infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
28644 commits 9 branches 0 tags 110 MiB
Commit graph

28644 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jan Kaluža
230521c0b9 Use apache user also for odcs private queue certs. 2020-04-24 21:34:13 +02:00
Stephen Smoogen
54c31f65c3 comment out people in nagios to make sure we arent sending texts to dead emails 2020-04-24 21:34:13 +02:00
Mikolaj Izdebski
c25dae4e9e odcs: Create rabbitmq user 2020-04-24 21:34:13 +02:00
Jan Kaluža
ae6ce0d40b Use correct ODCS username for fedora-messaging. 2020-04-24 21:34:13 +02:00
Jan Kaluža
6b3f115cb0 Use apache group for fedora-messaging certs. 2020-04-24 21:34:13 +02:00
Jan Kaluža
9e164313f3 Revert "Use apache group for fedora-messaging config" 
This reverts commit 5f32d434e8c2251e2c0a71109059e3eefda8cfef.
 2020-04-24 21:34:13 +02:00
Jan Kaluža
abe42cf7f8 Run ODCS frontend under 'odcs' user. 2020-04-24 21:34:13 +02:00
Jan Kaluža
6b392d7b9a Use apache group for fedora-messaging config 2020-04-24 21:34:13 +02:00
Mikolaj Izdebski
9d6a733f40 staging-sync/fas: Fix a typo 2020-04-24 21:34:13 +02:00
Jan Kaluža
742031f6cc Remove extra '-' in the rabbitmq key. 2020-04-24 21:34:13 +02:00
Clement Verna
7eb8152d5d OSBS: allow aarch64 secret to fail since we don't have the cluster yet 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:13 +02:00
Clement Verna
edbc1d55dd OSBS: fix the osbs_nodes_stg group name in a loop for the worker namespace too 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:13 +02:00
Jan Kaluža
85852c96cf Move fedora-messaging.toml.j2 to right location 2020-04-24 21:34:13 +02:00
Clement Verna
428fab2bde OSBS: fix the osbs_nodes_stg group name in a loop 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:13 +02:00
Jan Kaluža
f0a24a152b Use fedora-messaging for ODCS. 2020-04-24 21:34:13 +02:00
Mikolaj Izdebski
f7c53a386e bastion: Add sysadmin-odcs to fas_client_groups 2020-04-24 21:34:13 +02:00
Jan Kaluža
54d289bf23 Disable also python2 fedmsg-hub on ODCS backend 2020-04-24 21:34:13 +02:00
Jan Kaluža
fe628668ba Run odcs-celery-beat on ODCS frontend. 2020-04-24 21:34:13 +02:00
Kevin Fenzi
05e5b4fe79 postgresql: increase the max_standby_streaming_delay to 90s 
It's hoped that this would allow us to get more reliable backups on the hot spare.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
82b8bdf191 communishift: update some docs. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
57e49b6da8 Revert "communishift: adjust for new cert-manager setup." 
This reverts commit fd510fbf1642a74f1e951c1657b9dc768b6caf07.
 2020-04-24 21:34:13 +02:00
Stephen Smoogen
86b921e490 and we need a host not overloaded 2020-04-24 21:34:13 +02:00
Stephen Smoogen
a32ff01cec make the ip address one we own 2020-04-24 21:34:13 +02:00
Stephen Smoogen
2fbdcff571 repospanner-temp is not on openvpn 2020-04-24 21:34:13 +02:00
Stephen Smoogen
8ece96ff19 remember to put the right groups in 2020-04-24 21:34:13 +02:00
Stephen Smoogen
805a0f2004 add a minimal role for repospanner-temp. randy to fill out rest 2020-04-24 21:34:13 +02:00
Luca BRUNO
44e7ada060 coreos-cincinnati: deploy latest master (e9ccd5b) 2020-04-24 21:34:13 +02:00
Mikolaj Izdebski
f4ebcc677a ODCS: Use dedicated sysadmin-odcs group 2020-04-24 21:34:13 +02:00
Jan Kaluža
1c210abdd3 Use double slash for hostname in broker_url. 2020-04-24 21:34:13 +02:00
Luca BRUNO
9bdc70de97 coreos-cincinnati: build latest master (e9ccd5b) 2020-04-24 21:34:13 +02:00
Jan Kaluža
3b8b978515 Set broker_login_method to EXTERNAL. 2020-04-24 21:34:13 +02:00
Jan Kaluža
a72e70f698 Copy ODCS rabbitmq certs to /etc/odcs 2020-04-24 21:34:13 +02:00
Jan Kaluža
343eea7df5 Set rabbitmq CA cert for ODCS. 2020-04-24 21:34:13 +02:00
Adrian Reber
0781a26a73 mirrorlist: also sync country_continent.csv 
For the mirrorlist test on proxy14 we also need country_continent.csv.
With this the latest version is also copied to the mirrorlist server.
This change has already been manually applied on mm-backend01.prod
manually.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-04-24 21:34:13 +02:00
Mikolaj Izdebski
a8acc66e35 koschei: Configure build_arches for frontend 
Fixes https://github.com/fedora-infra/koschei/issues/309
 2020-04-24 21:34:13 +02:00
Jan Kaluža
9416c7b69c Configure celery broker for ODCS staging. 2020-04-24 21:34:13 +02:00
Jan Kaluža
3213118e1a Add 'datacenter: phx2' to staging odcs backend host var. 2020-04-24 21:34:13 +02:00
Kevin Fenzi
20654b78cd dhcpserver: need / on path to grubx64.efi 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Stephen Smoogen
237b78a452 you need to put a ] on it 2020-04-24 21:34:13 +02:00
Stephen Smoogen
ff3cde0fbe push the bits to make coreos->uefi 2020-04-24 21:34:13 +02:00
Stephen Smoogen
98276d85e6 add in repospanner-temp nodes for randy 2020-04-24 21:34:13 +02:00
Adrian Reber
837032125a Enable new mirrorlist server on proxy14 
After a successful test of the new mirrorlist server code in staging,
this is the next step. Try to make it work in production on one of the
proxies. As discussed on the mailing list we are trying the new setup
with proxy14.

All the conditionals have been updated to be 'staging or proxy14' and
the mirrorlist data generation has been enhanced to also write out the
new protobuf based format on the backend system.

At the same time this moves the pickle/protobuf generation from :55 to
:30 as this generation takes much longer than it used to be and the
mirrorlist server restarted at :15 was never using the new data during
the last few months.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-04-24 21:34:13 +02:00
Jan Kaluža
12021e4212 Create odcs_target_dir on backend. 2020-04-24 21:34:13 +02:00
Jan Kaluža
ce6f99c7b2 use mount_stg: true also on ODCS backend 2020-04-24 21:34:13 +02:00
Jan Kaluža
270cac4ffa mount fedora_odcs_stg with mount_stg: true 2020-04-24 21:34:13 +02:00
Jan Kaluža
ee11e8e947 Run nfs client before the odcs/frontend 2020-04-24 21:34:13 +02:00
Luca BRUNO
0e0f6242ad coreos-cincinnati: deploy latest master (e322003) 2020-04-24 21:34:13 +02:00
Jan Kaluža
7b61528b28 Use celery-3 in odce-celery-backend.service. 2020-04-24 21:34:13 +02:00
Jan Kaluža
3268ec213a Do not try restarting odcs-celery-backend on frontend 2020-04-24 21:34:13 +02:00
Pierre-Yves Chibon
c072e314d1 robosignatory: in koji's tag the pending is at the end 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:13 +02:00