Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
41563 commits 9 branches 0 tags 111 MiB
Commit graph

41563 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jeremy Cline
d89d0d22cf
cloud-image-uploader: replicate production images beyond eastus 
The image needs to be replicated to a region to be usable in that
region. It's likely we'll want to expand this list and potentially add
logic to the uploader to not replicate nightly images until they are
promoted to the latest image in the stream so I've templated it it
in the configuration.
 2024-04-16 12:20:04 -04:00
Jeremy Cline
1072599f35
cloud-image-uploader: change prod storage account name 
Storage account names need to be globally unique. It seems fedoraimages
was already taken, so I've adjusted it to one that's not taken. It's
only used to import the images so the name doesn't really matter.
 2024-04-16 12:20:02 -04:00
David Kirwan
68e1ca53a7
zabbix: put the zabbix postgresql config under sourcecontrol 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2024-04-16 11:12:04 +01:00
Kevin Fenzi
40361731f1 vmhost-x86-08: use correct mac address 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-15 16:11:22 -07:00
Kevin Fenzi
ca11cec799 vmhost-x86-08: new machine 
This machine has been replaced and so we need to update mac address.
This is technically breaking the freeze, but this machine isn't frozen
and shouldn't affect anything else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-15 15:56:28 -07:00
Siteshwar Vashisht
6eb3f65b87 openscanhub: remove guards for deploying to production 
This is needed for testing the production deployment.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-15 19:53:30 +02:00
Siteshwar Vashisht
afc268d434 openscanhub: export env variable 
This should be used to determine which Copr repository (staging or
production) to use when running a playbook.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-15 18:40:17 +02:00
Siteshwar Vashisht
3bb1867704 openscanhub: try to fix vm-provisioning-configmap 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-15 17:40:16 +02:00
Siteshwar Vashisht
5b25f29396 openscanhub: use fedoraproject.org e-mail domain 
Related: https://github.com/openscanhub/openscanhub/issues/253

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-15 15:29:46 +00:00
Siteshwar Vashisht
9825095021 openscanhub: add configmap for vm-provisioning config 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-15 15:28:26 +00:00
Siteshwar Vashisht
18a0e58530 openscanhub: add notification e-mail footer 
Related: https://github.com/openscanhub/openscanhub/pull/251

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-15 15:25:28 +00:00
David Kirwan
f5b904526a
Move zabbix01 prod to vmhost-x86-05 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2024-04-15 14:00:57 +01:00
František Zatloukal
3310ca5783 BlockerBugs: move activeDeadlineSeconds to the jobTemplate 2024-04-15 11:23:23 +02:00
František Zatloukal
8cd673e318 BlockerBugs: Use volumeMounts for secrets 2024-04-15 11:16:02 +02:00
František Zatloukal
a6495f1eae BlockerBugs: Rmove duplicated startingDeadlineSeconds in CronJob 2024-04-15 11:07:08 +02:00
Kevin Fenzi
0d40c3e1bd koji: 56gb memory for prod hubs 
Sometime in the past we manually bumped memory on these, but when I
reinstalled koji02 it got the lower limit set here in ansible.
So, move both of them to 56gb and hopefully fix koji02 falling over
under load.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-14 13:17:59 -07:00
Kevin Fenzi
bd16bf2954 virthost-cc-rdu01: adjust dns search and max procs 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-11 16:59:02 -07:00
Kevin Fenzi
e6a7605aa0 virthost-cc-rdu01: new machine 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-11 16:41:43 -07:00
Siteshwar Vashisht
5be2b62fcb openscanhub: restore labels for fedora-osh-hub 
... container.

This makes the view look better in the web ui.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-11 10:24:07 +00:00
Aurélien Bompard
a47a04f53d
Badges: the fedora-messaging branch has been merged 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-11 12:07:05 +02:00
Michal Konecny
64c6ee288d [mailman3] Use production FAS for staging mailman deployment 
Previous staging deployment used production FAS instance for authentication and
it seems to make new accounts when pointing to staging FAS. Let's redirect that
and see if the accounts will be correctly loaded.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-11 09:54:29 +02:00
Michal Konecny
4da350c241 [mailman3] Don't proxy /apache-status request 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-11 09:54:29 +02:00
Michal Konecny
ff4ad03fd0 [mailman3] Add hyperkitty tag to all hyperkitty tasks 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-11 09:54:29 +02:00
Siteshwar Vashisht
7a65d7a8ef openscanhub: rename ocp repository 
... to `fedora-osh-hub` to keep the names consistent with the container
names.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-10 22:01:18 +00:00
Samyak Jain
5cbb912267 Fix torrent-generator to be compatible with 3.9 and rhel changes 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-04-10 21:58:13 +00:00
Ryan Lerch
b3b3866dbf openshift: add ryanlerch as an admin 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2024-04-11 07:30:50 +10:00
Jeremy Cline
ea9efa2ffc
cloud-image-uploader: fix the final queue reference 
I forgot queues are declared separately from the bindings.
 2024-04-10 17:16:31 -04:00
Jeremy Cline
e086b2fe93
cloud-image-uploader: azure gallery names are unique per subscription 
I assumed gallery names were unique per resource group, but this is not
the case. They're unique per subscription, oddly, so we need to use a
different name in staging.
 2024-04-10 17:16:26 -04:00
Jeremy Cline
6d9f9ecc68
cloud-image-uploader: change rabbitmq name to match CN in certificate 
The client certificate contains "cloud-image-uploader.stg" for the CN,
so our RabbitMQ name needs to match. Additionally, the queue name needs
to start with the username, so we need to adjust that as well.
 2024-04-10 13:32:01 -04:00
Francois Andrieu
3f4c4ea19f
datanommer: set memory limit to 1Gi 
For an unknown reason on staging, the datanommer pod overloads the node memory and
takes down all the running workload with it.
This set a memory limit to 1Gi (pod takes ~200Mi on prod) to avoid
crashing the compute node (and other workload with it) when that happens.
 2024-04-10 18:34:29 +02:00
Francois Andrieu
ce0f875245
cloud-image-uploader: fix deployment trigger & remove rollout 2024-04-10 18:23:41 +02:00
Jeremy Cline
76285355d6
cloud-image-uploader: fix up queue name 
The queue name needs to match the queue name we defined in the playbook
that creates the user and queue.
 2024-04-10 11:55:48 -04:00
Jeremy Cline
07be198d0a
cloud-image-uploader fix TLS settings for fedora-messaging 
These need to match the "key" used in the playbook that creates the
secret files.
 2024-04-10 11:03:28 -04:00
Pavel Raiskup
c1d6f853bf copr-fe: request powerful builders for jordalgo/fedora-6.8-sched_ext 2024-04-10 16:12:37 +02:00
Michal Konecny
7f35465698 [mailman3] Use the correct variable 
hypperkity vs hyperkitty - oops

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-10 15:58:17 +02:00
Michal Konecny
a8c375429d [mailman3] Use the correct name of the file for hyperkitty config 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-10 15:49:04 +02:00
Siteshwar Vashisht
014e96cf36 openscanhub: use different container images 
... in staging and production environments.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-10 13:44:58 +00:00
Michal Konecny
f961e40c3d [mailman3] Deploy hyperkitty.cfg as template 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-10 15:11:58 +02:00
Michal Konecny
5a3af01100 [mailman3] Add correct authentication method 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-10 15:11:58 +02:00
Siteshwar Vashisht
78b7c8512e openscanhub: use NFS volume for redis data 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-10 13:29:34 +02:00
Aurélien Bompard
b7fa6e5bd1
Mailman3: reorder of the installed apps to fix templates loading 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-10 10:47:59 +02:00
Kevin Fenzi
59c2360268 cloud-image-uploader: pull image from local openshift registry 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-09 16:37:19 -07:00
Kevin Fenzi
8f16ad59fd cloud-image-uploader: Add matchLabels attribute 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-09 16:25:58 -07:00
Kevin Fenzi
2120b3bc1b cloud-image-uploader: deployment is a template 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-09 16:21:13 -07:00
Jeremy Cline
30b24d38ef
cloud-image-uploader: use stringData instead of data 
I mis-read the docs and data needs to be base64 encoded, stringData will
handle it for you.
 2024-04-09 19:13:57 -04:00
Jeremy Cline
cf9b6065db cloud-image-uploader: swap staging and prod blocks in config 
These were all backwards, setting prod settings in stage and stage
settings in prod.
 2024-04-09 23:01:08 +00:00
Jeremy Cline
e564d0c2da Add a role and playbook for the cloud-image-uploader 
This app is an AQMP client that uploads VM images to public clouds. It
currently supports Azure images.

Ref: https://pagure.io/fedora-infrastructure/issue/11860
 2024-04-09 23:01:08 +00:00
Siteshwar Vashisht
cac47c1db7 openscanhub: remove openscanhub prefix from 
... `/var/lib/osh` pvc used by `osh-hub`.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-09 16:28:51 +02:00
Siteshwar Vashisht
911b55cfbc openscanhub: fix more livenessProbe configs 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-09 13:02:58 +02:00
Siteshwar Vashisht
57543ea25d openscanhub: move livenessProbe under containers 
... field.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-04-09 09:33:22 +02:00