Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
39176 commits 9 branches 0 tags 111 MiB
Commit graph

39176 commits

This branch
This branch
All branches
Author SHA1 Message Date
David Kirwan
859c212770 zabbix: rename php-fpm config files 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-14 12:47:17 +01:00
David Kirwan
dcbfc405eb zabbix: replace template task with copy 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-14 12:13:58 +01:00
David Kirwan
c881ad8d65 zabbix: add templates for php-fpm 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-14 11:57:34 +01:00
Pavel Raiskup
b9c69f5cac copr: move epel-6 to rhel+epel from centos+epel 
Relates to the certificate issues
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/KOR3HE2VHHIPDBLDLXTYRMON6JQXCHMW/

The problem was the centos-6 key, not EPEL-6 key.

Reverts: 7b1cf87845
Reverts: 0fc0655e47
 2023-06-14 10:58:47 +02:00
Kevin Fenzi
11d24676b9 smtp-mm-cc-rdu01: move to new virthost 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 17:37:52 -07:00
Kevin Fenzi
d24435450b smtp-mm-cc-rdu01: move to rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 16:53:17 -07:00
Kevin Fenzi
abd52941ef smtp-mm: tweak tls options for rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 16:52:30 -07:00
Kevin Fenzi
14a3a6a2c1 smtp-mm / base / postfix: use gateway-chain cert 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 16:32:54 -07:00
Kevin Fenzi
a67ddb2267 smtp-mm-ib01: adjust variables 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 15:56:47 -07:00
Kevin Fenzi
f7c738a514 smtp-mm-ib01: move to rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 15:53:45 -07:00
Kevin Fenzi
9673a0f445 robosignatory: fix name of key for f39-python sidetag signing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 15:13:18 -07:00
Kevin Fenzi
10bf453112 koji_builder: dnf5 site changes 
We want to keep using dnf4 for koji builds, even after dnf5 is default
in rawhide. Once it's ready to do building as well, we can revert/drop
this. See https://pagure.io/releng/issue/11446

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 12:39:22 -07:00
Timothée Ravier
31ef29a34b Redirect kinoite.fp.org to the new website 
Redirect the kinoite subdomain to the new Kinoite website at:
https://fedoraproject.org/kinoite/

See: https://pagure.io/fedora-kde/SIG/issue/362#comment-861293
 2023-06-13 08:50:14 +00:00
David Kirwan
e1d428d431 zabbix: update dependency lists 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-13 09:39:38 +01:00
Aurélien Bompard
aebbaf022b
FMN: increase the redis connect timeout 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-13 10:12:01 +02:00
David Kirwan
2ce8906f5f zabbix: formatting issue in zabbix web config template 
rework db task for creating zabbix user

Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-13 08:10:33 +01:00
Pavel Raiskup
a8cc7b4c9b copr: opensuse-thumbleweed chroots work without bootstrap image 2023-06-13 09:08:20 +02:00
Pavel Raiskup
cd7df06b87 copr: enable bootstrap image for openSUSE chroots 
Copy the latest configs from mock-core-configs, and add
'use_bootstrap_image = True'.
 2023-06-13 08:31:48 +02:00
Kevin Fenzi
2273173a9b koji_hub: update scm policy 
Drop modules, they are controlled by mbs
fix typo on containers (should be container)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-12 14:10:07 -07:00
Kevin Fenzi
3a5c8c63d4 download-ib02: create a temp download host on new virthost so we can sync data to it 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-12 10:28:57 -07:00
David Kirwan
e8155ab92e zabbix: db configuration 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 13:57:44 +01:00
David Kirwan
51190f66be zabbix: debug args to shell command 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 13:27:54 +01:00
David Kirwan
701dca3ef7 zabbix: rearrange task import 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 13:18:00 +01:00
David Kirwan
949049047e zabbix: rename template files 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 12:45:26 +01:00
David Kirwan
be8fcb49c9 zabbix: install zabbix rpm 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 12:28:53 +01:00
David Kirwan
325c691693 zabbix: remove keytab roles from playbook 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 12:11:36 +01:00
David Kirwan
79ed7fdc45 zabbix: fix user/group file ownership for keytabs 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 12:08:11 +01:00
David Kirwan
99b51133f1 zabbix: restore original playbook layout 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 11:55:12 +01:00
David Kirwan
c5cad9e168 zabbix_server: readd handlers 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 11:23:06 +01:00
David Kirwan
88e544bf53 zabbix: readd base roles 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 11:11:30 +01:00
David Kirwan
a8263f98e9 zabbix: add zabbix_server role 
WIP

Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 10:50:58 +01:00
Kevin Fenzi
49c105e55a koji_hub: allow scratch builds from scm 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-11 08:27:30 -07:00
Kevin Fenzi
a36b0101c6 koji_builder: increase sleep time a bit to see if it helps db load 
Right now all builders ask the hub for jobs every 15s.
Bump that out a bit to see if it lowers the pressure on the db server.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-10 20:54:28 -07:00
Kevin Fenzi
f99659cea8 koji_hub: re-add scm policy for scm plugin 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 11:35:23 -07:00
Kevin Fenzi
95fcfe8375 koji_hub: fix matches to include allow 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 11:26:30 -07:00
Kevin Fenzi
aba961e27f koji_hub: dammit, disable outage messages 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 09:46:04 -07:00
Kevin Fenzi
bcb281d40e koji_hub: fix template for hub policy 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 09:37:13 -07:00
Tomas Kopecek
8d99c12ea4 Move SCM policies to the koji hub 
Moving all SCM policies previously defined in each builder to
centralized hub configuration. From now on, any SCM policy change just
needs updating the hub config and reloading it. Builders need nor change
nor reload.

Related: https://pagure.io/fedora-infrastructure/issue/9728

Signed-off-by: Tomas Kopecek <tkopecek@redhat.com>
 2023-06-09 16:18:12 +00:00
Kevin Fenzi
0f4026b2a1 koji_builder: test dnf5 changes in staging 
With dnf5 becoming default in rawhide, we need to make sure to override
things to use dnf4 for making buildroots for now until dnf5 is ready to
take that on.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 13:30:19 -07:00
Kevin Fenzi
d0968906bf ibiblio02: fix duplicate variable 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 10:04:41 -07:00
Kevin Fenzi
19830a2265 ibiblio02: add vpn ccd file 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:38:06 -07:00
Kevin Fenzi
199e58faf6 ibiblio02: do not specify ipv6 prefix twice 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:23:31 -07:00
Kevin Fenzi
b9190670cb ibiblio02: adjust connection settings 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:20:33 -07:00
Kevin Fenzi
bfd7518efd ibiblio: use linux-system-roles/networking on new servers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:16:39 -07:00
Pavel Raiskup
8ce78aaca3 copr-be: Promote Fedora 38 builders to production 2023-06-08 17:30:30 +02:00
Pavel Raiskup
0fc0655e47 copr-builders: don't do gpg checks for epel-6 builds, take #2 2023-06-08 17:19:52 +02:00
Pavel Raiskup
7b1cf87845 copr-builders: don't do gpg checks for epel-6 builds 
Our builders are on Fedora 38 which distrust SHA-1, and I don't see a
way to opt-out from this policy.  Building for epel-6 is already on the
edge, so..
 2023-06-08 17:07:34 +02:00
Pavel Raiskup
860f0ed488 copr-be-dev: move builder images to F38 2023-06-08 13:58:53 +02:00
Kevin Fenzi
8e50b0ebda virthosts: increase process limit on new servers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 18:44:14 -07:00
Lukas Holecek
41272fa237 resultsdb: Use upstream image for prod instance 
Related to: https://pagure.io/fedora-infrastructure/issue/11321
 2023-06-07 23:59:34 +00:00