Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
34437 commits 9 branches 0 tags 111 MiB
Commit graph

753 commits

Author SHA1 Message Date
Aurélien Bompard
e5a5ba6a86
Switch the proxies to point to the new Ipsilon VM 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 14:25:57 +01:00
Aurélien Bompard
b8e6754f97 Use a VM for Ipsilon in prod too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-23 16:55:38 +00:00
Rick Elrod
0b74b995d1 Revert "Revert "Disable prerelease redirects"" 
This reverts commit ad55b9ddc8.
 2021-03-23 07:38:08 -05:00
Pierre-Yves Chibon
5dd4daa201 proxies: Update config for debuginfod in staging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-22 20:53:28 +01:00
Aurélien Bompard
c6c5bb0b54
Fixup last commit again 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 19:53:28 +01:00
Aurélien Bompard
355a731403
Fixup last commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 19:20:37 +01:00
Aurélien Bompard
2269f0ece1 Prepare Noggin & FASJSON for prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 17:53:42 +00:00
Francois Andrieu
d31cc6193d languages: fix reverse proxy configuration 2021-03-20 21:20:30 +01:00
Francois Andrieu
5b8316be12 languages: initial deployment on staging 2021-03-19 17:28:21 +00:00
Pierre-Yves Chibon
fd285a23ea proxies: we move zabbix to / directly 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 14:42:29 +01:00
Pierre-Yves Chibon
f8d45fd78e proxies: Add the header_scheme for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 14:15:17 +01:00
Pierre-Yves Chibon
2ee77518a4 proxies: add a trailing / for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 13:40:46 +01:00
Pierre-Yves Chibon
a58926a29e proxies: let's try keephost for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 11:55:44 +01:00
Pierre-Yves Chibon
8e768ffcd1 Revert "proxies: update the proxyurl for zabbix - this time to varnish" 
This reverts commit 2b53aa3951.
 2021-03-17 11:31:59 +01:00
Pierre-Yves Chibon
2b53aa3951 proxies: update the proxyurl for zabbix - this time to varnish 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 11:23:45 +01:00
Pierre-Yves Chibon
d5454095ef proxies: update the proxyurl for zabbix - again typi typo 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 11:21:42 +01:00
Pierre-Yves Chibon
43f2248de8 proxies: update the proxyurl for zabbix - again 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 11:19:13 +01:00
Pierre-Yves Chibon
c4ab25f363 proxies: update the proxyurl for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 11:17:26 +01:00
Pierre-Yves Chibon
d7cc7b3d02 proxies: only speak about zabbix.stg for now 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 10:57:15 +01:00
Pierre-Yves Chibon
1ffc8b4aa8 proxies: configure zabbix in stg 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 10:43:28 +01:00
Pierre-Yves Chibon
d06fecdac7 reverproxy: add missing tag 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 10:37:03 +01:00
Pierre-Yves Chibon
f65301f8ee proxies: set-up the reverseproxy for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 10:28:50 +01:00
Michael Scherer
a5601476b9 Remove communityblog from ansible 
It got moved to wpengine, so all the deployment bits
are no-op
 2021-02-04 21:11:49 +00:00
Michael Scherer
e1b408851a Remove build of fudcon 
The source code was removed in https://pagure.io/fedora-websites/c/f5646276cf629ffa32b87cb23afb99823d498510?branch=master
and the website is just a redirect.
 2021-02-04 21:05:18 +00:00
Pierre-Yves Chibon
a6ce5fa016 fedocal: enable header_scheme 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-02-01 17:27:27 +01:00
Pierre-Yves Chibon
a07f3e6710 proxy: set-up packager-dashboard 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-25 10:50:53 +01:00
Patrick Uiterwijk
c0a32daa34 proxies: add zezere 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2021-01-22 09:53:14 +01:00
Kevin Fenzi
723e97e5f3 resultsdb / staging: fix name from old phx2 resultsdb to new iad2 one 
In phx2 we had resultsdb-stg01.qa.fedoraproject.org, but now in iad2, we
have resultsdb01.stg.iad2.fedoraproject.org.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-20 11:29:59 -08:00
Kevin Fenzi
acd335509c proxies / redirects: if you use env_suffix in the sitename, you MUST use it in redirects too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-15 12:11:25 -08:00
Kevin Fenzi
2977ebd42e proxies / websites: add qa.stg to serveraliases for qa 
Right now staging doesn't know it should be answering for
qa.stg.fedoraproject.org only qa.fedoraproject.org, so it needs to know
this to allow access to staging qa hosts.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-15 10:56:44 -08:00
Kevin Fenzi
71c3f3fd4d proxies / websites: Some websites need to also be defined in stg 
We need some websites that we get both prod/stg certs for to exist in
stg so the letsencrypt challenge works.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-14 10:37:20 -08:00
Clement Verna
a8c07ed5da proxy: looks like we need to setup the certname builds.coreos.fp.o 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-12-17 19:37:33 +01:00
Clement Verna
79b643102f proxy: do not use certbot for builds.coreos.fp.o 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-12-17 19:32:49 +01:00
Clement Verna
509077488b proxy: create a builds.coreos.fedoraproject.org website so that we can do redirects 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-12-17 19:29:27 +01:00
Clement Verna
a64cc9c7d7 Redirect builds.coreos.fp.org to the build browser. 
Currently builds.coreos.fp.org/ returns a 403 HTTP error
This commit redirect / to /browser so that by default we
show the builds browser.

Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-12-11 14:26:32 +00:00
Kevin Fenzi
22ef05d3f2 proxies: stg.release-monitoring.org make this it's own site 
Normally we can just define the site once with it's prod name and use
that in stg with an alias. This works because we have a wildcard ssl
cert for *.fedoraproject.org. So, stg.fedoraproject.org and
fedoraproject.org both work fine. We can't do this for
release-monitoring tho as we use letsencrypt certs and don't have a
wildcard. We could expand out letsencrypt role to get altnames, but just
making these seperate sites should fix it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-12 11:13:23 -08:00
Kevin Fenzi
177465221c proxies / websites: we want release-monitoring.org in stg too. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-12 10:21:24 -08:00
Kevin Fenzi
030a0ddc40 proxies / websites: revert disabling some sites in stg now that it's back 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-11 19:36:32 -08:00
Kevin Fenzi
385acb276e proxies /redirects: don't use env here 
The site is the prod name, with an alias for the stg host.
No need to try and install into a stg site when it doesn't exist.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-11 18:30:34 -08:00
Kevin Fenzi
bbfc222d25 proxies / websites: re-enable some hosts in stg 
we disabled these when we didn't have stg in iad2 yet.
Now that we do, we can re-add them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-11 16:34:00 -08:00
Pierre-Yves Chibon
414a063625 Proxy-websites: create the testdays.fic.o 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 14:50:56 +01:00
Pierre-Yves Chibon
b1b0365f95 proxies: fix typo 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 14:48:26 +01:00
Pierre-Yves Chibon
439844863e Proxies: add a redirect from testdays.fic.o to testdays.fp.o 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 14:47:18 +01:00
Pierre-Yves Chibon
1390d242ef proxies: get testdays to redirect to openshift in stg and prod 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 13:56:44 +01:00
Kevin Fenzi
e0555ee173 proxies / reverseproxy: drop duplicate website var 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-03 15:24:45 -08:00
Kevin Fenzi
48e878b9fe testdays: fix up testdays proxying in staging 
It was redirecting it to the old fedorainfracloud ip.
Then it wasn't proxying to openshift.

When moving to prod, the conditionals here should be removed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-01 11:33:52 -08:00
Kevin Fenzi
511654cda5 proxies / redirects: Add a redirect for iot.fp.o -> getfedora/iot 
Fixes ticket #9401

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-10-27 13:14:02 +00:00
Rick Elrod
ad55b9ddc8 Revert "Disable prerelease redirects" 
This reverts commit 54c4089a70.
 2020-10-27 07:28:53 -05:00
Aurélien Bompard
b219aad49f
Try to fix ipsilon's openid 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 16:45:20 +02:00
Kevin Fenzi
e59166aeac pkgs / staging: sort out staging certs and sites. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-10-14 16:20:32 -07:00