Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
26084 commits 9 branches 0 tags 111 MiB
Commit graph

26084 commits

This branch
This branch
All branches
Author SHA1 Message Date
Clement Verna
901b333f61 We are in Freeze, so make the Frozen variable True 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-03-25 09:39:10 +01:00
Kevin Fenzi
0c3dc7434f badges-backend: bump memory to prevent alerts when scripts run. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-03-23 17:54:12 +00:00
Stephen Smoogen
f7c0985d56 [repospanner] when adding a new host, make sure ip address is unique when building 2019-03-22 20:58:45 +00:00
Jeremy Cline
73240bc64e rabbitmq_cluster: Add the admin user to the public_pubsub vhost 
It needs permissions to manage that vhost

Signed-off-by: Jeremy Cline <jeremy@jcline.org>
 2019-03-22 20:48:30 +00:00
Jeremy Cline
36d43c5d55 rabbitmq_cluster: Create the zmq.topic and bind it to amq.topic 
This way amq.topic in the public vhost gets all messages.

Signed-off-by: Jeremy Cline <jeremy@jcline.org>
 2019-03-22 20:26:30 +00:00
Jeremy Cline
e5c5720d5b rabbitmq_cluster: federate both amq.topic and zmq.topic 
Native AMQP clients publish to amq.topic, but the zmq-to-amqp bridge
publishes to zmq.topic so we can keep track of who's publishing where.
 2019-03-22 19:51:27 +00:00
Stephen Smoogen
106c7f9d5a [repospanner] Make sure that your host_inventories actually match the hostnames 2019-03-22 19:43:13 +00:00
Stephen Smoogen
e1b6b1535a so let us see why it says vmhost is undefined if we use the same file def as infinote 2019-03-22 19:41:39 +00:00
Stephen Smoogen
ed6ff61a6f [repospanner] add vpn push files for hosts 2019-03-22 19:19:33 +00:00
Stephen Smoogen
bcf86ff48d [repospanner] Virtual machines have a maximum memory size which is normally 5* memory. That works for up to 16GB on our systems. 2019-03-22 18:49:31 +00:00
Stephen Smoogen
a5fc3cb775 [repospanner] 24 GB is too much for a VM it seems. 2019-03-22 18:44:48 +00:00
Stephen Smoogen
c37fcc542a [repospanner] 32 GB is too much for a VM it seems. 2019-03-22 18:41:06 +00:00
Rick Elrod
261ffa0745 Revert "[dhcp_server] [cloud-noc01] Try the other interface?" 
This reverts commit fc4bb572c6.
 2019-03-22 18:37:01 +00:00
Rick Elrod
fc4bb572c6 [dhcp_server] [cloud-noc01] Try the other interface? 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-03-22 18:24:59 +00:00
Stephen Smoogen
b2d34605f0 give equiv cpu 2019-03-22 18:19:23 +00:00
Stephen Smoogen
fd53f15b9c [repospanner] add initial host_vars for nodes in osuosl and rdu 2019-03-22 18:11:06 +00:00
Rick Elrod
918eb11bd8 [dhcp_server] [cloud-noc01] okay well then try this MAC 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-03-22 18:01:18 +00:00
Stephen Smoogen
00d988081a Add repospanner nodes to inventory. 2019-03-22 17:59:55 +00:00
Rick Elrod
d8ec1a4963 [dhcp_server] [cloud-noc01] Try again with a shared net 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-03-22 17:39:08 +00:00
Rick Elrod
402e4c20f4 [dhcp_server] [cloud-noc01] add os community subnet (and one host for now) for pxe boot 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-03-22 17:18:33 +00:00
Tim Flink
16c2787a56 proxies: Adding remotepath to websocket balancers 
The current template assumes that websockets are at the base of a URL
but that is not true for our buildmaster. This patch adds remotepath
to the end of the websocket url if remotepath is defined.
 2019-03-22 15:23:28 +00:00
Kevin Fenzi
7f6b3a59dc power9: add repos file to point to the right place and fix yumrepos to work with power9 hosts. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-03-22 04:36:31 +00:00
Kevin Fenzi
69071fe4f9 buildvmhosts: add ppc9-01 and ppc9-02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-03-22 04:22:05 +00:00
Kevin Fenzi
4eeed3bcbe update-fullfiletimelist: make new-updates-sync use the fedora-secondary lock file 
Currently update-fullfiletimelist is called from 4 machines:
* rawhide-composer: after rawhide compose
* branched-composer: after branched compose
* secondary01: in a cron every hour updating only /pub/alt as it can change anytime.
* bodhi-backend01: after ever updates sync that has content synced

We need bodhi-backend01 to use the same lock as rawhide/branched composers since they
update the same modules and we don't want them to step on each other.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-03-20 20:56:51 +00:00
Stephen Smoogen
d9d24d08d9 [nagios_server] Add in certgetter test. 
This was offered by Alessandro Lorenzi <alorenzi@alorenzi.eu> as a fix
to deal with our inability to monitor the certgetter after
reboots. Thank you very much for this work.

Signed-off-by: Stephen Smoogen <smooge@redhat.com>
 2019-03-20 20:17:43 +00:00
Stephen Smoogen
26368c01d3 [repospanner] System is not in production so can be changed without FBR. Add more diskspace and more cpu/ram 2019-03-20 20:13:09 +00:00
Jeremy Cline
70ed6bb95c rabbitmq_cluster: create public user fedora.stg in staging 
The cert for the user in staging is fedora.stg, so make the user in
rabbitmq match.
 2019-03-20 19:24:31 +00:00
Jeremy Cline
059f52d479 rabbitmq_cluster: Add client cert and key for federation 2019-03-20 17:54:14 +00:00
Jeremy Cline
a8c60a6d82 rabbitmq_cluster: work around ansible producing invalid json 
Using an ansible variable in the string causes it to produce a similar
string, except it uses single quotes and that kills the json parser,
too.
 2019-03-20 16:55:11 +00:00
Stephen Smoogen
11f0cf7717 [nfs/server] add an empty exports file 2019-03-20 16:40:58 +00:00
Jeremy Cline
e06b46df9f rabbitmq_cluster: write the param value as a json string 
If a YAML dictionary is used, this gets turned into a string before
being handed to the rabbitmq_parameter module. The problem is it uses
single quotes instead of double quotes, so when the module attempts to
JSON-deserialize it, it explodes.
 2019-03-20 16:29:56 +00:00
Stephen Smoogen
d89dfcb93b [fix nfs-servers playbook] need to use roles 2019-03-20 16:13:46 +00:00
Stephen Smoogen
9fb9018c25 [nfs] add hostvars for drives45-01 2019-03-20 15:33:44 +00:00
Stephen Smoogen
e885219167 [multiple updates] 
Add in drives45 to hand over to Kevin for 45drives evaluation.
Remove ipv6 from inventory so system can be cleaned out. This box should never have been on the frozen category.

No idea why that file got renamed.
 2019-03-20 15:33:44 +00:00
Clement Verna
008b1a1231 Greenwave: reduce gunicorn timeout. 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-03-20 13:29:48 +01:00
Clement Verna
fd32dc2b15 FedBadges: use only 2 threads since 3 threads are taking too much memory 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-03-20 08:13:42 +01:00
Jeremy Cline
f1e1891027 *on-confirm* instead of confirm 2019-03-19 22:14:48 +00:00
Kevin Fenzi
b234d6275d releng-compose: Just have compose-x86-01 get the default group values for mem and cpus 
In recent months/years, pungi has started to use more and more memory when gathering package sets.
So, give it enough memory to avoid the OOM killer killing composes.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-03-19 21:52:39 +00:00
Jeremy Cline
897cda60e0 Try writing json as a yaml dictionary to make rabbitmq module happy 2019-03-19 21:44:34 +00:00
Jeremy Cline
153716f9a1 I accidentally the whole url 
The arguments need to be url encoded (/ -> %2F), but the protocol scheme
and first / shouldn't be.
 2019-03-19 20:20:01 +00:00
Jeremy Cline
f2884d625a Mark all vhost config tasks as run_once 2019-03-19 20:03:17 +00:00
Stephen Smoogen
11e2ff87a1 [proxies/robots.txt] Make it so that we force the proxy to use a local robots.txt 
The various openshift tools get hit by various crawlers and do not send
a robots.txt. This seems to be due to the balancer code used to send
back to the nodes. This forces the proxy robots.txt to be honored
always.
 2019-03-19 19:51:11 +00:00
Tim Flink
05892b26a8 proxy-stg: adding reversproxy for taskmaster websockets 2019-03-19 18:24:04 +00:00
Jeremy Cline
a83bcf38ac Properly escape the backslashes in the rabbit permissions regex 2019-03-19 17:57:38 +00:00
Tim Flink
0f75e2680e proxy-stg: Changing taskotron-stg proxy settings to new-style 
Websockets aren't working for our newly deployed taskotron-stg
master, changing to new style configuration to add that support.
 2019-03-19 17:36:20 +00:00
Rick Elrod
fe044fc717 [fedora-web/iot] make it live 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-03-19 16:59:54 +00:00
Rick Elrod
b8eea5a90b [communityblog] make ansible keep the communityblog theme up to date, since it does not seem to be packaged 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-03-19 16:03:18 +00:00
Clement Verna
604284ea4c Badges: Give fedbadges consumer 3 threads. 
Some of fedbages query to datanommer are really slow, that makes
the consumer enable to catch up with all the messages on the bus
Giving it 2 more threads improves the situation.

Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-03-19 11:39:21 +01:00
Jakub Kadlčík
ab9b427ba9 Use https on copr-dev 2019-03-18 11:13:41 +01:00
Kamil Páral
15a359ad8a taskotron-buildmaster: add comments to httpd config 
Because this is a tricky issue that cost us a lot of time to figure out.
 2019-03-18 11:11:52 +01:00