infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
37163 commits 9 branches 0 tags 110 MiB
Commit graph

37163 commits

This branch
This branch
All branches
Author SHA1 Message Date
Adam Williamson
3d148f5e7f openqa/worker: handle git 'safety' check for test dir 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-05-27 09:05:06 -07:00
Aurélien Bompard
f0d1656bae
Add webhook triggers for ipsilon-website 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-27 17:13:42 +02:00
Aurélien Bompard
1bc48f6751
Two routes can't have the same name 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-27 16:30:22 +02:00
Aurélien Bompard
e13e96056c
Fix Alembic integration in datanommer 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-27 16:10:42 +02:00
Aurélien Bompard
e05049f94d
Ipsilon website: set final route 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-27 16:10:42 +02:00
Michal Konečný
974a5be479 [the-new-hotness] Update to F36 on staging 
Update Fedora image to F36. Only for staging for now.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-05-27 12:52:35 +02:00
Adam Williamson
f869c0f643 Revert "openqa/worker: handle git 'safety' check for test dir" 
This reverts commit 34b3d3a5cc. On
second thoughts it's kinda ugly and I need to think about other
options...
 2022-05-26 15:23:13 -07:00
Adam Williamson
34b3d3a5cc openqa/worker: handle git 'safety' check for test dir 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-05-26 15:05:00 -07:00
Kevin Fenzi
19d2fbffbf inventory: add some power mgmt interfaces 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-26 10:24:12 -07:00
Kevin Fenzi
4c4be31afb ipsilon / staging: the wsgi is named differently in stg/f36? 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-25 17:42:30 -07:00
Kevin Fenzi
792f082750 Revert "ipsilon / staging: fixes for f36" 
This reverts commit 6d5911cc3c.

Turns out these are the way the new version installs. ;)
 2022-05-25 17:38:04 -07:00
Kevin Fenzi
0302040f3c proxies / reverseproxy / blockerbugs: have proxies return 421 for non iad2 access. 
This is the fun firefox h2 connection reuse bug. blockerbugs is only in
iad2, so if firefox tries to reuse a connection to another proxy for it,
just send it a 421 so it knows thats bad on it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-25 17:29:37 -07:00
Kevin Fenzi
6d5911cc3c ipsilon / staging: fixes for f36 
The wsgi has changed from /usr/libexec/ipsilon/ipsilon.py to
/usr/libexec/ipsilon, so adjust wsgi and directory perms to handle that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-25 16:58:17 -07:00
Kevin Fenzi
5b5b2c0b4d rsyncd: drop restarting xinetd handler for fedora hosts, it no longer exists 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-25 16:24:08 -07:00
Kevin Fenzi
053231784f ipsilon / staging: fix old firewall still using log01 ip from phx2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-25 16:12:40 -07:00
Kevin Fenzi
742d1a4bcd nagios: readd ocp hosts so we can set them to only ping monitor 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-25 16:07:03 -07:00
Kevin Fenzi
133c9a8014 dhcp: fix openqa p09 worker mgmt ips 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-25 15:49:24 -07:00
Kevin Fenzi
14687fa862 inventory: re-add ocp hardware nodes, so we can ping monitor them with nagios. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-25 14:44:08 -07:00
Kevin Fenzi
d7a8c7aa57 nagios: only check mote on value01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-25 13:25:00 -07:00
Aurélien Bompard
5561df1b1d
Initial attempt at hosting ipsilon-project.org. Not functional at the moment. 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-25 18:43:18 +02:00
Adam Williamson
b5be505576 openqa/server: don't hide ISO assets any more 
We were hiding these because in the past the only ISO assets
were those from the compose under test, and we wanted to avoid
people downloading them from openQA when we'd rather they get
them from dl.fp.o or the mirror system. But these days we have
tests that generate ISOs (update netinst and live image build
tests) and we often want to download the generated images to
test them locally.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-05-25 09:12:10 -07:00
Aurélien Bompard
c030ab4c77
Ipsilon needs an SELinux boolean to use python-pam 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-25 11:32:57 +02:00
Aurélien Bompard
b6390112af
amend last commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-25 11:22:57 +02:00
Aurélien Bompard
cd277a01d8
We now use PAM auth in Ipsilon 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-25 11:21:07 +02:00
Aurélien Bompard
61821fb1ba
Update ipsilon to 3.0.1 in prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-25 10:27:02 +02:00
Kevin Fenzi
33403e750e bastion: readd may tls for all non rh sites 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-24 17:46:04 -07:00
Kevin Fenzi
5cde748b58 releng: add local to make a local masher user instead of the ipa one. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-24 16:49:07 -07:00
Kevin Fenzi
a0177f971a compose-branched/rawhide: move to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-24 16:09:50 -07:00
Kevin Fenzi
ebf2b27ab4 virt-install: switch all the unsafe ones to also set unmap for discard 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-24 16:09:18 -07:00
Kevin Fenzi
0e80237cce bodhi-backend01.stg: reinstall with f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-24 14:46:25 -07:00
Kevin Fenzi
caf5f130c8 bastion / postfix: clean up tls_policy duplicates 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-24 12:33:26 -07:00
Kevin Fenzi
a1af68173d bastion / postfix: disable tls_resue for now 
Something is broken with smtp_tls_connection_reuse = yes, so disable it
for now. Also, setup a tls_policy map file and tell it to not use tls
for mx2.redhat.com. The normal smtp connection reuse works just fine, so
this will keep mail flowing until we can one day figure out why tls
connection reuse is busted.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-24 12:24:30 -07:00
Aurélien Bompard
8962731dbc
Don't use datetime.fromtimestamp yet 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-24 18:37:27 +02:00
Aurélien Bompard
e979a1955e Update the datanommer Nagios check to query datagrepper directly 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-24 16:17:14 +00:00
Kevin Fenzi
81771937c2 bastion / postfix: need to set session cache for tls connections and timeout 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-24 09:13:08 -07:00
Aurélien Bompard
e62e7b0b80
Fix the datanommer DB URL in alembic 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-24 07:02:29 +02:00
Kevin Fenzi
105cad26dc postfix / main.cf: fix releng and vpn config and drop phx2 
We fixed the config in a PR from aheath1992 for most of the machines,
but we need to fix vpn (proxies in particular) and releng boxes now.
Also, while we are here, lets drop the phx2 file since it's not used
anymore.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-23 16:43:01 -07:00
Kevin Fenzi
f178023895 notifs-backend / staging: more fixes for staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-23 15:49:51 -07:00
Kevin Fenzi
7cba0da13f notifs-backend / staging: try using the stg db in stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-23 15:39:11 -07:00
Kevin Fenzi
c679788f00 logview: 2to3 it and make sure it is using python3.8 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-23 13:04:17 -07:00
Kevin Fenzi
f7490bfd81 pagure: fix pagure_mirror.service 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-23 10:43:29 -07:00
Kevin Fenzi
b1395e9088 bastion / postfix: re-add missing smtp_connection_cache_destinations 
Without this it wasn't caching tls connections and was going over the
small limit redhat.com mx had. Hopefully this gets mail flowing again.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-23 08:44:36 -07:00
Aurélien Bompard
2050d7112b
Simplify the Bodhi playbooks 
It should not actually change anything on the hosts.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-23 15:11:30 +02:00
Aurélien Bompard
95ed6285d1
Fix the database name to backup on db-datanommer02 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-23 12:20:22 +02:00
Kevin Fenzi
593356b520 ocp4: we need the control plane in inventory for vhost_reboot to do the right thing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-22 15:52:27 -07:00
František Zatloukal
6350c8b9c4 oraculum: Try redis image from gcr 2022-05-21 11:48:50 +02:00
Jakub Kadlcik
8bacf413c2 copr: allow resalloc group to read /etc/resallocserver 2022-05-20 17:09:44 -04:00
Jakub Kadlcik
be0a649135 copr: fix with_items 2022-05-20 16:55:33 -04:00
Jakub Kadlcik
1847ad88bc copr: access for lighttpd worked but other users didn't 2022-05-20 16:50:41 -04:00
Jakub Kadlcik
dac9137f49 copr: deploy Resalloc WebUI 2022-05-20 16:31:54 -04:00