Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
25170 commits 9 branches 0 tags 111 MiB
Commit graph

25170 commits

This branch
This branch
All branches
Author SHA1 Message Date
Adam Williamson
6c390c669b First cut at migrating openqa-stg to fedmsg-3 
This includes some tweaks to the core fedmsg roles to allow a
'generic' way of indicating that a box should use fedmsg-hub-3
not fedmsg-hub, and make the restart notification work for that.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2018-11-26 10:53:16 -08:00
Kevin Fenzi
8f7cc10de5 Add upstream-test group to maintainer-test machines to allow upstreams to help with package issues. 2018-11-26 18:49:35 +00:00
Clement Verna
4ba4610a34 FPDC: Add COREAPI_URL config value and use the env_suffix variable 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-11-26 15:29:33 +01:00
Aurélien Bompard
4c90bbd592 Use the prod rabbitmq password on prod 2018-11-26 13:58:36 +00:00
Aurélien Bompard
42a4d4c32d Deploy the messaging bridges to prod 2018-11-26 13:47:16 +00:00
Aurélien Bompard
3f52048722 Taiga: more naming and formating in the playbook 2018-11-26 13:39:31 +00:00
Clement Verna
8f8daf1847 IPSILON: enable fpdc oidc plugin in production and staging 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-11-26 09:37:29 +01:00
Kevin Fenzi
63c2526d93 Fix up logic a bit. 2018-11-24 19:57:14 +00:00
Kevin Fenzi
529efd02d0 Don't install the infra tags repo on maintainer tests instances, to allow for them to use normal mock. 2018-11-24 18:07:47 +00:00
Kevin Fenzi
caa54bba38 add ci-cc to backups 2018-11-24 00:44:02 +00:00
Kevin Fenzi
31f8a95074 Try and add rhel8 beta to json. 2018-11-23 23:57:09 +00:00
Kevin Fenzi
a5f128f2a7 Missed a place where old cloud nodes were defined. 2018-11-23 21:28:13 +00:00
Patrick Uiterwijk
fe6ca35740 Remove fqdn 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-23 22:18:58 +01:00
Patrick Uiterwijk
08ccd45502 Add tag for quick deployment 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-23 22:14:35 +01:00
Patrick Uiterwijk
65993905d1 Add the 01 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-23 22:14:18 +01:00
Patrick Uiterwijk
afde4968e5 And do https if not disabled 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-23 21:50:45 +01:00
Adam Williamson
3976404673 Fix up firewalling for the other openQA workers 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2018-11-23 12:50:16 -08:00
Patrick Uiterwijk
158847f9b5 OpenQA is non-HTTPS for backend, sadly 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-23 21:49:46 +01:00
Patrick Uiterwijk
24c2bc0ab8 Set up openqa with balancer 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-23 21:46:45 +01:00
Adam Williamson
90696016a8 Revert "Switch openQA stg to use balancer reverse proxying" 
This reverts commit afd0ef1c9e.
 2018-11-23 12:43:51 -08:00
Adam Williamson
e7dfb6f8d8 Revert "tag the openqa.stg reverse proxy entry for great convenience" 
This reverts commit 1b3c7005be.
 2018-11-23 12:43:51 -08:00
Adam Williamson
59f2e550cb Revert "more tagging" 
This reverts commit c685a00eea.
 2018-11-23 12:43:51 -08:00
Patrick Uiterwijk
ee0748715a Allow the HTTP Connection header to contain more for websockets 
Firefox is hell-bent on sending "keep-alive, Upgrade", which did not match
^Upgrade$....
Let's accept either.

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-23 21:38:40 +01:00
Adam Williamson
0913fe8297 Add missing openQA worker boxes to qa-isolated 
We're pretty sure they're supposed to be in here, but we all
forgot to do it.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2018-11-23 12:26:03 -08:00
Adam Williamson
4697db3a6b openQA: open firewall ports for server->worker ws connections 
The new developer mode requires the server to connect to the
worker instance via ws, it seems. We need to allow this through
the firewall. Figuring out the correct port numbers is...fun.
This is just the staging x86_64 hosts for now, for testing.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2018-11-23 12:13:50 -08:00
Kevin Fenzi
b6a3b13155 drop fed-cloud10/11/14 as they have moved to new cloud 2018-11-23 19:35:18 +00:00
Kevin Fenzi
207945e427 add rabbitmq to master playboook 2018-11-23 19:31:57 +00:00
Adam Williamson
c685a00eea more tagging 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2018-11-23 11:28:03 -08:00
Adam Williamson
1b3c7005be tag the openqa.stg reverse proxy entry for great convenience 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2018-11-23 11:26:48 -08:00
Adam Williamson
afd0ef1c9e Switch openQA stg to use balancer reverse proxying 
This should, we hope, make websockets proxying work right.
@puiterwijk says he eventually wants to move everything to this
system to get haproxy out of the loop in any case.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2018-11-23 11:23:39 -08:00
Patrick Uiterwijk
1febc87f1f Add readme 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-22 21:52:38 +01:00
Patrick Uiterwijk
7c7209a800 Test push 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-22 21:22:04 +01:00
Patrick Uiterwijk
c4ed94ce71 Test push 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-22 19:28:50 +01:00
Patrick Uiterwijk
fe03c997a8 We are not using a prefix here 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 18:27:00 +00:00
Patrick Uiterwijk
f583bde234 This is not staging: 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 18:26:04 +00:00
Patrick Uiterwijk
abfdbf4d63 Allow directory traversal 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 18:24:16 +00:00
Patrick Uiterwijk
b37da984bf Deploy repobridge config 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 18:20:14 +00:00
Patrick Uiterwijk
0c1e36c1a4 Add repobridge to pagure 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 18:16:18 +00:00
Patrick Uiterwijk
a32b8467b6 Fix up path 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 18:11:54 +00:00
Patrick Uiterwijk
6bfee783de Add pseudo folder 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 18:03:42 +00:00
Patrick Uiterwijk
296960cce7 Fix config 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 17:06:53 +00:00
Patrick Uiterwijk
937b14afce Currently only repoSpanner in prod 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 16:47:37 +00:00
Patrick Uiterwijk
bd4d9f0052 Pass arg name 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 16:46:24 +00:00
Patrick Uiterwijk
d89691f61b Set up deployment of the certs 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 16:45:03 +00:00
Patrick Uiterwijk
e447ce4ef7 Pagure doese not get admin access to this cluster 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 16:44:54 +00:00
Patrick Uiterwijk
3b2f4d9ff2 Add the Pagure config for ansible 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-11-22 16:37:10 +00:00
Patrick Uiterwijk
f4c0271a68 Test 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-22 16:49:21 +01:00
Patrick Uiterwijk
63f1fa1b73 Test 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-22 16:48:21 +01:00
Michal Konečný
9ce96afa17 Enable libraries.io on Anitya 2018-11-22 16:25:40 +01:00
Kevin Fenzi
783aad799f adjust role on pagure too 2018-11-22 05:44:49 +00:00