Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
34890 commits 9 branches 0 tags 111 MiB
Commit graph

34890 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
cc736849e2 ipa/client: split out prod and stg ipa user/group ignore file 
We need to also add mock to sssd ignore groups/users, but for now since
we are frozen, only do this in staging. After freeze, we should merge
this back into one file.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 17:15:51 -07:00
Kevin Fenzi
5c397154fc buildvm-a32-01.stg: new install, new mac 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 15:44:37 -07:00
Kevin Fenzi
e9966e543c virt-install: use inst. in front of anaconda parameters 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 15:28:44 -07:00
Kevin Fenzi
18bc52df65 buildvm-a32-01.stg: f34 is not released yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 14:55:09 -07:00
Frank Ch. Eigler
77d79cfe8a debuginfod proxy: fix ProxyPassReverse typo (no proxyopts there) 2021-04-08 21:53:30 +00:00
Kevin Fenzi
1d57a07876 buildvm-a32-01.stg: need to define eth0_ip also for virt-install 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 14:51:25 -07:00
Kevin Fenzi
469cc3e027 buildvm-a32-01.stg: switch to f34 and see if OOM bug is still there 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 14:47:21 -07:00
Kevin Fenzi
596af2682b Default x_forward to false to make last commit work 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 14:12:39 -07:00
Frank Ch. Eigler
a93b8d24c0 debuginfod proxies: enable gzip 
elf/dwarf/source-code data from debuginfod is highly compressible.
Let's trade proxy CPU for reduce network traffic.
 2021-04-08 20:58:52 +00:00
Frank Ch. Eigler
c37d51d236 proxies/debuginfod: allow proxyopts 
debuginfod can take O(60s) to run certain webapi queries, so the httpd
mod_proxy default timeouts are too short.  Introduce an ansible
variable "proxyopts", expanded into the httpd ProxyPass and
ProxyPassReverse configuration lines.  Default to "", but set it
with pretty generous limits for debuginfod only.
 2021-04-08 20:58:52 +00:00
Adam Williamson
61af6f34ca openQA: update server config (disable audit, tweak cleanup) 
We never use the auditing stuff, so let's turn it off (and set
short limits for audit event duration so we can run the cleanup
and get rid of existing audit events). Let's also use the new
setting that only runs asset cleanup if free space is low.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-04-08 09:24:23 -07:00
Adam Williamson
a889649c46 openqa: bump asset size allocations a bit 
We have more space on the IAD servers, so let's use it.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-04-08 09:24:23 -07:00
František Zatloukal
1b362400f5 oraculum: Increase timeouts of probes 2021-04-08 12:00:41 +02:00
Pierre-Yves Chibon
26ca32d11d people: Do not try to chown the file, the cron already runs as apache 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-04-07 19:46:44 +00:00
Pierre-Yves Chibon
692647ed86 people: when making the people page account for home directory we can't get into 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-04-07 19:46:44 +00:00
Kevin Fenzi
cb4524e34f releng-compose / compose-rawhide: add mount for ftp archive volume 
We are going to sync the contents from fedora_ftp/pub/archive over to
fedora_ftp_archive volume. This will free up 17TB or so on the SSD
aggregate that fedora_ftp is on.

This will mean more mirror churn when we archive old releases, but
there's not much else we can do besides this or more ssd storage.

This is ok to do during freeze as compose-rawhide is not frozen. :)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-07 12:43:18 -07:00
Stephen Smoogen
a67c6ed272 Did not read pspaceks comment correctly. If we were running fedora on nameservers we could go to 100k. For EL8/7 we can go to 1000 
Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
 2021-04-07 10:40:45 -04:00
Stephen Smoogen
a81783e13e Update per pspacek to 100k TCP connections 
Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
 2021-04-07 10:32:16 -04:00
Stephen Smoogen
764ef65e98 Change named settings for tcp connections 
In order to try and fix the number of TCP connections allowed to get
to the dns servers by increasing from the default 100 to 1000. This
will hopefully help fix the issue in
https://pagure.io/fedora-infrastructure/issue/9850 where the name
servers are not able to answer TCP connections after a while.

Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
 2021-04-07 14:27:29 +00:00
František Zatloukal
5323f6d5fc oraculum: Set workers back to 8 per container 2021-04-07 12:36:52 +02:00
Pierre-Yves Chibon
26bfef7853 fedocal: build in staging from the staging branch again 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-04-07 12:12:47 +02:00
František Zatloukal
b05efc7091 oraculum: Try 1 worker per container 2021-04-07 12:06:43 +02:00
František Zatloukal
d776906986 oraculum: Use 4 workers per container 2021-04-07 11:48:06 +02:00
František Zatloukal
3d06840a0f oraculum: Enable Private Bugs 2021-04-06 21:24:59 +02:00
Frank Ch. Eigler
ed70717dcc debuginfod vms: add a few more useful packages 2021-04-06 17:23:43 +00:00
Frank Ch. Eigler
12dc83f767 debuginfod: vm configuration for running service with ansible-based config file 2021-04-06 17:23:43 +00:00
Stephen Smoogen
255b10c922 Add in roles for f34-f39 and epel9 for counting with old stat program 2021-04-06 13:11:31 -04:00
Stephen Smoogen
5db5700936 This will allow for X forwarded to be set for hosts which need it. [Currently only debuginfod] 2021-04-06 12:25:44 -04:00
Aurélien Bompard
1284267f48
Noggin: set the password expiration to 30 minutes 2021-04-06 17:28:09 +02:00
Nick Bebout
41d86dc308 Change manual/update-aliases.yml playbook to use fasjson role, not fas_client 2021-04-06 10:10:01 -05:00
Tomas Hrcka
f7914405f6 Releng final freeze 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2021-04-06 15:37:59 +02:00
Pierre-Yves Chibon
292c0baf78 distgit: adjust the way we override the branches when querying PDC 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-04-06 14:04:16 +02:00
Kevin Fenzi
f3ab68c101 zabbix/staging: try and exclude it from nagios monitoring harder 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 15:36:51 -07:00
Kevin Fenzi
658df6e677 debuginfod: move to port 8002 and add vpn 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 15:30:01 -07:00
Kevin Fenzi
40f2acea99 zabbix / staging: No need to have nagios monitor zabbix 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 14:37:04 -07:00
Kevin Fenzi
a00f92a9d0 koji01.stg: exports is space delimited 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 14:13:27 -07:00
Kevin Fenzi
58234964d5 koji01.stg: export to 10.3.166 ro too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 14:12:35 -07:00
Kevin Fenzi
de028e7e1a debuginfod: remove openshift application, we are moving to vm's! 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 14:08:57 -07:00
Kevin Fenzi
bf27a4426c debuginfod: set mount_stg true on nfs mount 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 14:04:53 -07:00
Kevin Fenzi
044467fafe debuginfod: add both stg and prod debuginfod vms 
We are moving this to vm's as the nfs storage on openshift isn't up to
the i/o that this application needs.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 13:23:00 -07:00
Francois Andrieu
3e4ac717f8 languages: add resources quota & generate website in pv 2021-04-05 18:37:27 +00:00
Francois Andrieu
486d9f6c7f languages: use templating for similar cronjobs & allow initial import with playbook tags 2021-04-05 18:37:27 +00:00
Francois Andrieu
75d43faea6 languages: use imagestream for nginx 2021-04-05 18:37:27 +00:00
Francois Andrieu
e57a3c9df4 languages: prod deployment 2021-04-05 18:37:27 +00:00
Brendan Early
a4c1b1448f Add fedora-packages-static and solr to openshift 2021-04-05 18:25:10 +00:00
Kevin Fenzi
1df0773d19 Drop fas_client_groups from everything since we are not using fas anymore. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 10:22:31 -07:00
Kevin Fenzi
8ee9c66072 hosts: try again as the last simple fix was too simple 
So, we need a bit more logic here.
We want to use the vpn hosts file only if something is on the vpn and
it's also not in iad2. In iad2 we want the normal hosts file.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 10:15:52 -07:00
Kevin Fenzi
d36a478580 hosts: make a hacky, but hopefully working way of handling vpn 
This isn't very clever, but it should work and be easily understandable.
We likely want to come up with a better way to do these hosts files
entirely, but it can wait until after freeze.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 10:07:58 -07:00
Kevin Fenzi
189bf72205 ircbot: adjust rules so branched/34 (and 35/36) composes show up in #fedora-releng 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-04 09:36:34 -07:00
Kevin Fenzi
67b69f0022 people: add python36 jinja2 for make-people-page script 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-03 13:41:43 -07:00