Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
31126 commits 9 branches 0 tags 111 MiB
Commit graph

31126 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pierre-Yves Chibon
dd6c85b1e2 Adjust the list of packages to install for RHEL8/python3 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 11:21:14 +02:00
Pierre-Yves Chibon
633866fdff git/hooks: install the fedora-messaging certs and config file 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 11:20:57 +02:00
Pierre-Yves Chibon
7ee8003ba9 git/hooks: port from fedmsg to fedora-messaging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 11:13:37 +02:00
Pierre-Yves Chibon
e2b1add696 pkgs: don't install gitolite/base in staging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 11:03:59 +02:00
Pierre-Yves Chibon
c9f5fbdca5 notifs/backend: disable some of the mailer handlers to reduce the amount of emails 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 10:39:50 +02:00
Pierre-Yves Chibon
c52238022f pkgs: don't setup fedmsg in staging pkgs 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 10:36:43 +02:00
Kevin Fenzi
f832aead89 certgetter01 for iad2, update ccd files for vpn. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-19 20:53:15 -07:00
Kevin Fenzi
469a8565ce add ipa iad2 hosts to iad2 group 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-19 19:30:30 -07:00
Kevin Fenzi
8745e9f102 add ipa01/02 for iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-19 19:28:50 -07:00
Stephen Smoogen
8211a567a2 this should test that pagure on el8 wants the python3 versions 2020-05-19 19:42:15 -04:00
Stephen Smoogen
f6666c0240 temporary fix to get past el8 iptables-restore not able to test nat AND filter in same file. causes infinite loop in nftables 2020-05-19 19:22:57 -04:00
Kevin Fenzi
256539b2d4 postgresql server: add db-fas01.iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-19 12:50:15 -07:00
Pierre-Yves Chibon
ba9bfed241 openshift: update the hosts file pointing to registry.rh.io 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-19 21:49:42 +02:00
Pierre-Yves Chibon
37f5e4995e pkgs-stg: set a max_mem_size variable 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-19 21:45:37 +02:00
Adam Williamson
c77f42a409 openqa/dispatcher: tweak some conditionals 
Use the |bool modifier, and add that check in some places where
we didn't currently have it.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-05-19 12:36:11 -07:00
Pierre-Yves Chibon
f4ed58da04 dist-git: Make pkgs01.stg be RHEL8 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-19 21:28:04 +02:00
Kevin Fenzi
c034afc53c postgresql server: fix indent 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-19 12:20:58 -07:00
Kevin Fenzi
1aa4c2d1fa inventory: add a db-fas01.iad 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-19 12:16:46 -07:00
Kevin Fenzi
e918a3b08f postgresql / server: enable the postgresql 12 module on rhel8 hosts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-19 12:16:45 -07:00
Nick Bebout
54cb28e1c6 Add ci.fedoraproject.org to zones.conf 2020-05-19 12:50:39 -05:00
Nick Bebout
78c6972992 Revert "Add ci.fedoraproject.org zone" 
This reverts commit 7f610d8695.
 2020-05-19 12:50:06 -05:00
Nick Bebout
7f610d8695 Add ci.fedoraproject.org zone 2020-05-19 12:04:13 -05:00
Kevin Fenzi
306252899a rabbitmq/server: drop stay leftover loop line. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-19 10:02:03 -07:00
Kevin Fenzi
661a8b54be rabbitmq / server: avoid clashing loops. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-19 09:11:54 -07:00
Kevin Fenzi
c8d2d330e2 rabbitmq/server: try this to delegate to each datacenter correctly 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-19 07:56:12 -07:00
Kevin Fenzi
3c5c8b5f2a rabbitmq/server: fix missing quote 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 21:52:29 -07:00
Kevin Fenzi
6bec1929e5 rabbitmq/server: fix missing quote 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 21:44:12 -07:00
Kevin Fenzi
13f4b3b63c rabbitmq / server: almost worked, need to hard code vaules however 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 21:35:19 -07:00
Kevin Fenzi
b19bf634bc rabbitmq / server: see if we can delgate correctly for iad2 vs phx2 this way 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 21:25:14 -07:00
Kevin Fenzi
60725e7d08 rabbitmq: also add iad2 hosts to iad2 group 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 16:36:48 -07:00
Kevin Fenzi
18f67ef9ee rabbitmq: also add to inventory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 16:34:54 -07:00
Kevin Fenzi
70fff265a7 rabbitmq: setup a iad2 cluster. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 16:33:06 -07:00
Kevin Fenzi
d00bc3b65f collectd / server: drop ping as it's not shipped in rhel8 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 15:36:07 -07:00
Kevin Fenzi
396b33d37e openvpn/server: also copy log01 from phx2 to iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 15:31:54 -07:00
Kevin Fenzi
883adb5c45 logserver: also run vpn in iad2 to bastion01.iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 15:09:07 -07:00
Kevin Fenzi
a8c53bf27d openvpn/server: clean up ccd files for a bunch of old hosts that should not ever be connecting anymore 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 14:15:56 -07:00
Kevin Fenzi
eb065f1e99 openvpn/server: Add some iad2 ccd files for openvpn server 
Note that we want the iad2 things to keep the exact same ip as their
phx2 counterparts, this allows dns to stay the same for both
datacenters.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 14:05:07 -07:00
Kevin Fenzi
2e1f58b3d2 iad2: os-cluster: re-add vpn (pointing to bastion01.iad) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 13:54:45 -07:00
Kevin Fenzi
998a7beb31 iad2: openvpn/client: point all the iad2 instances to use the iad2 bastion 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 13:33:12 -07:00
Michael Scherer
4eee290230 Remove safety measure now that's validated 
Also prevent sundries from filling up.
 2020-05-18 21:14:32 +02:00
Kevin Fenzi
3fa172f847 openshift: setup the infra labeled nodes correctly so we can run infra services 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 09:27:08 -07:00
Kevin Fenzi
80c15f6bf1 iad2: set all the iad2 os cluster to use iad2 resolv.conf 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 07:23:30 -07:00
Mark O'Brien
3284fac7eb [mailman] infra-8905 blacklist elitetorrent1.com with spamassassin 2020-05-18 11:10:18 +01:00
Kevin Fenzi
292865effb iad2: openshift: adjust memory and cpus and such. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-17 20:18:17 -07:00
Kevin Fenzi
1ddae8f094 openshift hosts: update registry.redhat.io ip 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-17 15:38:49 -07:00
Kevin Fenzi
78dbc271d9 os-cluster: fix nesting logic error, need if/endif inside each endfor 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 12:24:24 -07:00
Kevin Fenzi
e6784105c6 chrony: make whitespace change in iad2 to check restarting 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 12:02:10 -07:00
Kevin Fenzi
9f6463ce8f chrony: add handler to restart on config changes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 12:01:22 -07:00
Kevin Fenzi
855b87b3d7 chrony: fix template to work in iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 11:41:48 -07:00
Kevin Fenzi
c1382106f5 ansible-ansible-openshift-ansible: shuffle inventory and such so iad2 cluster only lists iad2 nodes, etc. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 11:12:48 -07:00