Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
33177 commits 9 branches 0 tags 111 MiB
Commit graph

33177 commits

This branch
This branch
All branches
Author SHA1 Message Date
Luca BRUNO
c83ae5a9c9
coreos-cincinnati: deploy latest master (e13c758) 2020-09-02 09:43:55 +00:00
Aurélien Bompard
1000908288
Fixup the keytab thingy 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 22:56:23 +02:00
Aurélien Bompard
392e547601
Support getting a host keytab from IPA 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 22:42:56 +02:00
Aurélien Bompard
2af8ad94c9
FASJSON: get the host keytab 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 22:26:21 +02:00
Kevin Fenzi
bfcf91830b proxies / staging: adjust fasjson website a bit 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-01 11:27:11 -07:00
Kevin Fenzi
f2fd9f897c koji_builder / kojid: on failure, restart kojid 
kojid from time to time hits OOM-killer and is killed, making the
builder basically never checkin or run builds until a manual restart.
Setting this should restart it after such a OOM event and hopefully keep
it processing.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-01 17:58:32 +00:00
Kevin Fenzi
69cec0c4f6 proxies / staging: add fasjson.stg website/reverseproxy 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-01 10:39:25 -07:00
Mark O'Brien
e4e6ede45b [proxies] add proxy37/38 2020-09-01 15:45:29 +01:00
Mark O'Brien
1826de3261 [batcave] allow access to new proxy servers 2020-09-01 14:53:49 +01:00
Aurélien Bompard
9717fadb44
Ansible modules for IPA: don't validate the certs 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 15:43:49 +02:00
Aurélien Bompard
105bd01e3a
Typo in daf96ef 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 15:39:56 +02:00
Aurélien Bompard
6788ce0ab1
Noggin: re-enable Fedora Messaging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 15:37:08 +02:00
Aurélien Bompard
8334489a75
FASJSON: fixup install 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 15:36:36 +02:00
Aurélien Bompard
44734cabb1
Noggin: leave a space for FAS 2020-09-01 15:35:50 +02:00
Aurélien Bompard
daf96efd15
IPA: use ansible modules and tasks wherever possible 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 15:34:07 +02:00
Aurélien Bompard
944431bf59
IPA: Allow users to read their own data 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 00:11:45 +02:00
Kevin Fenzi
58aafea954 rabbitmq staging: Use correct kickstart 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 15:10:07 -07:00
Kevin Fenzi
48fbac9ea9 inventory: rabbitmq03.stg: move to vmhost-x86-05 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 14:55:16 -07:00
Kevin Fenzi
a1e25a4467 Add staging rabbitmq cluster machines. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 14:30:57 -07:00
Kevin Fenzi
c7cf438e8c fedora-web: adjust to staging not having sysadmin-releng group. 
Since we are not using fas in staging, but are switching to noggin, we
currently don't have the sysadmin-releng group. For now, just switch to
apache.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 14:09:02 -07:00
Aurélien Bompard
b2cdf5dc62
Now that IPA is the reference, allow users to change their own attributes 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 22:59:00 +02:00
Kevin Fenzi
e200f371dc fas_client: change cron to generate new aliases every 10min instead of once a day 
There seems to be a increase in number of people wanting to use their
fedoraproject.org alias right away. So, increase the time we generate
it. It currently takes 14seconds to run it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 20:55:23 +00:00
Kevin Fenzi
6e7844e5e6 sundries01.stg: This host has to be rhel7 for now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 13:30:55 -07:00
Kevin Fenzi
13b543f11b Add db-fas01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 10:42:39 -07:00
Aurélien Bompard
28ae976ab2
Add permissions to the noggin user to activate stageusers 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 19:12:54 +02:00
Aurélien Bompard
d5b73b81a5
Disable Fedora Messaging in Noggin 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 19:12:54 +02:00
Kevin Fenzi
3972fa34f8 inventory: add sundries01.stg to inventory too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 10:00:43 -07:00
Kevin Fenzi
f73f3fc218 Add db01.stg and sundries01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 09:58:18 -07:00
Stephen Smoogen
b5d1ea15db remember to put something in the [staging] group so it gets that groups environment variables 2020-08-31 11:56:54 -04:00
Aurélien Bompard
4be8fab65e
Adjust healthz probes 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 17:47:51 +02:00
Aurélien Bompard
4fa318d86c
Noggin: set the script_name env var 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 17:46:35 +02:00
Stephen Smoogen
fede1317e7 proxy*.stg.iad2.fedoraproject.org is not on the vpn 2020-08-31 11:09:14 -04:00
Aurélien Bompard
ab34b044a6
Noggin: set the application root 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 16:59:51 +02:00
Aurélien Bompard
7b2d93d56a
Fix cutnpaste error 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 16:50:36 +02:00
Stephen Coady
aecb40588c add config flag to allow single run 
Signed-off-by: Stephen Coady <scoady@redhat.com>
 2020-08-31 15:19:08 +01:00
Luca BRUNO
659127219f
coreos-cincinnati: build latest master (e13c758) 2020-08-31 11:36:58 +00:00
Aurélien Bompard
78736ad275
Configure the noggin route 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 12:52:16 +02:00
Nils Philippsen
45e9d773ac Reference staging openshift hosts in IAD2 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-08-31 12:00:31 +02:00
Kevin Fenzi
9e1301c417 planet: add fedora-messaging certs, user and config 
The venus package was changed to use fedora-messaging, but we need to
now install certs, make a rabbitmq user and add a config for it to use.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-30 10:46:24 -07:00
Stephen Smoogen
a8b9a38ec0 a host_vars for the proxy02.stg box 2020-08-28 14:32:03 -04:00
Stephen Smoogen
91dc7a083a put in second stage proxy for us to work with 2020-08-28 13:17:15 -04:00
Stephen Smoogen
2af95e59f4 put in changes for rdu-cc hosts 2020-08-28 11:22:38 -04:00
Stephen Smoogen
15348981f8 try to fix part of ticket #9273 by increasing the number of open files allowed on log servers and people as they have a large number of files to deal with. 2020-08-28 08:26:19 -04:00
Nils Philippsen
750dc6da45 Add playbooks to manually backup/restore IPA (stg) 
This is to be able to restore things to a clean slate when we test the
fas2ipa data migration script.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-08-27 23:30:24 +00:00
Mark O'Brien
2cc7c82fb2 [proxies] ensure dir exists 2020-08-27 15:13:19 +01:00
Kevin Fenzi
005af159b6 nfs/client: Correct netapp name for staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 15:53:44 -07:00
Kevin Fenzi
2af0042d5c koji01.stg: rename some files to the current domain name. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 15:46:55 -07:00
Kevin Fenzi
c9e3752a3f koji-hub: do not apply fas_client or 2fa in staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 15:38:07 -07:00
Kevin Fenzi
2379b465ab postgres / server / koji sessions script: remove 
Turns out copy module doesn't actually have a 'absent' state.
So, just remove this (we no longer need it as there's a timer on koji
hub that does this from there).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 13:50:33 -07:00
Kevin Fenzi
9ece52bcca Fix virthost names for stg instances. 
We renamed bvirthost to bvmhost...

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 13:28:28 -07:00