Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
31420 commits 9 branches 0 tags 111 MiB
Commit graph

31420 commits

This branch
This branch
All branches
Author SHA1 Message Date
Stephen Smoogen
e2a8626eee start standing up openqa for iad2 2020-05-29 11:42:14 -04:00
Pierre-Yves Chibon
fb4bc2cf84 Fix some problems found by ansible-review. 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-05-29 10:28:49 +00:00
Nils Philippsen
42170b4a93 Zuul: Verify that local jobs are namespaced 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-05-29 10:28:49 +00:00
Nils Philippsen
97be9cdc8d Zuul: use repo-local job playbooks again 
Use our own namespace (fi-ansible) to not clash with tenant-wide defined
Zuul jobs e.g. from zuul-fedora-jobs.

Fixes: fedora-infrastructure#8932

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-05-29 10:28:49 +00:00
Kevin Fenzi
93b435f3ba DISABLE DOCS SYNC: we need to figure out space issues before re-enabling 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 21:05:08 -07:00
Kevin Fenzi
c049f87179 mirrormanager: do not install the cron jobs on mm-backend01.iad2 yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 19:00:51 -07:00
Kevin Fenzi
432bd703d7 iad2: add a resultsdb01 instance in iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 17:19:13 -07:00
Kevin Fenzi
a4173d7056 backup01.iad2: just don't try and manage the networking here yet. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 17:18:06 -07:00
Kevin Fenzi
b8c7d13fb7 koji_builder: remove last remnant of old hotfix for oz 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 17:05:08 -07:00
Kevin Fenzi
1d5d09a6fc base ifcfg template: fix logic, we need a elif not if there 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 16:56:15 -07:00
Kevin Fenzi
d0fd4a2e16 iad2: drop python-krbV, not needed anymore. Drop auth.py patch file thats not needed anymore. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 16:53:17 -07:00
Stephen Smoogen
a93c9169f5 fix logic to work with eno interfaces and add in logic for dual datacenters 2020-05-28 18:37:17 -04:00
Kevin Fenzi
189194a7d1 iad2: fix kojibuilder resolv.conf for iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 14:40:04 -07:00
Kevin Fenzi
eaf3837e58 kojibuilder: Break out a new set of iptables rules for iad2 
Put all the rules in the kojibuilder file so we can just nuke the phx2
part later and not have to move groups around, etc.

Also, nuke the old unused bkernel network template.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 14:40:04 -07:00
Stephen Smoogen
389f7acd64 using external DNS is no longer needed 2020-05-28 16:10:38 -04:00
Kevin Fenzi
e2aff9caf8 iad2: add bkernel01.iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 12:57:31 -07:00
Stephen Smoogen
24333894bf Merge branch 'master' of ssh://pagure.io/fedora-infra/ansible 2020-05-28 15:31:23 -04:00
Stephen Smoogen
98e5934b05 dhcp is telling my fine friend to use the wrong ip address. fix that mistake 2020-05-28 15:31:18 -04:00
Kevin Fenzi
83d76a8614 iad2: haproxy: fix up openshift certs so iad2 and phx2 are correct and both install. Just copy the phx2 ipa pem for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 10:46:48 -07:00
Kevin Fenzi
61b72228ec inventory: add backup01.iad2 to iad2 group, remove taskotron from backups 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 10:25:47 -07:00
Kevin Fenzi
51a68ea0ae iad2: simplify proxy logic for multiple datacenters and make it one that works 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-28 10:12:58 -07:00
Stephen Smoogen
5a0e6ebcbf qvmhost-x86-02.iad2.fedoraproject.org: Set up initial variables so system can be put in place 2020-05-28 12:28:31 -04:00
Stephen Smoogen
79ae83e3f2 fix dhcp for interface0 2020-05-28 09:42:22 -04:00
Luca BRUNO
55f2dd3740
coreos-cincinnati: provision on IAD2 prod too 
Signed-off-by: Luca BRUNO <luca.bruno@coreos.com>
 2020-05-28 12:30:18 +00:00
Michal Konečný
e16b768c89 the-new-hotness: Remove obsolete config options 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2020-05-28 12:07:09 +00:00
Clement Verna
9fafa15626 bodhi: try running gunicorn in prod 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-05-28 13:02:27 +02:00
Clement Verna
da405d3326 bodhi: fix the gunicorn command in stg 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-05-28 12:36:02 +02:00
Clement Verna
9877e10272 bodhi: fix the indentation of deploymentconfig.yml 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-05-28 10:40:04 +02:00
Michal Konečný
fcfeb5d276 the-new-hotness: It was not a good idea to remove pip 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2020-05-28 10:34:02 +02:00
Clement Verna
9347596a29 bodhi: try running gunicorn in stg 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-05-28 10:20:59 +02:00
Michal Konečný
efaf7bc76c the-new-hotness: Sync Dockerfile with vagrant env 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2020-05-28 07:14:10 +00:00
Merlin Mathesius
836b63d1ec odcs: add "cccc" raw_config compose that can be run by the "eln-sig" group 
Signed-off-by: Merlin Mathesius <mmathesi@redhat.com>
 2020-05-28 05:31:21 +00:00
Kevin Fenzi
7f6cdda0b2 iad2: adjust more proxy things for iad2: kojipkgs, nagios and certbot for pkgs 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-27 21:13:55 -07:00
Kevin Fenzi
7bbd1bd030 add iad2 networks to kojipkgs varnish config 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-27 17:50:37 -07:00
Nick Bebout
bf9b27d6b8 IAD2 view should use IAD2 version of zones 2020-05-27 17:57:18 -05:00
Kevin Fenzi
27ab92f730 bodhi: adjust max requests to 500 and increase timeout 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-27 14:46:15 -07:00
Clement Verna
f8996663de bodhi: update the static file path to use python3.8 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-05-27 23:10:33 +02:00
Clement Verna
1ff1e6b2b4 bodhi: update the version of the package to install 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-05-27 23:00:14 +02:00
Clement Verna
4e041e86dc bodhi: move bodhi-base container image to f32 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-05-27 22:51:51 +02:00
Stephen Smoogen
6ba67fa3be add in correct mac address for sign-vault01 2020-05-27 16:22:05 -04:00
Clement Verna
ea38379212 bodhi: switch back the haproxy timeout to 30s 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-05-27 22:16:54 +02:00
Kevin Fenzi
be3d025dad phx2: bodhi: try restarting httpds more often/fewer requests 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-27 13:05:13 -07:00
Kevin Fenzi
6480a0dac4 bodhi: use fqdn for database. it seems to not resolve sometimes in openshift 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-27 11:47:01 -07:00
Stephen Smoogen
581f7feec9 have docs-rsync not sync over the ar.rebuilding directory which will have incomplete and duplicaed data 2020-05-27 14:19:17 -04:00
Kevin Fenzi
508353cc74 openvpn/client: fix all non phx2 openvpn clients to have a remote again 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-27 09:18:12 -07:00
Stephen Smoogen
a142fc7a92 fix the fix 2020-05-27 12:04:42 -04:00
Stephen Smoogen
c4b8ddd804 fix rabbitmq and tang variables which made moving to new datacenter and current operations problematic 2020-05-27 12:03:25 -04:00
Kevin Fenzi
5b6a1e72b5 phx2: fix tang prod gateway too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-27 09:02:48 -07:00
Kevin Fenzi
1da1d5c97f phx2: fix gateway on rabbitmq prod machines 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-27 08:52:13 -07:00
Pierre-Yves Chibon
4d2f3eb5ac distgit/pagure: flip httpd_can_network_connect on the host 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-27 16:37:29 +02:00