Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
36775 commits 9 branches 0 tags 111 MiB
Commit graph

233 commits

Author SHA1 Message Date
Kevin Fenzi
1e304a8467 haproxy: revert adding workers, as these were masters all along 
We added more to the api and machine-config, but those only go to
control nodes, not compute nodes. Just revert this section entirely, it
was a bad idea and we shall never speak of it again. :)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-03-03 14:59:28 -08:00
Kevin Fenzi
9eed96e3d6 proxies: open ocp4 api port in both stg and prod 
This fixes ticket 10521.

Basically we want to just open the api. It requires auth to do anything
and other openshift instances have it available, so it shouldn't
hopefully expose us to too much risk. With ocp3 the api was part of the
normal port/web flow, but with ocp4 it's a seperate port.

This also adds new workers to haproxy. I can drop that part if it's
controversal, but it should be fine I would think.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-03-03 22:29:37 +00:00
Kevin Fenzi
c520b42230 datagrepper has moved to openshift. Remove old ansible remnants. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-02-21 11:44:13 -08:00
David Kirwan
b778a45d6c metrics-for-apps: Remove temporary ocp4 bootstrap machine from haproxy 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2021-09-08 12:35:48 +09:00
Kevin Fenzi
6ce2275510 haproxy: ocp cluster is only in iad2 
If we push this to all proxies (as we have), they will fail to start
haproxy because they cannot resolve the internal ocp iad2 hosts. ;(

The ocp clusters should only apply on the iad2 haproxy nodes, not all
proxies. Also fix logic on the staging one to apply in staging instead
of just production.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-09-04 10:51:00 -07:00
David Kirwan
9f39d76e2c metrics-for-apps: Adding inventory/groupvars/changes for ocp prod 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2021-09-02 01:37:34 +00:00
David Kirwan
b7be2d3c40 metrics-for-apps: commeting out the bootstrap node for ocp4stg 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2021-08-11 12:46:46 +09:00
Kevin Fenzi
38fa66b00b Revert "metrics-for-apps: commenting out ocp4 bootstrap node from proxy configs" 
This reverts commit 849b729578.
 2021-08-10 19:31:42 -07:00
David Kirwan
849b729578 metrics-for-apps: commenting out ocp4 bootstrap node from proxy configs 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2021-08-11 10:14:18 +09:00
Kevin Fenzi
ad2d0a4a4e haproxy: Try dropping ssl here. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-08-10 18:02:45 -07:00
David Kirwan
d78d1070f8 metrics-for-apps: terminate tls for api/api-int in haproxy 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2021-08-09 17:48:38 +00:00
Kevin Fenzi
63eb9d6765 haproxy: fix typo in backend name 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-07-27 13:22:56 -07:00
Kevin Fenzi
abec29acf4 ocp / staging: add posts for control plane behind haproxy and open proxy firewalls 
Put the api ports that ocp4 needs behind haproxy (with bootstrap node)
and open them to just the ocp4 machines on the proxies.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-07-27 13:19:16 -07:00
Pierre-Yves Chibon
2b46beed2c fedocal: drop everything related to fedocal in VM 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-06-23 17:30:27 +02:00
Kevin Fenzi
f23fd1b7a1 totpcgi / 2fa: remove old totpci and files and roles. 
Note: there are still some calls here in old fas in openshift, but we
will remove those when we remove old fas (likely as soon as zodbot is
ported over to noggin).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 13:00:56 -07:00
Kevin Fenzi
3a26611841 haproxy: add ipa03 into the mix as a backup behind ipa02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 09:55:58 -07:00
Kevin Fenzi
e4d7627ce8 haproxy: disable notifs-web02 until it's ready 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-05 17:40:18 -07:00
Kevin Fenzi
e82d21eefd haproxy: decrease chances of marking ipsilon down 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-31 09:36:13 -07:00
Aurélien Bompard
b8e6754f97 Use a VM for Ipsilon in prod too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-23 16:55:38 +00:00
Pierre-Yves Chibon
25ff2bea69 haproxy: let's assume zabbix is up for now 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-18 10:11:12 +01:00
Pierre-Yves Chibon
7d1fbba00d haproxy: be more flexible for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 17:04:21 +01:00
Pierre-Yves Chibon
23c7ef8c20 haproxy: zabbix returns either 200 or 401 - maybe this way? 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 16:49:43 +01:00
Pierre-Yves Chibon
36de1196e1 haproxy: zabbix returns either 200 or 401 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 16:45:58 +01:00
Pierre-Yves Chibon
ea9d107ef8 haproxy: zabbix now returns 401 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 16:40:32 +01:00
Pierre-Yves Chibon
b3a0df510d haproxy: fix the path where haproxy check for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 15:58:50 +01:00
Pierre-Yves Chibon
157e8029a8 haproxy: add support for zabbix in haproxy but stg only 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 10:34:30 +01:00
Adrian Reber
cb4bb12298 mirrorlist: clean up unused definitions 
Remove everything which is related to running the mirrorlist server
process as a container. This has not been used for the last few months.

Also remove the 3 mirrorlist process setup for IAD2 as it is no longer
necessary and removing it also simplifies the configuration.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-11-17 07:32:01 +00:00
Aurélien Bompard
38cc67731b
Proxy: attempt to move ipsilon back to a VM in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 10:59:41 +02:00
Pierre-Yves Chibon
c0f7fa3e8c proxy: bring back pdc-backend, this one doesn't have anything to do with the pdc-backend hosts 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-06 15:49:06 +02:00
Pierre-Yves Chibon
f91a80046b Wipe everything that is to do with pdc-backend from our ansible repo 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-05 18:57:52 +00:00
Kevin Fenzi
516d5e77e8 haproxy: fix conditional that was reversed for mbs 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-25 10:06:47 -07:00
Kevin Fenzi
f19cb7f225 haproxy: adjust staging haproxy for things that should exist 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-25 09:56:35 -07:00
Stephen Smoogen
257a130bc8 remove zanata2fedmsg. the zanata roles are still there for the time being as they are tied into webstizes and such 2020-07-22 15:22:37 -04:00
Kevin Fenzi
506b41bb65 Add sundries02, wiki02 and datagrepper02 
Add some more '02' instances to increase uptime/availibility.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-14 14:32:25 -07:00
Stephen Smoogen
857a3c623d this should remove a lot of things looking at phx2 systems 2020-06-10 09:18:11 -04:00
Kevin Fenzi
e92d630821 iad2: pkgs01 in iad2, not pkgs02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-26 19:37:13 -07:00
Kevin Fenzi
5097e46eb0 iad2: haproxy: adjust haproxy for iad2, should make kojipkgs, src and rabbitmq reachable 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-26 18:34:27 -07:00
Rick Elrod
ea96618bd4 Get rid of modernpaste everywhere, redirect it to paste.centos.org everywhere 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:18 +02:00
Kevin Fenzi
779fa01877 autocloud: fare well autocloud, you served long and well... 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:17 +02:00
Kevin Fenzi
e50fa5f3f2 freshmaker: remove everything 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:14 +02:00
Mikolaj Izdebski
28156f917d haproxy: Remove Koschei endpoints 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
7a50525e9b haproxy: Remove proxy for mdapi 2020-04-24 21:34:11 +02:00
Kevin Fenzi
6d54f56f5d happroxy: switch that and try uri balancing. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-21 18:43:08 +00:00
Kevin Fenzi
7d70382af9 haproxy: try and balance kojipkgs by source ip instead of appheader (which isn't even set here)? 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-21 18:28:38 +00:00
Kevin Fenzi
73dae59db8 elections: clean up some old stuff from the old site and add redirect to new. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-31 17:57:13 +00:00
Patrick Uiterwijk
c9cba10f70 Remove fas02 references from haproxy and varnish 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-24 20:59:36 +02:00
Stephen Smoogen
658a22035b remove fas03 from inventory and a LOT of config files where it was hard-coded 2019-05-23 22:53:51 +00:00
Patrick Uiterwijk
e4fbd6f88a haproxy: remove FAS 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-22 09:22:28 +02:00
Patrick Uiterwijk
766f34132e haproxy: remove ipsilon 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-22 09:22:03 +02:00
Patrick Uiterwijk
d1f6227a91 haproxy: remove koji entries 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-22 09:18:23 +02:00