Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
33177 commits 9 branches 0 tags 111 MiB
Commit graph

33177 commits

This branch
This branch
All branches
Author SHA1 Message Date
Aurélien Bompard
482c0f799c
Don't get user info from LDAP, use FASJSON 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 15:44:15 +02:00
Aurélien Bompard
b2df514b95
Ipsilon: rename the service keytab file for coherence 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 15:28:21 +02:00
Aurélien Bompard
5e359beda9
Ipsilon: deploy the ldap config file 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 15:28:21 +02:00
Pierre-Yves Chibon
97db4e4c5f openshift/bodhi: Fix the route annotations so it actually works 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 15:27:20 +02:00
Pierre-Yves Chibon
116987403f bodhi: attempt to bump the timeout from 30s to 180s 
Both openshift and gunicorn have a timeout. We're ran in the past
in situations where bodhi was a little slow to answer and thus
either gunicorn or openshift were returning a 504 error.
With this commit, we hope to increase both timeout values and thus
give bodhi a little more time to answer.

Hopefully this will help fixing:
https://pagure.io/fedora-infrastructure/issue/9320

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 14:59:49 +02:00
Aurélien Bompard
ea064cbdc6
Ipsilon: don't use ldaps 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 14:57:16 +02:00
Aurélien Bompard
3ba34383b3
Ipsilon: configure the LDAP auth plugin 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 14:41:33 +02:00
Aurélien Bompard
a7ef299d6b
Ipsilon: actually, don't add the form auth plugin, use ldap 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 14:14:40 +02:00
Aurélien Bompard
9ce3b10249
Ipsilon: add the form auth plugin 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 13:53:04 +02:00
Aurélien Bompard
07f4977aac
Ipsilon: remove FAS auth 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 13:20:45 +02:00
Mark O'Brien
3f6538ab52 [proxies] proxy39/40 are cloud 2020-09-16 11:43:36 +01:00
Mark O'Brien
9f7b9f5d54 [proxies] add host vars proxy39/40 2020-09-16 11:41:47 +01:00
Aurélien Bompard
0e4e9bd04f
fix playbook syntax 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 12:18:29 +02:00
Aurélien Bompard
26c74a6a1f
Elections: create the database and database user 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 12:14:03 +02:00
Pierre-Yves Chibon
2384341514 staging-sync/db-sync: Name a few more tasks to have a nicer output 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 12:03:06 +02:00
Pierre-Yves Chibon
66cbb8da16 staging-sync/db-sync: Name the task stopping/restarting apache 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:58:52 +02:00
Pierre-Yves Chibon
f755eef97f staging-sync/db-sync: Fix the condition to ensure the server is defined and not null 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:57:22 +02:00
Pierre-Yves Chibon
cf31e3f0c8 staging-sync/db-sync: Point to batcave01 only instead of all the batcaves 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:53:46 +02:00
Pierre-Yves Chibon
e3943b0e52 staging-sync/db-sync: Allow the deletion of the stg database to fail without breaking the playbook 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:53:46 +02:00
Mark O'Brien
4b57d90fd0 Merge branch 'master' of ssh://pagure.io/fedora-infra/ansible 2020-09-16 10:49:40 +01:00
Mark O'Brien
daac32e272 [batcave] yet more proxies allowed 2020-09-16 10:49:24 +01:00
Pierre-Yves Chibon
c377f97e50 staging-sync/db-sync: strings need quotes 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:48:41 +02:00
Pierre-Yves Chibon
2046802ec5 staging-sync/db-sync: yet another attempt to make the server argument optional 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:47:28 +02:00
Pierre-Yves Chibon
28e5751542 staging-sync/db-sync: when are not a valid attribute for plays 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:38:21 +02:00
Pierre-Yves Chibon
b4ea291fe9 staging-sync/db-sync: Another attempt to make the server optional 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:37:30 +02:00
Pierre-Yves Chibon
c3ad168fb0 staging-sync/db-sync: stop apache after having dumped the prod db 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:30:23 +02:00
Pierre-Yves Chibon
ca8130bdca staging-sync/db-sync: port the playbook to iad2 and make the server argument optional 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:28:15 +02:00
Aurélien Bompard
54d6b32dbc
Elections: add mount path for ipa config 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 10:49:28 +02:00
Aurélien Bompard
833000da02
Elections: fix pre-deployment script 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 10:46:51 +02:00
Aurélien Bompard
cc4ff8266a
Forgot an env var 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 10:39:19 +02:00
Aurélien Bompard
b16660ab24
Setup Elections for FASJSON access 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 10:37:04 +02:00
Aurélien Bompard
d23d79926f
Run Elections on Python 3 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 10:16:55 +02:00
Aurélien Bompard
6733be5986
Update Elections for FASJSON in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 10:11:31 +02:00
Kevin Fenzi
c45ed35ce1 Add resultsdb01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 15:53:26 -07:00
Kevin Fenzi
146e341e26 staging: drop a bunch of no longer needed phx2 stg host_vars 
These are all things that aren't coming back, or already did under a
different name.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 15:36:01 -07:00
Kevin Fenzi
3c4cbc19f5 Add oci-candidate-registry01.stg and oci-registry01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 15:30:58 -07:00
Kevin Fenzi
87d5bc23de openvpn / server: Add ccd file for pagure02 
Note that this just needs to add a new ccd file, nothing has to be
restarted and it can't possibly be used by anything but
'pagure02.fedoraproject.org' so it should not affect freeze on bastion.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 13:48:56 -07:00
Kevin Fenzi
6298c37297 Add compose-x86-01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 13:37:26 -07:00
Kevin Fenzi
ff7f428020 db-koji01.stg: bump the disk size up to 1.5T to match production 
Without this the db doesn't finish loading from prod. ;(

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 13:02:16 -07:00
Kevin Fenzi
9eeeb06726 bodhi-backend01.stg: don't install fedmsg role in stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 10:54:52 -07:00
Kevin Fenzi
a6fc1adcd8 pagure: set max_mem_size 
By default max_mem_size is 5 * mem, but when you get to higher memory
sizes that goes over the memory the host has and installs will fail. Set
it to just what we might ever increase it to.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 10:23:46 -07:00
Kevin Fenzi
348ec04e3a Add pagure02 to rdu-cc 
We want to migrate pagure from rhel7 to rhel8, so we are making a
pagure02 instance thats rhel8. We will sync everything over and get it
all tested and working and then schedule an outage to do a final sync
and swap it in.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 10:20:29 -07:00
Kevin Fenzi
f119e37773 Add bodhi-backend01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-15 10:04:35 -07:00
Siteshwar Vashisht
5118b6817d Update roles/rabbitmq_cluster/tasks/apps.yml 
Add `alt-src` user and queue for `sync2git` service for CentOS Streams
 2020-09-15 07:55:04 +00:00
Kevin Fenzi
7149a5e0d6 vmhost-x86-cc-rdu05: remove duplicate datacenter variable 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-14 16:51:25 -07:00
Kevin Fenzi
5bc03b27a3 fix odcs playbook to not run fas_client or 2fa in staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-14 16:24:58 -07:00
Kevin Fenzi
a34afc5186 staging mbs/odcs: adjust variables for iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-14 16:10:56 -07:00
Kevin Fenzi
5869c9c160 koji prod->stg sync: adjust for new datacenter 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-14 16:01:22 -07:00
Kevin Fenzi
5eca3767e7 Add odcs-frontend01.stg/odcs-backend01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-14 15:40:51 -07:00
Kevin Fenzi
a2ad9bd650 mbs-backend01.stg/mbs-frontend01.stg: These should be rhel7 for now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-14 15:38:37 -07:00