infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 7 Projects Releases Packages Wiki Activity Actions
43004 commits 9 branches 0 tags 110 MiB
Commit graph

43004 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
9dc7f4adcf noc01.rdu3: someday I will get logic right 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-22 10:35:33 -07:00
Kevin Fenzi
2259edea1a noc01.rdu3: adjust openvpn logic 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-22 10:30:43 -07:00
Jakub Kadlcik
8e1dc2c39e copr-be-dev: back to previous builder images, these are broken 2025-05-22 19:27:39 +02:00
Kevin Fenzi
d52d701cdf noc01.rdu3: add a dhcp config 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-22 10:24:50 -07:00
Kevin Fenzi
81f9f0d09c noc01.rdu3: add a rdu3 noc server 
No nagios for now, but dhcp and tftp and such.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-22 10:01:27 -07:00
Jakub Kadlcik
fdfb14225b copr-be-dev: bootc images for everything except for AWS 2025-05-22 18:16:05 +02:00
David Kirwan
1fa439fe5e
forgejo: updated image tag 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-05-22 15:33:52 +01:00
Michal Konecny
c4948ba32e [ipa] Add kra role to replicas 
As we were finally able to resolve the issue of replica installation
failing when KRA role is enabled. We can now enable it by default in
playbook.

See https://pagure.io/fedora-infrastructure/issue/12158 for more info.
 2025-05-22 15:11:06 +02:00
Michal Konecny
dd230cc1ef [ipsilon] Add toddlers OIDC entry 
Toddlers will not be a standard OIDC client, but we need it to preserve
the toddlers tokens in db-fas01.stg.
 2025-05-22 13:26:00 +02:00
Michal Konecny
326fa3604c [poddlers] Add distgit OIDC token 
This will allow releng-bot to push changes to dist git.

See https://pagure.io/fedora-infra/toddlers/issue/151 for more context.
 2025-05-22 09:33:36 +02:00
Samyak Jain
abcf1c8e76 robosignatory: enable signing on f43-python 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-05-22 05:05:52 +00:00
Paul Whalen
23653404db IoT: Move stable cronjob to F42 
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
 2025-05-22 00:34:51 +00:00
Kevin Fenzi
e672ce4994 bastion01.rdu3: add bastion-rdu3 hostname 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 17:31:44 -07:00
Kevin Fenzi
41345489c8 rdu3: fix duplicate dns serarch copy pasta 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 17:17:07 -07:00
Kevin Fenzi
17fb0e324c rdu3: no openvpn server checks in rdu3 yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 16:52:33 -07:00
Kevin Fenzi
36417bc22a nagios_client: make sure the nrpe user is local 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 16:40:55 -07:00
Kevin Fenzi
ebe5fa82a1 rdu3: fix a logic conditional thinko 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 16:28:25 -07:00
Kevin Fenzi
f68bcf2394 rdu3: fix up some dns search for rdu3 hosts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 16:13:56 -07:00
Kevin Fenzi
835a7156c1 rdu3: fix ps1 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 16:05:48 -07:00
Kevin Fenzi
0442382c59 dns: no vpn wanted in rdu3 dns either 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 15:47:23 -07:00
Kevin Fenzi
b9518cd6cd rdu3: set root prompt for rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 15:40:38 -07:00
Kevin Fenzi
e4e4e305de rdu3: add some hosts files until dns is sorted 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 15:37:17 -07:00
Kevin Fenzi
e26e1fb78e ns01.rdu3: commit host vars too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 14:48:58 -07:00
Kevin Fenzi
10ffa6fb8c ns01.rdu3: add dns server in rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 14:33:04 -07:00
Kevin Fenzi
7e43e19f39 vmhost-x86-rdu3: Could be this is default and we do not need to set it 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 14:26:08 -07:00
Kevin Fenzi
be2308edb0 vmhost-x86-rdu3: pesky stray tab 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 14:22:25 -07:00
Kevin Fenzi
ecc4ca4326 vmhost-x86-rdu3: another try for stp false 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 14:20:50 -07:00
Kevin Fenzi
90db91405d vmhost-x86-rdu3: drop state on bond and add a attempt to make sure stp is disabled on bridge 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 14:16:05 -07:00
Kevin Fenzi
d6dabed7b8 vmhost-x86-rdu3: fix typos 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 14:08:07 -07:00
Kevin Fenzi
258cb105b9 vmhost-x86-01.rdu3: fix indent problem 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 14:05:27 -07:00
Kevin Fenzi
0c46a6dcc3 vmhost-x86-01.rdu3: add initial virthost 
This is a first stab at vmhost-x86-01.rdu3.
It's already been installed with our kickstart.
The network config is just my best guess/first stab.

It's 2 nic's as bond devices, with a bridge on top.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 14:02:33 -07:00
Kevin Fenzi
8146e51119 chrony: fix typo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 13:28:19 -07:00
Kevin Fenzi
23fd844f09 bastion01.rdu3: add to groups 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 12:40:41 -07:00
Kevin Fenzi
f8eacdb62b bastion01.rdu3: A wild bastion01.rdu3 appears, lets try and configure it. 
This should setup a already installed bastion01.rdu3 vm so we can use it
to get to other rdu3 machines.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 12:37:13 -07:00
Kevin Fenzi
26ab61697b batcave: allow rdu3 external network on batcave01 in iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 12:37:13 -07:00
David Kirwan
bb54b1ded1
forgejo: latest image 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-05-21 15:36:08 +01:00
David Kirwan
f525dae38b
forgejo: fix image sha 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-05-21 14:09:31 +01:00
David Kirwan
49b2342dd0
forgejo: remove tag, replace with sha, restore rootless boolean 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-05-21 14:04:38 +01:00
David Kirwan
fd07c8d2e0
forgejo: remove rootless config which affects image tag 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-05-21 13:52:40 +01:00
David Kirwan
bbd4b18f6b
forgejo: reduce main postgres db to 5gb 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-05-21 13:40:33 +01:00
David Kirwan
da3c4aca2e
forgejo: update the shared storage to 100gb 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-05-21 13:38:12 +01:00
David Kirwan
00cc33fb3e
forgejo: update the image to the f42 base v11 + main commits 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-05-21 13:13:33 +01:00
Adam Piasecki
a73559de8d coreos-ostree-importer: remove strategy.resources, add: image, strategy 
This is a follow up of the migration to Deployment. Based on learnings
from a successful coreos-ostree-pruner migration, this fixes the
`no image` and `unknown field \"spec.strategy.resources\` errors
presented on batcave.
 2025-05-21 12:15:15 +01:00
Adam Piasecki
27c717465b coreos-koji-tagger: add specific image to spec.containers.image 
This is a follow up of the migration to Deployment. Based on learnings
from a succesfull coreos-cincinnati modification, this fixes the
`no image` error displayed currently on batcave.
 2025-05-21 10:49:00 +01:00
Adam Piasecki
c35111c87c coreos-cincinnati: revert image related changes in template 
As the previous change took no effect and the error while executing
`sudo rbac-playbook -l os_control_stg openshift-apps/coreos-cincinnati.yml`
continues to return an error as below, let's try another aproach.
```
"stderr": "The Deployment \"coreos-cincinnati\" is invalid: \n*
spec.template.spec.containers[0].image: Required value
```

Here adding a specific F42 image
 2025-05-21 09:47:51 +01:00
Adam Piasecki
fd9fd09419 coreos-cincinnati: remove image value from spec.containers 
During recent migration to deployment, the oc command:
`sudo rbac-playbook -l os_control_stg openshift-apps/coreos-cincinnati.yml`
returns an error:

```
"stderr": "The Deployment \"coreos-cincinnati\" is invalid: \n*
spec.template.spec.containers[0].image: Required value
```

This PR aims to fix the above.
 2025-05-20 18:43:19 +00:00
Kevin Fenzi
07837f83a7 sigul / server: modernize playbook 
This had a bunch of old rhel7 stuff in it, we are on 9 now and using
gnupg2.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-20 11:29:39 -07:00
Adam Piasecki
43baed5a53 coreos-koji-tagger: fix errors presented by oc command on stg 
When running
`sudo rbac-playbook -l os_control_stg openshift-apps/coreos-koji-tagger.yml`
An error is present as a result of not complete migration to deployment:

strict decoding error: unknown field \"spec.strategy.resources\"

This aims to fix the above.
 2025-05-20 18:08:29 +00:00
Adam Piasecki
e43c256356 coreos-cincinnati: move templates from yml to j2 
As we are now moving templates to j2, this completes the process
for the coreos-cincinnati.
 2025-05-20 16:33:54 +00:00
Adam Piasecki
964fba9f79 coreos-cincinnati: fix errors presented by oc command on stg 
When running
`sudo rbac-playbook -l os_control_stg openshift-apps/coreos-cincinnati.yml`
I came across the below errors due to recent migration to deployment and j2.

unknown field :\"spec.strategy
.activeDeadlineSeconds /.recreateParams /.resources /.rollingParams /.name

This should fix all of the above.
 2025-05-20 16:33:54 +00:00