Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
34400 commits 9 branches 0 tags 111 MiB
Commit graph

34400 commits

This branch
This branch
All branches
Author SHA1 Message Date
Rick Elrod
0b74b995d1 Revert "Revert "Disable prerelease redirects"" 
This reverts commit ad55b9ddc8.
 2021-03-23 07:38:08 -05:00
František Zatloukal
d7c26c5d1b oraculum: Add motd_password 2021-03-23 13:27:04 +01:00
Kevin Fenzi
2dd50b26c2 openqa-lab01 needs to be staging_friendly 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-22 18:08:50 -07:00
Nick Bebout
0a09869a91 Actually it was requested to be codeofconduct@ 2021-03-22 22:03:41 +00:00
Nick Bebout
62e5539db3 Add code-of-conduct alias pointing to fpl+fcaic, sync changes to fasjson/files/aliases.static 2021-03-22 22:03:41 +00:00
Pierre-Yves Chibon
5dd4daa201 proxies: Update config for debuginfod in staging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-22 20:53:28 +01:00
Frank Ch. Eigler
9c2a3b93d9 debuginfod: follow storage PV rename into PVC objects 2021-03-22 18:54:41 +00:00
Frank Ch. Eigler
8b5b37cd4b debuginfod: typo fix on PV storage name 2021-03-22 18:54:41 +00:00
Frank Ch. Eigler
ea334535d3 debuginfod: almost ready for -stg 
- changed deploymentconfig to a template, to adapt to stg-sensitive PV name
- tweaked debuginfod command line
  - to match expected PV mount points
  - to reduce verbosity
  - to specify scanning parallelism
- specified a requested cpu (8) & ram (24GB) allocation
 2021-03-22 18:54:41 +00:00
Frank Ch. Eigler
3509ca8a84 debuginfod: review comments 2021-03-22 18:54:41 +00:00
Frank Ch. Eigler
53dd1a3e42 debuginfod: tweak yml indentation based on bot build warnings 2021-03-22 18:54:41 +00:00
Frank Ch. Eigler
496735b1a3 debuginfod: initial ansible/openshift work 2021-03-22 18:54:41 +00:00
Aurélien Bompard
c6c5bb0b54
Fixup last commit again 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 19:53:28 +01:00
Aurélien Bompard
355a731403
Fixup last commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 19:20:37 +01:00
Aurélien Bompard
2269f0ece1 Prepare Noggin & FASJSON for prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 17:53:42 +00:00
Mark O'Brien
f952b7a715 add ipsilon02 2021-03-22 15:38:28 +00:00
Pavel Raiskup
1192d848f2 copr-fe-stg: test stg openid in stg environment 2021-03-22 15:53:52 +01:00
Pavel Raiskup
314359cbf1 copr-backend: increase the prune time to 14 days 
We'll have enough space once the /usr/bin/copr_prune_srpms.py script is
run.
 2021-03-22 14:58:47 +01:00
Adam Saleh
0e035e2f81 Making pods in other namespaces available to application-monitoring. 2021-03-22 14:07:56 +01:00
Mark O'Brien
63ef253011 ipsilon: new prod vm 2021-03-22 11:54:33 +00:00
Francois Andrieu
d31cc6193d languages: fix reverse proxy configuration 2021-03-20 21:20:30 +01:00
Francois Andrieu
f7054c12f7 languages: remove registry variable 2021-03-20 19:48:49 +01:00
Kevin Fenzi
20d36b5731 ipa03: we are not in phoenix anymore 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-19 14:27:22 -07:00
Kevin Fenzi
02eac50add Add a ipa03 host. 
We want to add another ipa server host in case the load gets large when
we migrate from fas. We can always nuke this one or add more.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-19 21:14:42 +00:00
Kevin Fenzi
55cc28c3b1 base / iptables: Add rules to block staging networks on prod hosts 
In IAD2 the prod and stg hosts are on different VLANs, so we thought we
didn't need this. However, we are still seeing some odd mixing of prod
and stg fedmsgs, so likely some fedmsg port has become enabled accross
all the VLANS. In any case this should do no harm, it just adds 2
subnets on all prod hosts to block staging, except for a small number of
staging_friendly hosts (in the staging_friendly ansible group).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-19 20:08:05 +00:00
Nick Bebout
e1615eb72a Add manual/update-aliases.yml script 2021-03-19 13:19:25 -05:00
Francois Andrieu
ac93b011a8 languages: set volumeName for PVC 2021-03-19 18:47:12 +01:00
Francois Andrieu
5b8316be12 languages: initial deployment on staging 2021-03-19 17:28:21 +00:00
Mohan Boddu
23d38a61fa Unfreeze releng 
Now that we got a GOLD compose for F34 beta, we can unfreeze now and
start pushing updates as usual

Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-03-19 12:13:07 -04:00
Nils Philippsen
1747e9f53a Fedora 31 has been EOL for a while 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-19 15:22:21 +00:00
Nils Philippsen
280eebdcee tasks/yumrepos: cope with archived Fedora releases 
We have some hosts that run on archived/EOL Fedora releases, their
repository URLs need to reflect that.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-19 15:22:21 +00:00
Nils Philippsen
baee0c839f ipa/client: add vars for people.fedoraproject.org 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-19 11:37:17 +00:00
Nils Philippsen
a1ad2f07c6 Don't flag tasks checking things as changed 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-19 11:29:31 +00:00
Nils Philippsen
3abcb2d011 ipa/client: clean sss caches on changes 
SSSD caches information, some types for hours by default. When changing
anything in IPA pertaining to a host this role is applied to, clean out
the caches on the host so the changes are effective immediately.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-19 09:27:51 +00:00
Michael Scherer
7118984b64 Fix traceback when the creation date is exactly at 0 ms 
nb found that one user was blocking the cronjob from running.
After looking closely, the problem was the creation date is
similar to 2017-02-01 09:10:20+00:00 , so without any dot,
as it was created at the exact microsecond the second started.

The usual format is 2017-02-01 09:10:20.012+00:00, where
split('.') work fine.

Since the traceback stop the whole cronjob, this prevented all
people whose login was after m from having the lifecycle badges.
 2021-03-19 08:14:02 +00:00
T.C. Williams
6613c97d71 Remove phx2 entries from inventory/cloud 2021-03-18 23:47:01 +00:00
Kevin Fenzi
4fbfe6de26 retrace: oops, its home 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-18 12:30:52 -07:00
Kevin Fenzi
ab618af4de retrace: see if moving the homedir setting fixes issues 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-18 12:21:50 -07:00
Mark O'Brien
4a9cb0316c fix typo on fpca 2021-03-18 11:54:49 +00:00
Stephen Coady
5db769751c add rollback playbook 
Signed-off-by: Stephen Coady <scoady@redhat.com>
 2021-03-18 11:48:07 +00:00
Mark O'Brien
78b504b204 change become method for postgres 2021-03-18 11:34:12 +00:00
Stephen Coady
063efdde0e add playbook and script for readonly FAS permission 
Signed-off-by: Stephen Coady <scoady@redhat.com>
 2021-03-18 11:19:19 +00:00
Aurélien Bompard
979e09ab65
Master branch has been renamed to main 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-18 11:43:02 +01:00
Pierre-Yves Chibon
25ff2bea69 haproxy: let's assume zabbix is up for now 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-18 10:11:12 +01:00
Stephen Smoogen
a242509f6d clean up tftp files for external servers. 2021-03-17 16:27:27 -04:00
Stephen Smoogen
341f0c6287 change rdu internal network 
looked at the network data on tcpdump and
realized these systems were on the same network and were on the
172.23.1.0 network. Fix files which mention old network.

Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
 2021-03-17 15:38:21 -04:00
Pierre-Yves Chibon
7d1fbba00d haproxy: be more flexible for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 17:04:21 +01:00
Pierre-Yves Chibon
23c7ef8c20 haproxy: zabbix returns either 200 or 401 - maybe this way? 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 16:49:43 +01:00
Pierre-Yves Chibon
36de1196e1 haproxy: zabbix returns either 200 or 401 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 16:45:58 +01:00
Pierre-Yves Chibon
ea9d107ef8 haproxy: zabbix now returns 401 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 16:40:32 +01:00