Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
37279 commits 9 branches 0 tags 111 MiB
Commit graph

37279 commits

This branch
This branch
All branches
Author SHA1 Message Date
Mattia Verga
b38a69f95f bodhi: switch prod to asynch gunicorn workers 
Signed-off-by: Mattia Verga <mattia.verga@proton.me>
 2022-06-07 18:19:44 +00:00
Kevin Fenzi
1105c72692 ansible /server: fix name of collection 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-07 11:09:00 -07:00
Maxwell G
1186d20cb2 ansible-server: Use git-core instead of git. 2022-06-07 17:45:35 +00:00
Maxwell G
b20a0b5495 ansible-server: Use RPM collection packages 
We now have all the collections that are used by Fedora Infra packaged
for EPEL 8 (the ansible control host runs on RHEL 8, as far as I know),
except community.postgresql. ansible-collection-community-rabbitmq[1]
and ansible-collection-community-libvirt[2] are new packages that are
still in epel8-next testing, so I would wait to merge this until they're
pushed.

I would also recommend clearing the current collections directory (`rm
-rf ~/.ansible/ansible_collections/*`) before merging this to ensure
that ansible uses the packaged versions and not the old versions that
were installed with ansible-galaxy.

[1]: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-a7237cc021
[2]: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-a9ccbc0012

Signed-off-by: Maxwell G <gotmax@e.email>
 2022-06-07 17:45:35 +00:00
Michal Konečný
c061f64290 [release-monitoring] Fix the paths in httpd.conf for staging 
Moving to f36 changed the default python version, let's adjust the paths to
reflect this.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-07 11:08:20 +00:00
Mark O Brien
2115b4101c proxy routes for ocp4 stg.release-monitoring.org 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-07 10:31:00 +00:00
Tomas Hrcka
f7ed87506b Fedora 34 is now EOL 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2022-06-07 10:54:23 +02:00
Kevin Fenzi
2ab320a208 odcs-backend-releng01: disable fmc for now until the package is built in infra tags 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 17:15:30 -07:00
Kevin Fenzi
ece2768ab8 odcs-backend-releng01: reinstall with f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 16:52:29 -07:00
Kevin Fenzi
6a6b9a4439 db-fas01: backup ipsilon db too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 16:23:15 -07:00
Kevin Fenzi
2e8531dd54 oci-candidate-registry01: we do not need 750g anymore now that srv is moved off to a nfs volume 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 15:59:00 -07:00
Kevin Fenzi
44ba32ad10 move oci* in prod to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 15:28:38 -07:00
Kevin Fenzi
edfe391519 oci-candidate-registry: move prod candidate to use a nfs volume 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 15:28:09 -07:00
Kevin Fenzi
9ae8061d6c oci-registry01.stg to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 14:26:18 -07:00
Kevin Fenzi
92867b50a2 base / crypto-policies: move fedora instances back to DEFAULT 
We changed this to DEFAULT:FEDORA32 a while back because the certs for
the old totpcgi sudo needed it to work. Now thats all gone and we are
100% on ipa and sssd, this should no longer be needed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 14:10:20 -07:00
Kevin Fenzi
b86863676e candidate-registry01.stg.iad2.fedoraproject.org: reinstall with f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 14:04:05 -07:00
Kevin Fenzi
2d27fd8c87 kojipkgs02: move to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 12:56:41 -07:00
Kevin Fenzi
766ac3c4c5 kojipkgs01 to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 12:25:04 -07:00
Kevin Fenzi
99eab71b2e haproxy: install socat for dynamic stats/control of haproxy 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 12:22:35 -07:00
Kevin Fenzi
53e1ec2ada certgetter01: reinstall with f36 
(also remove old certgetter01.stg host vars)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 11:52:53 -07:00
Kevin Fenzi
ed817cfc14 armv7-test01/02: moved to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 11:44:12 -07:00
Michal Konečný
bda11cb283 [release-monitoring]Fix paths for the hotfixes 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-06 15:58:31 +02:00
Michal Konečný
3a2fac3bb7 [release-monitoring] Migrate to OCP4 on staging 
There are issues when building images on OCP3, let's try to move Anitya to OCP4.
We should do it anyway.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-06 15:41:27 +02:00
Michal Konečný
27948a7cc6 [release-monitoring] Update to f36 on staging 
This also introduces the hotfix for the social_auth issue. So it should be
possible to login on staging.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-06 15:25:53 +02:00
Kevin Fenzi
a087bf17f3 proxies/reversproxy: set some more load balancers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 17:05:26 -07:00
Kevin Fenzi
2e2035011c proxies / reverseproxypass: missed one balancer 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 15:36:41 -07:00
Kevin Fenzi
80ef5e47df proxies / reverseproxypass: try and only 421 ocp4 non iad2 proxies 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 13:44:02 -07:00
Kevin Fenzi
42bc4ea41a proxies / reverseproxy: try just always setting balancer_members and dropping the set facts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 11:47:17 -07:00
Kevin Fenzi
7e90378b30 proxies / reverseproxy: Try and clean up logic and whitespace. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 11:24:24 -07:00
Kevin Fenzi
bf979b32ba proxies / reverseproxypass: just set balancer_members for ocp3 hosts for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 10:26:09 -07:00
Kevin Fenzi
2ce1199ae8 proxies / reverseproxypass: try setting this 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 09:55:57 -07:00
Kevin Fenzi
0e1d9f6ea7 proxies / reverseproxy: try some different logic 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 09:30:58 -07:00
Kevin Fenzi
07385d35ed proxies: drop old totpcgi provision 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 21:40:17 -07:00
Kevin Fenzi
dc6b7697c1 proxies / reverseproxy: unset balancer_members after each template so it can get set right for the next one 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 21:05:37 -07:00
Kevin Fenzi
e2deffab4e proxies / reverseproxy: consolidate non openshift-iad2 case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 14:51:33 -07:00
Kevin Fenzi
03fe998142 proxies / reverseproxy: also special case the old resultsdbapi 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 14:25:32 -07:00
Kevin Fenzi
77bdc05883 proxies / reverseproxy: work around taskotron with its own config 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 14:04:07 -07:00
Kevin Fenzi
6d99b43608 proxies / reverspassproxy: fix loop 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 20:51:46 -07:00
Kevin Fenzi
6a0727c9e6 proxies / openqa: rework conf file to avoid issue with openqa and its websockets 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 20:15:36 -07:00
Kevin Fenzi
dc3c271c62 mailman: add banner for survey 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 19:09:09 -07:00
Kevin Fenzi
2685496897 noggin: add survey banner. see ticket 10740 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 18:59:54 -07:00
Kevin Fenzi
b98ef3ec95 proxies / staging: set openshift_nodes_stg to openshift_nodes in this case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 18:26:36 -07:00
Kevin Fenzi
7455b3fdb1 proxies / reverseproxy: fix missing ) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 14:22:13 -07:00
Adam Williamson
479388a242 openqa: use updates-testing builds on all prod/stg 
We don't need the scratch builds on stg any more now we've sent
the new builds to updates-testing. We *do* want to use the builds
from u-t on prod now (I don't want to wait a week for the stable
push).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-03 13:25:05 -07:00
Kevin Fenzi
52a8936914 proxies: rework reversepassproxy and mark all ocp4 / ocp3 apps 
The ocp3 cluster is reachable/available via the vpn, so any proxy can
reach it.

The ocp4 cluster is (at least for now) only reachable/available from the
iad2 proxies (proxy01/proxy10).

There's a firefox bug that causes it to reuse h2 connections, and in
some cases try and request something of a non iad2 proxy that it can't
reach. To work around this in those cases we need to send a 421 back to
the client so it doesn't do that.

This moves that logic into the template so all ocp4: true hosts do this
by default. Also, we default the balancer nodes so we only have to
change them in one place if we remove/add a compute node.

Finally, we mark all the ocp3 apps with 'ocp4: false' so we know what
they are and can move them more easily.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 13:14:28 -07:00
Kevin Fenzi
5b3eadb7d5 ipsilon01: try again to upgrade 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 11:54:05 -07:00
Kevin Fenzi
575d1ea238 pagure: increase processes 
pagure was processing a lot of things, increasing this seemed to help.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 11:41:11 -07:00
Aurélien Bompard
6b9d639421
ipsilon: add sebooleans on f36 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-03 09:55:25 +02:00
Kevin Fenzi
6ef504d18c ipsilon01: move back to f34 for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 17:16:03 -07:00
Kevin Fenzi
dd25b74d82 ipsilon01: move to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 16:08:36 -07:00