Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
24470 commits 9 branches 0 tags 111 MiB
Commit graph

24470 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
7d31b6b772 Drop duplicate Listen 443, there's already one in mod_ssl.conf 2018-09-30 23:20:53 +00:00
Kevin Fenzi
a203cde30e secondary01 needs a public_hostname 2018-09-30 21:15:03 +00:00
Kevin Fenzi
b24b3c109d use persistent volume in prod openshift for logging too 2018-09-30 18:29:09 +00:00
Kevin Fenzi
cd65e68ec6 perhaps this new var will work 2018-09-29 23:53:58 +00:00
Kevin Fenzi
0bf98c19a9 Revert "do a redirect for coreos.fedoraproject.org to coreos.github.io" 
This reverts commit ca35230ece.
 2018-09-29 21:16:28 +00:00
Kevin Fenzi
34a9f28f34 Move stg to the same openshift ansible version as prod 2018-09-29 20:22:22 +00:00
Kevin Fenzi
2aaab026e6 Lets try persistent logging in stg. 2018-09-29 20:21:43 +00:00
Kevin Fenzi
935b25decc Up this check to 8 hours. 2018-09-29 20:13:51 +00:00
Kevin Fenzi
ca35230ece do a redirect for coreos.fedoraproject.org to coreos.github.io 2018-09-29 19:41:59 +00:00
Kevin Fenzi
bcc42fad9c Add back a client.conf for rhel6 hosts (fas servers) 2018-09-29 18:28:39 +00:00
Kevin Fenzi
0228263dc8 fix indentation 2018-09-28 21:21:16 +00:00
Patrick Uiterwijk
4f31c398cf .yml != .conf 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 23:01:27 +02:00
Patrick Uiterwijk
2452a7d0f1 Add begin for repoSpanner role 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 23:00:24 +02:00
Kevin Fenzi
c0465fa9e0 add repospanner rpm so we can generate some certs 2018-09-28 19:53:40 +00:00
Mohan Boddu
319df04da2 Revert "Adding ostree sync for rawhide" 
This reverts commits
ca3b247c3c
d6ba1f5b54
fc9b896bed
2da175571c
328128cc3f

Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2018-09-28 18:44:47 +00:00
Patrick Uiterwijk
646010c992 Set a default targettype 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 19:11:17 +02:00
Patrick Uiterwijk
7fcd6b2afd Set tags correctly on the set_fact 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 19:09:29 +02:00
Kevin Fenzi
950a536c8e Hopefully this will fix ticket 7269 2018-09-28 17:03:54 +00:00
Patrick Uiterwijk
f3bdabd73a Word ordering is hard 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 19:01:25 +02:00
Patrick Uiterwijk
7dc41f8f16 Let's see if it's reversed? 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 18:55:21 +02:00
Patrick Uiterwijk
48bf3be669 Try quoting... It worked last time? 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 18:52:05 +02:00
Patrick Uiterwijk
3ffd179216 Simplify reverseproxy for openshift and setup SSL config for it 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 18:46:08 +02:00
Patrick Uiterwijk
a0a625fd08 Stop overriding the reverseproxy config for bodhi 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 18:19:05 +02:00
Patrick Uiterwijk
bdf439c203 Try adding quotes 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 18:16:34 +02:00
Patrick Uiterwijk
40b0677074 Move to apache balancer for all openshift 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 18:11:51 +02:00
Patrick Uiterwijk
fc7005848a Clear OpenShift from haproxy. It's using apache mod_proxy_balancer 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-28 18:02:42 +02:00
Kevin Fenzi
2903ddb28c lets give this a try 2018-09-28 00:32:12 +00:00
Kevin Fenzi
0a6e2a4b39 Also make sure the directory exists first. 2018-09-27 23:29:26 +00:00
Kevin Fenzi
514d2b75ef also masters get messed up by this 2018-09-27 23:10:46 +00:00
Kevin Fenzi
ff74860db5 new ca cert for prod openshift 2018-09-27 22:27:51 +00:00
Kevin Fenzi
d646e0ecf7 disable upgrading, we are deploying 2018-09-27 22:00:44 +00:00
Kevin Fenzi
9205b7581a need ca-certificates 2018-09-27 21:37:30 +00:00
Kevin Fenzi
6ca94af4e4 Openshift redeploy to production. 
Add 3 more nodes (we might use one later for staging)
move to latest openshift ansible
Change config to do multitenant, have logs and other config tweaks.
 2018-09-27 21:04:49 +00:00
Kevin Fenzi
b6bb287e9c This is cert_name, not certbot 2018-09-27 20:23:14 +00:00
Clement Verna
36b249aa59 FPDC : add fpdc.stg.fedoraproject.org to the proxies configuration 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-09-27 21:04:13 +02:00
Mohan Boddu
d4f741bc8e Disable checking EOL's for module building 
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2018-09-27 14:31:26 +00:00
Clement Verna
93f26e30f7 Restyle the Container Registry page. 
This commit adds a Title and the Fedora Logo to the registry page.
It also adds support for the podman pull command. It is now possible
to copy to the clipboard the command.

Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-09-27 15:51:21 +02:00
Clement Verna
b2ae20130d FPDC: Fix the yaml indentation 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-09-27 14:30:15 +02:00
Clement Verna
de754eccf9 FPDC: correct spelling of volumeMounts 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-09-27 14:23:08 +02:00
Mikolaj Izdebski
d1e9c23c2f Enable dist-repo-regen cron in prod (#7246) 2018-09-27 10:25:07 +00:00
Mikolaj Izdebski
735d10275c Enable proxying of copr api_2 and api_3 2018-09-27 10:12:45 +00:00
Mikolaj Izdebski
0a67a43d54 Clean up haproxy config for copr 2018-09-27 09:25:46 +00:00
Mikolaj Izdebski
ae45945a4b Revert "Configure haproxy for copr prod" 
This reverts commit d6384fbba2.
 2018-09-27 09:23:20 +00:00
Mikolaj Izdebski
d6384fbba2 Configure haproxy for copr prod 2018-09-27 09:19:23 +00:00
Kevin Fenzi
f5024046d3 only rewrite the letsencrypt thing, not everything 2018-09-27 04:35:59 +00:00
Kevin Fenzi
cae42140cf one more planet correction 2018-09-27 03:08:12 +00:00
Kevin Fenzi
e493e74c2a tweak path to certs 2018-09-27 01:49:44 +00:00
Kevin Fenzi
877e5bbaaa this needs to be http 2018-09-27 01:35:36 +00:00
Kevin Fenzi
3f46299483 this has to be eth0_ip 2018-09-27 01:23:00 +00:00
Kevin Fenzi
725c2a9fb5 Patches from Zach Villers <zach at mailup.net> to add a ssl cert to fedoraplanet.org 
This should hopefully fix for now ticket 7158.
The ssl cert should be valid and then redirect the user back to http since
all/many of our blogs are not https enabled at this time. Later when they are
we can switch it to not redirect.
 2018-09-27 01:14:30 +00:00