Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
28779 commits 9 branches 0 tags 111 MiB
Commit graph

28779 commits

This branch
This branch
All branches
Author SHA1 Message Date
Mikolaj Izdebski
f7c53a386e bastion: Add sysadmin-odcs to fas_client_groups 2020-04-24 21:34:13 +02:00
Jan Kaluža
54d289bf23 Disable also python2 fedmsg-hub on ODCS backend 2020-04-24 21:34:13 +02:00
Jan Kaluža
fe628668ba Run odcs-celery-beat on ODCS frontend. 2020-04-24 21:34:13 +02:00
Kevin Fenzi
05e5b4fe79 postgresql: increase the max_standby_streaming_delay to 90s 
It's hoped that this would allow us to get more reliable backups on the hot spare.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
82b8bdf191 communishift: update some docs. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
57e49b6da8 Revert "communishift: adjust for new cert-manager setup." 
This reverts commit fd510fbf1642a74f1e951c1657b9dc768b6caf07.
 2020-04-24 21:34:13 +02:00
Stephen Smoogen
86b921e490 and we need a host not overloaded 2020-04-24 21:34:13 +02:00
Stephen Smoogen
a32ff01cec make the ip address one we own 2020-04-24 21:34:13 +02:00
Stephen Smoogen
2fbdcff571 repospanner-temp is not on openvpn 2020-04-24 21:34:13 +02:00
Stephen Smoogen
8ece96ff19 remember to put the right groups in 2020-04-24 21:34:13 +02:00
Stephen Smoogen
805a0f2004 add a minimal role for repospanner-temp. randy to fill out rest 2020-04-24 21:34:13 +02:00
Luca BRUNO
44e7ada060 coreos-cincinnati: deploy latest master (e9ccd5b) 2020-04-24 21:34:13 +02:00
Mikolaj Izdebski
f4ebcc677a ODCS: Use dedicated sysadmin-odcs group 2020-04-24 21:34:13 +02:00
Jan Kaluža
1c210abdd3 Use double slash for hostname in broker_url. 2020-04-24 21:34:13 +02:00
Luca BRUNO
9bdc70de97 coreos-cincinnati: build latest master (e9ccd5b) 2020-04-24 21:34:13 +02:00
Jan Kaluža
3b8b978515 Set broker_login_method to EXTERNAL. 2020-04-24 21:34:13 +02:00
Jan Kaluža
a72e70f698 Copy ODCS rabbitmq certs to /etc/odcs 2020-04-24 21:34:13 +02:00
Jan Kaluža
343eea7df5 Set rabbitmq CA cert for ODCS. 2020-04-24 21:34:13 +02:00
Adrian Reber
0781a26a73 mirrorlist: also sync country_continent.csv 
For the mirrorlist test on proxy14 we also need country_continent.csv.
With this the latest version is also copied to the mirrorlist server.
This change has already been manually applied on mm-backend01.prod
manually.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-04-24 21:34:13 +02:00
Mikolaj Izdebski
a8acc66e35 koschei: Configure build_arches for frontend 
Fixes https://github.com/fedora-infra/koschei/issues/309
 2020-04-24 21:34:13 +02:00
Jan Kaluža
9416c7b69c Configure celery broker for ODCS staging. 2020-04-24 21:34:13 +02:00
Jan Kaluža
3213118e1a Add 'datacenter: phx2' to staging odcs backend host var. 2020-04-24 21:34:13 +02:00
Kevin Fenzi
20654b78cd dhcpserver: need / on path to grubx64.efi 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Stephen Smoogen
237b78a452 you need to put a ] on it 2020-04-24 21:34:13 +02:00
Stephen Smoogen
ff3cde0fbe push the bits to make coreos->uefi 2020-04-24 21:34:13 +02:00
Stephen Smoogen
98276d85e6 add in repospanner-temp nodes for randy 2020-04-24 21:34:13 +02:00
Adrian Reber
837032125a Enable new mirrorlist server on proxy14 
After a successful test of the new mirrorlist server code in staging,
this is the next step. Try to make it work in production on one of the
proxies. As discussed on the mailing list we are trying the new setup
with proxy14.

All the conditionals have been updated to be 'staging or proxy14' and
the mirrorlist data generation has been enhanced to also write out the
new protobuf based format on the backend system.

At the same time this moves the pickle/protobuf generation from :55 to
:30 as this generation takes much longer than it used to be and the
mirrorlist server restarted at :15 was never using the new data during
the last few months.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-04-24 21:34:13 +02:00
Jan Kaluža
12021e4212 Create odcs_target_dir on backend. 2020-04-24 21:34:13 +02:00
Jan Kaluža
ce6f99c7b2 use mount_stg: true also on ODCS backend 2020-04-24 21:34:13 +02:00
Jan Kaluža
270cac4ffa mount fedora_odcs_stg with mount_stg: true 2020-04-24 21:34:13 +02:00
Jan Kaluža
ee11e8e947 Run nfs client before the odcs/frontend 2020-04-24 21:34:13 +02:00
Luca BRUNO
0e0f6242ad coreos-cincinnati: deploy latest master (e322003) 2020-04-24 21:34:13 +02:00
Jan Kaluža
7b61528b28 Use celery-3 in odce-celery-backend.service. 2020-04-24 21:34:13 +02:00
Jan Kaluža
3268ec213a Do not try restarting odcs-celery-backend on frontend 2020-04-24 21:34:13 +02:00
Pierre-Yves Chibon
c072e314d1 robosignatory: in koji's tag the pending is at the end 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:13 +02:00
Pierre-Yves Chibon
1e55c6dcf8 robosignatory: for F32 in staging sign the builds in f32-signing-pending 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:13 +02:00
Pierre-Yves Chibon
490136eb55 robosignatory: push signed side-tag to -testing-pending 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:13 +02:00
Jan Kaluža
d59ffafdf7 Install latest odcs package. 2020-04-24 21:34:13 +02:00
Jan Kaluža
30c6417c3b ODCS: Install python3-celery. 2020-04-24 21:34:13 +02:00
Jan Kaluža
894fb7cd02 Stop and disable fedmsg-hub-3 on ODCS staging - it uses Celery now. 2020-04-24 21:34:13 +02:00
Jan Kaluža
ab29128b01 Fix path to tmpfiles.d config 2020-04-24 21:34:13 +02:00
Jan Kaluža
04d75773e4 Add odcs_celery_* defaults. 2020-04-24 21:34:13 +02:00
Jan Kaluža
9b64e5d86a Use 'template' for odcs-celery-backend.service.j2 2020-04-24 21:34:13 +02:00
Jan Kaluža
fa7ab62c96 First try to update ODCS to latest version in staging. 
ODCS in Fedora infra is quite outdated. This commit changes ODCS
configuration files and playbook to match the latest uptream release.
 2020-04-24 21:34:13 +02:00
Luca BRUNO
2a9bb1cfde coreos-cincinnati: build latest master (e322003) 2020-04-24 21:34:13 +02:00
Stephen Smoogen
cfb84f209b made mistake with mac address earlier. fixing. 2020-04-24 21:34:13 +02:00
Kevin Fenzi
70a711c577 yumrepos: also install infra-tags repo on maintainer-test. 
We removed it a while back because our local mock was causing problems, thats not the case anymore.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
31e67c36f2 cloud_setup_basic: Don't install libselinux-python here either. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
ed8fbb1daa global: remove libselinux-python from install packages. We don't want it on f31+ and it's installed by basessh on any other host that needs it. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
86bfee4ab4 yumrepos: likewise clean up logic on base fedora repos and exclude rawhide test. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00