Mattia Verga
b38a69f95f
bodhi: switch prod to asynch gunicorn workers
...
Signed-off-by: Mattia Verga <mattia.verga@proton.me>
2022-06-07 18:19:44 +00:00
Kevin Fenzi
1105c72692
ansible /server: fix name of collection
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-07 11:09:00 -07:00
Maxwell G
1186d20cb2
ansible-server: Use git-core
instead of git
.
2022-06-07 17:45:35 +00:00
Maxwell G
b20a0b5495
ansible-server: Use RPM collection packages
...
We now have all the collections that are used by Fedora Infra packaged
for EPEL 8 (the ansible control host runs on RHEL 8, as far as I know),
except community.postgresql. ansible-collection-community-rabbitmq[1]
and ansible-collection-community-libvirt[2] are new packages that are
still in epel8-next testing, so I would wait to merge this until they're
pushed.
I would also recommend clearing the current collections directory (`rm
-rf ~/.ansible/ansible_collections/*`) before merging this to ensure
that ansible uses the packaged versions and not the old versions that
were installed with ansible-galaxy.
[1]: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-a7237cc021
[2]: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-a9ccbc0012
Signed-off-by: Maxwell G <gotmax@e.email>
2022-06-07 17:45:35 +00:00
Michal Konečný
c061f64290
[release-monitoring] Fix the paths in httpd.conf for staging
...
Moving to f36 changed the default python version, let's adjust the paths to
reflect this.
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-06-07 11:08:20 +00:00
Mark O Brien
2115b4101c
proxy routes for ocp4 stg.release-monitoring.org
...
Signed-off-by: Mark O Brien <markobri@redhat.com>
2022-06-07 10:31:00 +00:00
f7ed87506b
Fedora 34 is now EOL
...
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2022-06-07 10:54:23 +02:00
Kevin Fenzi
2ab320a208
odcs-backend-releng01: disable fmc for now until the package is built in infra tags
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 17:15:30 -07:00
Kevin Fenzi
ece2768ab8
odcs-backend-releng01: reinstall with f36
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 16:52:29 -07:00
Kevin Fenzi
6a6b9a4439
db-fas01: backup ipsilon db too
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 16:23:15 -07:00
Kevin Fenzi
2e8531dd54
oci-candidate-registry01: we do not need 750g anymore now that srv is moved off to a nfs volume
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 15:59:00 -07:00
Kevin Fenzi
44ba32ad10
move oci* in prod to f36
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 15:28:38 -07:00
Kevin Fenzi
edfe391519
oci-candidate-registry: move prod candidate to use a nfs volume
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 15:28:09 -07:00
Kevin Fenzi
9ae8061d6c
oci-registry01.stg to f36
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 14:26:18 -07:00
Kevin Fenzi
92867b50a2
base / crypto-policies: move fedora instances back to DEFAULT
...
We changed this to DEFAULT:FEDORA32 a while back because the certs for
the old totpcgi sudo needed it to work. Now thats all gone and we are
100% on ipa and sssd, this should no longer be needed.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 14:10:20 -07:00
Kevin Fenzi
b86863676e
candidate-registry01.stg.iad2.fedoraproject.org: reinstall with f36
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 14:04:05 -07:00
Kevin Fenzi
2d27fd8c87
kojipkgs02: move to f36
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 12:56:41 -07:00
Kevin Fenzi
766ac3c4c5
kojipkgs01 to f36
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 12:25:04 -07:00
Kevin Fenzi
99eab71b2e
haproxy: install socat for dynamic stats/control of haproxy
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 12:22:35 -07:00
Kevin Fenzi
53e1ec2ada
certgetter01: reinstall with f36
...
(also remove old certgetter01.stg host vars)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 11:52:53 -07:00
Kevin Fenzi
ed817cfc14
armv7-test01/02: moved to f36
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 11:44:12 -07:00
Michal Konečný
bda11cb283
[release-monitoring]Fix paths for the hotfixes
...
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-06-06 15:58:31 +02:00
Michal Konečný
3a2fac3bb7
[release-monitoring] Migrate to OCP4 on staging
...
There are issues when building images on OCP3, let's try to move Anitya to OCP4.
We should do it anyway.
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-06-06 15:41:27 +02:00
Michal Konečný
27948a7cc6
[release-monitoring] Update to f36 on staging
...
This also introduces the hotfix for the social_auth issue. So it should be
possible to login on staging.
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-06-06 15:25:53 +02:00
Kevin Fenzi
a087bf17f3
proxies/reversproxy: set some more load balancers
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 17:05:26 -07:00
Kevin Fenzi
2e2035011c
proxies / reverseproxypass: missed one balancer
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 15:36:41 -07:00
Kevin Fenzi
80ef5e47df
proxies / reverseproxypass: try and only 421 ocp4 non iad2 proxies
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 13:44:02 -07:00
Kevin Fenzi
42bc4ea41a
proxies / reverseproxy: try just always setting balancer_members and dropping the set facts
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 11:47:17 -07:00
Kevin Fenzi
7e90378b30
proxies / reverseproxy: Try and clean up logic and whitespace.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 11:24:24 -07:00
Kevin Fenzi
bf979b32ba
proxies / reverseproxypass: just set balancer_members for ocp3 hosts for now
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 10:26:09 -07:00
Kevin Fenzi
2ce1199ae8
proxies / reverseproxypass: try setting this
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 09:55:57 -07:00
Kevin Fenzi
0e1d9f6ea7
proxies / reverseproxy: try some different logic
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 09:30:58 -07:00
Kevin Fenzi
07385d35ed
proxies: drop old totpcgi provision
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-04 21:40:17 -07:00
Kevin Fenzi
dc6b7697c1
proxies / reverseproxy: unset balancer_members after each template so it can get set right for the next one
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-04 21:05:37 -07:00
Kevin Fenzi
e2deffab4e
proxies / reverseproxy: consolidate non openshift-iad2 case
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-04 14:51:33 -07:00
Kevin Fenzi
03fe998142
proxies / reverseproxy: also special case the old resultsdbapi
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-04 14:25:32 -07:00
Kevin Fenzi
77bdc05883
proxies / reverseproxy: work around taskotron with its own config
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-04 14:04:07 -07:00
Kevin Fenzi
6d99b43608
proxies / reverspassproxy: fix loop
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 20:51:46 -07:00
Kevin Fenzi
6a0727c9e6
proxies / openqa: rework conf file to avoid issue with openqa and its websockets
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 20:15:36 -07:00
Kevin Fenzi
dc3c271c62
mailman: add banner for survey
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 19:09:09 -07:00
Kevin Fenzi
2685496897
noggin: add survey banner. see ticket 10740
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 18:59:54 -07:00
Kevin Fenzi
b98ef3ec95
proxies / staging: set openshift_nodes_stg to openshift_nodes in this case
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 18:26:36 -07:00
Kevin Fenzi
7455b3fdb1
proxies / reverseproxy: fix missing )
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 14:22:13 -07:00
Adam Williamson
479388a242
openqa: use updates-testing builds on all prod/stg
...
We don't need the scratch builds on stg any more now we've sent
the new builds to updates-testing. We *do* want to use the builds
from u-t on prod now (I don't want to wait a week for the stable
push).
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-06-03 13:25:05 -07:00
Kevin Fenzi
52a8936914
proxies: rework reversepassproxy and mark all ocp4 / ocp3 apps
...
The ocp3 cluster is reachable/available via the vpn, so any proxy can
reach it.
The ocp4 cluster is (at least for now) only reachable/available from the
iad2 proxies (proxy01/proxy10).
There's a firefox bug that causes it to reuse h2 connections, and in
some cases try and request something of a non iad2 proxy that it can't
reach. To work around this in those cases we need to send a 421 back to
the client so it doesn't do that.
This moves that logic into the template so all ocp4: true hosts do this
by default. Also, we default the balancer nodes so we only have to
change them in one place if we remove/add a compute node.
Finally, we mark all the ocp3 apps with 'ocp4: false' so we know what
they are and can move them more easily.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 13:14:28 -07:00
Kevin Fenzi
5b3eadb7d5
ipsilon01: try again to upgrade
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 11:54:05 -07:00
Kevin Fenzi
575d1ea238
pagure: increase processes
...
pagure was processing a lot of things, increasing this seemed to help.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 11:41:11 -07:00
Aurélien Bompard
6b9d639421
ipsilon: add sebooleans on f36
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2022-06-03 09:55:25 +02:00
Kevin Fenzi
6ef504d18c
ipsilon01: move back to f34 for now
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-02 17:16:03 -07:00
Kevin Fenzi
dd25b74d82
ipsilon01: move to f36
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-02 16:08:36 -07:00