Infrastructure/ansible
5
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions
36996 commits 9 branches 0 tags 110 MiB
Commit graph

1009 commits

Author SHA1 Message Date
Dusty Mabe
803e4c9ffc
aws-iam-policies: fcos-upload-amis: add ability to cancel snapshot import 
We had an import snapshot task get stuck and we don't have permission to
cancel it. This will enable us to run something like:

```
aws ec2 cancel-import-task --import-task-id import-snap-071b6e456e60146b7
```
 2022-03-15 10:05:07 -04:00
Frank Ch. Eigler
2bf47f23fb debuginfod: apply thread-pool limits 2022-02-17 17:40:52 +00:00
Clement Verna
c07049af0f osbs: try to disable the import_image plugin in the worker customization 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2022-01-19 09:19:54 +01:00
Kevin Fenzi
bcd4365fec rhel sync: add advanced virt repo to sync and rhel8.repo files 
We want to use advanced virt as it has a more tested/tweaked/patched set
of virt tools for our virthosts.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-01 14:37:29 -08:00
Frank Ch. Eigler
176ce60e33 debuginfod: add systemd drop-in tweaks 
Already in effect on prod & stg, formalize these configuration tweaks
that limit overload, improve cgroup monitoring, and build tolerance to
transient fileserver problems.
 2021-11-19 00:43:13 +00:00
Stephen Smoogen
95bb3249e6 ibiblio can rsync down cc-rdu01 for centos 2021-10-04 11:07:56 -04:00
Stephen Smoogen
19e0a22da1 turns out we had 2 syncs going on and the scripts needed cleaning. I have made a special file for centos downloads only and will let someone look at whether the other files are still needed 2021-10-04 08:47:14 -04:00
Stephen Smoogen
c6f0ec6ed5 revert to a working version of the sync script for rdu. The other version crashed out too often for some reason. 2021-10-04 08:29:57 -04:00
Stephen Smoogen
35cc062b71 fix syn-up-downloads.sh because I missed it needed a file argument in new code 
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2021-10-01 08:30:43 -04:00
Stephen Smoogen
618bd95cf4 syncronize the ib01 and rdu01 download scripts to be more in line. This may not work but we can try 
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2021-09-30 15:14:07 -04:00
Stephen Smoogen
16bf2c0a4e Add in support for mirroring centos-stream to the RDU-CC mirror. This will allow CBS and CI to use Stream-9 better 
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2021-09-30 13:51:49 -04:00
Dusty Mabe
ddc89da862 aws-iam-policies: fcos-upload-amis: add ability to clean up AMIs 
Adding DeregisterImage and DeleteSnapshot will allow us to prune
old AMIs from EC2.
 2021-08-30 20:24:36 +00:00
Dusty Mabe
c2ceab0958 aws-iam-policies: fcos-upload-amis: group some policies with other similar ones 
Move CreateSnapshot to be with ImportSnapshot. Move DescribeImageAttribute
to be with ModifyImageAttribute.
 2021-08-30 20:24:36 +00:00
Frank Ch. Eigler
1af312bdd3 debuginfod: support f36+, enlarge fdcache 
Fix the debuginfod sysconfig file to not stop at f32..f35 but go at
least to eleven ^W f39 for RPM inclusion.  Bump up the fdcache size
to 1024 entries so more archive pieces are retained unpacked, given
that the VMs still have pretty generous unused storage.

These changes are already hand-applied to prod and stg.
 2021-08-18 20:35:49 +00:00
Kevin Fenzi
680ebd81db yum repos: drop failovermethod from secondary repo files too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-29 14:15:11 -07:00
Kevin Fenzi
54a29eaaa1 repo files: drop failovermethod=priority as it's not been used in years 
Additionally, newer fedora complains about it being invalid.
It was used back in the yum days and never ported to dnf.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-23 11:07:35 -07:00
Kevin Fenzi
f23fd1b7a1 totpcgi / 2fa: remove old totpci and files and roles. 
Note: there are still some calls here in old fas in openshift, but we
will remove those when we remove old fas (likely as soon as zodbot is
ported over to noggin).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 13:00:56 -07:00
Frank Ch. Eigler
47b5976abd debuginfod: tweak server configuration and proxy frontend 
Codify a few debuginfod process parameters that appear to be working well.

Adjust incoming proxies to redirect the "/" URL to a wiki page, as
requested by FESCO.
 2021-05-10 12:24:39 +00:00
Frank Ch. Eigler
12dc83f767 debuginfod: vm configuration for running service with ansible-based config file 2021-04-06 17:23:43 +00:00
Pierre-Yves Chibon
eefdc6f33b yumrepos: import the EPEL7 public key 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-30 14:34:01 +02:00
Pierre-Yves Chibon
aa3769d3bf yumrepos: Add an original-epel7.repo file for RHEL7/CentOS7 in aws 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-30 14:31:29 +02:00
Nils Philippsen
f710f4102a use script file instead of inline shell 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-24 15:19:37 +01:00
Stephen Smoogen
d52393624d Add back in centos-ipa-client as that is a different project 
cut and pasta failure with mobrien ssh key
 2021-03-23 16:52:20 +00:00
Stephen Smoogen
2adb66f4d5 General cleanup of aliases and add mobrien to various places. 
Remove old smooge lines
Remove centos box which is no longer existant.

Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
 2021-03-23 16:52:20 +00:00
Nils Philippsen
280eebdcee tasks/yumrepos: cope with archived Fedora releases 
We have some hosts that run on archived/EOL Fedora releases, their
repository URLs need to reflect that.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-19 15:22:21 +00:00
Miroslav Suchý
6523edb25b use original epel repository in AWS datacenter 2021-03-15 20:53:40 +01:00
Stephen Smoogen
3fa0e1d883 This adds a config file for Fedora 33 osbs systems so that they do not 
try to bind to the master interfaces when osbs is also wanting to use
dynamic binding.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2021-02-25 17:32:05 +00:00
Kevin Fenzi
4fbe37e9e2 Disable no longer used/mirrored/needed openshift for rhel7 repo. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-15 15:25:26 -08:00
Mark O'Brien
d900232d89 osbs: staging ip tables 2020-12-18 11:33:50 +00:00
Clement Verna
035df9b7c4 osbs: allow docker to talk to the aarch64 cluster 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-11-26 17:30:29 +01:00
Mark O'Brien
fa5ac6f766 osbs: uncomment krb in buildroot image 2020-11-26 11:32:22 +00:00
Stephen Smoogen
08cfefbad1 Fix download-cc-rdu to mirror centos daily 
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2020-11-24 12:00:48 -05:00
Stephen Smoogen
c1014c4a8c Change download-sync location and update script. 
The download-sync for rdu-cc needs to use the /root versus default
quick-fedora-mirror git repository. This allows for it to only copy
the modules needed.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2020-10-12 17:07:33 -04:00
Clement Verna
86a0240758 Update OSBS buildroot container to use Fedora 33 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-10-06 10:49:33 +02:00
Kevin Fenzi
882d31edae loopabull: farewell loopabull, you served us well. 
Loopabull is being replaced by toddlers in openshift.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-09 16:51:46 -07:00
Clement Verna
98187ea922 osbs: use no-cdn registry 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-07-09 10:28:46 +02:00
Kevin Fenzi
7bd440f416 backups: re-enable normal backups now again. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-29 17:48:42 -07:00
Mark O'Brien
63ff40869c [osbs] add candidate registry to iptables 2020-06-23 13:27:41 +01:00
Mark O'Brien
5e78f70118 [osbs] add cdn registry to ip tables 2020-06-23 13:08:59 +01:00
Kevin Fenzi
1b9108bc04 backups: set correct path for ansible repo cloning by backup server. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-22 17:06:07 -07:00
Mark O'Brien
121a81cfe4 [osbs] comment out unkown ip in iptables 2020-06-22 18:27:35 +00:00
Mark O'Brien
6ce987e685 [osbs] update ips from phx2 to iad2 2020-06-22 18:27:35 +00:00
Kevin Fenzi
7984b46eb7 The great phx2 pruning run (1st cut). 
Since we no longer have any machines in phx2, I have tried to remove
them from ansible. Note that there are still some places where we need
to remove them still: nagios, dhcp, named were not touched, and in cases
where it wasn't pretty clear what a conditional was doing I left it to
be cleaned up later.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 14:14:31 -07:00
Kevin Fenzi
183269627f backups: disable backups for now until we are moved. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-07 15:51:12 -07:00
Kevin Fenzi
ddb96ead29 iad2: For some reason python3 ansible catches this. Cast FedoraBranchedNUmber to int here. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-03 09:41:58 -07:00
Kevin Fenzi
5f626eb145 iad2: have rabbitmq instances use rhos16 instead of rhos13, which was/is rhel7 based 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-31 13:35:43 -07:00
Kevin Fenzi
1af4eddc1f iad2: use fas-all.iad2 for pam_url in iad2 datacenter 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-26 07:54:41 -07:00
Pierre-Yves Chibon
ee2f34128a Enable the CRB repo by default on RHEL8 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 15:20:20 +02:00
Kevin Fenzi
cf517215a5 rhos13 repo: turns out we still use this for newer rabbitmq 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 16:10:05 -07:00
Kevin Fenzi
c529380547 Spring cleaning time. :) 
I removed all the old files, inventory, playbooks, roles and other from
services we no longer run or use. There was a bunch of cruft in there
and I hope that will make the repo cleaner and easier to look for things
we actually do run and care about.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 14:02:41 -07:00