Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
29900 commits 9 branches 0 tags 111 MiB
Commit graph

29900 commits

This branch
This branch
All branches
Author SHA1 Message Date
Aurélien Bompard
9370ffcf7e Add the rabbitmq_cluster tag to the rabbit roles 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:22 +02:00
Miroslav Suchý
82fec0f69c copr: run this part no aws too 2020-04-24 21:34:22 +02:00
Miroslav Suchý
9289ef9558 copr: become root as to AWS we connect as fedora@ 2020-04-24 21:34:22 +02:00
Miroslav Suchý
d73af67872 copr: puth copr_keygen_dev_aws into dev group 2020-04-24 21:34:22 +02:00
Miroslav Suchý
5377410dba copr: spin up copr-keygen-dev in AWS 2020-04-24 21:34:22 +02:00
Aurélien Bompard
16ba6fdbff RabbitMQ: add server_name_indication to the federation parameters 
The Federation plugin uses an AMQP client that verifies that the
hostname it's connecting to is the right one. Our RabbitMQ server
TLS certificates only have the "public" name as Subject Alternative Name
and in that case apparently the client does not check the CN. Therefore
this changeset sets the client parameter to expect the "public" name in
the certificate.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
ec0f28a35f monitor-gating: Try changing the service of the keytab 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
7b891562d2 Update the configuration so no more manual changes after branching are needed 
Patch from Miro Hrončok submitted upstream at:
https://pagure.io/fedora-ci/simple-koji-ci/pull-request/36

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Aurélien Bompard
8f5de8c822 Also create zmq.topic in /pubsub 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:22 +02:00
Aurélien Bompard
48de31d042 RabbitMQ: leave it to apps to grant access to the nagios-monitoring user 
Because those vhosts may not be created yet when the main RabbitMQ
playbook is run.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
f21127ef84 monitor-gating: Adjust the key which is used as filename 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
007dea4910 monitor-gating: Specify a host to see if the file gets generated 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Aurélien Bompard
704835c2bb RabbitMQ: Don't create the nagios user before the vhost is setup 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
83b5e3ac4f fas: let pingou access the app in openshift so he can see the logs 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
8133f27b68 monitor-gating: adjust indentation 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
e177d401bb monitor-gating: let's without a host entirely 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
4aad0e72ff monitor-gating: make the hostname valid 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
59cd72f4f1 monitor-gating: tweak the host so ipa find a valid record for it, maybe? 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
fc435a44a9 monitor-gating: Create and set-up the keytab 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Kevin Fenzi
135bc4418d rabbitmq_cluster / staging: nagios-plugins-rabbitmq builds, but is not installable 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:22 +02:00
Kevin Fenzi
76e7688588 rabbitmq_cluster / stg: disable collectd-rabbitmq in stg for now as it does not build 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:22 +02:00
Kevin Fenzi
545e64baf2 move rabbitmq hosts to rhel8 in staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:22 +02:00
Stephen Smoogen
d8442205ee remove the openqa boxes because they may be installed in correctly 2020-04-24 21:34:22 +02:00
Stephen Smoogen
46b35d7229 try to set up dhcpd properly for host 2020-04-24 21:34:22 +02:00
Stephen Smoogen
228acc231c fix dhcp correctly with correct ips 2020-04-24 21:34:22 +02:00
Stephen Smoogen
a62b9beaa1 set the right box to build. [I am having one of those days] 2020-04-24 21:34:22 +02:00
Stephen Smoogen
60f790cc7d try to make the next openqa box 2020-04-24 21:34:22 +02:00
Rick Elrod
fe9a69564e make proxy30 not check swap 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:22 +02:00
Stephen Smoogen
d69f1b21d0 fix other items to try and get openqa working 2020-04-24 21:34:22 +02:00
Stephen Smoogen
e0d41735b5 [inventory] correct hostnmae 2020-04-24 21:34:22 +02:00
Stephen Smoogen
38c78c9d72 [dhcpd] fix the mac address to the correct ip address so ssh works 2020-04-24 21:34:22 +02:00
Mohan Boddu
560303aef8 More fixes to f33 key changes 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
b6935f7992 monitor-gating: Let's mount the ssh elsewhere 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Kevin Fenzi
34bf883fb9 autosign: also update keyid 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:22 +02:00
Kevin Fenzi
ffdb6e05a1 autosign: sign f33 stuff with f33 key 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:22 +02:00
Stephen Smoogen
015a452cfa remove broken dhcpd lines 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
c0b939bcfa monitor-gating: Another attempt to mount id_rsa again 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
95ff4b8b21 monitor-gating: Another attempt to mount the volume as desired 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
91b69e2fb0 monitor-gating: Make the ssh volume not readOnly 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
ea16f6e19b monitor-gating: Adjust the defaultMode for the .ssh volume (attempt #2) 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
ac732c04c2 monitor-gating: Adjust the defaultMode for the .ssh volume 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
c2be9448ce monitor-gating: adjust the paths in the runner.cfg 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
8007f7d201 monitor-gating: Adjust mount paths 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
6072767642 monitor-gating: Drop the command in the deployment config in favor of the one in the container 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Stephen Smoogen
0971f56b87 Comment out section on openqa so master run won't fail 2020-04-24 21:34:22 +02:00
Stephen Smoogen
d36f61178a Put in names for openqa-aarch64 into inventory 2020-04-24 21:34:22 +02:00
Stephen Smoogen
580eec47bc put the mac in so I can get the box up just enough 2020-04-24 21:34:22 +02:00
Kevin Fenzi
348a5b554b fas2-dev: has been unreachable for 4 months, so I am going to turn it off 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:22 +02:00
Stephen Smoogen
7ab3a40629 Make changes for openqa 2020-04-24 21:34:22 +02:00
Stephen Smoogen
02f7750a9f wrong host ip address. took over a builder 2020-04-24 21:34:22 +02:00