infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
15163 commits 9 branches 0 tags 110 MiB
Commit graph

15163 commits

This branch
This branch
All branches
Author SHA1 Message Date
Patrick Uiterwijk
674c930093 Enable FAS -> IPA sync in production 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 15:46:47 +00:00
Patrick Uiterwijk
7b19073b0d Deploy FAS config for prod IPA 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 15:40:52 +00:00
Kevin Fenzi
2cb844e02b fix network on db application ip and fix hosts file for koji01.stg 2016-10-13 15:35:42 +00:00
Patrick Uiterwijk
42be767a8b We need this proxying first 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 15:19:22 +00:00
Patrick Uiterwijk
326a6e42da Create ccd files 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 14:37:15 +00:00
Patrick Uiterwijk
2b41dbcee7 s/./_/ 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 14:32:06 +00:00
Patrick Uiterwijk
8f77ba7c00 Add configuration script for IPA 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 14:31:15 +00:00
Patrick Uiterwijk
39c59360d8 We now also have certificates for production IPA 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 13:59:19 +00:00
Patrick Uiterwijk
1c74f98cca Add production IPA cert 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 13:46:34 +00:00
Patrick Uiterwijk
cc23d24b95 Due to our special setup, conncheck wont work 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 13:31:21 +00:00
Patrick Uiterwijk
d60e11d42b Also install KRA 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 13:11:11 +00:00
Patrick Uiterwijk
66bdf1408b After installing IPA, do one more base role 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:54:43 +00:00
Patrick Uiterwijk
7048b8dd92 DNS port needs to be open for replication setup 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:42:35 +00:00
Patrick Uiterwijk
4fc3e98d55 Seems IPA wants these ports open for replication 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:36:29 +00:00
Patrick Uiterwijk
87cba77945 Closing braces 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:26:07 +00:00
Patrick Uiterwijk
2a81845588 Perform replication 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:25:29 +00:00
Patrick Uiterwijk
ef408906df Wrong way around 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:20:17 +00:00
Patrick Uiterwijk
82cb7596ab Stat info is in a subdict 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:18:53 +00:00
Patrick Uiterwijk
aeca7d159b Copy and remove replica file 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:17:53 +00:00
Patrick Uiterwijk
5ccac266c4 Add .gpg for sanity 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:12:37 +00:00
Patrick Uiterwijk
9645b45464 Dont make difficult directory structures 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:11:49 +00:00
Patrick Uiterwijk
d2fe51df9b Seems IPA is not psychic 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:10:09 +00:00
Patrick Uiterwijk
1fd587b303 Add tags 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:06:53 +00:00
Patrick Uiterwijk
88de928625 s/delegate/delegate_to/ 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:05:56 +00:00
Patrick Uiterwijk
9aafb23ba6 Update_cache is not needed here 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:04:34 +00:00
Patrick Uiterwijk
9edab19d4e Create an retrieve replica file for ipa02+ 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 12:03:57 +00:00
Patrick Uiterwijk
71d48d76bf Seems recursion does work in ansible 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 11:29:41 +00:00
Patrick Uiterwijk
e2abe6981e Kadmin disabling needs to happen some other way 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 11:28:12 +00:00
Patrick Uiterwijk
05fcea1a7e Only run full IPA install on primary IPA box 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 11:25:27 +00:00
Patrick Uiterwijk
0a5758a918 Add IPA to proxies 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 11:23:52 +00:00
Patrick Uiterwijk
990cb24c13 Staging autosign is a VM 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 11:17:54 +00:00
Patrick Uiterwijk
f30d3ab980 Add inventory info for ipa prod 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 11:17:03 +00:00
Martin Krizek
5261ab974f taskotron-client prod: set longer timeout for testcloud 2016-10-13 10:56:10 +00:00
Pierre-Yves Chibon
5d63549bc4 Install and enable haveged on pagure.io 2016-10-13 11:15:54 +02:00
Kevin Fenzi
5c141640d9 switch mariadb backups to 5am for now 2016-10-13 00:38:37 +00:00
Kevin Fenzi
011579bcc0 add osbs-node to master playbook 2016-10-12 21:30:10 +00:00
Kevin Fenzi
052388cf78 drop arm02-builder04 as it is not at all stable 2016-10-12 20:25:50 +00:00
Parag A Nemade
e85529179b Improve bot rules for #fedora-g11n 
Signed-off-by: Parag A Nemade <pnemade@fedoraproject.org>
 2016-10-12 19:19:13 +00:00
Kevin Fenzi
92a1912d07 fix the last commit 2016-10-12 18:24:23 +00:00
Kevin Fenzi
96a6e7e002 add build target to koji fedmsgs. issue 5509 2016-10-12 17:54:35 +00:00
Kevin Fenzi
6164896741 add infra-tags-report script running on mondays. ticket 5504. Thanks marc84 and alda 2016-10-12 17:12:38 +00:00
Kevin Fenzi
f0a1fee8e4 add another list to no fedmsgs on mailman01 2016-10-12 16:40:54 +00:00
clime
38d16d89e9 use f24 image for copr-keygen-dev 2016-10-12 13:17:37 +02:00
clime
93090a9512 use yum-deprecated in copr-keygen setup atm 2016-10-12 08:38:26 +02:00
Nick Bebout
c0b6f7d6a3 Update SKS membership file 2016-10-11 17:35:22 +00:00
Patrick Uiterwijk
e232f18c20 Add puiterwijk to stg koji admin 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-11 17:06:47 +00:00
Kevin Fenzi
ccf8bb4315 correct koji01.stg ip 2016-10-11 16:38:55 +00:00
Kevin Fenzi
5837634ee3 add some keepalived to db-koji.stg 2016-10-11 16:33:09 +00:00
Kevin Fenzi
c4b77adc87 update ssh known hosts 2016-10-11 16:15:56 +00:00
Patrick Uiterwijk
9d7ee2d639 Add autosign01.stg 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-11 14:37:39 +00:00