Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
21636 commits 9 branches 0 tags 111 MiB
Commit graph

795 commits

Author SHA1 Message Date
Patrick Uiterwijk
e415905608 Make mirrorlist not modify the netblock tree in-memory 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-10-20 16:00:59 +00:00
Patrick Uiterwijk
ae66c3f1ce Revert "mirrorlist: Use a thread-local copy of the tree to prevent changing the global one" 
This reverts commit 738e67c90c.
 2015-10-20 02:14:05 +00:00
Patrick Uiterwijk
738e67c90c mirrorlist: Use a thread-local copy of the tree to prevent changing the global one 
This makes sure that the global version does not get changed while processing
a request, keeping the hostnet check working across requests.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-10-20 01:59:51 +00:00
Patrick Uiterwijk
0991339c42 Apply hotfix to make mirrorlist thread 2015-10-18 22:42:26 +00:00
Adrian Reber
6722cab410 Increase the number of possible child processes 
The mirrorlist-server is the process which has the mirrorlist data
loaded and which is accessed by the public facing
mirrorlist_client.wsgi. The mirrorlist-server uses the
ForkingUnixStreamServer which has a default of max_children = 40.
(https://hg.python.org/cpython/file/2.7/Lib/SocketServer.py#l516)

Looking at the code of ForkingUnixStreamServer it says at

https://hg.python.org/cpython/file/2.7/Lib/SocketServer.py#l523

  # If we're above the max number of children, wait and reap them until
  # we go back below threshold. Note that we use waitpid(-1) below to be
  # able to collect children in size(<defunct children>) syscalls instead
  # of size(<children>): the downside is that this might reap children
  # which we didn't spawn, which is why we only resort to this when we're
  # above max_children.

As we are running the wsgi with processes=45 this sounds like it can
lead to situation where it might just hang.

This increases max_children to 80 and processes to 60.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2015-10-15 16:38:28 +00:00
Adrian Reber
d04588274a Original mirrorlist_server.py which needs to be hotfixed 
Signed-off-by: Adrian Reber <adrian@lisas.de>
 2015-10-15 14:09:13 +00:00
Kevin Fenzi
fcef9ee150 Some whitespace cleanups to check the proxy reload changes. 2015-10-11 19:56:37 +00:00
Kevin Fenzi
e08120a1b8 Adjust cloud step tickers too 2015-09-05 19:12:59 +00:00
Mikolaj Izdebski
80a2b5c6bb Remove configuration for old jenkins 2015-08-26 16:51:39 +00:00
Adam Miller
e99b4ecc51 Add post-install configration for openshift, OSBS and atomic-reactor 2015-08-07 18:38:25 +00:00
Aurélien Bompard
d84d964972 Enable SSL on lists-dev 2015-08-04 09:04:59 +00:00
Tim Flink
64debfb5ae use valid template syntax for apache config template 2015-07-27 18:15:59 +00:00
Kevin Fenzi
64a1639e66 Add twisted buildbots to new cloud. 2015-07-23 17:32:58 +00:00
Mike Ruckman
7ed79ba3e8 fix: fixed typo in last commit (246c398) 2015-07-17 21:03:58 +00:00
Mike Ruckman
246c398692 allow indexing to follow symlinks on qadevel 2015-07-17 20:56:14 +00:00
Tim Flink
b0c2c02420 adding static site virtualhosts to qadevel-stg 2015-07-17 19:42:07 +00:00
Kevin Fenzi
1710fea8b8 Make artboard httpd 2.4 compliant. 2015-07-14 19:07:29 +00:00
Kevin Fenzi
8e350a5597 Try and add f22 jenkins builder. 2015-07-07 17:16:39 +00:00
Patrick Uiterwijk
f43622c33c Migrate openstack over to fedorainfracloud.org 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-06-23 06:43:05 +00:00
Adrian Reber
aab02f904b Revert "Original mm2_crawler which needs to be hotfixed" 
This reverts commit 3bc0652081.
 2015-06-08 08:44:36 +00:00
Adrian Reber
7cfe45d7d8 Revert "Added hotfix to not disable always up2date categories." 
This reverts commit 4fd68994e1.
 2015-06-08 08:43:48 +00:00
Till Maas
2b17c84397 sigul bridge: Do not ask for NSS password 
Setting the empty NSS password makes the bridge not ask for a password
on startup.
 2015-06-05 10:07:22 +02:00
Kevin Fenzi
19e340961f Exclude 22_Alpha and 22_Beta from download-ib02. It's full. 2015-05-16 02:09:31 +00:00
Pierre-Yves Chibon
dd72721bc7 Rename the EL7-beta builder on jenkins to EL7 2015-05-11 09:12:59 +02:00
Adrian Reber
4fd68994e1 Added hotfix to not disable always up2date categories. 2015-05-08 20:14:00 +00:00
Adrian Reber
3bc0652081 Original mm2_crawler which needs to be hotfixed 2015-05-08 20:04:52 +00:00
Aurélien Bompard
18bccd797f Update the mailman role for Mailman 3 2015-04-29 16:10:26 +00:00
Kevin Fenzi
a2d555b068 Add secondary koji configs for secondary sigul bridge. 2015-04-28 16:20:37 +00:00
Miroslav Suchý
35ab9867e2 this seems to work 2015-04-27 22:21:06 +00:00
Miroslav Suchý
e751dd0ebe install firewall and metering agent 2015-04-27 21:46:29 +00:00
Kevin Fenzi
7157da1221 More sigul adjustments for secondary 2015-04-27 19:50:21 +00:00
Miroslav Suchý
36befd56a7 load correct ssh key 2015-04-27 13:31:43 +00:00
Miroslav Suchý
61c4e314f0 Revert "allow fed-cloud09 to log to itself" 
This reverts commit 653353ea4b.
 2015-04-27 09:56:59 +00:00
Miroslav Suchý
653353ea4b allow fed-cloud09 to log to itself 
so packstack can configure swift. And unify the ssh key deployment
 2015-04-27 09:50:45 +00:00
Mikolaj Izdebski
a974762d13 Add Koschei stg/prod hosts 
- koschei-specific setup tasks are moved to a new koschei role
- cloud dev instance is made to use koschei role
- stg and prod instances are added to inventory
- koschei host group is introduced
 2015-04-24 16:35:48 +00:00
Pierre-Yves Chibon
1285e4eccd Fix the IP of the EL7 builder 2015-04-23 17:07:02 +02:00
Miroslav Suchý
35b2a9f5f0 obey the ssl recomendations 
from https://mozilla.github.io/server-side-tls/ssl-config-generator/
This will requires:
Oldest compatible clients : Firefox 27, Chrome 22, IE 11, Opera 14, Safari 7, Android 4.4, Java 8
 2015-04-22 12:35:38 +00:00
Miroslav Suchý
88050c8e83 let packastack install swift only on fed-clou09 
we will install it on compute nodes manually
 2015-04-20 09:46:51 +00:00
Miroslav Suchý
5707d8b1f2 configure swift on all nodes 2015-04-15 14:17:52 +00:00
Miroslav Suchý
5b85fa8158 set StrictHostKeyChecking to no, because nova login non-interactively 2015-04-14 17:37:16 +00:00
Miroslav Suchý
e11c176ce7 deploy ssh keys of nova user - take 2 2015-04-14 17:05:32 +00:00
Miroslav Suchý
49d8c3d27e create 100GB swift storage in vg_server 2015-04-14 09:37:28 +00:00
Miroslav Suchý
0ac74dd66b put fed-cloud09.pem to public git, just key is secret 2015-03-31 09:33:01 +00:00
Peter Robinson
a7f7d1bf8e yumrepos: make the aarch64 yum repos support generic for all secondary architectures 2015-03-24 23:00:54 +00:00
Peter Robinson
4f88b28df2 yumrepos: bring over arm03 exclusion to primary 2015-03-24 23:00:03 +00:00
Peter Robinson
b43a3f8a49 yumrepos: ARMv7 is identical to x86 now it's primary so there's no reason to treat it differently 2015-03-24 22:45:44 +00:00
Peter Robinson
b6ddb9feb3 yumrepos: add support for aarch64 repos 2015-03-24 22:12:02 +00:00
Mikolaj Izdebski
d8176192b4 Update Koschei playbook 
See https://fedorahosted.org/fedora-infrastructure/ticket/4690

This commit introduces the followith enhancements:
- add koschei tag
- yum-install koschei package
- add extra fedorapeople repo
- enable and start Koschei services
- install Koschei config file
- restart services on config update
- install Koji certificates
- avoid explicitly cleaning yum metadata
- add alembic DB migration
 2015-03-19 13:55:06 +00:00
Kevin Fenzi
c54f4a0151 Add fedora-admin pub key 2015-03-17 15:27:11 +00:00
Aurélien Bompard
9594724b74 Allow sudo commands to postgres to run without a tty 2015-03-13 15:03:06 +00:00