I forgot that you need to reflect template changes and new yaml files in
playbook as well. Let's correct this mistake.
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
DeploymentConfig contains jinja variable, so we need to move it to templates
folder so it's correctly handled.
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
This needs better debugging, but our connection pooling is probably
pretty complicated (each WSGI daemon process can have 15 connections to
DB, 5+10 overflow). And we have _many_ processes nowadays, while the
default connection limit is 100 in PostgreSQL.
This PR adds redis service together with deployment config and updates the
configuration of the hotness to work with this new redis deployment.
This will now only work for the staging, but it doesn't break anything if
deployed on production.
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
The background to this is
https://bugzilla.redhat.com/show_bug.cgi?id=2073414 , in response
to which git was changed to die if a user runs git commands
on a repo which it doesn't own. In openQA, the test directory
is a git repo and openQA itself likes to run git commands on it,
but this is often going to be as a different user than the owner
of the directory. In fact on the worker hosts, the user that owns
the directory (geekotest on the server box) doesn't even exist.
This just sets the config by copying a file in place rather than
running a git command (which is hard to get to be idempotent) and
uses `/etc/gitconfig` so we don't wind up with a file in the
_openqa-worker user's home directory, which is meant to be empty.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
This is the fun firefox h2 connection reuse bug. blockerbugs is only in
iad2, so if firefox tries to reuse a connection to another proxy for it,
just send it a 421 so it knows thats bad on it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
The wsgi has changed from /usr/libexec/ipsilon/ipsilon.py to
/usr/libexec/ipsilon, so adjust wsgi and directory perms to handle that.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We were hiding these because in the past the only ISO assets
were those from the compose under test, and we wanted to avoid
people downloading them from openQA when we'd rather they get
them from dl.fp.o or the mirror system. But these days we have
tests that generate ISOs (update netinst and live image build
tests) and we often want to download the generated images to
test them locally.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
