Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
31296 commits 9 branches 0 tags 111 MiB
Commit graph

31296 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
18f67ef9ee rabbitmq: also add to inventory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 16:34:54 -07:00
Kevin Fenzi
70fff265a7 rabbitmq: setup a iad2 cluster. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 16:33:06 -07:00
Kevin Fenzi
d00bc3b65f collectd / server: drop ping as it's not shipped in rhel8 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 15:36:07 -07:00
Kevin Fenzi
396b33d37e openvpn/server: also copy log01 from phx2 to iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 15:31:54 -07:00
Kevin Fenzi
883adb5c45 logserver: also run vpn in iad2 to bastion01.iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 15:09:07 -07:00
Kevin Fenzi
a8c53bf27d openvpn/server: clean up ccd files for a bunch of old hosts that should not ever be connecting anymore 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 14:15:56 -07:00
Kevin Fenzi
eb065f1e99 openvpn/server: Add some iad2 ccd files for openvpn server 
Note that we want the iad2 things to keep the exact same ip as their
phx2 counterparts, this allows dns to stay the same for both
datacenters.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 14:05:07 -07:00
Kevin Fenzi
2e1f58b3d2 iad2: os-cluster: re-add vpn (pointing to bastion01.iad) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 13:54:45 -07:00
Kevin Fenzi
998a7beb31 iad2: openvpn/client: point all the iad2 instances to use the iad2 bastion 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 13:33:12 -07:00
Michael Scherer
4eee290230 Remove safety measure now that's validated 
Also prevent sundries from filling up.
 2020-05-18 21:14:32 +02:00
Kevin Fenzi
3fa172f847 openshift: setup the infra labeled nodes correctly so we can run infra services 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 09:27:08 -07:00
Kevin Fenzi
80c15f6bf1 iad2: set all the iad2 os cluster to use iad2 resolv.conf 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 07:23:30 -07:00
Mark O'Brien
3284fac7eb [mailman] infra-8905 blacklist elitetorrent1.com with spamassassin 2020-05-18 11:10:18 +01:00
Kevin Fenzi
292865effb iad2: openshift: adjust memory and cpus and such. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-17 20:18:17 -07:00
Kevin Fenzi
1ddae8f094 openshift hosts: update registry.redhat.io ip 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-17 15:38:49 -07:00
Kevin Fenzi
78dbc271d9 os-cluster: fix nesting logic error, need if/endif inside each endfor 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 12:24:24 -07:00
Kevin Fenzi
e6784105c6 chrony: make whitespace change in iad2 to check restarting 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 12:02:10 -07:00
Kevin Fenzi
9f6463ce8f chrony: add handler to restart on config changes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 12:01:22 -07:00
Kevin Fenzi
855b87b3d7 chrony: fix template to work in iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 11:41:48 -07:00
Kevin Fenzi
c1382106f5 ansible-ansible-openshift-ansible: shuffle inventory and such so iad2 cluster only lists iad2 nodes, etc. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 11:12:48 -07:00
Kevin Fenzi
4b7c31a882 cleanup: remove all the duplicate tests for selinux python bindings in favor of the ones in base. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 10:54:58 -07:00
Kevin Fenzi
5432763f39 chrony: drop task to stop/disable ntp, we will not even install it anymore 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-16 10:40:43 -07:00
Adam Williamson
bb3146d753 relvalconsumer: pin git checkout to pre-'dist' code for now 
I cut a new release for some exciting wikitcms changes, but I
don't want to deploy those on a Friday evening. So pin to the
previous commit for now.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-05-15 19:05:06 -07:00
Stephen Smoogen
7b4872c557 IAD2this should work.. I bet it wont 2020-05-15 20:23:26 -04:00
Stephen Smoogen
2f02466f90 ok this shold revert change 2020-05-15 20:15:41 -04:00
Stephen Smoogen
5327f28dfb nagios syntax is weirdly specific at times 2020-05-15 20:10:40 -04:00
Stephen Smoogen
cb8b68bc18 put more checks for able to connect 2020-05-15 19:54:12 -04:00
Stephen Smoogen
6dfcc7d2d7 and one more place to make it work 2020-05-15 19:46:41 -04:00
Stephen Smoogen
39c2fd442a this will make sure -l nagios_hosts does all the hosts templates 2020-05-15 19:43:50 -04:00
Stephen Smoogen
258a2826bf remove iad2 staging hosts. there is no staging in iad2 2020-05-15 19:37:27 -04:00
Stephen Smoogen
0163e646ad try a different way to get this working 2020-05-15 19:32:44 -04:00
Stephen Smoogen
d7080ffee1 add in an endif for nagios 2020-05-15 19:18:03 -04:00
Kevin Fenzi
15444ab882 iad2: inventory: add bvmhost-x86-06 to inventory too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-15 16:17:10 -07:00
Kevin Fenzi
e102aa48b8 iad2: add bvmhost-x86-06 host vars 2020-05-15 16:15:26 -07:00
Stephen Smoogen
7302c69652 add in external iad2 for monitoring 2020-05-15 19:11:20 -04:00
Stephen Smoogen
3ba920f5bc put in tests to remove nagios from trying to talk to iad2 boxes 2020-05-15 19:06:56 -04:00
Stephen Smoogen
d063026722 Added data for ns02.iad2.fedoraproject.org which is the secondary dns server in IAD2. 2020-05-15 17:52:54 -04:00
Kevin Fenzi
4c09ca4ada iad2: openshift: call a seperate role for the new iad2 cluster 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-15 13:16:13 -07:00
Pierre-Yves Chibon
14e760a144 callback: specify which configuration file to use for fedora-messaging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-15 15:06:37 +02:00
Pierre-Yves Chibon
a21b274209 Batcave: add support for fedora-messaging 
Install the certificates needed to connect to fedora-messaging
Install a configuration file applications can use to send messages
to the message bus using fedora-messaging.
Create the batcave user in rabbitmq

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-15 12:57:54 +00:00
Kevin Fenzi
0290f57cfb also send git emails to nowhere 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-14 15:36:58 -07:00
Mohan Boddu
d41cc84f22 Making mp multilib blacklist and dssi-vst-wine whitelist 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-05-14 22:07:17 +00:00
Kevin Fenzi
cff5bed5f2 os-cluster: do not install vpn in iad2 for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-14 14:58:44 -07:00
Kevin Fenzi
14d6353927 iad2: no vpn for openshift for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-14 14:50:38 -07:00
Kevin Fenzi
0f0910c639 handlers: re-add the xinetd handler we removed because we thought surely nothing could be using this in the year of our lord 2020. OH well 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-14 14:34:16 -07:00
Mark O'Brien
b7016e09b7 [iad-openshift3] update to correct ips for vhosts 2020-05-14 22:07:39 +01:00
Pierre-Yves Chibon
dab9296b8c Attempt to make self.play_context.connection JSON serializable 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-14 22:54:54 +02:00
Pierre-Yves Chibon
9c6e27ca13 Attempt to see if the error itself can give us a little more information 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-14 22:51:53 +02:00
Pierre-Yves Chibon
3f7c896509 Add print in addition to the logger (that isn't set up) in the fedora_messaging callback - take #2 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-14 22:44:30 +02:00
Pierre-Yves Chibon
8189b0f964 Add print in addition to the logger (that isn't set up) in the fedora_messaging callback 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-14 22:41:56 +02:00