infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
39031 commits 9 branches 0 tags 110 MiB
Commit graph

39031 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pavel Raiskup
0fc0655e47 copr-builders: don't do gpg checks for epel-6 builds, take #2 2023-06-08 17:19:52 +02:00
Pavel Raiskup
7b1cf87845 copr-builders: don't do gpg checks for epel-6 builds 
Our builders are on Fedora 38 which distrust SHA-1, and I don't see a
way to opt-out from this policy.  Building for epel-6 is already on the
edge, so..
 2023-06-08 17:07:34 +02:00
Pavel Raiskup
860f0ed488 copr-be-dev: move builder images to F38 2023-06-08 13:58:53 +02:00
Kevin Fenzi
8e50b0ebda virthosts: increase process limit on new servers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 18:44:14 -07:00
Lukas Holecek
41272fa237 resultsdb: Use upstream image for prod instance 
Related to: https://pagure.io/fedora-infrastructure/issue/11321
 2023-06-07 23:59:34 +00:00
Kevin Fenzi
cf5ca54701 ipa: exclude the ipa postgres user in favor of local one 
We have a postgres user in ipa to prevent people from making an account
with that name, but we need/want to use a local version of this on
database servers, not the ipa one. We need the local one because the ipa
one is locked and this prevents database backups from working.
(Locked accounts can't run cron jobs).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 16:52:25 -07:00
Kevin Fenzi
1a9d6577be ibiblio02: reindent network_connections and sort more readably 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 16:16:48 -07:00
Kevin Fenzi
793a658d92 ibiblio02: adjust connection settings 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 16:11:36 -07:00
Kevin Fenzi
4f63381843 ibiblio02: add new virthost at ibiblio 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 15:46:00 -07:00
Kevin Fenzi
10a6a0a18b download-cc-rdu03: how about rhel9? 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 14:45:37 -07:00
Kevin Fenzi
521606e11e download-cc-rdu01: readd on new virthost 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 13:30:38 -07:00
Kevin Fenzi
34ea0dfcb3 autosign: add quotes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 10:29:45 -07:00
Kevin Fenzi
4f0fe17dc1 autosign: fix up import for newer ansible 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 10:27:04 -07:00
Tomáš Hrčka
d601017cad Update roles/robosignatory/templates/robosignatory.toml.j2 2023-06-06 16:50:12 +00:00
Tomas Hrcka
cc3715271d Enable signing for f39-python sidetag 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-06-06 16:45:34 +00:00
Aurélien Bompard
228d284a88
Collectd: add the FMN users source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-06 18:09:27 +02:00
Kevin Fenzi
3b3f720557 vmhost-x86-cc03: revive with new name and hw. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 08:51:03 -07:00
Aurélien Bompard
b8e6fc6146
Fixup last commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-06 12:46:51 +02:00
Aurélien Bompard
47fe3157bc
FASJSON: include build scripts in the source code 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-06 12:45:22 +02:00
Kevin Fenzi
7e20e39474 wiki: re-enable fedmsg 
Turns out we never completed it's migration to fedora-messaging, so we
need to re-enable fedmsg for now until we do.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-05 12:27:28 -07:00
Kevin Fenzi
4a99b7b62a wiki: try and re-enable passwordattemptthrottle 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-04 08:28:16 -07:00
Kevin Fenzi
19f22845b2 db-koji01: some more tweaking to get better perf and stability 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-03 08:14:30 -07:00
Kevin Fenzi
ae69299c20 db-koji01: back off on config to get things working again 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 18:26:11 -07:00
Kevin Fenzi
eb3801edc7 postgresql_server: split out postgres15 config and tweak 
db-koji01 is our only postgresql 15 install so far, but split out the
config from the 12 one we are using on RHEL8 to avoid making changes
there.

Also, lets try tweaking things:
- I am bumping cpus up to 88
- Tweak max workers/etc
- Try a higher i/o level since this db server is running on a virthost
  with ssds.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 17:59:12 -07:00
Kevin Fenzi
0c81957b2d pkgs / make-git-checkout-seed: do not try and remove already removed file 
We already removed the old previous days version here, so trying to
remove it again results in a cron email with:

rm: cannot remove '/srv/cache/lookaside//rpm-specs-epel7*.tar.xz': No such file or directory
rm: cannot remove '/srv/cache/lookaside//rpm-specs-epel8*.tar.xz': No such file or directory
rm: cannot remove '/srv/cache/lookaside//rpm-specs-epel9*.tar.xz': No such file or directory

So, drop that here so we don't get these daily emails.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 12:23:38 -07:00
Kevin Fenzi
a6cafe28ea data-analysis: don't try and get blockerbugs logs since it's in openshift now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 12:18:30 -07:00
Kevin Fenzi
2367f1f8ba Revert "postgresql / db-koji: re-add this connection cleanup" 
This reverts commit 9a4a973b05.

Turns out this is broken and hasn't worked for a long time. ;(
 2023-06-02 10:16:05 -07:00
Kevin Fenzi
9a4a973b05 postgresql / db-koji: re-add this connection cleanup 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 10:03:24 -07:00
Kevin Fenzi
16576acfe1 proxies: use wildcard cert for directory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 09:37:03 -07:00
Kevin Fenzi
49a625697b proxies: add a directory.fedoraproject.org redirect to www.port389.org ticket 11355 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-02 09:25:16 -07:00
Nick Bebout
b9a3928f5c Add IPv6 for mirror.usi.edu, remove old IPv4 address no longer needed 2023-06-02 09:43:45 -05:00
Aurélien Bompard
d7fdbe58b9
Add one more perm for collecd's selinux package 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 08:30:16 +02:00
Aurélien Bompard
a44dadd0c7
Syntax error 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 08:23:10 +02:00
Aurélien Bompard
dc623ed962
Collectd improvements 
- Increase the service stop timeout to give collectd time to flush the
  values to RRD files on the disk. It currently takes ~1m30s, setting
  the timeout to 5m
- add the unix socket plugin and configure the CGI to make use of it to
  request a flush of the RRD values when a graph is generated
- add SELinux permissions to allow those two to talk to each other

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 08:15:12 +02:00
Aurélien Bompard
d2fe0e7df2
FMN: add graph config for rrdtool 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 07:11:26 +02:00
Aurélien Bompard
d354dedf1a
FMN: add eol on collectd.conf 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 06:20:46 +02:00
Aurélien Bompard
27c10c7d1e
FMN: fix file name 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 06:14:50 +02:00
Aurélien Bompard
6764195719
FMN: fix syntax error 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 06:08:47 +02:00
Aurélien Bompard
81f85361e8
FMN: add the collectd stats generator 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-02 06:04:29 +02:00
Kevin Fenzi
567a69dd58 db-koji01: try not using this long running script anymore 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-01 15:15:52 -07:00
Kevin Fenzi
c559d543a2 db-koji01: set memory and max memory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-01 15:03:00 -07:00
Kevin Fenzi
718a84c645 db-koji01: move to rhel9 and postgresql 15 
Set host vars to move to rhel9 on next reinstall and setup postgresql 15
module.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-01 10:36:52 -07:00
Kevin Fenzi
8a6994fa84 koji hubs: set outage message for database migration 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-01 07:38:50 -07:00
Kevin Fenzi
08e7c38a96 mediawiki: merge changes in from staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-31 16:57:58 -07:00
Kevin Fenzi
cd4835f27f wiki: drop fedmsg here, we are using fedora-messaging now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-31 16:49:48 -07:00
Kevin Fenzi
5ee0ec0c36 wiki to fedora 38 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-31 16:30:09 -07:00
Kevin Fenzi
7e76b777f0 rabbitmq_cluster: add distrobuildsync-cs for ticket 11294 
Here we add a queue for this client/login per the ticket.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-30 14:27:13 -07:00
Kevin Fenzi
50dcf526ae grobisplitter: we do not seem to actually need python3-repomd 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-30 14:00:28 -07:00
Andrew Heath
a4ca219ed9 updating to point at monitoring-fedmsg-hub-3.socke 2023-05-30 15:49:45 -04:00
Andrew Heath
9a3bd882df adding () per python3 2023-05-30 14:41:30 -04:00