Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
37319 commits 9 branches 0 tags 111 MiB
Commit graph

37319 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
2e8531dd54 oci-candidate-registry01: we do not need 750g anymore now that srv is moved off to a nfs volume 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 15:59:00 -07:00
Kevin Fenzi
44ba32ad10 move oci* in prod to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 15:28:38 -07:00
Kevin Fenzi
edfe391519 oci-candidate-registry: move prod candidate to use a nfs volume 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 15:28:09 -07:00
Kevin Fenzi
9ae8061d6c oci-registry01.stg to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 14:26:18 -07:00
Kevin Fenzi
92867b50a2 base / crypto-policies: move fedora instances back to DEFAULT 
We changed this to DEFAULT:FEDORA32 a while back because the certs for
the old totpcgi sudo needed it to work. Now thats all gone and we are
100% on ipa and sssd, this should no longer be needed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 14:10:20 -07:00
Kevin Fenzi
b86863676e candidate-registry01.stg.iad2.fedoraproject.org: reinstall with f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 14:04:05 -07:00
Kevin Fenzi
2d27fd8c87 kojipkgs02: move to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 12:56:41 -07:00
Kevin Fenzi
766ac3c4c5 kojipkgs01 to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 12:25:04 -07:00
Kevin Fenzi
99eab71b2e haproxy: install socat for dynamic stats/control of haproxy 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 12:22:35 -07:00
Kevin Fenzi
53e1ec2ada certgetter01: reinstall with f36 
(also remove old certgetter01.stg host vars)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 11:52:53 -07:00
Kevin Fenzi
ed817cfc14 armv7-test01/02: moved to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-06 11:44:12 -07:00
Michal Konečný
bda11cb283 [release-monitoring]Fix paths for the hotfixes 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-06 15:58:31 +02:00
Michal Konečný
3a2fac3bb7 [release-monitoring] Migrate to OCP4 on staging 
There are issues when building images on OCP3, let's try to move Anitya to OCP4.
We should do it anyway.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-06 15:41:27 +02:00
Michal Konečný
27948a7cc6 [release-monitoring] Update to f36 on staging 
This also introduces the hotfix for the social_auth issue. So it should be
possible to login on staging.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-06 15:25:53 +02:00
Kevin Fenzi
a087bf17f3 proxies/reversproxy: set some more load balancers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 17:05:26 -07:00
Kevin Fenzi
2e2035011c proxies / reverseproxypass: missed one balancer 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 15:36:41 -07:00
Kevin Fenzi
80ef5e47df proxies / reverseproxypass: try and only 421 ocp4 non iad2 proxies 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 13:44:02 -07:00
Kevin Fenzi
42bc4ea41a proxies / reverseproxy: try just always setting balancer_members and dropping the set facts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 11:47:17 -07:00
Kevin Fenzi
7e90378b30 proxies / reverseproxy: Try and clean up logic and whitespace. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 11:24:24 -07:00
Kevin Fenzi
bf979b32ba proxies / reverseproxypass: just set balancer_members for ocp3 hosts for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 10:26:09 -07:00
Kevin Fenzi
2ce1199ae8 proxies / reverseproxypass: try setting this 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 09:55:57 -07:00
Kevin Fenzi
0e1d9f6ea7 proxies / reverseproxy: try some different logic 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 09:30:58 -07:00
Kevin Fenzi
07385d35ed proxies: drop old totpcgi provision 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 21:40:17 -07:00
Kevin Fenzi
dc6b7697c1 proxies / reverseproxy: unset balancer_members after each template so it can get set right for the next one 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 21:05:37 -07:00
Kevin Fenzi
e2deffab4e proxies / reverseproxy: consolidate non openshift-iad2 case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 14:51:33 -07:00
Kevin Fenzi
03fe998142 proxies / reverseproxy: also special case the old resultsdbapi 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 14:25:32 -07:00
Kevin Fenzi
77bdc05883 proxies / reverseproxy: work around taskotron with its own config 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 14:04:07 -07:00
Kevin Fenzi
6d99b43608 proxies / reverspassproxy: fix loop 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 20:51:46 -07:00
Kevin Fenzi
6a0727c9e6 proxies / openqa: rework conf file to avoid issue with openqa and its websockets 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 20:15:36 -07:00
Kevin Fenzi
dc3c271c62 mailman: add banner for survey 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 19:09:09 -07:00
Kevin Fenzi
2685496897 noggin: add survey banner. see ticket 10740 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 18:59:54 -07:00
Kevin Fenzi
b98ef3ec95 proxies / staging: set openshift_nodes_stg to openshift_nodes in this case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 18:26:36 -07:00
Kevin Fenzi
7455b3fdb1 proxies / reverseproxy: fix missing ) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 14:22:13 -07:00
Adam Williamson
479388a242 openqa: use updates-testing builds on all prod/stg 
We don't need the scratch builds on stg any more now we've sent
the new builds to updates-testing. We *do* want to use the builds
from u-t on prod now (I don't want to wait a week for the stable
push).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-03 13:25:05 -07:00
Kevin Fenzi
52a8936914 proxies: rework reversepassproxy and mark all ocp4 / ocp3 apps 
The ocp3 cluster is reachable/available via the vpn, so any proxy can
reach it.

The ocp4 cluster is (at least for now) only reachable/available from the
iad2 proxies (proxy01/proxy10).

There's a firefox bug that causes it to reuse h2 connections, and in
some cases try and request something of a non iad2 proxy that it can't
reach. To work around this in those cases we need to send a 421 back to
the client so it doesn't do that.

This moves that logic into the template so all ocp4: true hosts do this
by default. Also, we default the balancer nodes so we only have to
change them in one place if we remove/add a compute node.

Finally, we mark all the ocp3 apps with 'ocp4: false' so we know what
they are and can move them more easily.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 13:14:28 -07:00
Kevin Fenzi
5b3eadb7d5 ipsilon01: try again to upgrade 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 11:54:05 -07:00
Kevin Fenzi
575d1ea238 pagure: increase processes 
pagure was processing a lot of things, increasing this seemed to help.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 11:41:11 -07:00
Aurélien Bompard
6b9d639421
ipsilon: add sebooleans on f36 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-03 09:55:25 +02:00
Kevin Fenzi
6ef504d18c ipsilon01: move back to f34 for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 17:16:03 -07:00
Kevin Fenzi
dd25b74d82 ipsilon01: move to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 16:08:36 -07:00
Kevin Fenzi
a180488e0d ipsilon: drop staging conditional on wsgiscriptalias 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 15:28:32 -07:00
Kevin Fenzi
b68200e0bc ipsilon: make sure /etc/ipsilon/root is owned by ipsilon 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 15:25:22 -07:00
Kevin Fenzi
17959a301c base: no more docker anywhere, drop this 
We aren't using docker anywhere anymore, so we don't need to uselessly
try and restart it all the time.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 15:14:54 -07:00
Kevin Fenzi
618512b9eb ipsilon02: actually install with f36, not f34 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 15:04:54 -07:00
Kevin Fenzi
4970ed8ffe ipsilon: increase disk size and memory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 14:02:33 -07:00
Kevin Fenzi
b5036aac85 grokmirror: set correct manifest path 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 13:13:30 -07:00
Kevin Fenzi
530c06d70d internetx01: goodbye, farewell, amen 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 12:53:50 -07:00
Kevin Fenzi
e37f4d7917 grokmirror 2.0 changes 
grokmirror 2.0+ merges the old fsck and repos configs into one
grokmirror config.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 12:50:41 -07:00
Adam Williamson
629f56f464 openqa-a64-worker01: try using ifnames interface names 
I cannot get NM to stop bringing eth0 up, so let's try using
ifnames names for the interfaces instead.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-02 11:58:26 -07:00
Kevin Fenzi
a0d3e1f2c0 Revert "image-builder: enabling osbuild plugin on builders" 
This reverts commit d3ab265a97.

Seems this is causing kojid to not start on most all of the prod
builders, leaving builds waiting forever. ;(

Reverting it for now.
 2022-06-02 11:23:49 -07:00