Infrastructure/ansible
5
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions
37606 commits 9 branches 0 tags 110 MiB
Commit graph

45 commits

Author SHA1 Message Date
Aurélien Bompard
d083b291d3
sent_topics can't be a list, it has to be a single regexp 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-07-07 09:09:24 +02:00
Aurélien Bompard
4249161ad0
RabbitMQ: add topic auth to more apps 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-07-05 08:35:10 +02:00
Kevin Fenzi
fcbc972afa mirrormanager / staging: mount in stg too 
We want /pub and such in stg too to test things.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-27 15:21:42 -07:00
Kevin Fenzi
fd72c22857 Freeze break request: move /pub/archive from fedora_ftp to fedora_ftp_archive volume 
Our fedora_ftp volume is on an SSD aggregate thats running out of space.
So, lets move /pub/archive (17TB) off it on to it's own volume on a
SAS aggregate. archive gets less traffic that other releases, so it
shouldn't be a problem. This will mean however when we archive a release
it will cause a bunch of deletes and re-downloads for mirrors because we
can no longer hardlink content over and then delete it, but there is no
help for that.

I will also notify mirror-admins list about this pending action.
There shouldn't be any short term issues.

Once this PR is merged, we need to run playbooks, then go to a host with
rw access to fedora_ftp and rm the archive tree on it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-15 19:53:08 +00:00
Nils Philippsen
2d4ec8d259 Apply openvpn/client role before ipa/client 
This is so hosts on the Fedora VPN are able to talk to IPA before they
try to enroll.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-24 18:19:11 +01:00
Nils Philippsen
79a6fe36da ipa/client: enable for mirrormanager in prod 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-24 13:44:33 +01:00
Kevin Fenzi
ca10e37592 playbooks / staging: adjust playbooks for staging to configure fedmsg if needed 
When we setup things we didn't setup fedmsg in iad2 staging.
Now we are using it, so we should configure it until we get rid of it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-01 14:51:09 -08:00
Mark O'Brien
4e33f7c5d7 remove trailing backslash 2021-02-12 14:22:40 +00:00
Mark O'Brien
5e3848ad7b add ipa client role to hosts with no fas in staging 2021-02-12 14:22:40 +00:00
Kevin Fenzi
1b5084eb48 Add mm-backend01.stg/mm-crawler01.stg/mm-frontend01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-16 13:00:36 -07:00
Stephen Smoogen
8d5fc4ced0 Various mirrormanager items were hardcoded to phx2 and needed to be 
updated to iad2 so that propogation and other rules were put in
place.
 2020-06-13 15:37:46 -04:00
Kevin Fenzi
7aba98780e fedora-messaging-migration: Patches from Karsten Hopp to move script calling things from fedmsg to fedora-messaging 
We will need to check these services after pushing this out and confirm
that they are still emitting or hearing messages they need to.

Many thanks Karsten!
 2020-04-24 21:34:16 +02:00
Rick Elrod
ec21b71306 mirrormanager: include fedora cycle vars the correct way 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-05-29 23:20:37 +00:00
Rick Elrod
a1e745978f do I need to manually import this? 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-05-29 23:04:43 +00:00
Kevin Fenzi
80d8694583 ansible: fix -- mistake for import_playbook 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-20 18:23:42 +00:00
Kevin Fenzi
2d1cf41c9f ansible: fix the virt-create calls 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-20 18:19:27 +00:00
Kevin Fenzi
4b31ac5152 ansible: Change all our group names from foo-bar to foo_bar or foo-bar-baz to foo_bar_baz 
In ansible 2.8 the - character isn't supposed to be valid in group names.
While we could override this, might has well just bite the bullet and change it.
So, just switch all group names to use _ instead of -

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-20 17:38:09 +00:00
Stephen Smoogen
3e3632fa62 fix all playbooks so that yumrepos is a pre_task 2018-10-31 15:38:38 +00:00
Kevin Fenzi
afef097a3d switch all the include tasks to import tasks 2017-10-17 17:37:03 +00:00
Kevin Fenzi
d9ee0059b4 typo on a massive scale 2017-10-15 20:33:11 +00:00
Kevin Fenzi
69fd8d117a switch all the handlers to import and drop the global static import 2017-10-15 20:29:59 +00:00
Kevin Fenzi
1bf960425f this needs to be imported not included 2017-10-15 19:54:19 +00:00
Kevin Fenzi
ceff9bfca4 first stab at replacing include with include_playbook or includ_tasks 2017-10-15 19:46:08 +00:00
Stephen Smoogen
d0b6c8ce06 and this is how you break everything before going on a week vacation 2017-05-05 22:12:33 +00:00
Kevin Fenzi
0acfaa2a7e Fix handlers, roles, and tasks to be handlers_path, roles_path and tasks_path so as not to conflict with ansible variables. 
Fix duplicate definition of become default that was in group_vars/all as well as vars/global.
 2017-04-13 15:46:14 +00:00
Ralph Bean
2226a9eae9 s/nagios_client/nagios\/client/g 2016-02-23 02:33:30 +00:00
Kevin Fenzi
9815e9ac58 Use : instead of ; between host/group names. ; is depreciated and will go away someday. 2016-02-02 21:03:19 +00:00
Adrian Reber
ed6dc3bd28 Need geoip on the MM backend for maps creation 2015-12-17 19:31:01 +00:00
Kevin Fenzi
1eebfb27b3 Add vpn to non phx2 mm-crawlers 2015-09-03 20:48:37 +00:00
Kevin Fenzi
facc6b217c Drop 16 lines that we can collapse into one line. 2015-08-18 19:26:55 +00:00
Patrick Uiterwijk
d2052d3f9e Add ansible and fedmsg endpoints for mm 2015-07-28 18:19:40 +00:00
Kevin Fenzi
2c5a5af8a1 Add s3-mirror role to mm-backend01 
Add cron job for s3logs-sync, but disabled for now.
 2015-07-27 19:37:54 +00:00
Adrian Reber
48f1f8c31b Only add rsyncd role if env != staging 2015-06-22 19:44:20 +00:00
Adrian Reber
a5bc52c240 Add rsyncd role to the MM crawlers 
To provide access to the crawler logs on the mm frontend the crawlers
are now exporting their logs over rsync.
 2015-06-22 19:34:35 +00:00
Ralph Bean
3c1df2b542 Add the fedmsg/base role to the mm2 nodes. 2015-05-07 01:03:40 +00:00
Ralph Bean
c149adc9b2 Break the mirrormanager nodes out into sub groups. 2015-05-07 00:54:54 +00:00
Adrian Reber
b7c6fe0f48 make mm-crawler02 also a crawler 2015-05-06 08:31:57 +00:00
Kevin Fenzi
d515df902b We only need vpn on the frontend I think. 2015-04-24 19:50:38 +00:00
Kevin Fenzi
81a26fad8d mirrormanager 2 production instances. 2015-04-24 18:53:40 +00:00
Kevin Fenzi
d64ab29c0e New ansible doesn't like expanding {{ private }} in the same list of vars files it's defined in. 2015-01-09 22:59:18 +00:00
Kevin Fenzi
c491f23eb4 Attempt to move new mirrormanager frontend to frontend2 and bring old one back so sundries isn't broken. 2014-12-18 15:22:40 +00:00
Kevin Fenzi
c19f48a5e3 Only have nfs mount on backend. 2014-12-08 19:58:31 +00:00
Pierre-Yves Chibon
0bc817d066 Add the tasks to set up the backend, crawler and frontend 2014-12-08 20:45:01 +01:00
Kevin Fenzi
78fa37c34d Add nfs mount for mm-backend01.stg 2014-12-05 17:41:43 +00:00
Kevin Fenzi
5baac0feac Fix some more names 2014-12-05 16:09:33 +00:00
Renamed from playbooks/groups/mirrormanager2.yml (Browse further)