Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
42807 commits 9 branches 0 tags 111 MiB
Commit graph

9447 commits

Author SHA1 Message Date
James Antill
49fe6d4ed2 Move buildhw-x86-04.iad2 to nftables. 
Signed-off-by: James Antill <james@and.org>
 2025-04-17 15:12:01 -04:00
Greg Sutcliffe
7f60fdf690 Zabbix-stg: More base server config 
This adds:
- Matrix media type
- User for a Matrix bot
- Trigger using Matrix & the bot
- PSK configuration, using the PSK file already deployed
- 2 base templates
  - a general one suitable even for Koji
  - a dependant one for all other hosts
- Autoregistration config to use the new base template

This is all scoped to staging via a new include in main.yml
 2025-04-02 17:30:59 +01:00
Pavel Raiskup
5a85ca9211 copr: pulp_content_url needs to be slash-terminated 2025-04-01 07:49:20 +02:00
Adam Williamson
7b84f30429 openqa/server: switch prod to OAuth2 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-03-28 14:37:00 -07:00
Adam Williamson
5da2faac67 openqa/server: allow OAuth2 authentication, enable on lab 
OpenID support in FAS is going away. openQA has OAuth2 support.
I've tested this config to work with manual edits on lab, now
ansiblizing it (for lab only to start with).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-03-28 13:40:57 -07:00
Kevin Fenzi
5505dff89c bvmhost-p09-04/05: no nbde here 
I had reinstalled these both with no encryption in an attempt to see if
I could get more performance from them. Since we moved to iscsi this is
moot, and we should probibly reinstall them like the others again, but
for now just disable nbde so everything works with the playbook.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-27 15:11:49 -07:00
Kevin Fenzi
1cc761ac9b compose-eln01: this is using primary koji 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-27 13:39:49 -07:00
Michal Konecny
a807fb3d4f [mailman3] Create gunicorn configuration file 
To make changing the gunicorn configuration more easily let's move
configuration values from systemd service to separate configuration
file.

The file will live in /etc/mailman3/gunicorn.conf.py.
 2025-03-27 13:01:13 +01:00
Kevin Fenzi
f256adda6e bvmhost-p09: also enable nbde here 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-26 17:48:52 -07:00
Kevin Fenzi
1f2bba4489 bvmhost-a64 / buildhw-a64: enable nbde role here as well 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-26 16:17:37 -07:00
Kevin Fenzi
de320e8298 bvmhost-a64-04: try and enable the nbde handling 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-26 16:05:28 -07:00
Kevin Fenzi
82f85d89ad compose / staging: these are primary koji instances 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-26 10:30:51 -07:00
Jakub Kadlcik
a6b86224fb copr: rename STG pulp domain 2025-03-25 15:01:07 +01:00
Jakub Kadlcik
5f7d5bda78 copr-fe-dev: fix pulp content URL 2025-03-25 14:22:35 +01:00
Jakub Kadlcik
9cfa240dd8 logdetective01, logdetective02: add sgallagh and mmassari as admins 2025-03-25 13:30:21 +01:00
James Antill
7f429f3d13 Clean nftables var. for specific staging groups. 
Signed-off-by: James Antill <james@and.org>
 2025-03-24 16:18:48 -04:00
James Antill
3d695e58b3 Turn on nftables for all of staging. 
Signed-off-by: James Antill <james@and.org>
 2025-03-24 15:13:35 -04:00
Jakub Kadlcik
a9494929ef logdetective01: drop birthday 2025-03-19 22:47:55 +01:00
Jakub Kadlcik
65cc13ca28 logdetective01: set birthday 2025-03-19 22:38:07 +01:00
Kevin Fenzi
22681acd07 releng_compose: set koji_instance: "primary" 
This was missed when I was adding the riscv secondary koji before
freeze. We need it fixed because it breaks the playbooks on the
primary releng compose machines and we have a freeze break to deploy.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-17 10:59:10 -07:00
Jakub Kadlcik
f10301013c copr-dev: try using bootc builder image, pt.3 2025-03-16 17:59:09 +01:00
Kevin Fenzi
d7c1fdf01c pagure.io: double cpus to try and help scraper issues 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-14 12:54:31 -07:00
James Antill
8e8fc651fa Turn on nftables for a few more staging groups. 
Signed-off-by: James Antill <james@and.org>
 2025-03-10 16:40:08 -04:00
Jakub Kadlcik
eec596d979 copr-dev: try using bootc builder image, pt.2 2025-03-07 12:18:18 +01:00
Jakub Kadlcik
0f902b6e9b copr-dev: try using bootc builder image 
See https://github.com/fedora-copr/copr-image-builder
 2025-03-06 23:57:10 +01:00
James Antill
172cfc9efa Move staging builders to nftables. 
Signed-off-by: James Antill <james@and.org>
 2025-03-03 21:20:30 +00:00
James Antill
31d65aa439 Actually move to nftables for any host with nftables: true (nothing atm). 
Signed-off-by: James Antill <jantill@redhat.com>
 2025-03-03 21:20:30 +00:00
Kevin Fenzi
4b0331e576 compose-x86-riscv01: set secondary koji instance 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 14:35:02 -08:00
Kevin Fenzi
5aaff87f87 compose-x86-riscv01: fix name thinkos 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 14:17:13 -08:00
Kevin Fenzi
f0663ae52f compose-riscv01: add a secondary x86 compose host for riscv 
This vm will hopefully allow for composing images, repos, etc

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 13:56:23 -08:00
Kevin Fenzi
47fcb90839 buildvm_aarch64_stg: set primary instance here too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-16 08:58:04 -08:00
Kevin Fenzi
f04ff347dd buildvm_s390x_stg: set primary instance here too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-16 08:56:22 -08:00
Michal Konecny
6428f8f772 Sunset github2fedmsg and fedmsg 
This commit is removing all the fedmsg related stuff from ansible
repository.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-02-13 10:08:51 +00:00
Kevin Fenzi
5faa76d541 buildvm / staging: set koji instance to primary 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-11 15:59:56 -08:00
Kevin Fenzi
49c87bdbdf bkernel: also set primary koji_instance 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-10 18:03:30 -08:00
Kevin Fenzi
5139b75d3b buildhw: set koji_instance to primary on primary 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-10 17:21:13 -08:00
Kevin Fenzi
4601439ab0 buildvm_x86_riscv: do not check nrpe, just ping 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-10 17:10:06 -08:00
Kevin Fenzi
36429f347f buildvm: set koji_instance for primary 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-10 13:54:12 -08:00
Kevin Fenzi
2da208068c db-koji01.stg: increase disk size 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-10 12:59:45 -08:00
Kevin Fenzi
76eedf9037 buildvm-x86-riscv: set koji_instance for these to secondary 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-06 16:05:18 -08:00
Kevin Fenzi
479d1fd64f buildvm-x86-riscv: not external 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-06 15:48:06 -08:00
Kevin Fenzi
8520d808ea buildvm-x86-riscv: fix ip on 02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-06 15:40:38 -08:00
Kevin Fenzi
bd21aa17c5 add riscv x86 builders 
We want a pair of x86_64 buildvm's to do tasks that don't need to be on
a riscv instance (create/newrepos, etc).

So adjust playbooks and add them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-06 15:19:13 -08:00
Michal Konecny
7b58dfdce8 Remove fedmsg and github2fedmsg from staging 
The messaging bridges openshift project and github2fedmsg VM were
already removed in staging. This is to clean the ansible playbooks.

I will create a separate one for production after this one is merged.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-02-04 09:13:40 +01:00
Kevin Fenzi
4292c0ea22 buildvm_ppc64: fix default volume group that was mistakenly changed 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-02 11:49:28 -08:00
Pedro Moura
0c695d2603 add datanommer01 to cloud_aws group 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
 2025-01-31 15:15:15 +00:00
Jakub Kadlcik
b7be52dd87 copr-be: conditionally redirect backend URLs to Pulp 
See https://github.com/fedora-copr/copr/issues/3504
 2025-01-30 13:53:40 +00:00
Pedro Moura
e2b4d855d7 Update stg proxies from f40 to f41 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
 2025-01-29 20:15:44 +00:00
James Antill
9e32ac422e Remove bvmhost-a64 01-02, 07-13, 19-24. 
Signed-off-by: James Antill <james@and.org>
 2025-01-28 21:47:30 +00:00
iamyaash
b3d6a90b9a motd generic template added 
migrated notes from infra/hosts

motd changes; excluding CSI infos

removed csi_* vars from group_vars; converted csi_purpose & csi_relationship into notes

fixed merge conflicts

minor changes; var

updating YAMLs & playbooks

udpated YAMLs & playbooks again

updated correctly; buildhw.yml

fixing merge conflicts

dest added in motd.yml
 2025-01-28 01:10:14 +00:00