Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
39123 commits 9 branches 0 tags 111 MiB
Commit graph

8039 commits

Author SHA1 Message Date
Dusty Mabe
caf71e42b7
openshift-apps: remove build step from a few apps 
Everytime we run the playbook a new build kicks off, but
the app was just restarted. So what happens is we end up
with the app getting started twice (once when the
deploymentconfig gets updated and once when the build finishes).
This could be bad if the app has some startup steps that need
to not be interrupted.

Let's just manually trigger builds since we have the permissions
to do that in the web interface and via the CLI.
 2022-12-14 15:29:04 -05:00
Michal Konečný
222d670bf0 [mdapi] Add t0xic0der to appowners 
https://pagure.io/fedora-infrastructure/issue/11053

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-12-14 10:43:32 +01:00
Francois Andrieu
bd4c0ae2a1
websites: add missing deployment 2022-12-09 01:31:27 +01:00
Francois Andrieu
dc0dcb3db9 websites: s3 creds will be manually fetched 2022-12-09 00:14:44 +00:00
Francois Andrieu
5b5edd11eb websites: new main website deployment on stg 2022-12-09 00:14:44 +00:00
Kevin Fenzi
5a1289069c add communishift-fedora-review-service app 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-08 15:11:34 -08:00
Dusty Mabe
8d70d287ca
fedora-coreos-pipeline: add Adam Piasecki (c4rt0) drop some others 
The few we're dropping are either inactive or have moved on.
 2022-12-06 09:59:24 -05:00
Kevin Fenzi
147459b7b0 proxies_stg: disable zabbix for now as it is not installable 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-05 14:26:25 -08:00
Francois Andrieu
9000dd6def docs: remove docs-old 2022-12-05 22:08:18 +00:00
Pavel Raiskup
2667ac065f inventory/copr: drop unused hosts/vars 
The non-aws variant is not used for a looong time.  It just confuses
contributors now.  The stg is not used either.
 2022-12-04 15:02:29 +01:00
Kevin Fenzi
70530bf832 proxies: drop some old openshift3 things 
fas, openshift kerneltest and the old openshift console/api are no more.
Remove them now to fix up reverseproxy templates.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-03 20:47:00 -08:00
Pavel Raiskup
e21db9be97 copr-dist-git: typo in the restart_services.yml import 2022-11-29 17:54:00 +01:00
Kevin Fenzi
b1b0923af0 openshift 3.11: raise a glass! 
Our openshift 3.11 cluster(s) served us long and well.

Now we have everything finally moved to the openshift 4 clusters (fas2
was the last holdout). We can finally retire this. :)

🎉🥂

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-28 13:08:01 -08:00
Adam Williamson
6aa77e9423 openqa: try and fix on-disk encryption stuff 
Some of the openqa workers are encrypted and some aren't (this is a bit of a
mess that's partly a result of all the redeployments we did around
https://bugzilla.redhat.com/show_bug.cgi?id=2009585 ). We should only run
the nbde_client role on workers which are encrypted. Hopefully this gets that
right.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-11-25 16:10:11 -08:00
Jakub Kadlcik
44d826078b copr: move user creation back to copr/keygen role 2022-11-22 10:13:40 +01:00
Jakub Kadlcik
32b72e13dd copr: hmm, I guess those comments needs to be under tasks 2022-11-22 04:19:22 +01:00
Jakub Kadlcik
076777af9f copr: trying to fix a syntax error 2022-11-22 04:12:44 +01:00
Jakub Kadlcik
067f4e7998 copr: that was probably a wrong place to create users 2022-11-22 04:07:00 +01:00
Jakub Kadlcik
1d58562bfa copr: pre-create users and groups with specifics UIDs and GIDs 2022-11-22 04:00:10 +01:00
Aurélien Bompard
6871f63bdf
Register FMN with IPA 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-21 12:21:40 +01:00
Aurélien Bompard
a060cef52e
FMN: add a keytab for FASJSON access 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-21 10:56:42 +01:00
Aurélien Bompard
2b53f7bd03
Don't use the rabbit/queue role for vhost-specific queues 
There are naming constraints on those queues and we don't want them.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-21 10:40:10 +01:00
Aurélien Bompard
c8c4dfe72c
FMN: setup the fmn vhost in rabbitmq 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-21 10:30:43 +01:00
Aurélien Bompard
5afe93f783
FMN: create the RabbitMQ user 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-21 09:49:19 +01:00
Jakub Kadlcik
6959217b11 copr: explicitly import handlers 
See 36a976c5ef
 2022-11-19 18:31:08 +01:00
Jakub Kadlcik
6dd20a81b3 copr: apply nagios_client role before any copr roles for all servers 2022-11-19 14:55:21 +01:00
Jakub Kadlcik
d596f825c4 copr: apply nagios_client role before any copr roles 
Otherwise we fail in our Copr specific configuration

TASK [copr/base : install nrpe checks]
fatal: [copr-fe-dev.aws.fedoraproject.org]: FAILED! => {"changed": false, "checksum": "0795e7c4f6bbb7974ea9bf74a81ba7cde5177fdd", "msg": "Destination directory /etc/nrpe.d does not exist"}
 2022-11-19 14:47:51 +01:00
Timothée Ravier
95eaf4f2f1 playbooks/openshift-apps/silverblue: Minor whitespace fix 2022-11-19 02:23:49 +00:00
Timothée Ravier
0acae10155 playbooks/openshift-apps/silverblue: Add siosm & tpopela 
Give @siosm and @tpopela access to the Silverblue website deployment.
 2022-11-19 02:23:49 +00:00
Kevin Fenzi
310ddb9b36 greenwave: rabbitmq queue no longer needed 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-18 13:10:36 -08:00
Timothée Ravier
7da090f98e playbooks/openshift-apps/coreos-cincinnati: Fix yamllint warnings 2022-11-18 19:46:24 +00:00
Timothée Ravier
c41faa09b7 playbooks/openshift-apps/coreos-cincinnati: Add siosm to owners 
Add @siosm to appowners for the Fedora CoreOS cincinnati project.
 2022-11-18 19:46:24 +00:00
Jakub Kadlcik
36a976c5ef copr: explicitly import handlers for copr-frontend.yml 
Trying to solve this issue

    TASK [Mount swap]
    ERROR! The requested handler 'restart swap.swap' was not found in
    either the main handlers list nor in the listening handlers list
 2022-11-18 18:29:25 +01:00
Aurélien Bompard
b03a8c6a93
First attempt at a FMN deployment in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-18 11:40:00 +01:00
Pavel Raiskup
86a787200b storinator: drop copr-dist-git* volumes, enlarge copr-be 2022-11-11 14:16:29 +01:00
Kevin Fenzi
27e99835e5 Fix target of calendar redirect 
Turns out that target has to be a url or apache barfs on it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-02 17:33:22 -07:00
Seddik Alaoui Ismaili
8d703f7a53 redirect fedora calendar app 2022-11-02 19:40:58 +00:00
Mark O Brien
1b91f2410e remove bad communishift project name 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-11-02 12:40:02 +00:00
Mark O Brien
e5972671c8 add bad communishift project name for testing 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-11-02 11:33:03 +00:00
Francois Andrieu
fc75c07ef4
proxies: remove cloud-to-atomic redirect 2022-10-31 01:16:53 +01:00
Kevin Fenzi
1282c45a97 communishift: add mattdm project ( ticket 10935 ) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-10-27 15:27:31 -07:00
David Kirwan
0f2e641d48 CentOS-CI: Manual playbook for creation of CentOS CI keytabs 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2022-10-25 12:13:19 +01:00
František Zatloukal
0d170a73de oraculum: Flower: try without rewrite-target 2022-10-06 16:17:16 +02:00
František Zatloukal
d928771ee4 oraculum: Flower: try different rewrite-target 2022-10-06 15:56:49 +02:00
Kevin Fenzi
fa610eaed0 osbs: fix race between stg and prod making registry secrets 
If you run these playbooks without any limit, The 4 master hosts (2
x86_64 and 2 aarch64) will be in the play, but they all use local_action
to make the local secrets file thats loaded. This means, whichever of
them happens to be writing the file last, thats the version of the file
that all 4 of them get. This is particularly bad when it's the staging
creds and the prod hosts get it loaded. :(

So, adding {{ env }} here makes the staging and prod versions seperate
so they don't step on each other.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-10-05 16:11:03 +00:00
Michal Konečný
10bca6af9e [release-monitoring] Sync production with staging for 1.6.0 
With the release of 1.6.0 we can now remove the poetry specific changes for
staging and instead use the same for staging and production.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-10-05 14:32:22 +02:00
Kevin Fenzi
a20235b95d notifs: fix missing closing squiggly 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-10-03 16:06:33 -07:00
Kevin Fenzi
223455e441 prep notifs-backend role for 02 being 01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-10-03 16:04:52 -07:00
Lukas Holecek
a59f582c09 greenwave: Update OpenShift templates for the new release 2022-09-30 16:23:24 +00:00
Dusty Mabe
61cb7a5f2c
openshift-apps/coreos-ostree-importer: drop changes for debugging 
We had these settings in place while we were debugging. Let's drop
them now.
 2022-09-29 15:00:41 -04:00