Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
31821 commits 9 branches 0 tags 111 MiB
Commit graph

31821 commits

This branch
This branch
All branches
Author SHA1 Message Date
Rick Elrod
39c4f31f88 o-a/websites: add pvc 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-06-12 13:26:05 -05:00
Rick Elrod
a27d4a4ce8 openshift-apps/websites: add python-unversioned-command 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-06-12 13:18:36 -05:00
Pierre-Yves Chibon
1f7a151c0d monitor-gating: Adjust the name of the principal set in the keytab 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-12 20:09:34 +02:00
Kevin Fenzi
f3872807e0 bodhi-backend: try and convert owner-sync-pagure to python3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-12 10:45:28 -07:00
Stephen Smoogen
acd6c2a194 Fix various global variables to point to IAD2 versus PHX2 
We have a lot of hardcoded phx2 assumptions which will need to changed
in the coming weeks
 2020-06-12 13:24:54 -04:00
Stephen Smoogen
fdee6622ce fix sundries rsync to allow vpn to get data 2020-06-12 13:16:21 -04:00
Adam Williamson
ae7fbddd30 Drop another blacklist use 
This is in something we're never going to deploy again anyway so
it feels kind of absurd, but hey. The variable isn't actually
defined anywhere any more (tflink wiped the vars files that set
it) so this was actually technically broken. This technically
makes it less broken so I am okay with it!

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-12 10:12:51 -07:00
Adam Williamson
891da76e48 Drop an old unnecessary workaround 
This is another use of blacklist, but the entire workaround has
been obsolete since a day after it was added, per
https://pagure.io/fedora-infrastructure/issue/8096 . I double
checked and the mirror still exists and is still up to date.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-12 10:08:28 -07:00
Adam Williamson
b100615e6a Drop another use of blacklist 
I checked the greenwave source, it seems pretty unequivocally
clear that this setting is optional and the default value is
empty list, so we just do not need to specify it at all.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-12 10:00:55 -07:00
Adam Williamson
ddced53a85 Better remove the old file too... 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-12 09:47:28 -07:00
Adam Williamson
1a3ee7c6a1 Minimize another use of blacklist 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-12 09:45:20 -07:00
Stephen Smoogen
6cbe68f288 make firewall change to openshift so nagios can be accepted. make change to syncHttp for new ips 2020-06-12 12:33:13 -04:00
Adam Williamson
83b1dce760 Minimize another use of blacklist 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-12 09:32:22 -07:00
Kevin Fenzi
475d135dcf monitor-gating: change keytab to iad2 from phx2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-12 09:30:01 -07:00
Adam Williamson
aeacadcaa2 Drop another use of white/blacklist 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-12 09:22:33 -07:00
Stephen Smoogen
f65a48aa61 allow log01 to get logs from proxies and other hosts. fix both iptables and rsyncd 2020-06-12 11:01:08 -04:00
Pierre-Yves Chibon
dc92c9d924 git/hooks: fix typo isinstance != instance 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-12 14:15:54 +02:00
Jan Kaluza
ba10a2bb7e ODCS: Trigger httpd restart on frontend 2020-06-12 07:56:04 +02:00
Dusty Mabe
2ffae0e788
openshift-apps: move most coreos apps to f32 2020-06-12 00:14:01 -04:00
Kevin Fenzi
9a00821f54 batcave: fix infra-docs git repo path 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 20:27:21 -07:00
Kevin Fenzi
87862ccc24 openshift / koschei: fix db host 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 20:23:57 -07:00
Kevin Fenzi
f3233ba3d6 iad2 / proxy101: candidate registry 
Right now, proxy101 is what is resolved to internally in iad2 for
candidate-registry.fedoraproject.org. It has haproxy to reach
oci-candidate-registry01.iad2.fedoraproject.org on port 5000 for this,
but that doesn't work currently due to RHIT firewall.

So, for now we add the vpn endpoint to /etc/hosts there so haproxy works
and internal machines can use the candidate registry.

Once we fix the rhit firewall we should remove this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 18:10:33 -07:00
Kevin Fenzi
cb2fa9f453 openshift cluster: drop hosts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 16:55:43 -07:00
Kevin Fenzi
b11de14904 koschei: adjust database server name 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 16:34:57 -07:00
Adam Williamson
0d3460f03a Drop fedmsg_qa_network concept 
I don't think this is needed any more. openQA publishes natively
to fedora-messaging these days, and these groups never have done
anything there. ResultsDB still publishes to fedmsg, it seems,
but the new instances were not added to these groups and I don't
think we need/want to do that, we should just make sure they
have the necessary access via other more widely-used groups if
anything. (It seems like the restrictions these groups used to
affect have been - possibly temporarily - removed entirely at
present, but we can figure out any necessary changes there if the
restrictions are restored).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-11 22:49:59 +00:00
Kevin Fenzi
4fe5df7f63 bastion: clean up logic so server will install on bastion01.iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 15:32:10 -07:00
Adam Williamson
7a82a5a7d5 Rename ansible_ifcfg_{black,white}list to {block,allow}list 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-11 15:22:09 -07:00
Rick Elrod
bf36ef0220 openshift-apps/websites: Update deps to be python3-* 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-06-11 17:14:59 -05:00
Kevin Fenzi
a53ee8f7f7 openshift: repos: this is a template now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 15:14:11 -07:00
Kevin Fenzi
da65f9a5b2 iad2: cluster is not upgrading now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 15:04:20 -07:00
Kevin Fenzi
c08318ca25 openshift: distgit_bugzilla_sync, deploy only on master01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 14:36:29 -07:00
Stephen Smoogen
6917720d00 more removal of .phx2. systems replaced in iad2 2020-06-11 17:27:08 -04:00
Stephen Smoogen
08f622be41 remove db-koji0[12].phx2, sign-bridge01.phx2, fedocal01.phx2, nuancier01.phx2, nuancier02.phx2 2020-06-11 17:14:29 -04:00
Kevin Fenzi
89dafdc841 iad2: openvpn/server: switch kerneltest over to iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 14:06:25 -07:00
Kevin Fenzi
a455c31b31 iad2: blockerbugs adjustments for iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 13:43:58 -07:00
Stephen Smoogen
2a4fd4eccc remove mailman.phx2 and openqa.qa as they use iad2 or are not needed 2020-06-11 16:36:09 -04:00
Stephen Smoogen
a7dc5a61b5 fix resultsdb_iad_prod to allow openqa in iad2 to work versus boxes in PHX 2020-06-11 16:29:48 -04:00
Pierre-Yves Chibon
b631c49d08 git/hook: apparently the rev can be either a string or the pygit2.Oid object 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-11 21:39:32 +02:00
Adam Williamson
4614a6ebf2 Drop openqa_iad group and vars 
Migration has completed apparently successfully, so we can go
back to doing reporting and event creation now, so we don't need
this file any more.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-11 12:26:39 -07:00
Mohan Boddu
45c95fdaca releng-compose: Disable login to candidate-registry until its fixed 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-06-11 19:17:10 +00:00
Pierre-Yves Chibon
18a674d74d git/hook: parse the revision/hash rather than the Oid object 
Fixes https://pagure.io/fedora-infrastructure/issue/9016

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-11 21:13:44 +02:00
Kevin Fenzi
ab7d661781 koji hub: re-enable gc jobs, disable session cleanup on db-koji01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 12:08:59 -07:00
Pierre-Yves Chibon
29e9d7a4bb bodhi/backend: the queue names must start by the username, so bodhi_ it is 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-11 20:40:51 +02:00
Pierre-Yves Chibon
c0cb2d581a bodhi/backend: no need for a koji_sync_listener user since we use the bodhi cert and thus the bodhi user 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-11 20:38:12 +02:00
Stephen Smoogen
32552ec77e fix some entries pointing to bastion02 to bastion-iad 2020-06-11 14:10:04 -04:00
Mohan Boddu
9dccde7482 Porting new-updates-sync to python3 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-06-11 13:49:11 -04:00
Kevin Fenzi
5ce884517f koji_hub: sadly, queue_file isnt available until 1.21.1 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 10:46:36 -07:00
Kevin Fenzi
8f38c7c4f2 iad2: kojira: try and monitor external repos for changes too and add a queue_file for kojira debugging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 10:35:11 -07:00
Mohan Boddu
ff9b7157bd Remove the fedora-messaging@koji_sync_listener 
And add it to handlers and service is fm-consumer@koji_sync_listener

Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-06-11 13:22:49 -04:00
Mohan Boddu
1d868aeaf5 Restart fm-consumer@koji_sync_listener not fedora-messaging@koji_sync_listener 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-06-11 13:11:57 -04:00