does not exist in PDC 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-23 13:03:10 +02:00
Pierre-Yves Chibon
7c51566c36 distgit/pagure: Log auth-related into in a file on disk and create the place for it 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-23 12:59:20 +02:00
Pierre-Yves Chibon
4a93e4f1e0 rabbitmq_cluster: add a tags for the task on the osci-pipelines 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-23 10:03:31 +02:00
Michal Srb
079119927f Lower TTL for OSCI queues 
Not all OSCI queues are actively used all the time -- no need to keep messages for 10 days in them. 5 days TTL should be plenty of time even for actively used queues.
 2020-07-23 07:31:19 +00:00
Kevin Fenzi
7c544eea40 db-koji01: try adjusting memory up here. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-22 16:46:19 -07:00
Kevin Fenzi
310a64c713 postgresql / db-koji: adjust postgresl some more 
Turns out we were not setting effective_cache_size even tho it was set
for some servers (pagure). Adjust a few parameters on db-koji to try and
get some more performance out of it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-22 16:23:33 -07:00
Kevin Fenzi
2ec00accf3 apps-fp-o: we still need to install the apache config 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-22 15:39:40 -07:00
Kevin Fenzi
2e4204814c apps-fp-o: only install the resources, not the app/app config 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-22 15:26:27 -07:00
Kevin Fenzi
fa50e284fd proxies: re-enable apps-fp-o role 
Turns out this also deploys all the bootstrap and fonts that things use,
not just the apps viewer thing. So, re-enable it for now so things work
again.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-22 15:23:13 -07:00
Francois Andrieu
e1b6248a4c nagios: add check_postfix_redhat to bastion01 2020-07-22 19:41:11 +00:00
Francois Andrieu
da5599c3a8 check_postfix_queue.py: fix args type 2020-07-22 19:41:11 +00:00
Francois Andrieu
bf533dbca7 nagios_client: check postfix queue length for all or specific domain (ie. redhat.com) 2020-07-22 19:41:11 +00:00
Stephen Smoogen
257a130bc8 remove zanata2fedmsg. the zanata roles are still there for the time being as they are tied into webstizes and such 2020-07-22 15:22:37 -04:00
Stephen Smoogen
a6d987bc9e Remove more 'safe' entries from fedmsg endpoints to try and cut down 
the noise of broken links in the system. Still not sure why some
things are supposed to fire up 8 processes but only 2 show up
 2020-07-22 15:18:27 -04:00
Stephen Smoogen
51c798faee fix fedmsg not having iptables opening for appropriate number of listeners 2020-07-22 13:31:58 -04:00
Kevin Fenzi
5d1c966d3d inventory: add bvmhost-x86-02/03.stg to staging group 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-22 10:23:10 -07:00
Kevin Fenzi
521abaab6c inventory: add bvmhost-x86-02/03.stg host var files too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-22 10:12:09 -07:00
Kevin Fenzi
dc8579abb0 inventory: add bvmhost-x86-02/03 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-22 10:11:54 -07:00
Stephen Smoogen
6e92ba25a7 remove fedmsg variables which define endpoints on other fedmsg systems 2020-07-22 12:28:44 -04:00
Stephen Smoogen
e8c43f5663 remove zanata2fedmsg which is gone. This will stop fedmsg items from defining endpoitns 2020-07-22 12:27:14 -04:00
Pierre-Yves Chibon
2d94aeb480 greenwave: update greenwave's url in a couple more places 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-22 17:17:30 +02:00
Pierre-Yves Chibon
45e097a882 checkcompose: use the more modern url for greenwave 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-22 17:17:30 +02:00
Stephen Smoogen
39cdb85c09 went looking for 10.5.12 firewall entries in case firewall blockage on mbs. These are different ones. 2020-07-22 11:07:46 -04:00
Pierre-Yves Chibon
74a4ea6a4b greenwave: use the more modern URLs to query waiverdb 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-22 16:14:12 +02:00
Pierre-Yves Chibon
73122d6415 bodhi: use the more modern URL for greenwave and waiverdb 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-22 14:10:37 +00:00
Stephen Smoogen
00cb5ef564 Put in up to date limits for the proxies so that varnish does not consume all ram 2020-07-22 09:30:27 -04:00
Stephen Smoogen
db5e633e86 move varnish ips to proxy. this doesnt fix the oom problem caused by registry 2020-07-22 08:32:37 -04:00
Pierre-Yves Chibon
7145e7e7cf Toddlers: Add the new topics to listen to and document which toddler uses which 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-22 14:06:19 +02:00
Pierre-Yves Chibon
57be1b687d Toddlers: Adjust the configuration file for the new format 
Toddlers now comes with a default section which allows having settings
there that are set once and used in multiple toddlers.
For example the dist_git_url is now set in the default section while
the flag_ci_pr and flag_commit_build toddlers are using it.

The runner merges the default configuration section with the toddler
specific section before passing the outcome to the consume method of
the toddler, so we know the toddler will have all the info it needs.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-22 14:05:52 +02:00
Michal Konečný
5d4511e5a8 release-monitoring: Rise the deletetion threshold 
This will prevent deletion of the projects till
https://github.com/fedora-infra/anitya/issues/929 is fixed.

The current threshold will take approximatelly 10 years to reach for
project that is constantly failing when retrieving new version.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2020-07-22 09:41:20 +02:00
Kevin Fenzi
aa11be1b7d inventory: openqa-x86-worker04: add nm, as clevis wants it. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-21 09:25:27 -07:00
Michal Konečný
04863be9e5 Add SAR script support for Openshift apps 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2020-07-21 07:46:20 +00:00
Kevin Fenzi
2af20e5906 inventory: add openqa-x86-worker04 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-20 15:15:12 -07:00
Kevin Fenzi
eccae5ba79 inventory: vmhost-x86 stg: adjust for clevis role 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-20 14:58:10 -07:00
Kevin Fenzi
8cf85ff800 virthost playbook: also do not run 2fa role in stg 
Since this currently depends on pam_url and totpcgi
do not enable this in staging currently.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-20 14:27:07 -07:00
Kevin Fenzi
064973179a virthost playbook: disable fas_client in staging 
Since we are going to try and deploy noggin in staging, don't use
fasclient there.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-20 14:25:51 -07:00
Kevin Fenzi
856b5512b4 ipa server: adjust forwarders for iad2. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-20 13:37:06 -07:00
Kevin Fenzi
b026fe15cd inventory / staging: set ipa server to correct fqdn 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-20 13:09:49 -07:00