Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
33515 commits 9 branches 0 tags 111 MiB
Commit graph

33515 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pavel Raiskup
251f351192 copr-be: birthday 2020-11-13 08:21:40 +01:00
Pavel Raiskup
a563266e0d copr: services_disabled=true temporarily 
... till we have flipped the elastic IPs to new instances.
 2020-11-13 08:02:58 +01:00
Pavel Raiskup
51f122621f Revert "copr: temporarily drop postfix_group" 
This reverts commit b087f9ea72.
 2020-11-13 07:33:00 +01:00
Stephen Smoogen
559c14b373 splitting into multiple inventory files causes problems when you need to have a host in multiple groups for nagios and other items. Need to find a way to make this automatic 2020-11-12 16:39:35 -05:00
Francois Andrieu
d6678d05fc docstranslation: drop ssh key generation 2020-11-12 21:29:57 +00:00
Francois Andrieu
2e8857c681 docstranslation: git ssh key moved to /srv/private on batcave 2020-11-12 21:29:57 +00:00
Kevin Fenzi
22ef05d3f2 proxies: stg.release-monitoring.org make this it's own site 
Normally we can just define the site once with it's prod name and use
that in stg with an alias. This works because we have a wildcard ssl
cert for *.fedoraproject.org. So, stg.fedoraproject.org and
fedoraproject.org both work fine. We can't do this for
release-monitoring tho as we use letsencrypt certs and don't have a
wildcard. We could expand out letsencrypt role to get altnames, but just
making these seperate sites should fix it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-12 11:13:23 -08:00
Kevin Fenzi
177465221c proxies / websites: we want release-monitoring.org in stg too. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-12 10:21:24 -08:00
Adrian Reber
87d4e49174
mirrormanager: updated mirrorlist-server to 3.0.2 
The testing of generate-mirrorlist-cache showed that private mirrors
where not part of the mirrorlist cache any more. Only private Internet2
mirrors where included in the cache.

This is fixed upstream in 3.0.2.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-11-12 08:34:32 +01:00
Kevin Fenzi
030a0ddc40 proxies / websites: revert disabling some sites in stg now that it's back 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-11 19:36:32 -08:00
Kevin Fenzi
385acb276e proxies /redirects: don't use env here 
The site is the prod name, with an alias for the stg host.
No need to try and install into a stg site when it doesn't exist.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-11 18:30:34 -08:00
Kevin Fenzi
bbfc222d25 proxies / websites: re-enable some hosts in stg 
we disabled these when we didn't have stg in iad2 yet.
Now that we do, we can re-add them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-11 16:34:00 -08:00
Kevin Fenzi
f7bf329dad copr-be-dev-temp: don't check nagios on this instance either. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-11 10:05:18 -08:00
Kevin Fenzi
e901377054 mailman02: we never ended up using mailman02, lets retire it. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-11 09:09:43 -08:00
Pavel Raiskup
589cd1a71f copr-keygen-dev: disable birthday 2020-11-11 16:06:04 +01:00
Pavel Raiskup
de562df21d copr-be-dev: drop birthday 2020-11-11 15:32:17 +01:00
Pavel Raiskup
48ad5a9e23 copr-be: install python3-boto 2020-11-11 15:28:34 +01:00
Pavel Raiskup
c3b99bf900 copr-be-dev: birthday again 2020-11-11 15:18:15 +01:00
Pavel Raiskup
7065fcd5d0 Revert "copr-be-dev: disable letsencrypt temporarily" 
This reverts commit df6a0ecf7f.
 2020-11-11 15:17:08 +01:00
Pavel Raiskup
df6a0ecf7f copr-be-dev: disable letsencrypt temporarily 
Before we can move the elastic IP to the new VM.
 2020-11-11 14:57:46 +01:00
Jakub Kadlcik
5f38224ccf Revert "copr: we are going to provision copr-distgit-dev and copr-fe-dev from scratch" 
We don't need the `birthday` defined anymore.
 2020-11-11 14:48:03 +01:00
Jakub Kadlcik
2c66bb8868 reprovisioning copr-distgit-dev from a new instance 2020-11-11 14:12:15 +01:00
Jakub Kadlcik
e043b62c5a reprovisioning copr-fe-dev from a new instance 2020-11-11 14:12:15 +01:00
Pavel Raiskup
04343eee01 copr/base: install cronie-anacrontab 
... right before we try to configure it.
 2020-11-11 13:53:02 +01:00
Jakub Kadlcik
c4fdc906e2 copr: we are going to provision copr-distgit-dev and copr-fe-dev from scratch 2020-11-11 13:29:55 +01:00
Pavel Raiskup
231b34885a copr-be-dev: disable birthday 
Playbook needs fixes, but the initial steps succeeded.
 2020-11-11 13:14:06 +01:00
Pavel Raiskup
4ccc0c053e copr: don't use IPs in inventory 
But to avoid the long outage on copr-backend (all the hosted
repositories), provide another alternative DNS entry that will be used
during transition period when running the playbook.
 2020-11-11 12:59:06 +01:00
Mark O'Brien
75f42908a1 osbs: create network file for eth0 stage 2020-11-11 11:43:41 +00:00
Mark O'Brien
e7bbf8ff29 osbs: update python package to py3 stage 2020-11-11 11:34:38 +00:00
Pavel Raiskup
f351fe2d32 aws_cloud: pre-setup hostname early 
To allow the initial postfix start:
Nov 11 10:38:33 107.20.83.139 postfix/sendmail[26023]: warning: valid_hostname: numeric hostname: 107.20.83.139
Nov 11 10:38:33 107.20.83.139 postfix/sendmail[26023]: fatal: unable to use my own hostname
Nov 11 10:38:33 107.20.83.139 postfix[26025]: warning: valid_hostname: numeric hostname: 107.20.83.139
Nov 11 10:38:33 107.20.83.139 postfix[26025]: fatal: unable to use my own hostname
 2020-11-11 11:45:55 +01:00
Pavel Raiskup
b087f9ea72 copr: temporarily drop postfix_group 
As the initial playbook run fails with that.
 2020-11-11 11:36:03 +01:00
Pavel Raiskup
a1df2a519c copr-be-dev, copr-keygen-dev: define birthday on IPs 2020-11-11 11:19:40 +01:00
Pavel Raiskup
04aa62f691 copr: comment-out persistent_clout.yml 
At this moment we don't have any OpenStack for that, and the recursive
include of basessh role breaks the playbook execution.
 2020-11-11 11:17:07 +01:00
siddharthvipul
8e9de94b15
osbs: decrease lv size for stg vms 
Signed-off-by: siddharthvipul <siddharthvipul1@gmail.com>
 2020-11-11 15:11:37 +05:30
Mark O'Brien
924aef6f79 osbs: dont install fas in staging 2020-11-11 09:16:49 +00:00
Pavel Raiskup
2013b14099 copr-be-dev, copr-keygen-dev: allow initial run against IPs 2020-11-11 09:42:06 +01:00
Pavel Raiskup
f6fe521591 copr: enable @copr/copr on devel instances 2020-11-11 09:32:06 +01:00
Pavel Raiskup
ff896361d8 copr-be-dev, copr-keygen-dev: new VMs with temp IPs 2020-11-11 09:22:09 +01:00
Adrian Reber
3509e0c04f mirrormanager: fix up typo in directory name 
Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-11-11 08:15:14 +01:00
Adrian Reber
8a89e5977b mirrormanager: install generate-mirrorlist-cache 
This installs the new rust-based generate-mirrorlist-cache tool which
can create the mirrorlist cache files much faster.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-11-11 06:31:47 +00:00
Will Woods
3dadedeb26 web-data-analysis: fix countme-update 
So it turns out that pip3 installs scripts to /usr/local/bin and cron
jobs don't have /usr/local/bin in the path.

This commit adds /usr/local/bin to PATH in countme-update.sh.

For Maximum Correctness we should probably get pip to tell us where it
installed countme-update-{rawdb,totals}.sh but this'll work just fine
as long as pip keeps installing scripts to /usr/bin or /usr/local/bin.

Signed-off-by: Will Woods <wwoods@redhat.com>
 2020-11-10 17:57:56 -05:00
Kevin Fenzi
5ac17bc51a varnish: adjust for f33 changes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-10 12:20:50 -08:00
lrossett
806b6bfbdc adding gitlab-centos queue and user 2020-11-10 17:26:05 +00:00
Pierre-Yves Chibon
998c84baaa dist-git: add missing type 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 17:26:26 +01:00
Pierre-Yves Chibon
872090ee54 dist-git: some more selinux policy changes 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 17:24:55 +01:00
Pierre-Yves Chibon
f4cb375000 selinux/module: Remove debugging statement now that things work 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:56:13 +01:00
Pierre-Yves Chibon
d503f374db distgit: some more selinux policy update 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:51:51 +01:00
Pierre-Yves Chibon
3351fbd3b4 drop run_once when install selinux policies 
Otherwise the policy doesn't get installed everywhere...

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:48:42 +01:00
Pierre-Yves Chibon
74890814a1 distgit: adjust the selinux policy a little more 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:48:30 +01:00
Pierre-Yves Chibon
1e27282806 selinux: Add some debugging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:37:16 +01:00