Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
39751 commits 9 branches 0 tags 111 MiB
Commit graph

39751 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
88683eef68 notifs: clean up some more missed parts from retirement 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 18:16:06 -08:00
Kevin Fenzi
4cd2c924c3 smtp-auth: actually install the master.cf file too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 17:51:16 -08:00
Kevin Fenzi
ddd0913262 smtp-auth: rename this to explicit hostname 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 17:48:24 -08:00
Michal Konecny
e48db0aabb Allow port 587 as well 
To fix https://pagure.io/fedora-infrastructure/issue/11623

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-16 01:38:59 +00:00
Michael Scherer
bdd76ae138 Add master.cf with submission enabled 
Copied from base master.cf, fix #11623
 2023-11-16 01:38:59 +00:00
Kevin Fenzi
d727ee47ea nagios: remove another old notifs remnant 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 13:12:36 -08:00
Kevin Fenzi
20dc948173 notifs (old fmn): retire 
We are retiring this in favor of the new service.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 12:28:28 -08:00
Kevin Fenzi
3808d867de value01/value01.stg: retire 
These are old rhel7 instances. The only thing left on them is fedmsg-irc
(sending to one irc channel, fedora-releng). Move everything to use the
newer rhel8 value02 instead.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 12:13:38 -08:00
Kevin Fenzi
af8f9531a9 haproxy: fix issue with non iad2 proxies 
Turns out zabbix is only in iad2, so we need to not set it up on non
iad2 proxies.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 11:14:27 -08:00
Kevin Fenzi
a60ca7159f nuancier: retire and remove from ansible 
See https://pagure.io/fedora-infrastructure/issue/11371
This service is retired.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 10:44:00 -08:00
Tomas Hrcka
ea8c50232c Keep communishift-lightspeed-build project until the migration is done 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-11-15 15:49:59 +01:00
Jakub Kadlcik
7c0d1a2335 communishift: rename the project to communishift-log-detective 
The upstream was renamed as well
https://github.com/fedora-copr/log-detective-website
 2023-11-15 14:27:30 +01:00
David Kirwan
cc19d32d67
zabbix: enable the zabbix prod hosts in the playbook 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-15 09:07:47 +00:00
David Kirwan
6461430ae3
zabbix: remove conditions on zabbix configration 
Rename host zabbix/zabbix.stg to zabbix01

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-15 08:10:44 +00:00
Kevin Fenzi
aaf8fec811 zabbix_agent / rhel7: package seems to be just policycoreutils-python in rhel7 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-14 16:06:10 -08:00
Miro Hrončok
9d5c2b84a8 Switch the weekly FTBFS reminders to F39 
Signed-off-by: Miro Hrončok <miro@hroncok.cz>
 2023-11-14 23:32:18 +00:00
Kevin Fenzi
292db92153 koji_builder / buildhw-a64: try and get core dumps another way 
We tried to override the machine scope, but that didn't work in this
case, so instead lets tell mock to pass a new core limit to
systemd-nspawn and see if that gets us cores.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-14 10:53:53 -08:00
Aurélien Bompard
f76ff54b1f
bugzilla2fedmsg: use a more recent python builder image 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-11-14 09:16:25 +01:00
Kevin Fenzi
58183eb8ee proxies / staging: move stg proxies to f39 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 17:09:50 -08:00
Kevin Fenzi
24a237ad3d releng-compose: move a bunch of composers to f39 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 16:41:39 -08:00
Kevin Fenzi
f9eac86c72 batcave01: ansible-core now switches back to python-3.9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 14:15:25 -08:00
Kevin Fenzi
9b42cd8cbf haproxy: fix template typo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 13:53:56 -08:00
Kevin Fenzi
e56810a7dd proxies: drop free on later plays 
This just causes confusion and doesn't really help make the playbook any
faster.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 10:42:54 -08:00
Leo Puvilland
9f0cfc0502 redirect discussions.fedoraproject.org to discussion.fedoraproject.org, and add to proxy and LE cert 2023-11-13 18:33:39 +00:00
Pavel Raiskup
e80b1e1050 copr/hypervisor: typo in task name 2023-11-13 16:51:28 +01:00
Pavel Raiskup
8e6de8396e nagios: send notifications to copr-team@redhat.com 
Instead of separate members.  This is just to align with:
https://accounts.fedoraproject.org/group/copr-sig/
 2023-11-13 15:32:26 +01:00
Pavel Raiskup
87959ce5e6 copr: cleanup credentials: old openstack 
Complements: 1623f42fea
 2023-11-13 09:12:55 +01:00
Pavel Raiskup
1623f42fea copr: cleanup credentials: old openstack 
Complements 4792241cfe
 2023-11-13 09:04:30 +01:00
Kevin Fenzi
bf3a64f286 resultdb: add coreos user to submit results from coreos 
Just add another user here to be allowed to submit results for coreos
tests. Creds sent out of band.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-10 11:03:30 -08:00
Kevin Fenzi
766e2d39c7 bodhi / backend / koji_sync: f40-flatpak does not exist yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-10 10:34:20 -08:00
Pavel Raiskup
bb04ae62ad copr: credential cleanup: drop log for "static" SSL 
We are for quite some time using the roles/copr/certbot also for
backend production.
 2023-11-10 13:45:19 +01:00
Pavel Raiskup
8abbdbaea5 sopr: credential cleanup: drop an unused task file 2023-11-10 13:45:17 +01:00
Pavel Raiskup
4792241cfe copr: credential cleanup: drop unused openstack/passwords.yml 
Drop the use of credentials to (now) non-existing OpenStack.
 2023-11-10 13:35:17 +01:00
Pavel Raiskup
63e9812149 backend: explain the reason for generating ssh key on VM 2023-11-10 13:28:28 +01:00
Pavel Raiskup
47b91aae1f copr: credential cleanup: drop copr-sudoers use 
This never worked.  We have to add appropriate FAS integration.
 2023-11-10 11:20:56 +01:00
Pavel Raiskup
41af546c0d copr: credential cleanup: drop unused openstack/passwords.yml 2023-11-10 11:15:03 +01:00
Kevin Fenzi
deef8d3b35 bodhi-backend01.stg: was moved to f38 a while ago 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-09 13:09:19 -08:00
Nils Philippsen
aac912e4c9 Set nullglob for combining HTTP log files 
This can cause files named '*' in places where you wouldn’t expect it
otherwise.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2023-11-09 20:42:31 +00:00
Kalev Lember
0064e09bff kojipkgs: slightly relax openh264 blocking/redirect rules 
Allow access to gstreamer1-plugin-openh264 package and new noopenh264
stub package that don't contain non-distributable code, while keeping
openh264* and mozilla-openh264* blocked.

See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=2247274 for
"noopenh264" stub package review that makes it possible to build/ship
the gstreamer plugin in Fedora proper while keeping the
non-distributable openh264 package in Cisco repos.
 2023-11-09 21:28:13 +01:00
Kevin Fenzi
9314b70862 db-koji01: more tuning 
Tweak some of the knobs to try and get things more happy with the heavy
load it's under. Note that cpus change will need a reboot before it's
active. The other changes have all been applied and it seems to be doing
a little better with this. Perhaps with some more cpus we can get it
stable (but yet not swamping i/o).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-09 10:09:24 -08:00
David Kirwan
21b43ab931
zabbix: reworking apache config 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-09 15:15:48 +00:00
David Kirwan
8b0581bcad
zabbix: haproxy config reworking 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-09 14:52:30 +00:00
David Kirwan
ee3bac3470
zabbix: haproxy config zabbix production 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-09 14:04:13 +00:00
David Kirwan
9c3a24e79a
zabbix: Zabbix production configuration 2023-11-09 12:55:26 +00:00
Aurélien Bompard
94478cc88b Install IPA replicas with a larger nsslapd-maxsasliosize 
Related to https://pagure.io/fedora-infrastructure/issue/10358

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-11-09 09:33:15 +00:00
Aurélien Bompard
f6e6921655 Factor the replication tasks in a block 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-11-09 09:33:15 +00:00
Dan Fandrich
2afc689d5e [release-monitoring] Add links for more distros 2023-11-09 09:28:11 +00:00
Kevin Fenzi
fdf34aab57 nagios_server / noc02: set seboolean to allow certgetter to work 
noc02 needs to be able to proxy to certgetter for the acme challenge for
ssl certs. So, set this there to allow that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-08 15:40:23 -08:00
Andrew Heath
ea4a9bcbb6 Create redirect for fedoraproject/cloud 
Create a redirect for fedoraproject to point to new cloud image page
 2023-11-08 23:31:28 +00:00
Andrew Heath
7260701e59 Remove unessary settings for Spunk Setup 2023-11-08 23:28:57 +00:00