Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
31126 commits 9 branches 0 tags 111 MiB
Commit graph

31126 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
98549fd6db base / resolv.conf: we want vpn to be before iad2 here 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 16:56:58 -07:00
Kevin Fenzi
c9e77cd104 bodhi-backend: move bodhi2/backend role after keytabs since it has a task that changes perms on one 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 16:28:29 -07:00
Kevin Fenzi
cf517215a5 rhos13 repo: turns out we still use this for newer rabbitmq 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 16:10:05 -07:00
Kevin Fenzi
1ea3b85b61 proxy01.iad2: set correct datacenter 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 15:06:00 -07:00
Stephen Smoogen
b89dd803fd test change for dhcp 2020-05-13 17:20:21 -04:00
Kevin Fenzi
a1a7b7e74b inventory: re-add simple-koji-ci-prod.fedorainfracloud.org as we actually manage it 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 14:12:47 -07:00
Kevin Fenzi
b426783aa5 tasks: also re-add cloud_setup_basic 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 14:10:29 -07:00
Kevin Fenzi
bf72724c85 re-add tasks/persistent_cloud.yml as it is used by copr 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 14:08:37 -07:00
Kevin Fenzi
c529380547 Spring cleaning time. :) 
I removed all the old files, inventory, playbooks, roles and other from
services we no longer run or use. There was a bunch of cruft in there
and I hope that will make the repo cleaner and easier to look for things
we actually do run and care about.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 14:02:41 -07:00
Stephen Smoogen
0eca617652 Reconfigure noc01 iad to have hosts. Because hosts are global they are at the end of the file for easier editing later. 2020-05-13 15:57:35 -04:00
Kevin Fenzi
74866ebb8b rkhunter: drop the extra endif here that was breaking the template 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 10:58:39 -07:00
Kevin Fenzi
2882e32341 rkhunter: pagure-stg01 also now has a postgresql shm file 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 10:49:05 -07:00
Kevin Fenzi
121ac53d51 iad2: add a proxy01.iad2 instance. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 10:27:14 -07:00
Adam Williamson
1096adb4a7 Drop openQA asset size limit on stg to try and save disk space 
stg's disk is groaning at the seams, let's drop this to 400GB to
try and give it a bit of room to breathe.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-05-13 10:21:15 -07:00
Adam Williamson
2b6c8be5aa openqa etc: reinstall local Python libs when Python ver changes 
In openqa/dispatcher, relvalconsumer and check-compose roles, we
install Python libraries from git checkouts (these are things we
don't really want to package as they change too much). This
enhances those roles so that we check whether pip considers the
libraries to be installed, and install them if it doesn't. The
purpose is to catch when the Python version rolls over on system
upgrade, and reinstall the libraries in that case - I got bitten
by this when upgrading to F32, I forgot to reinstall these libs
for Python 3.8, and it broke things for a couple of days before
I noticed and fixed it manually...

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-05-13 09:58:50 -07:00
Andrea Veri
9e61fa2b0b GNOME Backups: these boxes were decommissioned 2020-05-13 17:31:13 +02:00
Andrea Veri
c74e435612 GNOME Backups: do not backup bastion anymore 2020-05-13 17:30:45 +02:00
Pierre-Yves Chibon
81da617cd2 staging-sync/koji: fix the name of the host groups 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-13 15:57:52 +02:00
Pierre-Yves Chibon
1193ccd63b staging-sync/koji: fix the name of the groups having the koji builders in staging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-13 15:43:52 +02:00
Pierre-Yves Chibon
41e3162744 staging-sync/koji: umount a few more mounted nfs shares 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-13 12:59:39 +00:00
Kevin Fenzi
8b408c8a79 ansible-server: fix roles path to work with linux-system-roles 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-12 16:11:20 -07:00
Stephen Smoogen
fdd8c45f33 but initial stuff in for bvmhost-x86-01.iad2 2020-05-12 19:07:23 -04:00
Kevin Fenzi
47a4f09be4 bridgify: use host variables for the various things 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-12 15:55:46 -07:00
Mark O'Brien
acd06a9d95 add iad2 hosts to os masters inventory host group 2020-05-12 22:51:45 +01:00
Mark O'Brien
afd230c728 [openshift-ansible] make kickstarts external for iad2 2020-05-12 22:49:01 +01:00
Kevin Fenzi
128b1b9f35 iad2: add current, hopefully final external net 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-12 14:22:06 -07:00
Kevin Fenzi
4530164778 iad2: missed the typo in this last host_var 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-12 14:18:19 -07:00
Pierre-Yves Chibon
653e82b17c koji-reset-staging: Try adjusting the script for koji 1.11 - Take #2 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-12 23:14:05 +02:00
Kevin Fenzi
16cff3ea76 iad2: fix hostname typo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-12 14:12:44 -07:00
Mark O'Brien
6be4af965a [openshift-ansible] update kickstart ip for iad2 and correct jinja if statement for templates 2020-05-12 20:59:39 +00:00
Mark O'Brien
2a9bd7f39a add inventory and template updates for openshift3 cluster in iad2 2020-05-12 20:59:39 +00:00
Pierre-Yves Chibon
ce82794c64 koji-reset-staging: Try adjusting the script for koji 1.11 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-12 22:31:12 +02:00
Clement Verna
48fed84ddc OSBS: add a playbook to rebuild the buildroot image 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-05-12 21:20:52 +02:00
Stephen Smoogen
612d5c41fa Add in a newer tftpboot tree which I know works for iad2 already we can fix as time goes on. 2020-05-12 13:16:35 -04:00
Pierre-Yves Chibon
f2d025b97e mirror_pagure_ansible: one more adjustment for the different queues for the different caves 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-12 18:13:52 +02:00
Kevin Fenzi
67fe4e2ab1 mailman: apply patch for mailman encoding tracebacks in prod too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-12 09:12:07 -07:00
Pierre-Yves Chibon
3d647a885e mirror_pagure_ansible: adjust the queues so that batcave in iad2 has its own queue 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-12 18:09:25 +02:00
Pierre-Yves Chibon
4f04aa7973 Add notification for badges to #fedora-badges 
Fixes https://pagure.io/fedora-infrastructure/issue/7537

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-12 17:16:47 +02:00
Pavel Raiskup
22e6aebc84 copr-keygen: drop old comment related to mounts 
Mounting by UUID (instead of by LABEL) is not ideal, so there's no point
in keeping that commented code around.
 2020-05-12 06:43:26 +02:00
Pavel Raiskup
810326a441 copr-keygen: idempotent backup setup 2020-05-12 06:31:46 +02:00
Pavel Raiskup
3f0f67f440 copr-keygen: backup: remove correct file 
And produce no stderr in cronjob to avoid unnecessary emails sent
(hourly) by cron.
 2020-05-12 06:19:03 +02:00
Pavel Raiskup
f3f74c5e7c copr-keygen: don't put copr-signer to non-existing packager group 
The 'packager' group looks like it never existed on keygen host.

Fixes bug in 373773deb2.
 2020-05-12 06:13:32 +02:00
Pavel Raiskup
c50794eead copr-keygen: better backup script 
We need to have YYYY-MM-DD in file name to actually have correct
incremental backups.  Since we don't overwrite the old backup files now
and we have different filename each day, let's remove the old backup
files and keep only the last one (this is to mimic what happens with DB
backups on copr frontend, which runs
roles/postgresql_server/files/backup-database).

While on it, let's double-quote variable uses.

Per advice in:
https://pagure.io/fedora-infrastructure/issue/8904
 2020-05-12 05:45:35 +02:00
Kevin Fenzi
ed8b2d0473 inventory/master: Clean up master and drop a bunch of old playbooks for things we no longer have. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-11 16:59:59 -07:00
Kevin Fenzi
b606ddb322 iad2: try putting nagios_Can_Connect in 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-11 16:14:10 -07:00
Kevin Fenzi
f5cbd5b36f iad2: and you can't use ansible_group_priority in group_vars, instead set in inventory directly 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-11 15:55:44 -07:00
Kevin Fenzi
829d38d9a8 iad2: set group priority to make iad2 win over virthosts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-11 15:32:25 -07:00
Kevin Fenzi
7b424a3a49 iad2: nagios_server: tweak raid check to only add hosts where raid check is true 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-11 15:19:34 -07:00
Kevin Fenzi
bca3a95d7c iad2: do not try and monitor raid on iad2 hosts from phx2 also 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-11 15:08:03 -07:00
Kevin Fenzi
311143b443 iad2: nagios_server: Move all the iad2 hosts to a group, set nagios variables per group 
Right now we don't want noc01.phx2 to try and monitor hosts in iad2.
So, we need to set some variables to get it to not do that.
Move all the iad hosts into a seperate iad2 group and use that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-11 14:54:49 -07:00