Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
28344 commits 9 branches 0 tags 111 MiB
Commit graph

28344 commits

This branch
This branch
All branches
Author SHA1 Message Date
Stephen Smoogen
c80f5071c2 add directory back for downloads 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
694157c2be Koschei: Disable RabbitMQ queue creation until 8235 is fixed 2020-04-24 21:34:11 +02:00
Pierre-Yves Chibon
43f084686d dist-git/pagure: Drop couple of variables not used and already defined 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:11 +02:00
Pierre-Yves Chibon
93074d7249 dist-git/pagure: Enable the issue tracker on the tests namespace 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:11 +02:00
Pierre-Yves Chibon
985642e8ff Remove roles/mdapi since it's not deployed in openshift 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
b99245d8bd Koschei: Use a different watchdog file path 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
7dd0a2aa93 Koschei: fix syntax of health checks in deployment config 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
68348e180d Koschei: Enable health checks (watchdog) 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
ef60d95e1b koschei: Remove duplicate resource spec for frontend-deployment 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
7a50525e9b haproxy: Remove proxy for mdapi 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
b800b8c12e proxies-reverseproxy: Remove proxy for mdapi 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
3b4a62e5ad Redirect mdapi to openshift (#8238) 2020-04-24 21:34:11 +02:00
Rick Elrod
50b7f1d22c s3-mirror: Stop echoing the command we are running 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
7b55010730 java-deptools: Install javapackages-tools 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
d062cf304a java-deptools: Install Python 3 psycopg2 and libsemanage 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
2c11e5af34 java-deptools: Move from F28 to F30 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
3c747171be koschei: Don't hardcode env_suffix and fedmsg_env 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
32d66762ae koschei: Move watcher service to OpenShift 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
3134c7955b group_vars/all: Make env_prefix and env_prefix empty strings, not None 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
57af09a65c koschei: install RabbitMQ cert/key in prod 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
91bbf33a2f koschei: Disable hotfix_pagure_extras plugin in production 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
3591f086b8 koschei: Try not installing RabbitMQ cert 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
2c4ec00cd3 koschei: Try to remove some stringData from backend secret 2020-04-24 21:34:11 +02:00
Kevin Fenzi
b1d3cf582e pagure: Disable SSLv2, SSLv3, TLS1.0 and leave TLS1.1 and 1.2 enabled. (ticket 8231) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
a9c97618a1 rabbitmq_cluster: Switch how permissions are done and give admin all perms 
The way we were granting perms to admin was just on existing vhost/queues.
Instead we should just give admin full privs to any queues/vhosts that might
exist now or later.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
622170c679 Revert "Koschei: Skip creation of RabbitMQ queue" 
This reverts commit d8cb686c6ad2309f23e4b5651afb1cb53fe1876d.
 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
4cce745650 Koschei: Skip creation of RabbitMQ queue 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
131c81804b openshift-apps/koschei: Deploy in production 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
d455425d9f apps-fp-o: Update URLs for Koschei 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
809a936272 openshift-apps/koschei: Add vars for production 2020-04-24 21:34:11 +02:00
Miroslav Suchý
88aa3f9a44 copr: use correct device name 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
84716f4440 openshift-apps/koschei: Add to master.yml 2020-04-24 21:34:11 +02:00
Kevin Fenzi
e2523e235d mysqld backup: try adding ionice into things. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
e5f74d8566 kerneltest: fix conditional 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
a959dc063f secondary: update file lists every 2 hours as it's taking longer than an hour. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Adam Williamson
6d0949ba61 relvalconsumer: correct a conditional 
This led to Bugzilla submission being disabled on prod, it's
meant to be enabled.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
400a37df3a certgetter: use python3 for ansible. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
e13e8cef12 pagure / stunnel: set number of open files higher for pagure stunnel. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
b1aa859cbb pagure / stg: fix cert path 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
55f447a465 pagure / staging: set letsencrypt proxy to allow for getting cert. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Jonathan Lebon
42335b7370 rabbitmq: add coreos queue 
This is needed for CoreOS-specific messages. See
https://pagure.io/fedora-infrastructure/issue/8227.

Reviewed-by: Aurelien Bompard <abompard@redhat.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
294348566d pagure / stg: get a cert for stg.pagure.io too. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
92c3e16b55 pagure: Fix stunnel config so it validates for ssl by using the intermediate cert with a bundle. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Miroslav Suchý
990f66391b copr: enable swap as partition on AWS 2020-04-24 21:34:10 +02:00
Chenxiong Qi
60d5bacd4f mts: workaround to trigger os automatically to create a new pod 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Chenxiong Qi
c87f75402e mts: add example rule to rule file 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Chenxiong Qi
dd14d05de6 mts: fix mts-rules.yml download url 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Miroslav Suchý
e94715317a add f31 to retrace 2020-04-24 21:34:10 +02:00
Chenxiong Qi
e3619522aa mts: add os_masters to hosts in order to run playbook on prod 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Chenxiong Qi
62cd4d7c36 mts: add app_version to client_properties 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00