Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
33349 commits 9 branches 0 tags 111 MiB
Commit graph

33349 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
e5606578de base: try changing f33 crypto-policies to a less open version to get 2fa working 
LEGACY allows all kinds of old junk, lets try and just
enable the things that FEDORA32 allowed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-03 14:10:39 -08:00
Stephen Smoogen
6de5698aa6 Add in signed keys for iad2 and rdu-cc zones. 
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2020-11-03 16:56:36 -05:00
Mohan Boddu
de50b94c0c Adding autosigning on eln side tags 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-11-03 19:21:26 +00:00
Mark O'Brien
dfa0169b7a osbs: increase vol size aarch64 staging 2020-11-03 10:22:28 +00:00
Mark O'Brien
0770979c55 aarch builders: remove builders in stage to make room for osbs 2020-11-02 17:53:53 +00:00
František Zatloukal
4261975aa3 Testdays: Fix RDB url 2020-11-02 16:51:57 +01:00
František Zatloukal
c22b10374b Testdays: fix indent 2020-11-02 16:33:02 +01:00
František Zatloukal
992be42845 Testdays: Fix error in bc 2020-11-02 16:31:56 +01:00
František Zatloukal
e28852c22e Testdays: Purge serivce 2020-11-02 16:17:00 +01:00
František Zatloukal
c11f1ecb9e Testdays: Resulstdb link 2020-11-02 16:10:32 +01:00
Pierre-Yves Chibon
7b089785b2 testdays: more indentation fixes 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-02 15:17:18 +01:00
Pierre-Yves Chibon
8bd054f708 testdays: fix indentation 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-02 15:15:23 +01:00
František Zatloukal
0335579fa2 testsdays: add a local/custom resultsdb instance just for us 2020-11-02 15:08:34 +01:00
Mark O'Brien
3bd8ec31b9 osbs: stage aarch64 try smaller volumes 2020-11-02 14:00:42 +00:00
Mark O'Brien
4943f0f31e osbs: use normal builders for osbs aarch64 stage 2020-11-02 11:32:28 +00:00
František Zatloukal
2a8a2ac75a Testdays: Try without explicit gunicorn 2020-11-02 10:33:57 +01:00
Kevin Fenzi
48e878b9fe testdays: fix up testdays proxying in staging 
It was redirecting it to the old fedorainfracloud ip.
Then it wasn't proxying to openshift.

When moving to prod, the conditionals here should be removed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-01 11:33:52 -08:00
Jakub Kadlcik
47a0701583 copr: stop disabling systemd-resolved, the RHBZ 1710699 is already fixed 
This works just fine now:

    $ mock --enable-network -r fedora-rawhide-x86_64 --shell
    ...
    <mock-chroot> sh-5.0# curl https://copr.fedorainfracloud.org/
    curl: (6) Could not resolve host: copr.fedorainfracloud.org
 2020-11-01 18:11:54 +01:00
Jakub Kadlcik
39ea93ca97 copr: remove the python3-rpkg-1.60, RHBZ 1879471 is already fixed 2020-11-01 18:11:54 +01:00
Jakub Kadlcik
9d9880379d copr: upgrade dev builders to F33 2020-11-01 18:11:54 +01:00
Jakub Kadlcik
4f97eae38b copr: login as "fedora" user instead of root 
Otherwise we get following error

    Please login as the user "fedora" rather than the user "root".

Which messes up our variables - `$fedora` contains the `Please login
as the user "fedora" rather than the user "root".` warning and
therefore `new_volume_name` is

    copr-builder-x86_64-fPlease login as the user "fedora" rather than the user "root".-20201101_155103
 2020-11-01 17:05:24 +01:00
Adam Williamson
7d32a58788 openqa: enable aarch64 testing in production 
whee!

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-30 14:55:41 -07:00
Adam Williamson
be8dc36f7f openqa/worker: sigh restarted not started 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-30 14:36:12 -07:00
Adam Williamson
fbfffecb90 openQA: move a64-worker03 to prod 
If we're running in prod, we probably want two workers in prod
and one in stg. Two in each would be better...

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-30 14:14:48 -07:00
Adam Williamson
c2023d5560 openQA: try to make NFS mount changes more robust 
On client end, restart mount unit (with daemon-reload) if mount
file changes. On server end, run exportfs -r if export config
file changes.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-30 14:06:07 -07:00
Adam Williamson
e14052db33 ok debug stuff did its job goodbye 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-30 13:14:54 -07:00
Adam Williamson
ea70d16680 gah stupid tags 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-30 13:12:33 -07:00
Adam Williamson
a4deb8dbaa try and fix this debug stuff why is ansible so hard 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-30 13:11:51 -07:00
Adam Williamson
c60897306c sigh yaml 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-30 13:06:42 -07:00
Adam Williamson
e02baf2149 Add a bit of debugging to crypto-policies 
aka why isn't it working on a64 worker02

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-30 13:05:29 -07:00
Adam Williamson
b60dce6bdc openqa: drop host-level openqa hostname settings 
These should be coming from the groups, now we don't have IAD
vs. PHX complications.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-30 11:45:16 -07:00
Mark O'Brien
51f6ae2ae7 fedimg: add south african region to fedimg builds 2020-10-30 18:09:08 +00:00
Adam Williamson
5b9aadd878 Make openqa-a64-worker02 a prod worker(!) 
It's alive again now (thanks smooge), and I want to enable
aarch64 testing in production, so add it as a prod worker (and
tap and hdd worker).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-30 10:02:26 -07:00
Pierre-Yves Chibon
f4c9127444 apps-fp-o: Install the apps-fp-o RPM package and reorder the playbook just a little bit 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-30 16:59:31 +01:00
Stephen Smoogen
07ef31c4c9 Bring openqa-a64-worker02 into inventory. 
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2020-10-30 09:42:14 -04:00
Stephen Smoogen
91f4b3204b Bring in initial file for openqa-a64-worker02 for adam. 
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2020-10-30 09:42:14 -04:00
Adam Saleh
4780570a73 Be able to share snapshots in grafana dashboard. 2020-10-30 14:17:32 +01:00
Mark O'Brien
0904b6802b osbs: update bvm host for stage aarch64 2020-10-30 12:18:32 +00:00
Mark O'Brien
7e026f098b osbs: not staging hosts recomment 2020-10-30 12:03:36 +00:00
Mark O'Brien
0af81f79f5 osbs: uncomment even more staging inventory hosts 2020-10-30 12:00:46 +00:00
Mark O'Brien
1eecbfd703 osbs: uncomment staging inventory hosts 2020-10-30 11:53:39 +00:00
Adam Williamson
2b7a62f232 openqa/dispatcher: use arch filtering instead of custom WANTED 
I just enhanced the scheduler code so we can share the stock
WANTED definition (which now includes all arches) between prod
and lab, but filter the arches with a config file setting. This
means we don't have to carry and install a whole custom WANTED
file with the extra arches for lab any more, we just set the
appropriate value in the config file. Also drop some stuff from
the config file that's been useless since we switched to
fedora-messaging.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-29 16:55:11 -07:00
Adam Williamson
6937712e23 openqa/dispatcher: enable Server and Workstation aarch64 images 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-29 15:43:58 -07:00
Adam Williamson
8ba222327d openqa/dispatcher: Drop 32-bit ARM disk image testing again 
It's not working (no display output). Not sure why not yet.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-29 15:33:33 -07:00
Adam Williamson
728ae59b6d openqa/dispatcher: try scheduling 32-bit ARM minimal image again 
...this time it'll run on an aarch64 host. Let's see if that
works better.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-29 14:10:21 -07:00
Adam Williamson
ef5d044161 openqa/dispatcher: schedule minimal disk image on aarch64 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-29 13:49:36 -07:00
Adam Williamson
fd292f9aa7 Try and fix syntax in that last commit 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-29 11:14:45 -07:00
Adam Williamson
bb286d8099 Enhance the crypto-policy stuff to actually set the policy 
Just writing a config file isn't enough, apparently. We need to
really call update-crypto-policies. This attempts to do so, but
only if it's really necessary, by using some handy check args.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-29 11:12:01 -07:00
Adam Williamson
1a1992462a inventory: add comments on broken openqa workers 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-10-29 10:56:10 -07:00
Kevin Fenzi
4e63bbb7b2 Add a crypto-policies to set to LEGACY on fedora 33 hosts 
This is needed to get our 2fa working.
We should drop this once we are moved to sssd.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-10-29 10:17:04 -07:00