Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
25023 commits 9 branches 0 tags 111 MiB
Commit graph

25023 commits

This branch
This branch
All branches
Author SHA1 Message Date
Randy Barlow
539d41db4c Only use Python 3 mod_wsgi on staging. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-10 03:08:05 +00:00
Kevin Fenzi
9a78d08e8d one when: only 2018-11-10 00:44:22 +00:00
Kevin Fenzi
e69be8a124 all the little vaults are tucked into their sshdless beds 2018-11-10 00:42:26 +00:00
Patrick Uiterwijk
7b1b8b68e3 Define the 05/06 yubikeys in the binding list 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-10 00:26:47 +01:00
Patrick Uiterwijk
8ce164c3b9 I did the import with another nickname... silly me 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-10 00:10:35 +01:00
Patrick Uiterwijk
d599582e65 Jinja2 wants elif... 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-09 23:59:38 +01:00
Kevin Fenzi
d8a704bab9 re-add sign-vault03 for a few 2018-11-09 22:55:15 +00:00
Patrick Uiterwijk
002011cdeb Fill in p11 serials for sv05 and 06 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-09 23:52:21 +01:00
Patrick Uiterwijk
739d63e63b Add sv05 and 06 keys to the config 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-09 23:46:02 +01:00
Patrick Uiterwijk
e9f0047575 Also sync out the keys for vault 05 and 06 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-09 23:44:06 +01:00
Patrick Uiterwijk
490d1785ea Use the new package for pkcs11 in openssl 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-09 23:20:22 +01:00
Kevin Fenzi
e4dffc2030 include vars 2018-11-09 22:14:58 +00:00
Kevin Fenzi
f07d6b888b And it helps to use the correct variable names. 2018-11-09 22:12:32 +00:00
Kevin Fenzi
766e8978e7 And it needs to see if it's defined. 2018-11-09 22:11:10 +00:00
Kevin Fenzi
7f2bc990eb ok, how about order of operations? 2018-11-09 22:09:58 +00:00
Kevin Fenzi
d2485facf8 try and fix fedora repos with release vars so we never have to change it again 2018-11-09 22:07:20 +00:00
Randy Barlow
c0c999e5f4 Upgrade to bodhi-3.11.0-0.5.beta.fc29. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-09 21:50:42 +00:00
Randy Barlow
ac2f5e1ec1 Use mod_wsgi_python3.so instead of mod_wsgi.so. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-09 21:40:33 +00:00
Randy Barlow
be847f05b5 Upgrade staging to bodhi-3.11.0-0.4.beta.fc29. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-09 21:16:23 +00:00
Kevin Fenzi
4fea617129 need name here 2018-11-09 21:09:50 +00:00
Kevin Fenzi
9ca8bba750 enable this role again 2018-11-09 21:08:16 +00:00
Randy Barlow
534c6755fe Does register on skipped tasks unregister the variable? 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-09 20:54:43 +00:00
Randy Barlow
5d25a5de5d Revert "Maybe I need to double up the %'s again due to Ansible templateing." 
This reverts commit 2dbf6b16d1.
 2018-11-09 20:30:43 +00:00
Randy Barlow
2dbf6b16d1 Maybe I need to double up the %'s again due to Ansible templateing. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-09 20:23:41 +00:00
Randy Barlow
75c045ff05 Use %% instead of % in Bodhi's staging config file. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-09 19:26:43 +00:00
Rick Elrod
6b69349865 update c18n1 mac 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2018-11-09 18:23:03 +00:00
Kevin Fenzi
a61e92a401 weed out openvpn tls errors from people trying to connect 2018-11-09 16:40:19 +00:00
Giulia Naponiello
4994caacb8 Greenwave - removing hard-coded version 
These got resolved:
 - https://github.com/fedora-infra/bodhi/issues/2554
 - https://pagure.io/greenwave/issue/287

So we don't need anymore to specify the 0.9.4 version, but we can
just put it again to "prod".
 2018-11-09 11:46:44 +01:00
Randy Barlow
a86c0e4309 Revert "Adjust Bodhi's production.ini to use %% instead of % in values." 
This reverts commit 0b8ad00b11.
 2018-11-09 03:49:56 +00:00
Kevin Fenzi
9b8bd6eb60 lets give the composers a bunch more memory 2018-11-08 23:51:02 +00:00
Kevin Fenzi
22e3816c7e Lets masquerade the outgoing overcloud via undercloud 2018-11-08 22:40:06 +00:00
Patrick Uiterwijk
414cf45681 I guess I need this? 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-08 21:25:54 +01:00
Stephen Smoogen
0b4700080a and this would be good so we dont break installs 2018-11-08 20:15:33 +00:00
Randy Barlow
0b8ad00b11 Adjust Bodhi's production.ini to use %% instead of % in values. 
See https://github.com/fedora-infra/bodhi/issues/2717

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-08 19:34:00 +00:00
Stephen Smoogen
256fedf4a3 this should maybe make some of reinstalls easier for clevis 2018-11-08 19:10:37 +00:00
Mikolaj Izdebski
179c1fd905 Allow fedmsg-hub to read bodhi keytab 2018-11-08 19:03:03 +00:00
Randy Barlow
b8eb958251 Use Python 3 in Bodhi's staging sync playbook. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-08 17:29:40 +00:00
Randy Barlow
92575354b5 Use Python 3 in Bodhi's upgrade playbook for staging. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-08 17:27:49 +00:00
Stephen Smoogen
7b9f45bc51 this will give us an ip address for back net 2018-11-08 17:00:16 +00:00
Randy Barlow
5e3e527d8d Upgrade staging to 3.11.0-0.2.beta.fc29. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-08 14:57:39 +00:00
Randy Barlow
a19aaaed9e Upgrade Bodhi staging to 3.11 beta and use Python 3. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-08 14:35:19 +00:00
Patrick Uiterwijk
995dc8e1ef registry.rh.io has a new ip 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-08 06:49:04 +01:00
Kevin Fenzi
b1d811c505 There can be only one pre-tasks 2018-11-08 01:43:32 +00:00
Kevin Fenzi
828a35a67b do the same thing in prod too 2018-11-08 00:50:28 +00:00
Kevin Fenzi
bff1f4d622 Switch to letting rsync filter our overlaps in docs combined site. 
Right now we are doing 3 rsyncs one at a time, but this prevents us
from deleting content that has disappeared from one of the first ones.
So, switch to doing one rsync with multiple sources and let it sort out
files that are now gone to be deleted in the target.
Fixes ticket 7334.
 2018-11-08 00:47:37 +00:00
Kevin Fenzi
d62dd190f1 Revert "Disable updates pushing and backups for today since we are going to be doing an outage" 
This reverts commit 25a26248ab.
 2018-11-07 23:45:28 +00:00
Randy Barlow
2e2c8af6f4 We no longer have any hostnames that start with "bodhi0". 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-11-07 21:33:11 +00:00
Kevin Fenzi
af3adca84a warn: isnt valid anymore 2018-11-07 21:10:07 +00:00
Stephen Smoogen
53a79bf340 it helps if you make the dhcpd.conf actually refer to what you want 2018-11-07 19:08:50 +00:00
Stephen Smoogen
b8f4fed0e6 try to make tftp_server do the right thing 2018-11-07 18:54:04 +00:00