Commit graph

40871 commits

Author SHA1 Message Date
Kevin Fenzi
9c125b16ea Add aws-pyai group for ticket 11882
Note that this needs the group created in ipa first and the aws iam
policy setup.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-18 21:23:57 +00:00
Kevin Fenzi
3b2853b5d4 nagios / staging: fix staging vmhost mgmt
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-18 14:20:03 -07:00
Kevin Fenzi
838338e312 IAD2 datacenter changes
There were folks on site this week to rack new machines/pull old
machines, and unfortunately we don't really have much control over when
this happens based on our freeze, so I am just pushing this as part of
the 'do whats required to handle an outage'.

We did the following changes:

- removed old autosign01 (was out of service as we moved to autosign02 a
  while ago)

- removed vmhost-x86-08/09. We also want to migrate off 07 soon and
  remove it next visit. A new vmhost-x86-08 is installed to replace
  these 3.

- removed vmhost-x86-03/04.stg. Added new vmhost-x86-01.stg to replace
  them both.

- added a new kernel02 to replace kernel01 the next onsite trip.
  This machine still needs switch ports configured.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-18 12:53:13 -07:00
Aurélien Bompard
1b164fb0ba
Badges: identify staging users with their staging email address
This will ensure that people don't "accidentally" export their staging
badges to their official backpack.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-04-18 11:10:22 +02:00
Kevin Fenzi
744ba3d779 staging: move some vms around to retire vmhost-x86-03/04
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-17 10:03:32 -07:00
Jeremy Cline
79935add66
cloud-image-uploader: Fix routing key for AMQP binding
env renders to "production" which is not what messages are published
under ("prod"). Match what other apps are doing and just use a wildcard
so it'll match anything. Since prod and stage are separate brokers this
is fine.
2024-04-17 11:10:46 -04:00
Aurélien Bompard
8541e8980b
Badges: have fedbadges build from the right branch and enable github webhook
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-04-17 08:51:36 +02:00
Jeremy Cline
e32fb64366
cloud-image-uploader: enable production deployment 2024-04-16 12:20:35 -04:00
Jeremy Cline
d89d0d22cf
cloud-image-uploader: replicate production images beyond eastus
The image needs to be replicated to a region to be usable in that
region. It's likely we'll want to expand this list and potentially add
logic to the uploader to not replicate nightly images until they are
promoted to the latest image in the stream so I've templated it it
in the configuration.
2024-04-16 12:20:04 -04:00
Jeremy Cline
1072599f35
cloud-image-uploader: change prod storage account name
Storage account names need to be globally unique. It seems fedoraimages
was already taken, so I've adjusted it to one that's not taken. It's
only used to import the images so the name doesn't really matter.
2024-04-16 12:20:02 -04:00
68e1ca53a7
zabbix: put the zabbix postgresql config under sourcecontrol
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-04-16 11:12:04 +01:00
Kevin Fenzi
40361731f1 vmhost-x86-08: use correct mac address
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-15 16:11:22 -07:00
Kevin Fenzi
ca11cec799 vmhost-x86-08: new machine
This machine has been replaced and so we need to update mac address.
This is technically breaking the freeze, but this machine isn't frozen
and shouldn't affect anything else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-15 15:56:28 -07:00
Siteshwar Vashisht
6eb3f65b87 openscanhub: remove guards for deploying to production
This is needed for testing the production deployment.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-15 19:53:30 +02:00
Siteshwar Vashisht
afc268d434 openscanhub: export env variable
This should be used to determine which Copr repository (staging or
production) to use when running a playbook.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-15 18:40:17 +02:00
Siteshwar Vashisht
3bb1867704 openscanhub: try to fix vm-provisioning-configmap
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-15 17:40:16 +02:00
Siteshwar Vashisht
5b25f29396 openscanhub: use fedoraproject.org e-mail domain
Related: https://github.com/openscanhub/openscanhub/issues/253

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-15 15:29:46 +00:00
Siteshwar Vashisht
9825095021 openscanhub: add configmap for vm-provisioning config
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-15 15:28:26 +00:00
Siteshwar Vashisht
18a0e58530 openscanhub: add notification e-mail footer
Related: https://github.com/openscanhub/openscanhub/pull/251

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-15 15:25:28 +00:00
f5b904526a
Move zabbix01 prod to vmhost-x86-05
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-04-15 14:00:57 +01:00
František Zatloukal
3310ca5783 BlockerBugs: move activeDeadlineSeconds to the jobTemplate 2024-04-15 11:23:23 +02:00
František Zatloukal
8cd673e318 BlockerBugs: Use volumeMounts for secrets 2024-04-15 11:16:02 +02:00
František Zatloukal
a6495f1eae BlockerBugs: Rmove duplicated startingDeadlineSeconds in CronJob 2024-04-15 11:07:08 +02:00
Kevin Fenzi
0d40c3e1bd koji: 56gb memory for prod hubs
Sometime in the past we manually bumped memory on these, but when I
reinstalled koji02 it got the lower limit set here in ansible.
So, move both of them to 56gb and hopefully fix koji02 falling over
under load.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-14 13:17:59 -07:00
Kevin Fenzi
bd16bf2954 virthost-cc-rdu01: adjust dns search and max procs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-11 16:59:02 -07:00
Kevin Fenzi
e6a7605aa0 virthost-cc-rdu01: new machine
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-11 16:41:43 -07:00
Siteshwar Vashisht
5be2b62fcb openscanhub: restore labels for fedora-osh-hub
... container.

This makes the view look better in the web ui.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-11 10:24:07 +00:00
Aurélien Bompard
a47a04f53d
Badges: the fedora-messaging branch has been merged
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-04-11 12:07:05 +02:00
Michal Konecny
64c6ee288d [mailman3] Use production FAS for staging mailman deployment
Previous staging deployment used production FAS instance for authentication and
it seems to make new accounts when pointing to staging FAS. Let's redirect that
and see if the accounts will be correctly loaded.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-11 09:54:29 +02:00
Michal Konecny
4da350c241 [mailman3] Don't proxy /apache-status request
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-11 09:54:29 +02:00
Michal Konecny
ff4ad03fd0 [mailman3] Add hyperkitty tag to all hyperkitty tasks
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-11 09:54:29 +02:00
Siteshwar Vashisht
7a65d7a8ef openscanhub: rename ocp repository
... to `fedora-osh-hub` to keep the names consistent with the container
names.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-10 22:01:18 +00:00
Samyak Jain
5cbb912267 Fix torrent-generator to be compatible with 3.9 and rhel changes
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-04-10 21:58:13 +00:00
b3b3866dbf openshift: add ryanlerch as an admin
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-04-11 07:30:50 +10:00
Jeremy Cline
ea9efa2ffc
cloud-image-uploader: fix the final queue reference
I forgot queues are declared separately from the bindings.
2024-04-10 17:16:31 -04:00
Jeremy Cline
e086b2fe93
cloud-image-uploader: azure gallery names are unique per subscription
I assumed gallery names were unique per resource group, but this is not
the case. They're unique per subscription, oddly, so we need to use a
different name in staging.
2024-04-10 17:16:26 -04:00
Jeremy Cline
6d9f9ecc68
cloud-image-uploader: change rabbitmq name to match CN in certificate
The client certificate contains "cloud-image-uploader.stg" for the CN,
so our RabbitMQ name needs to match. Additionally, the queue name needs
to start with the username, so we need to adjust that as well.
2024-04-10 13:32:01 -04:00
3f4c4ea19f
datanommer: set memory limit to 1Gi
For an unknown reason on staging, the datanommer pod overloads the node memory and
takes down all the running workload with it.
This set a memory limit to 1Gi (pod takes ~200Mi on prod) to avoid
crashing the compute node (and other workload with it) when that happens.
2024-04-10 18:34:29 +02:00
ce0f875245
cloud-image-uploader: fix deployment trigger & remove rollout 2024-04-10 18:23:41 +02:00
Jeremy Cline
76285355d6
cloud-image-uploader: fix up queue name
The queue name needs to match the queue name we defined in the playbook
that creates the user and queue.
2024-04-10 11:55:48 -04:00
Jeremy Cline
07be198d0a
cloud-image-uploader fix TLS settings for fedora-messaging
These need to match the "key" used in the playbook that creates the
secret files.
2024-04-10 11:03:28 -04:00
Pavel Raiskup
c1d6f853bf copr-fe: request powerful builders for jordalgo/fedora-6.8-sched_ext 2024-04-10 16:12:37 +02:00
Michal Konecny
7f35465698 [mailman3] Use the correct variable
hypperkity vs hyperkitty - oops

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-10 15:58:17 +02:00
Michal Konecny
a8c375429d [mailman3] Use the correct name of the file for hyperkitty config
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-10 15:49:04 +02:00
Siteshwar Vashisht
014e96cf36 openscanhub: use different container images
... in staging and production environments.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-10 13:44:58 +00:00
Michal Konecny
f961e40c3d [mailman3] Deploy hyperkitty.cfg as template
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-10 15:11:58 +02:00
Michal Konecny
5a3af01100 [mailman3] Add correct authentication method
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-04-10 15:11:58 +02:00
Siteshwar Vashisht
78b7c8512e openscanhub: use NFS volume for redis data
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-10 13:29:34 +02:00
Aurélien Bompard
b7fa6e5bd1
Mailman3: reorder of the installed apps to fix templates loading
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-04-10 10:47:59 +02:00
Kevin Fenzi
59c2360268 cloud-image-uploader: pull image from local openshift registry
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-09 16:37:19 -07:00