infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
37449 commits 9 branches 0 tags 110 MiB
Commit graph

37449 commits

This branch
This branch
All branches
Author SHA1 Message Date
Leonardo Rossetti
ecf4c09166 adding ci listener queue 2022-06-10 15:50:54 -03:00
Leonardo Rossetti
597a0f015f using resultsdb-ci-listener{{ env_suffix }} username 2022-06-10 15:42:34 -03:00
Adam Williamson
edb9704acc Switch openQA prod to new resultsdb URL and enable auth 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-10 11:39:31 -07:00
Kevin Fenzi
b71846938f resultsdb-ci-listener: roll out in prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 11:02:50 -07:00
Kevin Fenzi
fefdd4205f resultsdb: add some more tags 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 10:24:38 -07:00
Kevin Fenzi
7860437b4e proxies / websites: add some tags for resultsdb 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 10:06:35 -07:00
Kevin Fenzi
c7b2f39a08 proxies: add resultsdb website in prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 09:37:44 -07:00
Kevin Fenzi
ab68a5f543 resultsdb: deploy in production 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 09:25:06 -07:00
Pavel Raiskup
3cd329b914 copr-be: move helpers.py on a syncronized place? 
Could help with eb1c4410e8
 2022-06-10 09:07:28 +02:00
Pavel Raiskup
adc7eb4f95 copr-frontend: fix the epel-{89} comment 2022-06-10 08:41:03 +02:00
Pavel Raiskup
a818ccb3cf copr-frontend: automatically apply the chroot comment changes 2022-06-10 08:21:16 +02:00
Pavel Raiskup
a67723b492 copr-fe: automatically comment chroots from config 2022-06-10 08:10:22 +02:00
Pavel Raiskup
2d140964cd copr-builders: move epel-9 from c9s+epel to rhel+epel 
RHEL 9 is GA, so we can align the EPEL 9 configuration to the current
EPEL 8 pattern.
 2022-06-10 07:36:11 +02:00
Kevin Fenzi
b44f2b56f7 debuginfod: up memory to 24gb 
Also set max mem to 128, so we can dynamically increase if we need to
from now on.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 14:22:48 -07:00
Kevin Fenzi
849126d89a openvpn: move ocp_nodes var to all, drop node-selector from testing 
Putting ocp_nodes in group_vars/all allows both proxies and openvpn
openshift app to use it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:51:56 -07:00
Kevin Fenzi
2f07f34aab openvpn: downgrade to avoid a bug in openvpn-2.5.7-1.fc36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:40:36 -07:00
Kevin Fenzi
f1499fdc5a openvpn: use ocp4, not ocp3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:26:55 -07:00
Kevin Fenzi
eb5aac39f4 openvpn: move ocp_nodes var up to playbook var 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:24:19 -07:00
Kevin Fenzi
3fb1742d93 openvpn: fix path to private key 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:18:05 -07:00
Francois Andrieu
7e084f5140 ocp4: setup VPN on worker nodes 
Deploy openvpn client on each node with a router.
OpenVPN certs needs to be available for each node in
/srv/private/ansible/files/vpn/pki/issued/$hostname.{crt,key}
 2022-06-09 20:13:59 +00:00
Leonardo Rossetti
877aa2f99f using resultsdb username and password 2022-06-09 20:11:28 +00:00
Kevin Fenzi
49cdae0e41 openvpn / server: add ccd files for ocp worker nodes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:04:57 -07:00
Kevin Fenzi
da157fa566 proxies / staging / taskotron: add /resultsdb_api/ to api redirect path 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 11:08:04 -07:00
Leonardo Rossetti
0cdacc2746 fixed cert path + removed dev env check 2022-06-09 17:10:00 +00:00
Aurélien Bompard
3da52306b2
Bodhi: workaround python's versioned path for static files 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 17:41:20 +02:00
Mark O Brien
91f3d3b0bc change nagios checks for http-bodhi to only run on ocp4 proxies 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 13:17:12 +01:00
Aurélien Bompard
d0b3ad7423
Add a warning about changing python versions 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:36:00 +02:00
Aurélien Bompard
186edfca9b
Actually the static files are shipped with Bodhi 
Also set the python version right.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:32:56 +02:00
Mark O Brien
8a9eb77bbd fix syntax error in reverse proxy playbook 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 12:21:05 +01:00
Aurélien Bompard
52134e8e00
Deploy the FM keys before using them 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:15:01 +02:00
Aurélien Bompard
e882eca30b
Don't hardcode the python version 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:10:22 +02:00
Aurélien Bompard
8fb52e6dd4
Read all the release vars 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:04:24 +02:00
Aurélien Bompard
0946ab8732
Read the FedoraRawhideNumber var 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 12:57:32 +02:00
Aurélien Bompard
dc07e0b447
Bodhi: we don't need the docs anymore 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 12:30:29 +02:00
Aurélien Bompard
0722089014
Bodhi should use F36 in Openshift too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 12:21:53 +02:00
Aurélien Bompard
a5c9af2728
Upgrade the bodhi version to 6.0.0 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 12:17:38 +02:00
Mark O Brien
80ea9226ac add back staging check 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 11:05:54 +01:00
Mark O Brien
fcd8d0c144 update bodhi to openshift4 and use openid connect 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 10:42:03 +01:00
Mark O Brien
353979f9ff update bodhi-backend01 ks to Fedora36 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 10:21:33 +01:00
Francois Andrieu
0cf78a2fe4 websites: fix content type for .pt translation files 2022-06-09 08:27:44 +02:00
Kevin Fenzi
82102f60a5 notifs-backend02: drop this service keytab for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 12:44:55 -07:00
Kevin Fenzi
13659c77b7 notifs*02.iad2: move these to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 12:29:08 -07:00
Kevin Fenzi
1cb5fa07a6 resultsdb: fix a few more things in stg and prep for prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 11:34:35 -07:00
Kevin Fenzi
55b62afe3f releng: move releng role before nfs mounts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 10:40:53 -07:00
Kevin Fenzi
463439136b inventory /group_vars: clean up a bunch of old phx2 networks for iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 10:34:01 -07:00
Kevin Fenzi
984fba841c compose-iot: move to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 10:25:42 -07:00
Nikolay Udovik
893275ab13 mediawiki - update reverse proxy ips. issue #10294. squashed commits 
update mediawiki reverse proxy ips. issue  #10294

mediawiki - update proxy13 and proxy30 addresses
 2022-06-08 16:50:35 +00:00
Mark O Brien
20afa16aa8 install osbuild rpm on prod builders 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-08 11:29:32 +01:00
Mark O Brien
35c4674df6 install osbuild plugin on prod builders 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-08 10:39:42 +01:00
Adam Williamson
a91dfc29e9 openqa: twiddle with the delegation stuff again 
Ugh, we delegate for the assetsize stuff too and there's tons of
that, splitting it would be awful. Let's try a different approach
with a new optional variable for the delegate target.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-07 16:32:04 -07:00