Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
32863 commits 9 branches 0 tags 111 MiB
Commit graph

32863 commits

This branch
This branch
All branches
Author SHA1 Message Date
Aurélien Bompard
daf96efd15
IPA: use ansible modules and tasks wherever possible 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 15:34:07 +02:00
Aurélien Bompard
944431bf59
IPA: Allow users to read their own data 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 00:11:45 +02:00
Kevin Fenzi
58aafea954 rabbitmq staging: Use correct kickstart 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 15:10:07 -07:00
Kevin Fenzi
48fbac9ea9 inventory: rabbitmq03.stg: move to vmhost-x86-05 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 14:55:16 -07:00
Kevin Fenzi
a1e25a4467 Add staging rabbitmq cluster machines. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 14:30:57 -07:00
Kevin Fenzi
c7cf438e8c fedora-web: adjust to staging not having sysadmin-releng group. 
Since we are not using fas in staging, but are switching to noggin, we
currently don't have the sysadmin-releng group. For now, just switch to
apache.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 14:09:02 -07:00
Aurélien Bompard
b2cdf5dc62
Now that IPA is the reference, allow users to change their own attributes 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 22:59:00 +02:00
Kevin Fenzi
e200f371dc fas_client: change cron to generate new aliases every 10min instead of once a day 
There seems to be a increase in number of people wanting to use their
fedoraproject.org alias right away. So, increase the time we generate
it. It currently takes 14seconds to run it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 20:55:23 +00:00
Kevin Fenzi
6e7844e5e6 sundries01.stg: This host has to be rhel7 for now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 13:30:55 -07:00
Kevin Fenzi
13b543f11b Add db-fas01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 10:42:39 -07:00
Aurélien Bompard
28ae976ab2
Add permissions to the noggin user to activate stageusers 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 19:12:54 +02:00
Aurélien Bompard
d5b73b81a5
Disable Fedora Messaging in Noggin 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 19:12:54 +02:00
Kevin Fenzi
3972fa34f8 inventory: add sundries01.stg to inventory too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 10:00:43 -07:00
Kevin Fenzi
f73f3fc218 Add db01.stg and sundries01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 09:58:18 -07:00
Stephen Smoogen
b5d1ea15db remember to put something in the [staging] group so it gets that groups environment variables 2020-08-31 11:56:54 -04:00
Aurélien Bompard
4be8fab65e
Adjust healthz probes 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 17:47:51 +02:00
Aurélien Bompard
4fa318d86c
Noggin: set the script_name env var 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 17:46:35 +02:00
Stephen Smoogen
fede1317e7 proxy*.stg.iad2.fedoraproject.org is not on the vpn 2020-08-31 11:09:14 -04:00
Aurélien Bompard
ab34b044a6
Noggin: set the application root 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 16:59:51 +02:00
Aurélien Bompard
7b2d93d56a
Fix cutnpaste error 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 16:50:36 +02:00
Stephen Coady
aecb40588c add config flag to allow single run 
Signed-off-by: Stephen Coady <scoady@redhat.com>
 2020-08-31 15:19:08 +01:00
Luca BRUNO
659127219f
coreos-cincinnati: build latest master (e13c758) 2020-08-31 11:36:58 +00:00
Aurélien Bompard
78736ad275
Configure the noggin route 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 12:52:16 +02:00
Nils Philippsen
45e9d773ac Reference staging openshift hosts in IAD2 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-08-31 12:00:31 +02:00
Kevin Fenzi
9e1301c417 planet: add fedora-messaging certs, user and config 
The venus package was changed to use fedora-messaging, but we need to
now install certs, make a rabbitmq user and add a config for it to use.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-30 10:46:24 -07:00
Stephen Smoogen
a8b9a38ec0 a host_vars for the proxy02.stg box 2020-08-28 14:32:03 -04:00
Stephen Smoogen
91dc7a083a put in second stage proxy for us to work with 2020-08-28 13:17:15 -04:00
Stephen Smoogen
2af95e59f4 put in changes for rdu-cc hosts 2020-08-28 11:22:38 -04:00
Stephen Smoogen
15348981f8 try to fix part of ticket #9273 by increasing the number of open files allowed on log servers and people as they have a large number of files to deal with. 2020-08-28 08:26:19 -04:00
Nils Philippsen
750dc6da45 Add playbooks to manually backup/restore IPA (stg) 
This is to be able to restore things to a clean slate when we test the
fas2ipa data migration script.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-08-27 23:30:24 +00:00
Mark O'Brien
2cc7c82fb2 [proxies] ensure dir exists 2020-08-27 15:13:19 +01:00
Kevin Fenzi
005af159b6 nfs/client: Correct netapp name for staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 15:53:44 -07:00
Kevin Fenzi
2af0042d5c koji01.stg: rename some files to the current domain name. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 15:46:55 -07:00
Kevin Fenzi
c9e3752a3f koji-hub: do not apply fas_client or 2fa in staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 15:38:07 -07:00
Kevin Fenzi
2379b465ab postgres / server / koji sessions script: remove 
Turns out copy module doesn't actually have a 'absent' state.
So, just remove this (we no longer need it as there's a timer on koji
hub that does this from there).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 13:50:33 -07:00
Kevin Fenzi
9ece52bcca Fix virthost names for stg instances. 
We renamed bvirthost to bvmhost...

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 13:28:28 -07:00
Kevin Fenzi
89befb587a postgresql: adjust playbook to not run fas_client role or 2fa task in stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 13:21:01 -07:00
Kevin Fenzi
345be768f9 add a db-koji01.stg and a koji01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 13:18:05 -07:00
Kevin Fenzi
af2a4c29e4 fas_client / aliases: update the 'releng' address with current members 
This has 2 folks that are no longer around, so update it with current
members.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 10:17:40 -07:00
Kevin Fenzi
1cf024e37f Freeze break request: add vpn ccd file and vpn role to retrace 
We need retrace03 on the vpn at least for now, or else 2fa won't work.
At some point when fasClient is gone we may be able to drop this
when we switch to sssd or something else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-25 14:12:12 -07:00
Kevin Fenzi
ef44458a58 inventory / retrace03: set the correct datacenter 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-25 13:53:05 -07:00
Kevin Fenzi
f52f8b157f re-add retrace03 in new datacenter 
Former retrace02.fedorainfracloud.org is now
retrace03.rdu-cc.fedoraproject.org. Add it to inventory and
run initial playbooks on it so it can be handed off to retace
folks.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-25 12:03:28 -07:00
Ben Cotton
93ebe0f453 Update the legal contact 
In the short-to-medium term bcotton and sutula will be the Legal Liaisons, so they should receive the email.
 2020-08-25 17:13:07 +00:00
Kevin Fenzi
b05d6070e2 vars/Frozen: True 
We are entering the Fedora 33 Beta freeze.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-25 09:49:32 -07:00
Mark O'Brien
117b6c3de4 [proxies] add host_vars for proxy35/36 2020-08-25 16:22:48 +01:00
Mohan Boddu
f0b6fbd4bc Generate fullfiletimelist for epel8 playground composes 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-08-25 15:03:45 +00:00
Mark O'Brien
9898f1c64a [fedora-web] quote value to avoid evaluation 2020-08-25 15:23:30 +01:00
Tomas Hrcka
2912da07cf Bodhi enablement point F33 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2020-08-25 15:35:26 +02:00
Luca BRUNO
477eafaa96
coreos-cincinnati: drop legacy app from pod 2020-08-25 10:02:23 +00:00
Pavel Raiskup
3a17e3698a copr-be: move the aws_arch_subnets config to proper place 
The provision playbook is run on backend, not on batcave - so it was
actually not accessible after b4b963d037.
 2020-08-25 11:30:27 +02:00