infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
34243 commits 9 branches 0 tags 110 MiB
Commit graph

749 commits

Author SHA1 Message Date
Nils Philippsen
18b5afca17 Make fixing home dir ownership a separate playbook 
We will have to fix ownership of home directories on all FAS client
hosts when migrating users to IPA because they have different uids
there. This is a manual playbook because running this on fedorapeople
will have to check thousands of directories which is a cost we want to
avoid in ordinary playbook runs.

Also, tag tasks in the reenrollment playbook to allow specifying which
parts get run if necessary.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-12 15:57:52 +01:00
Nils Philippsen
8bb0b6f069 reenroll-ipa-client: Fix conditionals 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-05 16:58:01 +01:00
Nils Philippsen
9ca47e58cb Use include_role the right way 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-05 16:44:14 +01:00
Nils Philippsen
62882a1906 manual: Reenroll stale IPA clients 
Reinstalling the IPA server in staging made the enrollments of IPA
clients against the old instance stale. This playbook detects this,
cleans things up and enrolls hosts again.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-04 16:20:40 +01:00
Aurélien Bompard
3429a210b3
Fix the IPA uninstall script again 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-12 16:08:29 +01:00
Aurélien Bompard
6252a33965
Fix multiple errors in the ipa uninstall playbook 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-12 13:51:18 +01:00
Aurélien Bompard
a545c86f4a
Ignore uninstall errors 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-11 10:41:06 +01:00
Aurélien Bompard
c5757a1bf6
Typo 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 18:02:41 +01:00
Aurélien Bompard
61eb449df1
No variable substitution outside of playbooks 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 18:00:15 +01:00
Aurélien Bompard
666e6e1685
Can't import a playbook from inside a playbook 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 17:55:09 +01:00
Aurélien Bompard
c871e09afe
Fix file module usage 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 16:55:29 +01:00
Aurélien Bompard
aa44a9956f
Fix task name 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 16:50:00 +01:00
Aurélien Bompard
7f75378a29
fix import_playbook 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 16:48:53 +01:00
Aurélien Bompard
8f51b77075
Add a manual playbook to uninstall ipa clients 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 16:41:54 +01:00
Michael Scherer
e1b408851a Remove build of fudcon 
The source code was removed in https://pagure.io/fedora-websites/c/f5646276cf629ffa32b87cb23afb99823d498510?branch=master
and the website is just a redirect.
 2021-02-04 21:05:18 +00:00
Nils Philippsen
d6cdeb7aea Consistency: releng_stg -> releng_compose_stg 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-02-01 22:23:41 +00:00
Pierre-Yves Chibon
542cc75a07 koji sync from stg: attempt to fix the migration 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-07 16:24:15 +02:00
Pierre-Yves Chibon
f91a80046b Wipe everything that is to do with pdc-backend from our ansible repo 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-05 18:57:52 +00:00
Jeffrey Serio
28b3b7f575 Add sync-hosts.yml playbook 2020-10-02 18:43:37 +00:00
Kevin Fenzi
e12535dc89 koji / staging-sync: re-enable arm/ppc builders in the staging sync 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-10-01 17:48:56 -07:00
Kevin Fenzi
af0253afe5 clean up some more openqa_stg vs openqa_lab 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-21 15:24:03 -07:00
Pierre-Yves Chibon
2384341514 staging-sync/db-sync: Name a few more tasks to have a nicer output 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 12:03:06 +02:00
Pierre-Yves Chibon
66cbb8da16 staging-sync/db-sync: Name the task stopping/restarting apache 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:58:52 +02:00
Pierre-Yves Chibon
f755eef97f staging-sync/db-sync: Fix the condition to ensure the server is defined and not null 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:57:22 +02:00
Pierre-Yves Chibon
cf31e3f0c8 staging-sync/db-sync: Point to batcave01 only instead of all the batcaves 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:53:46 +02:00
Pierre-Yves Chibon
e3943b0e52 staging-sync/db-sync: Allow the deletion of the stg database to fail without breaking the playbook 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:53:46 +02:00
Pierre-Yves Chibon
c377f97e50 staging-sync/db-sync: strings need quotes 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:48:41 +02:00
Pierre-Yves Chibon
2046802ec5 staging-sync/db-sync: yet another attempt to make the server argument optional 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:47:28 +02:00
Pierre-Yves Chibon
28e5751542 staging-sync/db-sync: when are not a valid attribute for plays 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:38:21 +02:00
Pierre-Yves Chibon
b4ea291fe9 staging-sync/db-sync: Another attempt to make the server optional 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:37:30 +02:00
Pierre-Yves Chibon
c3ad168fb0 staging-sync/db-sync: stop apache after having dumped the prod db 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:30:23 +02:00
Pierre-Yves Chibon
ca8130bdca staging-sync/db-sync: port the playbook to iad2 and make the server argument optional 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-16 11:28:15 +02:00
Kevin Fenzi
5869c9c160 koji prod->stg sync: adjust for new datacenter 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-14 16:01:22 -07:00
Kevin Fenzi
8907393be0 autosign: the group is autosign_stg not autosign-stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-14 15:11:48 -07:00
Kevin Fenzi
82179a74b9 Add autosign01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-14 14:58:51 -07:00
Aurélien Bompard
fa775d6538
Fix IPA backup playbook 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-14 13:28:36 +02:00
Nils Philippsen
750dc6da45 Add playbooks to manually backup/restore IPA (stg) 
This is to be able to restore things to a clean slate when we test the
fas2ipa data migration script.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-08-27 23:30:24 +00:00
Michael Scherer
5c3052862f Fix the working directory repo for badge deployment 2020-08-04 14:54:46 +00:00
Michael Scherer
e77d45b643 Use the new location for git 2020-08-04 16:25:13 +02:00
Michael Scherer
9a691c48a7 Use yaml syntax for the badge playbook 2020-08-04 16:24:03 +02:00
Jan Kaluza
a96ff74f27 ODCS: Update also odcs-client to latest version 2020-07-31 13:23:18 +02:00
Michal Konečný
04863be9e5 Add SAR script support for Openshift apps 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2020-07-21 07:46:20 +00:00
Kevin Fenzi
7984b46eb7 The great phx2 pruning run (1st cut). 
Since we no longer have any machines in phx2, I have tried to remove
them from ansible. Note that there are still some places where we need
to remove them still: nagios, dhcp, named were not touched, and in cases
where it wasn't pretty clear what a conditional was doing I left it to
be cleaned up later.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-14 14:14:31 -07:00
Stephen Smoogen
08f622be41 remove db-koji0[12].phx2, sign-bridge01.phx2, fedocal01.phx2, nuancier01.phx2, nuancier02.phx2 2020-06-11 17:14:29 -04:00
Stephen Smoogen
5553dfe42d i think this needs to go to iad2 2020-06-10 17:55:58 -04:00
Pavel Raiskup
5628b8d2a5 copr-fe: log alembic upgrade log 
The migration time we expect in the following upgrade is somewhere
around 5 minutes.  So it's good to see progress somewhere.
 2020-06-10 07:29:26 +02:00
Kevin Fenzi
a9ab782340 iad2: fedora-ostree-content is now fedora_ostree_content to better match netapp standards 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-09 21:08:21 -07:00
Pavel Raiskup
84cb1a0061 copr-fe: easier logic for upgrade playbook 2020-06-09 20:42:31 +02:00
Pavel Raiskup
ea69eebfe6 copr-fe: make copr-frontend-upgrade.yml more usable 
Without shutting httpd down, sometimes - when there's high enough load -
post scriptlet of copr-frontend takes too long to finish (restarging
httpd, gently waiting for existing connections).  But that makes the
outage window larger as httpd doesn't accept the new connections when
shutting down.

So automatize (forced) shutdown of httpd first (when there's existing
frontend update) -> upgrade the package -> run the migrations -> and
make httpd started again.
 2020-06-09 20:32:37 +02:00
Kevin Fenzi
24fdf77f64 iad2: add clevis and serial to sign-vault01.iad2. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-07 16:05:40 -07:00