infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
39047 commits 9 branches 0 tags 110 MiB
Commit graph

1103 commits

Author SHA1 Message Date
Andrew Heath
dd5a282c7c adding hosts folder as well to the PR 2023-05-18 16:29:58 -04:00
Kevin Fenzi
3c960624f4 fas2: good bye! You served long and well 
Remove fas2 and all the checks that depended on it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-07-01 12:09:36 -07:00
Kevin Fenzi
7fa10cf59b Revert "cloud-noc01: test fixing passing vars to task and abstract paths out" 
This reverts commit d59a7c2c44.
 2022-06-13 17:06:33 -07:00
Kevin Fenzi
d59a7c2c44 cloud-noc01: test fixing passing vars to task and abstract paths out 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-13 16:33:10 -07:00
Kevin Fenzi
c317178c88 iddev: retire 
iddev was a instance running ipsilon, with a fas plugin. It was usefull
for developers to point to when developing new apps to be able to test
authentication. However, when we moved to new account system the only
way we could make iddev work is by adding it to the VPN and enrolling it
in IPA like a normal machine. We don't want to do that as it would allow
way too much power to anyone who had configuration power over it.

In addition, ryan wrote a vagrant setup called 'tiny-stage' that spins
up a ipa server and a ipsilon server and developers should be able to
use that locally to test, completely disconnected from our
authentication.

See https://pagure.io/fedora-infrastructure/issue/9966 for more info.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-10-15 10:35:44 -07:00
Kevin Fenzi
3dbc79abb3 cloud-noc-os01: NO more fas client, use ipa 2021-06-25 10:22:49 -07:00
Kevin Fenzi
8626857460 cloud-noc-os01: add vpn 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-06-18 09:50:57 -07:00
Eddie Jennings, Jr
b9683edc96 remove unnecessary file. 2021-06-17 17:20:02 +00:00
Kevin Fenzi
61be8367c8 remove last vestiges of 2fa_client 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-19 18:29:52 -07:00
Pierre-Yves Chibon
18ad21119b iddev: have the playbook call certbot directly 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-30 15:24:36 +02:00
Pierre-Yves Chibon
8708d57804 iddev: try proxying to cergetter01 over https 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-30 15:15:39 +02:00
Pierre-Yves Chibon
54c65489ae iddev: try fixing the indentation 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-30 15:02:06 +02:00
Pierre-Yves Chibon
63863e6248 iddev: more fixes for the echo command 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-30 15:00:40 +02:00
Pierre-Yves Chibon
b46fed01b8 iddev: fix the echo line 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-30 14:58:26 +02:00
Pierre-Yves Chibon
0b7cae97a9 iddev: another attempt to get the playbook to handle the certs automatically 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-30 14:54:29 +02:00
Pierre-Yves Chibon
472b59038f iddev: try to get letsencrypt to renew the certs for us in the playbook 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-30 14:43:26 +02:00
Stephen Smoogen
a242509f6d clean up tftp files for external servers. 2021-03-17 16:27:27 -04:00
Stephen Smoogen
d938107466 make sure that the mac addresses are used in the kickstart. TODO: clean up variables so they are the same 2021-03-17 09:03:44 -04:00
Stephen Smoogen
912414cfed Add in dhcp.conf file and playbook for unfrozen /cloud-noc01-os01.rdu-cc.fedoraproject.org 2021-03-16 16:42:28 -04:00
Stephen Smoogen
8b4c38e29e remove outdated grobisplitter01 playbook 2020-12-02 17:55:08 -05:00
Kevin Fenzi
c529380547 Spring cleaning time. :) 
I removed all the old files, inventory, playbooks, roles and other from
services we no longer run or use. There was a bunch of cruft in there
and I hope that will make the repo cleaner and easier to look for things
we actually do run and care about.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 14:02:41 -07:00
Kevin Fenzi
015e780767 Clean up some more playbooks and includes that are no longer used. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:27 +02:00
Stephen Smoogen
1fbe999a54 how do you shave a yak? one hair at a time. Move the cloud-noc to the right name so playbook works 2020-04-24 21:34:27 +02:00
Kevin Fenzi
1f91973595 inventory / playbooks: remove a bunch of old cloud hosts that will be powered off tomorrow 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:25 +02:00
Kevin Fenzi
88df232c00 iddev: move over to aws 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:25 +02:00
Mikolaj Izdebski
4828817e4b Drop java-deptools cloud instance 2020-04-24 21:34:25 +02:00
Kevin Fenzi
9c2af3d888 lists-dev: farewell 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:24 +02:00
Kevin Fenzi
348a5b554b fas2-dev: has been unreachable for 4 months, so I am going to turn it off 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:22 +02:00
Patrick Uiterwijk
77e49920b9 Remove regcfp from ansible 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2020-04-24 21:34:22 +02:00
Kevin Fenzi
9250d24c8e openstack: remove ansiblemagazine, artboard, commops 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:22 +02:00
Kevin Fenzi
832d1037cd relepel: Thanks, but we no longer need your services. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:18 +02:00
Kevin Fenzi
7aba98780e fedora-messaging-migration: Patches from Karsten Hopp to move script calling things from fedmsg to fedora-messaging 
We will need to check these services after pushing this out and confirm
that they are still emitting or hearing messages they need to.

Many thanks Karsten!
 2020-04-24 21:34:16 +02:00
Stephen Smoogen
b75b23302e remove fedimg-dev 2020-04-24 21:34:08 +02:00
Stephen Smoogen
86e4dc77f1 try to make this work as a virtual guest on virthost-cloud01 2020-04-24 21:34:08 +02:00
Kevin Fenzi
7416be2ce8 old cloud cleanup: drop communityblog/magazine more places, drop glittergallery 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:08 +02:00
Kevin Fenzi
25f3020473 blogs / twisted: drop magazine/communityblog and twisted bot instances from our old cloud. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:08 +02:00
Stephen Smoogen
9902102221 I am so slow and stupid without 4 cups of coffee. Make sure all mentions of X are that vesus juyst hosts: 2019-06-20 18:15:45 +00:00
Stephen Smoogen
ade7bc10aa [relepel08] when cutting and pasting make sure the hostname you set is correct otherwise you will end up with the wrong ips 2019-06-20 18:11:35 +00:00
Stephen Smoogen
029217e4ba put in a host so we can test epel8 2019-06-20 18:05:50 +00:00
Kevin Fenzi
bea0057eac fed-cloud09: remove playbook. 
It hasn't run in a long time, if it did it might mess up the fragile openstack,
and glance_image is no longer available.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-11 15:16:49 +00:00
Kevin Fenzi
72e33c0948 ansible-review: fix some errors from ansible-review 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-11 15:11:40 +00:00
Stephen Smoogen
61f3826892 [grobisplitter] make sure it mounts things with the right perms 2019-06-04 23:29:39 +00:00
Stephen Smoogen
6f69b370f4 [grobisplitter] first attempt at adding configs for system 2019-06-01 17:32:24 +00:00
Kevin Fenzi
de402a44c7 ansible: nearing the end of the obviously broken groups. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-20 18:27:45 +00:00
Kevin Fenzi
2dfb98136a ansible: more cleanup from group name changes. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-20 18:10:46 +00:00
Kevin Fenzi
4b31ac5152 ansible: Change all our group names from foo-bar to foo_bar or foo-bar-baz to foo_bar_baz 
In ansible 2.8 the - character isn't supposed to be valid in group names.
While we could override this, might has well just bite the bullet and change it.
So, just switch all group names to use _ instead of -

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-20 17:38:09 +00:00
Mikolaj Izdebski
24d2d4a291 Add praiskup to OpenStack (#7778) 2019-05-20 15:23:32 +02:00
Patrick Uiterwijk
1027f501b1 NTP is UDP 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-16 17:39:34 +02:00
Stephen Smoogen
3f8eb2de7b add more stuff to make grobisplitter do its thing 2019-05-13 16:48:43 +00:00
Miroslav Suchý
e0b9189250 remove clime from copr access list 
Michal is no longer working in Copr team, so lets remove him
 2019-05-13 14:04:36 +02:00