Infrastructure/ansible
5
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions
32103 commits 9 branches 0 tags 110 MiB
Commit graph

973 commits

Author SHA1 Message Date
Kevin Fenzi
7bd440f416 backups: re-enable normal backups now again. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-29 17:48:42 -07:00
Mark O'Brien
63ff40869c [osbs] add candidate registry to iptables 2020-06-23 13:27:41 +01:00
Mark O'Brien
5e78f70118 [osbs] add cdn registry to ip tables 2020-06-23 13:08:59 +01:00
Kevin Fenzi
1b9108bc04 backups: set correct path for ansible repo cloning by backup server. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-22 17:06:07 -07:00
Mark O'Brien
121a81cfe4 [osbs] comment out unkown ip in iptables 2020-06-22 18:27:35 +00:00
Mark O'Brien
6ce987e685 [osbs] update ips from phx2 to iad2 2020-06-22 18:27:35 +00:00
Kevin Fenzi
7984b46eb7 The great phx2 pruning run (1st cut). 
Since we no longer have any machines in phx2, I have tried to remove
them from ansible. Note that there are still some places where we need
to remove them still: nagios, dhcp, named were not touched, and in cases
where it wasn't pretty clear what a conditional was doing I left it to
be cleaned up later.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 14:14:31 -07:00
Kevin Fenzi
183269627f backups: disable backups for now until we are moved. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-07 15:51:12 -07:00
Kevin Fenzi
ddb96ead29 iad2: For some reason python3 ansible catches this. Cast FedoraBranchedNUmber to int here. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-03 09:41:58 -07:00
Kevin Fenzi
5f626eb145 iad2: have rabbitmq instances use rhos16 instead of rhos13, which was/is rhel7 based 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-31 13:35:43 -07:00
Kevin Fenzi
1af4eddc1f iad2: use fas-all.iad2 for pam_url in iad2 datacenter 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-26 07:54:41 -07:00
Pierre-Yves Chibon
ee2f34128a Enable the CRB repo by default on RHEL8 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 15:20:20 +02:00
Kevin Fenzi
cf517215a5 rhos13 repo: turns out we still use this for newer rabbitmq 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 16:10:05 -07:00
Kevin Fenzi
c529380547 Spring cleaning time. :) 
I removed all the old files, inventory, playbooks, roles and other from
services we no longer run or use. There was a bunch of cruft in there
and I hope that will make the repo cleaner and easier to look for things
we actually do run and care about.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 14:02:41 -07:00
Nils Philippsen
6d3f844ab2 Remove unused hotfix file 
Follow-up on:

commit cb22afd4fe
Author: Kevin Fenzi <kevin@scrye.com>
Date:   Wed May 9 02:00:45 2018 +0000

    Look, ask has moved away. I'm sure it will write us back someday...

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-05-03 22:02:43 +00:00
Nils Philippsen
5958059b47 Remove remnants of lists-dev and lists01 
Follow-up on:

commit a11e1da4b435928c8895259e12ea1bf895860cb4
Author: Kevin Fenzi <kevin@scrye.com>
Date:   Thu Feb 20 17:09:00 2020 +0000

    lists-dev: farewell

    Signed-off-by: Kevin Fenzi <kevin@scrye.com>

commit dd3bf3b50d
Author: Kevin Fenzi <kevin@scrye.com>
Date:   Fri May 20 18:09:20 2016 +0000

    Drop collab03 and hosted-lists01 (everything is going to mailman01 now).
    Drop hosted01 (we arent going to move hosted to rhel7)

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-05-03 22:02:42 +00:00
Nils Philippsen
0543b8addc mailman: cope with mails containing broken unicode 
See https://pagure.io/fedora-infrastructure/issue/8824 for details. This
enables the hotfix on staging only to enable testing.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-04-27 12:51:05 +02:00
Stephen Smoogen
4b7a21c026 add rhel8.repo 2020-04-24 21:34:29 +02:00
Stephen Smoogen
d9ba19c0a1 Revert "update rhel8.repo to have the codeready for it" 
This reverts commit 082f503fb1bc9b2e9160949c3c30386bdf1cfb7c.
 2020-04-24 21:34:29 +02:00
Stephen Smoogen
03d54c9bcf Revert "too much stuff we use regularly on many hosts is in CRB. Make it enabled" 
This reverts commit f9793bbe57c11d2c6e24dfcd4d9d30cf2d53396b.
 2020-04-24 21:34:29 +02:00
Stephen Smoogen
d9f0821238 too much stuff we use regularly on many hosts is in CRB. Make it enabled 2020-04-24 21:34:29 +02:00
Stephen Smoogen
7e95bf93a4 update rhel8.repo to have the codeready for it 2020-04-24 21:34:29 +02:00
Clement Verna
90e076b170 bodhi: remove the manual patch that is now included in 5.2 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:27 +02:00
Stephen Smoogen
efcd9b0ead the problem was that some of the host names were listed as cloud-noc01.fedorainfracloud.org and others were named cloud-noc01.cloud.fedoraproject.org. Move to 1 name throughout ansible 2020-04-24 21:34:27 +02:00
Clement Verna
db3c0785cb bodhi: patch error templates while waiting for a release 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:26 +02:00
Kevin Fenzi
aa580f72c5 openstack: remove more lingering files and playbooks and libraries. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:26 +02:00
Kevin Fenzi
00af04a024 openstack cloud: decomission 
Finally take fed-cloud* out and all playbooks associated with the old (and attempts to make a new one).
This cloud was a pain at times, but it did serve long and well, we salute it!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:26 +02:00
Stephen Smoogen
37915eaf25 put in patches to use wildcard2020 2020-04-24 21:34:26 +02:00
Stephen Smoogen
5ab2061c88 This removes all files related to keyserver and sks. Revert if still needed 2020-04-24 21:34:22 +02:00
Clement Verna
4584730e93 OSBS: add proxy101 and proxy110 to the iptable whitelist in stg 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:21 +02:00
Kevin Fenzi
779fa01877 autocloud: fare well autocloud, you served long and well... 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:17 +02:00
Dusty Mabe
35c9d91e18 aws-iam-policies: fcos-upload-amis: add ability to DescribeRegions 
Need this since we recently changed to dynamically detect regions
to upload to. See ab3cae5
 2020-04-24 21:34:17 +02:00
Kevin Fenzi
ab3f501820 secondary01: Copy to secondary01 a python2 version of create-filelist because it can't run the python3 one. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:16 +02:00
Kevin Fenzi
b68b6cbb82 create-filelist: update to use python3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:15 +02:00
Clement Verna
f124f4ed89 OSBS: do not use fedora:latest in the buildroot 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:15 +02:00
Kevin Fenzi
7f4959768b aws policy: initial copies of json policy files. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:14 +02:00
Kevin Fenzi
8e238ef62a rhel8 repo file: Clean up from beta, use https, make AppStream/BaseOS for dvd repos 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
dd9e5512e3 common files: fix epel8 path, it has Everything in it. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
36ed20e7f1 common files: add epel8.repo file for rhel8 machines. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
82b8bdf191 communishift: update some docs. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
57e49b6da8 Revert "communishift: adjust for new cert-manager setup." 
This reverts commit fd510fbf1642a74f1e951c1657b9dc768b6caf07.
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
66e45ad988 communishift: adjust for new cert-manager setup. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:12 +02:00
Stephen Smoogen
97cadd4f64 Thanks Todd Z. Saving my bacon once again 2020-04-24 21:34:12 +02:00
Stephen Smoogen
92b21d3522 in order to find out why we cant have nice things we have to log all the things 2020-04-24 21:34:11 +02:00
Kevin Fenzi
58f195b511 openshift / README: update cert-manager docs. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Clement Verna
5a4f01a2d4 OSBS: use the Openshift 3.11 repo in stg 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:09 +02:00
Clement Verna
ee0d28b7cf OSBS: update the delete old image cron job 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:08 +02:00
Patrick Uiterwijk
21eeb216ed Add cert-manager URL 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-30 22:33:28 +02:00
Patrick Uiterwijk
14422d361d Add objects and documentation for certificates in communishift 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-30 22:31:42 +02:00
Patrick Uiterwijk
647efabd30 Add oidc_cm.yml 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-25 02:53:39 +02:00