infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
37370 commits 9 branches 0 tags 110 MiB
Commit graph

37370 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
7fa10cf59b Revert "cloud-noc01: test fixing passing vars to task and abstract paths out" 
This reverts commit d59a7c2c44.
 2022-06-13 17:06:33 -07:00
Kevin Fenzi
d59a7c2c44 cloud-noc01: test fixing passing vars to task and abstract paths out 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-13 16:33:10 -07:00
Kevin Fenzi
f15f50b4dc apps-fp-o: mode should be 2755 here 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-13 16:15:40 -07:00
Leonardo Rossetti
48a04b644c resultsdb-ci-listener image 2022-06-13 21:43:29 +00:00
Kevin Fenzi
5724056458 ansible: Try dropping the plugin that keeps ansible_python in cache 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-13 14:33:34 -07:00
Kevin Fenzi
cfa99b12e2 letsencrypt: The not yet due message is in stdout 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-13 14:11:34 -07:00
Leonardo Rossetti
44c8d7d42d removing deployment_type jina cond. 2022-06-13 17:14:57 +00:00
Kevin Fenzi
91ccdea73f proxies: Reach ocp4 cluster in prod over vpn instead of sending 421 
I think I handled all the special cases here already.
We want to switch non iad2 proxies to reach the oco4 cluster over it's
vpn now that it has one. This should allow us to still keep ipv6
available for applications and not have to change dns for moving from
ocp3 cluster anymore. Will roll this out slowly to one proxy then
another, then the rest if it all looks ok.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-13 10:08:48 -07:00
Kevin Fenzi
6331d992ee noggin: add another domain to block 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-13 09:04:21 -07:00
Pavel Raiskup
4456ea443a copr-backend: install the ibm-cloud-list-vms script 2022-06-13 15:06:01 +02:00
Pavel Raiskup
0497b47ce2 copr-builders: helper script for listing IBM Cloud instances 2022-06-13 15:04:53 +02:00
Neal Gompa
c4ca968be3 openshift-apps/noggin: Explicitly set Fedora deployment settings 
Upcoming versions of Noggin will require these to be explicitly
set, and there is no harm in setting them now.

Signed-off-by: Neal Gompa <ngompa@fedoraproject.org>
 2022-06-13 11:56:23 +00:00
Ryan Lerch
664db28a9f [wiki] comment out $wgActorTableSchemaMigrationStage 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2022-06-13 21:17:08 +10:00
Ryan Lerch
e39c030219 [wiki] change NS_IMAGE* contancts to NS_FILE* 
mediawiki deprecated the NS_IMAGE constants in favor of the NS_FILE
constants back in 1.14. They were removed in 1.34, so now we change
them.

c429074687/RELEASE-NOTES-1.34 (L225)

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2022-06-13 21:01:48 +10:00
Ryan Lerch
f9a1fd07e8 Update OIDC settings for newer versions of plugins 
mediawiki-OpenIDConnect and mediawiki-PluggableAuth are updated to newer
versions, and the config setup has changed. this tweaks it for the wiki
stage.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2022-06-13 19:54:49 +10:00
Pavel Raiskup
98b0d6f803 copr-builders: disable ppc64le hv_02 
That machine seems to be down.
 2022-06-13 09:38:13 +02:00
Pedro Moura
9c8f04057f Add tahrir to the public-db-copy script 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
 2022-06-11 18:46:58 +00:00
Kevin Fenzi
69a85f2232 bodhi: increase the timeout to 90s due to very large (211+) build updates editing taking a long time to load 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 20:18:07 -07:00
Kevin Fenzi
be0f143bcc resultsdb-api: drop ttl for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 13:06:07 -07:00
Adam Williamson
0ceef0f7d0 Revert "Switch openQA prod to new resultsdb URL and enable auth" 
This reverts commit edb9704acc.
The new prod deployment seems to have some issues (message
publishing is timing out) so let's go back to using the old
deployment for now.
 2022-06-10 13:03:57 -07:00
Leonardo Rossetti
c45d971196 using same value for both username and queue name 2022-06-10 16:21:29 -03:00
Leonardo Rossetti
ecf4c09166 adding ci listener queue 2022-06-10 15:50:54 -03:00
Leonardo Rossetti
597a0f015f using resultsdb-ci-listener{{ env_suffix }} username 2022-06-10 15:42:34 -03:00
Adam Williamson
edb9704acc Switch openQA prod to new resultsdb URL and enable auth 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-10 11:39:31 -07:00
Kevin Fenzi
b71846938f resultsdb-ci-listener: roll out in prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 11:02:50 -07:00
Kevin Fenzi
fefdd4205f resultsdb: add some more tags 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 10:24:38 -07:00
Kevin Fenzi
7860437b4e proxies / websites: add some tags for resultsdb 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 10:06:35 -07:00
Kevin Fenzi
c7b2f39a08 proxies: add resultsdb website in prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 09:37:44 -07:00
Kevin Fenzi
ab68a5f543 resultsdb: deploy in production 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 09:25:06 -07:00
Pavel Raiskup
3cd329b914 copr-be: move helpers.py on a syncronized place? 
Could help with eb1c4410e8
 2022-06-10 09:07:28 +02:00
Pavel Raiskup
adc7eb4f95 copr-frontend: fix the epel-{89} comment 2022-06-10 08:41:03 +02:00
Pavel Raiskup
a818ccb3cf copr-frontend: automatically apply the chroot comment changes 2022-06-10 08:21:16 +02:00
Pavel Raiskup
a67723b492 copr-fe: automatically comment chroots from config 2022-06-10 08:10:22 +02:00
Pavel Raiskup
2d140964cd copr-builders: move epel-9 from c9s+epel to rhel+epel 
RHEL 9 is GA, so we can align the EPEL 9 configuration to the current
EPEL 8 pattern.
 2022-06-10 07:36:11 +02:00
Kevin Fenzi
b44f2b56f7 debuginfod: up memory to 24gb 
Also set max mem to 128, so we can dynamically increase if we need to
from now on.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 14:22:48 -07:00
Kevin Fenzi
849126d89a openvpn: move ocp_nodes var to all, drop node-selector from testing 
Putting ocp_nodes in group_vars/all allows both proxies and openvpn
openshift app to use it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:51:56 -07:00
Kevin Fenzi
2f07f34aab openvpn: downgrade to avoid a bug in openvpn-2.5.7-1.fc36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:40:36 -07:00
Kevin Fenzi
f1499fdc5a openvpn: use ocp4, not ocp3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:26:55 -07:00
Kevin Fenzi
eb5aac39f4 openvpn: move ocp_nodes var up to playbook var 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:24:19 -07:00
Kevin Fenzi
3fb1742d93 openvpn: fix path to private key 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:18:05 -07:00
Francois Andrieu
7e084f5140 ocp4: setup VPN on worker nodes 
Deploy openvpn client on each node with a router.
OpenVPN certs needs to be available for each node in
/srv/private/ansible/files/vpn/pki/issued/$hostname.{crt,key}
 2022-06-09 20:13:59 +00:00
Leonardo Rossetti
877aa2f99f using resultsdb username and password 2022-06-09 20:11:28 +00:00
Kevin Fenzi
49cdae0e41 openvpn / server: add ccd files for ocp worker nodes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:04:57 -07:00
Kevin Fenzi
da157fa566 proxies / staging / taskotron: add /resultsdb_api/ to api redirect path 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 11:08:04 -07:00
Leonardo Rossetti
0cdacc2746 fixed cert path + removed dev env check 2022-06-09 17:10:00 +00:00
Aurélien Bompard
3da52306b2
Bodhi: workaround python's versioned path for static files 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 17:41:20 +02:00
Mark O Brien
91f3d3b0bc change nagios checks for http-bodhi to only run on ocp4 proxies 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 13:17:12 +01:00
Aurélien Bompard
d0b3ad7423
Add a warning about changing python versions 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:36:00 +02:00
Aurélien Bompard
186edfca9b
Actually the static files are shipped with Bodhi 
Also set the python version right.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:32:56 +02:00
Mark O Brien
8a9eb77bbd fix syntax error in reverse proxy playbook 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 12:21:05 +01:00