Commit graph

371 commits

Author SHA1 Message Date
Michal Konecny
6428f8f772 Sunset github2fedmsg and fedmsg
This commit is removing all the fedmsg related stuff from ansible
repository.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-13 10:08:51 +00:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
3c41882bb0 ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell
Replaces references to shell: with ansible.builtin.shell

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:29:10 +10:00
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:26:47 +10:00
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
691adee6ee Fix name[casing] ansible-lint issues
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
Kevin Fenzi
55056c677e haproxy: remove a bunch of services that moved to openshift or went away
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-08 12:36:13 -08:00
Kevin Fenzi
659c9c719a openshift / haproxy: add service ca to trusted bundle
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-08 09:28:46 -08:00
89a8e33677
haproxy: add the openshift-service CA cert to the CA bundle 2024-12-08 00:34:27 +01:00
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
Kevin Fenzi
e3e2cb1d93 odcs: retire service ( infra 12192 )
Time to retire ODCS. ELN is moved off and that was the last thing using
it. Thanks for all the service ODCS!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 18:21:51 +00:00
Kevin Fenzi
c4024c4aa4 pdc: fare thee well!
This commit retires pdc from ansible.
The website should get redirected to a wiki page about the retirement.
If for some reason we need to bring things back, the vm's will still
have their disks and xml saved off so we can bring it back.
Would need to revert this, run proxy playbooks and do a little cleanup
on the redirect, then bring the vm's back up.
Hopefully we don't have to.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-02 13:39:15 -07:00
Kevin Fenzi
d11f9c5ced epel7 retirement
Drop epel7 all the places in ansible where it is and makes sense.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-03 20:00:59 +00:00
Kevin Fenzi
d366194a22 module-build-service (mbs): retire service
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.

Note that toddlers needs to be adjusted still, that will happen after
this.

Thanks for all the modules!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-22 13:38:53 -07:00
Kevin Fenzi
194213a6bf Revert "haproxy: set keepalive mode for kojipkgs"
This reverts commit fa729a6210.

See https://pagure.io/releng/issue/11439

Lets revert this to check on the rpm-ostree retry fix.
2024-05-07 11:21:47 -07:00
Kevin Fenzi
c84b99223c osbs: raise a glass for it's service
This removes osbs and allmost all it's associated playbooks and files.

It served long and well, but we no longer need it.
flatpaks are building with a koji-flatpak plugin.
base/minimal/toolbox containers are building with kiwi.
We aren't building any other containers right now, and we did they could
be added to kiwi.

This is the end of an era... I look with nostolga on
ansible-ansible-openshift-ansible (a role to setup ansible on a control
host and run it from our ansible).

Good bye osbs!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-28 12:52:07 -07:00
Kevin Fenzi
fa729a6210 haproxy: set keepalive mode for kojipkgs
We are hitting a sporadic and anoying 502 error with ostree pulls.
see https://pagure.io/releng/issue/11439

The problem seems to be between haproxy and varnish on kojipkgs01.

We set the httpclose option in haproxy globally, which closes
connections as soon as it thinks they are done.
Setting this option 'httpkeepalive' will keep connections alive
and handle the case of lots of fast connections downloading small
objects much better.

Sadly, we don't have a way to test this in staging, so we would need to
test in prod and roll back if there's problems.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-15 11:57:46 -07:00
Nick Bebout
b5d0a51ae9 Revert "Reapply "Change ipa01-backend to actually point to ipa02""
This reverts commit d28ebf8cb5.
2024-01-25 11:23:03 -06:00
Nick Bebout
d28ebf8cb5 Reapply "Change ipa01-backend to actually point to ipa02"
This reverts commit 7b71471851.
2024-01-25 08:50:46 -06:00
Nick Bebout
7b71471851 Revert "Change ipa01-backend to actually point to ipa02"
This reverts commit b64524ec9a.
2024-01-24 16:17:57 -06:00
Nick Bebout
b64524ec9a Change ipa01-backend to actually point to ipa02 2024-01-23 16:06:05 -06:00
Kevin Fenzi
20dc948173 notifs (old fmn): retire
We are retiring this in favor of the new service.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-15 12:28:28 -08:00
Kevin Fenzi
af8f9531a9 haproxy: fix issue with non iad2 proxies
Turns out zabbix is only in iad2, so we need to not set it up on non
iad2 proxies.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-15 11:14:27 -08:00
Kevin Fenzi
a60ca7159f nuancier: retire and remove from ansible
See https://pagure.io/fedora-infrastructure/issue/11371
This service is retired.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-15 10:44:00 -08:00
David Kirwan
6461430ae3
zabbix: remove conditions on zabbix configration
Rename host zabbix/zabbix.stg to zabbix01

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-15 08:10:44 +00:00
Kevin Fenzi
9b42cd8cbf haproxy: fix template typo
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-13 13:53:56 -08:00
David Kirwan
8b0581bcad
zabbix: haproxy config reworking
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-09 14:52:30 +00:00
David Kirwan
ee3bac3470
zabbix: haproxy config zabbix production
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-09 14:04:13 +00:00
Kevin Fenzi
50c61979f0 Revert "zabbix: Add configuration for zabbix prod to haproxy"
This reverts commit d7b20fa114.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-07 06:16:29 -08:00
David Kirwan
d7b20fa114
zabbix: Add configuration for zabbix prod to haproxy
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-07 07:49:31 +00:00
ce45b1775e
ocp: renew internal ingress certificates 2023-08-11 12:50:57 +02:00
Aurélien Bompard
74988bf1ff
Old FMN: update the heartbeat location
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-04-26 11:32:52 +02:00
Kevin Fenzi
36b489bce2 haproxy: adjust content size to 503 page
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-04-04 07:50:02 -07:00
0ece2dfe06
use fedoraproject favicon everywhere it's needed 2023-04-03 13:35:55 +02:00
Kevin Fenzi
b1b0923af0 openshift 3.11: raise a glass!
Our openshift 3.11 cluster(s) served us long and well.

Now we have everything finally moved to the openshift 4 clusters (fas2
was the last holdout). We can finally retire this. :)

🎉🥂

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-28 13:08:01 -08:00
Kevin Fenzi
99eab71b2e haproxy: install socat for dynamic stats/control of haproxy
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-06 12:22:35 -07:00
Kevin Fenzi
1e304a8467 haproxy: revert adding workers, as these were masters all along
We added more to the api and machine-config, but those only go to
control nodes, not compute nodes. Just revert this section entirely, it
was a bad idea and we shall never speak of it again. :)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-03-03 14:59:28 -08:00
Kevin Fenzi
9eed96e3d6 proxies: open ocp4 api port in both stg and prod
This fixes ticket 10521.

Basically we want to just open the api. It requires auth to do anything
and other openshift instances have it available, so it shouldn't
hopefully expose us to too much risk. With ocp3 the api was part of the
normal port/web flow, but with ocp4 it's a seperate port.

This also adds new workers to haproxy. I can drop that part if it's
controversal, but it should be fine I would think.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-03-03 22:29:37 +00:00
Kevin Fenzi
c520b42230 datagrepper has moved to openshift. Remove old ansible remnants.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-02-21 11:44:13 -08:00
Mark O Brien
dab8886bb7 remove unnecessary task
Signed-off-by: Mark O Brien <markobri@redhat.com>
2021-11-04 15:51:05 +00:00
David Kirwan
d7f5be0ebb metrics-for-apps: updating api-int CA cert for ocp4
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2021-09-09 12:52:18 +09:00
David Kirwan
b778a45d6c metrics-for-apps: Remove temporary ocp4 bootstrap machine from haproxy
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2021-09-08 12:35:48 +09:00
David Kirwan
4e8fa0e687 metrics-for-apps: add ocp4 prod CA cert to haproxy
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2021-09-08 12:32:42 +09:00
Kevin Fenzi
6ce2275510 haproxy: ocp cluster is only in iad2
If we push this to all proxies (as we have), they will fail to start
haproxy because they cannot resolve the internal ocp iad2 hosts. ;(

The ocp clusters should only apply on the iad2 haproxy nodes, not all
proxies. Also fix logic on the staging one to apply in staging instead
of just production.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-09-04 10:51:00 -07:00
David Kirwan
9f39d76e2c metrics-for-apps: Adding inventory/groupvars/changes for ocp prod
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2021-09-02 01:37:34 +00:00
Kevin Fenzi
3bdb267ad4 staging: rename the ocp cert
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-08-30 15:53:34 -07:00
Kevin Fenzi
5e6ab492a5 haproxy: tweak filename for ocp certs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-08-19 16:13:33 -07:00