infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 7 Projects Releases Packages Wiki Activity Actions
39248 commits 9 branches 0 tags 110 MiB
Commit graph

39248 commits

This branch
This branch
All branches
Author SHA1 Message Date
David Kirwan
c5cad9e168 zabbix_server: readd handlers 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 11:23:06 +01:00
David Kirwan
88e544bf53 zabbix: readd base roles 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 11:11:30 +01:00
David Kirwan
a8263f98e9 zabbix: add zabbix_server role 
WIP

Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 10:50:58 +01:00
Kevin Fenzi
49c105e55a koji_hub: allow scratch builds from scm 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-11 08:27:30 -07:00
Kevin Fenzi
a36b0101c6 koji_builder: increase sleep time a bit to see if it helps db load 
Right now all builders ask the hub for jobs every 15s.
Bump that out a bit to see if it lowers the pressure on the db server.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-10 20:54:28 -07:00
Kevin Fenzi
f99659cea8 koji_hub: re-add scm policy for scm plugin 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 11:35:23 -07:00
Kevin Fenzi
95fcfe8375 koji_hub: fix matches to include allow 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 11:26:30 -07:00
Kevin Fenzi
aba961e27f koji_hub: dammit, disable outage messages 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 09:46:04 -07:00
Kevin Fenzi
bcb281d40e koji_hub: fix template for hub policy 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 09:37:13 -07:00
Tomas Kopecek
8d99c12ea4 Move SCM policies to the koji hub 
Moving all SCM policies previously defined in each builder to
centralized hub configuration. From now on, any SCM policy change just
needs updating the hub config and reloading it. Builders need nor change
nor reload.

Related: https://pagure.io/fedora-infrastructure/issue/9728

Signed-off-by: Tomas Kopecek <tkopecek@redhat.com>
 2023-06-09 16:18:12 +00:00
Kevin Fenzi
0f4026b2a1 koji_builder: test dnf5 changes in staging 
With dnf5 becoming default in rawhide, we need to make sure to override
things to use dnf4 for making buildroots for now until dnf5 is ready to
take that on.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 13:30:19 -07:00
Kevin Fenzi
d0968906bf ibiblio02: fix duplicate variable 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 10:04:41 -07:00
Kevin Fenzi
19830a2265 ibiblio02: add vpn ccd file 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:38:06 -07:00
Kevin Fenzi
199e58faf6 ibiblio02: do not specify ipv6 prefix twice 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:23:31 -07:00
Kevin Fenzi
b9190670cb ibiblio02: adjust connection settings 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:20:33 -07:00
Kevin Fenzi
bfd7518efd ibiblio: use linux-system-roles/networking on new servers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:16:39 -07:00
Pavel Raiskup
8ce78aaca3 copr-be: Promote Fedora 38 builders to production 2023-06-08 17:30:30 +02:00
Pavel Raiskup
0fc0655e47 copr-builders: don't do gpg checks for epel-6 builds, take #2 2023-06-08 17:19:52 +02:00
Pavel Raiskup
7b1cf87845 copr-builders: don't do gpg checks for epel-6 builds 
Our builders are on Fedora 38 which distrust SHA-1, and I don't see a
way to opt-out from this policy.  Building for epel-6 is already on the
edge, so..
 2023-06-08 17:07:34 +02:00
Pavel Raiskup
860f0ed488 copr-be-dev: move builder images to F38 2023-06-08 13:58:53 +02:00
Kevin Fenzi
8e50b0ebda virthosts: increase process limit on new servers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 18:44:14 -07:00
Lukas Holecek
41272fa237 resultsdb: Use upstream image for prod instance 
Related to: https://pagure.io/fedora-infrastructure/issue/11321
 2023-06-07 23:59:34 +00:00
Kevin Fenzi
cf5ca54701 ipa: exclude the ipa postgres user in favor of local one 
We have a postgres user in ipa to prevent people from making an account
with that name, but we need/want to use a local version of this on
database servers, not the ipa one. We need the local one because the ipa
one is locked and this prevents database backups from working.
(Locked accounts can't run cron jobs).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 16:52:25 -07:00
Kevin Fenzi
1a9d6577be ibiblio02: reindent network_connections and sort more readably 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 16:16:48 -07:00
Kevin Fenzi
793a658d92 ibiblio02: adjust connection settings 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 16:11:36 -07:00
Kevin Fenzi
4f63381843 ibiblio02: add new virthost at ibiblio 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 15:46:00 -07:00
Kevin Fenzi
10a6a0a18b download-cc-rdu03: how about rhel9? 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 14:45:37 -07:00
Kevin Fenzi
521606e11e download-cc-rdu01: readd on new virthost 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 13:30:38 -07:00
Kevin Fenzi
34ea0dfcb3 autosign: add quotes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 10:29:45 -07:00
Kevin Fenzi
4f0fe17dc1 autosign: fix up import for newer ansible 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 10:27:04 -07:00
Tomáš Hrčka
d601017cad Update roles/robosignatory/templates/robosignatory.toml.j2 2023-06-06 16:50:12 +00:00
Tomas Hrcka
cc3715271d Enable signing for f39-python sidetag 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-06-06 16:45:34 +00:00
Aurélien Bompard
228d284a88
Collectd: add the FMN users source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-06 18:09:27 +02:00
Kevin Fenzi
3b3f720557 vmhost-x86-cc03: revive with new name and hw. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 08:51:03 -07:00
Aurélien Bompard
b8e6fc6146
Fixup last commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-06 12:46:51 +02:00
Aurélien Bompard
47fe3157bc
FASJSON: include build scripts in the source code 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-06 12:45:22 +02:00
Kevin Fenzi
7e20e39474 wiki: re-enable fedmsg 
Turns out we never completed it's migration to fedora-messaging, so we
need to re-enable fedmsg for now until we do.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-05 12:27:28 -07:00
Kevin Fenzi
4a99b7b62a wiki: try and re-enable passwordattemptthrottle 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-04 08:28:16 -07:00
Kevin Fenzi
19f22845b2 db-koji01: some more tweaking to get better perf and stability 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-03 08:14:30 -07:00
Kevin Fenzi
ae69299c20 db-koji01: back off on config to get things working again 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 18:26:11 -07:00
Kevin Fenzi
eb3801edc7 postgresql_server: split out postgres15 config and tweak 
db-koji01 is our only postgresql 15 install so far, but split out the
config from the 12 one we are using on RHEL8 to avoid making changes
there.

Also, lets try tweaking things:
- I am bumping cpus up to 88
- Tweak max workers/etc
- Try a higher i/o level since this db server is running on a virthost
  with ssds.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 17:59:12 -07:00
Kevin Fenzi
0c81957b2d pkgs / make-git-checkout-seed: do not try and remove already removed file 
We already removed the old previous days version here, so trying to
remove it again results in a cron email with:

rm: cannot remove '/srv/cache/lookaside//rpm-specs-epel7*.tar.xz': No such file or directory
rm: cannot remove '/srv/cache/lookaside//rpm-specs-epel8*.tar.xz': No such file or directory
rm: cannot remove '/srv/cache/lookaside//rpm-specs-epel9*.tar.xz': No such file or directory

So, drop that here so we don't get these daily emails.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 12:23:38 -07:00
Kevin Fenzi
a6cafe28ea data-analysis: don't try and get blockerbugs logs since it's in openshift now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 12:18:30 -07:00
Kevin Fenzi
2367f1f8ba Revert "postgresql / db-koji: re-add this connection cleanup" 
This reverts commit 9a4a973b05.

Turns out this is broken and hasn't worked for a long time. ;(
 2023-06-02 10:16:05 -07:00
Kevin Fenzi
9a4a973b05 postgresql / db-koji: re-add this connection cleanup 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 10:03:24 -07:00
Kevin Fenzi
16576acfe1 proxies: use wildcard cert for directory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 09:37:03 -07:00
Kevin Fenzi
49a625697b proxies: add a directory.fedoraproject.org redirect to www.port389.org ticket 11355 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 09:25:16 -07:00
Nick Bebout
b9a3928f5c Add IPv6 for mirror.usi.edu, remove old IPv4 address no longer needed 2023-06-02 09:43:45 -05:00
Aurélien Bompard
d7fdbe58b9
Add one more perm for collecd's selinux package 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 08:30:16 +02:00
Aurélien Bompard
a44dadd0c7
Syntax error 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 08:23:10 +02:00