Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
26576 commits 9 branches 0 tags 111 MiB
Commit graph

26576 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
d2e0c89cfb cloud-noc01: start and end when clause with quotes for the parser 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 22:51:54 +00:00
Kevin Fenzi
6ceb5a873b cloud-noc01: set selinux to allow ntp port on 124 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 22:49:55 +00:00
Kevin Fenzi
57d7b73581 chrony: Make sure cloud-noc01 listens on port 124 for requests 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 22:44:34 +00:00
Kevin Fenzi
4788bbf6d9 buildvm-aarch64-01: move back to old host until we sort out networking on new one. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 22:26:16 +00:00
Kevin Fenzi
7d52eac761 buildvm-aarch64-01: lower cpus to limit 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 21:35:46 +00:00
Kevin Fenzi
157135d315 buildvm-aarch64-01: helps if you notice the typo. lvm_size instead of vm_size. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 21:30:47 +00:00
Kevin Fenzi
521caca5d4 buildvm-aarch64-01: try smaller, extents are anoying 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 21:27:25 +00:00
Kevin Fenzi
79a2e14f3f buildvm-aarch64-01: make space even smaller to fit. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 21:25:19 +00:00
Kevin Fenzi
fd1eacdb42 buildvm-aarch64-01: move to thunderx2 and give a bunch more resources 
We are very limited in how many vm's we can put on these due to low
disk space. So for now use the resources to make things nice and fast.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 21:22:39 +00:00
Kevin Fenzi
0584e4ea17 buildvm-ppc64le-1*: set correct bridge devices for ppc9-02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 18:59:35 +00:00
Kevin Fenzi
e156e4938a buildvm-ppc64le-1* Add eth1 ips for some builders that didn't have them before. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 18:52:06 +00:00
Kevin Fenzi
dedac93341 buildvm-ppc64le-1*: move to ppc9-02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-08 17:57:14 +00:00
Mikolaj Izdebski
615c28bcbe mbs/common: Set Koji build priority to 20 (#7740) 2019-05-08 08:49:32 +02:00
Dusty Mabe
b476fd9748
robosignatory: add aarch64 and ppc64le signing for silverblue 2019-05-07 14:23:21 -04:00
Stephen Smoogen
26265a3246 [dhcp] put in ip address for idrac with right ip address 2019-05-07 16:46:32 +00:00
Stephen Smoogen
f677f9ff78 [dhcpd] put in a temp address for booting dhcp 2019-05-07 16:45:34 +00:00
Stephen Smoogen
375c28fe7d clean up nagios 2019-05-07 11:28:45 +00:00
Pierre-Yves Chibon
34deed65c6 fedocal: Adjust the deployment in openshift 
- Create the rabbitmq user
- Create the secret_clients.json in preparation for OIDC support
- Install the fedora-messaging certificates
- Install the fedora-messaging configuration file

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-05-07 11:10:22 +02:00
Pierre-Yves Chibon
1f66d93f7e elections: Install the fedora-messaging configuration file 
Turns out this could be useful... :)

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-05-07 09:45:47 +02:00
Pierre-Yves Chibon
ff444d39fa elections: Create the elections user in rabbitmq 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-05-07 09:25:14 +02:00
Randy Barlow
57cde5b5cd bodhi: Configure pungi to check out master on comps. 
This is to work around https://pagure.io/pungi/issue/1181.

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-06 17:15:05 +00:00
Pierre-Yves Chibon
f00b5c16c3 pagure-stg: Fix the FAS URL to use in staging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-05-06 16:26:20 +02:00
Pierre-Yves Chibon
ccab205977 Make stg.pagure.io use FAS in stg 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-05-06 16:13:04 +02:00
Clement Verna
0704eabc9d mdapi: remove echo failed from the OpenShift cronjob 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-05-06 11:30:15 +02:00
Clement Verna
41a2f75dbb mdapi: build on the production OpenShift 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-05-06 11:26:28 +02:00
Jakub Kadlčík
0ddd5823f8 Update cache before trying to update Copr packages 2019-05-05 20:14:26 +02:00
Clement Verna
e5c2d5bfef fedbadges: Use 3 worker to process the messages faster. 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-05-05 18:17:38 +02:00
Clement Verna
e220bb4867 Fedbages: put a higher threshold to fedmsg hub backlog nagios alerts. 
The fedbages consumer has to consume many more messages and the query to datanomer
are slower. We need to allow the consumer to have a bigger backlog before raising an
alert.
Generally above 35000 message in the backlog it will be difficult for the consumer
to catch up, in that case it might be better to flush the backlog and restart from 0

Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-05-05 13:59:31 +02:00
Kevin Fenzi
67971513c9 download-phx2: Also allow indexes for /mnt/koji/compose on phx2 download. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-03 20:00:15 +00:00
Kevin Fenzi
b023b19fe8 download-phx2: Also serve /compose 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-03 19:50:29 +00:00
Patrick Uiterwijk
3904614002 Import initial OpenShift Ipsilon bits 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-03 20:00:53 +02:00
Patrick Uiterwijk
cb8b0c935d Restrict Proxy server-status to localhost for now 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-03 20:00:53 +02:00
Kevin Fenzi
8138db0d4d openshift: bodhi-web: remove downgrade, as the base image hasn't yet updated to the broken version. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-03 17:42:08 +00:00
Kevin Fenzi
736ab6eebb openshift: bodhi-web: fix typo in url 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-03 17:14:07 +00:00
Kevin Fenzi
cb624d50fe openshift: bodhi-web: downgrade librepo to non broken version in image builds. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-03 17:01:40 +00:00
Mohan Boddu
2f714ba9dc Setting f30 primary arches 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-05-03 13:45:45 +00:00
Kevin Fenzi
de7ddae30e buildvmhost-aarch64: up nrpe max tasks. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-02 22:46:22 +00:00
Kevin Fenzi
c71a31b220 taiga: retire old taiga cloud instances, everything should be using teams.fedoraproject.org now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-02 22:03:09 +00:00
Kevin Fenzi
e3f561c9b3 simple-koji-ci: add chrony role 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-02 19:33:03 +00:00
Mohan Boddu
34c9f35f2a Fix the key in tag2distrepo for coreos-pool 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-05-02 18:42:41 +00:00
Mohan Boddu
8be7195449 tag2distrepo: Regen coreos-pool repos 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-05-02 17:59:34 +00:00
Kevin Fenzi
e30dd9a3fe fedora repo files: Perhaps we need == here instead of is 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-02 00:07:42 +00:00
Kevin Fenzi
8bcd40c086 fedora repo files: If we are setting FedoraBranched to False when not enabled instead of undefining it, we need to test true or false instead of existance. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-02 00:05:22 +00:00
Kevin Fenzi
217b872f56 proxy-redirects: cgit redirects for src.fp.o 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-01 22:51:36 +00:00
Kevin Fenzi
80f5658820 base: Fix syntax on dnf command, it should just be the name in this case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-01 22:40:28 +00:00
Mohan Boddu
c9dcffc09b Autosigning setup for coreos-pool tag 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-05-01 18:21:59 +00:00
Mohan Boddu
6c4c5b5362 koji hub policy changes for coreos-pool and coreos-release tags 
https://pagure.io/releng/issue/8294

Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-05-01 18:21:59 +00:00
Kevin Fenzi
965e85a69a autosign02: Remove autosign02, it's not needed anymore now that 01 is back. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-01 17:21:09 +00:00
Kevin Fenzi
5f98bf1e03 robosignatory: Add f31-python tag to be signed. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-01 17:19:00 +00:00
Jakub Kadlčík
96de11a1bf Create manual playbooks for upgrading Copr instances 
There is a problem with our current playbooks, that they can be
executed automatically without us knowing about it. That is an issue
particularly during release process because we can prepare new
packages into infra-tags repo or bodhi and a nightly reprovision
can upgrade to them outside of an outage window or any of us being
prepared for it.

Therefore `groups/copr-*.yml` playbooks *should not* upgrade any
packages, but only ensure, that those packages are installed. For
upgrade, there should be separate `manual/copr/copr-*-upgrade.yml`
playbooks. Because they are located under `manual` directory, it
is secured, that they can't be run automatically.
 2019-05-01 18:39:27 +02:00