Commit graph

37279 commits

Author SHA1 Message Date
Mattia Verga
b38a69f95f bodhi: switch prod to asynch gunicorn workers
Signed-off-by: Mattia Verga <mattia.verga@proton.me>
2022-06-07 18:19:44 +00:00
Kevin Fenzi
1105c72692 ansible /server: fix name of collection
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-07 11:09:00 -07:00
Maxwell G
1186d20cb2 ansible-server: Use git-core instead of git. 2022-06-07 17:45:35 +00:00
Maxwell G
b20a0b5495 ansible-server: Use RPM collection packages
We now have all the collections that are used by Fedora Infra packaged
for EPEL 8 (the ansible control host runs on RHEL 8, as far as I know),
except community.postgresql. ansible-collection-community-rabbitmq[1]
and ansible-collection-community-libvirt[2] are new packages that are
still in epel8-next testing, so I would wait to merge this until they're
pushed.

I would also recommend clearing the current collections directory (`rm
-rf ~/.ansible/ansible_collections/*`) before merging this to ensure
that ansible uses the packaged versions and not the old versions that
were installed with ansible-galaxy.

[1]: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-a7237cc021
[2]: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2022-a9ccbc0012

Signed-off-by: Maxwell G <gotmax@e.email>
2022-06-07 17:45:35 +00:00
Michal Konečný
c061f64290 [release-monitoring] Fix the paths in httpd.conf for staging
Moving to f36 changed the default python version, let's adjust the paths to
reflect this.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-06-07 11:08:20 +00:00
Mark O Brien
2115b4101c proxy routes for ocp4 stg.release-monitoring.org
Signed-off-by: Mark O Brien <markobri@redhat.com>
2022-06-07 10:31:00 +00:00
f7ed87506b Fedora 34 is now EOL
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2022-06-07 10:54:23 +02:00
Kevin Fenzi
2ab320a208 odcs-backend-releng01: disable fmc for now until the package is built in infra tags
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 17:15:30 -07:00
Kevin Fenzi
ece2768ab8 odcs-backend-releng01: reinstall with f36
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 16:52:29 -07:00
Kevin Fenzi
6a6b9a4439 db-fas01: backup ipsilon db too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 16:23:15 -07:00
Kevin Fenzi
2e8531dd54 oci-candidate-registry01: we do not need 750g anymore now that srv is moved off to a nfs volume
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 15:59:00 -07:00
Kevin Fenzi
44ba32ad10 move oci* in prod to f36
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 15:28:38 -07:00
Kevin Fenzi
edfe391519 oci-candidate-registry: move prod candidate to use a nfs volume
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 15:28:09 -07:00
Kevin Fenzi
9ae8061d6c oci-registry01.stg to f36
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 14:26:18 -07:00
Kevin Fenzi
92867b50a2 base / crypto-policies: move fedora instances back to DEFAULT
We changed this to DEFAULT:FEDORA32 a while back because the certs for
the old totpcgi sudo needed it to work. Now thats all gone and we are
100% on ipa and sssd, this should no longer be needed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 14:10:20 -07:00
Kevin Fenzi
b86863676e candidate-registry01.stg.iad2.fedoraproject.org: reinstall with f36
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 14:04:05 -07:00
Kevin Fenzi
2d27fd8c87 kojipkgs02: move to f36
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 12:56:41 -07:00
Kevin Fenzi
766ac3c4c5 kojipkgs01 to f36
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 12:25:04 -07:00
Kevin Fenzi
99eab71b2e haproxy: install socat for dynamic stats/control of haproxy
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 12:22:35 -07:00
Kevin Fenzi
53e1ec2ada certgetter01: reinstall with f36
(also remove old certgetter01.stg host vars)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 11:52:53 -07:00
Kevin Fenzi
ed817cfc14 armv7-test01/02: moved to f36
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 11:44:12 -07:00
Michal Konečný
bda11cb283 [release-monitoring]Fix paths for the hotfixes
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-06-06 15:58:31 +02:00
Michal Konečný
3a2fac3bb7 [release-monitoring] Migrate to OCP4 on staging
There are issues when building images on OCP3, let's try to move Anitya to OCP4.
We should do it anyway.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-06-06 15:41:27 +02:00
Michal Konečný
27948a7cc6 [release-monitoring] Update to f36 on staging
This also introduces the hotfix for the social_auth issue. So it should be
possible to login on staging.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2022-06-06 15:25:53 +02:00
Kevin Fenzi
a087bf17f3 proxies/reversproxy: set some more load balancers
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 17:05:26 -07:00
Kevin Fenzi
2e2035011c proxies / reverseproxypass: missed one balancer
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 15:36:41 -07:00
Kevin Fenzi
80ef5e47df proxies / reverseproxypass: try and only 421 ocp4 non iad2 proxies
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 13:44:02 -07:00
Kevin Fenzi
42bc4ea41a proxies / reverseproxy: try just always setting balancer_members and dropping the set facts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 11:47:17 -07:00
Kevin Fenzi
7e90378b30 proxies / reverseproxy: Try and clean up logic and whitespace.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 11:24:24 -07:00
Kevin Fenzi
bf979b32ba proxies / reverseproxypass: just set balancer_members for ocp3 hosts for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 10:26:09 -07:00
Kevin Fenzi
2ce1199ae8 proxies / reverseproxypass: try setting this
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 09:55:57 -07:00
Kevin Fenzi
0e1d9f6ea7 proxies / reverseproxy: try some different logic
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-05 09:30:58 -07:00
Kevin Fenzi
07385d35ed proxies: drop old totpcgi provision
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-04 21:40:17 -07:00
Kevin Fenzi
dc6b7697c1 proxies / reverseproxy: unset balancer_members after each template so it can get set right for the next one
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-04 21:05:37 -07:00
Kevin Fenzi
e2deffab4e proxies / reverseproxy: consolidate non openshift-iad2 case
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-04 14:51:33 -07:00
Kevin Fenzi
03fe998142 proxies / reverseproxy: also special case the old resultsdbapi
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-04 14:25:32 -07:00
Kevin Fenzi
77bdc05883 proxies / reverseproxy: work around taskotron with its own config
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-04 14:04:07 -07:00
Kevin Fenzi
6d99b43608 proxies / reverspassproxy: fix loop
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 20:51:46 -07:00
Kevin Fenzi
6a0727c9e6 proxies / openqa: rework conf file to avoid issue with openqa and its websockets
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 20:15:36 -07:00
Kevin Fenzi
dc3c271c62 mailman: add banner for survey
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 19:09:09 -07:00
Kevin Fenzi
2685496897 noggin: add survey banner. see ticket 10740
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 18:59:54 -07:00
Kevin Fenzi
b98ef3ec95 proxies / staging: set openshift_nodes_stg to openshift_nodes in this case
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 18:26:36 -07:00
Kevin Fenzi
7455b3fdb1 proxies / reverseproxy: fix missing )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 14:22:13 -07:00
Adam Williamson
479388a242 openqa: use updates-testing builds on all prod/stg
We don't need the scratch builds on stg any more now we've sent
the new builds to updates-testing. We *do* want to use the builds
from u-t on prod now (I don't want to wait a week for the stable
push).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2022-06-03 13:25:05 -07:00
Kevin Fenzi
52a8936914 proxies: rework reversepassproxy and mark all ocp4 / ocp3 apps
The ocp3 cluster is reachable/available via the vpn, so any proxy can
reach it.

The ocp4 cluster is (at least for now) only reachable/available from the
iad2 proxies (proxy01/proxy10).

There's a firefox bug that causes it to reuse h2 connections, and in
some cases try and request something of a non iad2 proxy that it can't
reach. To work around this in those cases we need to send a 421 back to
the client so it doesn't do that.

This moves that logic into the template so all ocp4: true hosts do this
by default. Also, we default the balancer nodes so we only have to
change them in one place if we remove/add a compute node.

Finally, we mark all the ocp3 apps with 'ocp4: false' so we know what
they are and can move them more easily.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 13:14:28 -07:00
Kevin Fenzi
5b3eadb7d5 ipsilon01: try again to upgrade
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 11:54:05 -07:00
Kevin Fenzi
575d1ea238 pagure: increase processes
pagure was processing a lot of things, increasing this seemed to help.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-03 11:41:11 -07:00
Aurélien Bompard
6b9d639421
ipsilon: add sebooleans on f36
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2022-06-03 09:55:25 +02:00
Kevin Fenzi
6ef504d18c ipsilon01: move back to f34 for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-02 17:16:03 -07:00
Kevin Fenzi
dd25b74d82 ipsilon01: move to f36
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-02 16:08:36 -07:00