Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
31925 commits 9 branches 0 tags 111 MiB
Commit graph

31925 commits

This branch
This branch
All branches
Author SHA1 Message Date
Stephen Smoogen
5282048e64 remove some PHX2 hosts which do not exist 2020-06-15 15:21:32 -04:00
Mohan Boddu
8ba8429972 Setup rhel and centos sync scripts 
Setup rhel8-split scripts and cron job

Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-06-15 18:08:45 +00:00
Pierre-Yves Chibon
46b327807f distgit: turn on fedora-messaging notification and give apache access to the git hook cert and keys 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-15 13:56:38 +02:00
Jan Kaluza
425312bab6 ODCS: Install releng keytab on odcs-backend01 until we get odcs-backend-releng01 again. 2020-06-15 11:15:34 +02:00
Michal Konečný
928ec26548 the-new-hotness: Use new proxy ip 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2020-06-15 10:39:25 +02:00
Kevin Fenzi
8ffeaeae52 logserver: disable fedora_stats as it is not moved over yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 20:30:42 -07:00
Kevin Fenzi
008570c739 grokmirror: python3 version for rhel8 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 17:57:40 -07:00
Stephen Smoogen
ba9ab1d4e1 remove more hosts which arent up yet 2020-06-14 19:53:32 -04:00
Stephen Smoogen
12c486cda3 remove some hosts in inventory file which do not exist in IAD2. 2020-06-14 19:51:27 -04:00
Kevin Fenzi
11cde39f88 bodhi / backend: enable fedmsg/base, we need it for pungi 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 16:45:48 -07:00
Kevin Fenzi
a8509b6d69 fedmsg / base: fix several syntax issues around closing "s 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 15:40:22 -07:00
Kevin Fenzi
eea681dccc base iptables: drop phx2 from osuosl allowed for ssh networks 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 15:39:10 -07:00
Kevin Fenzi
e3aeafc7d0 fedmsg / base: fix stray " from previous cleanup 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 15:37:49 -07:00
Kevin Fenzi
8356daeb4f inventory: virthost-comm* are no more. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 15:36:20 -07:00
Kevin Fenzi
814ae5c182 drop qa_isolated. 
We no longer need this as it was put in place when taskotron was going
to run user provided tests. Since the only left in 'qa' is openqa and it
only tests fedora images/updates and is still also in it's own vlan, we
no longer need to reject things in qa from the rest of their same vlan.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 15:34:00 -07:00
Kevin Fenzi
82b9bf6e90 inventory: There is no notifs-web02 in iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 15:04:27 -07:00
Kevin Fenzi
8b5cca3925 inventory: get the arm.fedoraproject.org machines. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 14:51:56 -07:00
Kevin Fenzi
47838aaff4 inventory: drop the ppc64le old hosts. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 14:39:32 -07:00
Kevin Fenzi
8a0a0e49f8 releng: drop fedmsg files that are in releng role, they are old and no longer used. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 14:34:23 -07:00
Kevin Fenzi
523bf8ee73 inventory: - is not to be used in group names, use _ instead 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 14:30:13 -07:00
Kevin Fenzi
81e89d0aaf inventory / hardware: perhaps ansible does not like ## as a comment. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 14:26:00 -07:00
Kevin Fenzi
3b3a63ef94 inventory: drop moonshot group in hardware also 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 14:17:59 -07:00
Kevin Fenzi
7984b46eb7 The great phx2 pruning run (1st cut). 
Since we no longer have any machines in phx2, I have tried to remove
them from ansible. Note that there are still some places where we need
to remove them still: nagios, dhcp, named were not touched, and in cases
where it wasn't pretty clear what a conditional was doing I left it to
be cleaned up later.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 14:14:31 -07:00
Pierre-Yves Chibon
07d773e65c notifs/backend: stop sending emails on errors, no one looks at them 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-14 18:05:50 +02:00
Pierre-Yves Chibon
5caddc3558 distgit-bugzilla-sync: send emails via bastion-iad from now on 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-14 18:01:50 +02:00
Marc Deop
5ac1a2bcfa feat(openshift-apps): add email override for Marc Deop 
Merges https://pagure.io/fedora-infra/ansible/pull-request/134
 2020-06-14 17:24:14 +02:00
Benjamin Lefoul
f7013f3f73 Update roles/openshift-apps/distgit-bugzilla-sync/templates/email_overrides.toml 
Current email
 2020-06-14 15:21:47 +00:00
Stephen Smoogen
5cd3dea673 change a few known hosts from phx2 to iad2 variables. 2020-06-14 09:51:42 -04:00
Stephen Smoogen
48d0507d0e Add mm-crawler02 so that we can crawl all the hosts in a regular time frame. 
Clean up inventory of a lot of phx2 hosts which have been turned off.
 2020-06-14 09:35:35 -04:00
Rick Elrod
7bb8ee6fef Fix bugs due to no variable-quoting in meetbot scripts, and fix shellcheck warnings on them 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-06-14 01:44:35 -05:00
Jan Kaluza
3569ba2d8c ODCS: I have no idea why openvpn is needed on frontend. Try without it for now. 2020-06-14 07:05:17 +02:00
Jan Kaluza
f80b7b5ddd ODCS: Handle 'pungi_composes' on current backend. 2020-06-14 06:56:04 +02:00
Kevin Fenzi
9aa2bbec1b new-updates-sync: adjust for python3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 21:48:24 -07:00
Kevin Fenzi
3aac403d54 compose-rawhide01: re-enable rawhide 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 21:18:00 -07:00
Kevin Fenzi
9dc73b3764 mbs: fix the mbs openvpn endpoint 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 20:48:17 -07:00
Kevin Fenzi
659729f202 people: drop freeipa cron from fedorapeople 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 20:28:26 -07:00
Kevin Fenzi
37a6aea3cf koji_hub: add lockfile location to cron 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 20:25:56 -07:00
Kevin Fenzi
36f819cf4f oci-registry: syntax is not my friend 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 19:52:04 -07:00
Kevin Fenzi
8b3346b896 oci-registry: add space 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 19:48:33 -07:00
Kevin Fenzi
252f6be758 oci-registry: only do the nfs mount on the non candidate registries 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 19:41:13 -07:00
Kevin Fenzi
624dbd04a9 proxies in iad2: set hosts file to use vpn for talking to container regestries 
Currently the proxies can't talk to the container registries directly,
so for now route these over the vpn.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 14:37:46 -07:00
Stephen Smoogen
8d5fc4ced0 Various mirrormanager items were hardcoded to phx2 and needed to be 
updated to iad2 so that propogation and other rules were put in
place.
 2020-06-13 15:37:46 -04:00
Kevin Fenzi
9240e9ba31 koji_hub: koji_directory_cleanup: set a valid hour for cleaning up koschei rpms 
I am not sure how this worked on rhel7 at all, but on fedora32, cron
says: (CRON) bad hour (/etc/cron.d/koji-directory-cleanup)
and I think it just doesn't process the entire file.

Move this to an hour after the log cleanup.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 09:49:57 -07:00
Kevin Fenzi
978e5865c2 proxies: adjust mirrorlist_proxies, as phx2 proxies are gone 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-12 18:52:54 -07:00
Kevin Fenzi
705ab71e65 secondary01: install python3-productmd on secondary01 so update-fullfiletimelist works 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-12 18:45:02 -07:00
Mohan Boddu
7595f13ece Fixing some deprecation warnings 
/usr/local/bin/owner-sync-pagure:110: DeprecationWarning: This method will be removed in future versions.  Use 'parser.read_file()' instead.

koji 1.22 doesn't support krb_login, it supports gssapi_login

Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-06-12 17:47:28 -04:00
Kevin Fenzi
07f8385e19 openvpn: move badges 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-12 13:57:17 -07:00
Pierre-Yves Chibon
326ba42e98 bodhi/backend: fix typo in the fedora-messaging consumer for the koji sync listener 
The content variable is the one retrieved from the message bus
but we want to access the loaded JSON blob that is in the
body of the first comment.
So, let's use the proper variable.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-12 22:12:32 +02:00
Kevin Fenzi
00ffddf37d badges-web: do not care about uid either 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-12 13:07:25 -07:00
Pierre-Yves Chibon
de1922546a bodhi/backend: clean and fix the owner-sync-pagure script 
Turns out we still carried i586 arch in there while it's long gone
in koji.

The list of extra arches needs to passed as a string, not a list
and a space delimited string, not coma. Otherwise koji crashes on
the other end, but this way it seems to work.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-12 22:04:28 +02:00