Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
37473 commits 9 branches 0 tags 111 MiB
Commit graph

266 commits

Author SHA1 Message Date
Francois Andrieu
110084afb1 cleanup: remove phx2 hosts files 2021-03-29 22:49:35 +00:00
Nils Philippsen
bcfe96b710 ipa/client: Enable VPN hosts to talk to IPA 
This requires the canonical names of IPA servers to be mapped to their
IP addresses on the VPN as well as specifying the IPA server explicitly
when enrolling clients.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-24 18:19:11 +01:00
Kevin Fenzi
2af0042d5c koji01.stg: rename some files to the current domain name. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 15:46:55 -07:00
Kevin Fenzi
450cc3db87 hosts: drop stg hosts file that was phx2 specific 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-20 12:47:17 -07:00
Kevin Fenzi
b4c583b8ef Remove old infrastructure ip from cloud hosts. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-12 17:16:55 -07:00
Kevin Fenzi
122e0e2707 hosts / notifs*: drop all these wrong host files. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-07-02 14:52:15 -07:00
Kevin Fenzi
73f8fe76ad proxies: drop vpn workaround for registries 
The iad2 registries should be reachable now via the normal path, so we
can drop this workaround. Should make things faster too.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-20 13:16:09 -07:00
Kevin Fenzi
f8043f6c5a pagure01: For some reason workers started looking for db-pagure 
I have no idea why they are, perhaps this is an upstream default?

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-20 11:56:28 -07:00
Kevin Fenzi
624dbd04a9 proxies in iad2: set hosts file to use vpn for talking to container regestries 
Currently the proxies can't talk to the container registries directly,
so for now route these over the vpn.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-13 14:37:46 -07:00
Kevin Fenzi
f3233ba3d6 iad2 / proxy101: candidate registry 
Right now, proxy101 is what is resolved to internally in iad2 for
candidate-registry.fedoraproject.org. It has haproxy to reach
oci-candidate-registry01.iad2.fedoraproject.org on port 5000 for this,
but that doesn't work currently due to RHIT firewall.

So, for now we add the vpn endpoint to /etc/hosts there so haproxy works
and internal machines can use the candidate registry.

Once we fix the rhit firewall we should remove this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 18:10:33 -07:00
Kevin Fenzi
cb2fa9f453 openshift cluster: drop hosts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-11 16:55:43 -07:00
Patrick Uiterwijk
1ffffcbfb3 Revert "iad2: add a hosts file for now on wiki01.iad2 to get auth working" 
This reverts commit d03c3a528b.
 2020-06-11 18:16:53 +02:00
Kevin Fenzi
83d53fd622 iad2: delete hosts file for autosign01. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-07 16:03:48 -07:00
Stephen Smoogen
11baf9ef99 try adding a hosts files for the s390 builders 2020-06-07 15:35:15 -04:00
Kevin Fenzi
d03c3a528b iad2: add a hosts file for now on wiki01.iad2 to get auth working 
The problem is that id.fedoraproject.org resolves to the iad2 versions
in iad2. This is fine, but break oidc which has a talk between the
provider and the requestor, so if you use the phx2 ipsilon, you need
to use it for the entire thing. Will fix this better in dns soon.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-05 18:17:47 -07:00
Pierre-Yves Chibon
0f7a6efc2b pagure and distgit/pagure: Drop the db-pagure hostname and populate the db used in the inventor host file instead 
Basically, instead of relying on an obscure db-pagure variable that
then needs to be specified in the /etc/hosts file.
Just define the pagure_db_host variable in the host's inventory
file so it exists as a variable available in the playbook/role.
This makes things more explicit and easier to debug/tweak as needed.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-26 14:08:01 +02:00
Pierre-Yves Chibon
d898123fb3 Drop hosts file for a host that is long gone 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-26 14:04:14 +02:00
Kevin Fenzi
ace20e5603 iad2: clean up some hosts files and make sure bodhi-backend01.iad2 is actually in the iad2 datacenter 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-25 16:38:58 -07:00
Kevin Fenzi
ba001ac2eb blockerbugs: drop hosts files. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-23 11:32:45 -07:00
Pierre-Yves Chibon
ba9bfed241 openshift: update the hosts file pointing to registry.rh.io 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-19 21:49:42 +02:00
Kevin Fenzi
1ddae8f094 openshift hosts: update registry.redhat.io ip 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-17 15:38:49 -07:00
Kevin Fenzi
c529380547 Spring cleaning time. :) 
I removed all the old files, inventory, playbooks, roles and other from
services we no longer run or use. There was a bunch of cruft in there
and I hope that will make the repo cleaner and easier to look for things
we actually do run and care about.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-13 14:02:41 -07:00
Kevin Fenzi
ffcf517a4f iad2: add hosts file for bastion01.iad2 for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-06 12:49:24 -07:00
Pierre-Yves Chibon
8d27d922f6 Openshift-stg: Apparently registry.rh.io changed IP address 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:29 +02:00
Stephen Smoogen
3180cac828 remove final elections items from ansible 2020-04-24 21:34:29 +02:00
Stephen Smoogen
660af1f1d3 And this will make sure that 30 and 31 are similar in ansible 2020-04-24 21:34:28 +02:00
Stephen Smoogen
4164c240d8 add a specific hosts file because our script assumes all staging is in phoenix. this is going to be fun to fix after move 2020-04-24 21:34:26 +02:00
Stephen Smoogen
9d02ba6cf4 add proxy30 to config files 2020-04-24 21:34:21 +02:00
siddharthvipul
f121177b05 OSBS: add /etc/hosts file with RedHat registry 
Signed-off-by: siddharthvipul <siddharthvipul1@gmail.com>
 2020-04-24 21:34:17 +02:00
Rick Elrod
d07b5a512c base/os: same here 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:14 +02:00
Rick Elrod
e3fd43fa80 base/os-stg: point registry.redhat.io to new ip 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:14 +02:00
Kevin Fenzi
77ffa6d88c openshift / hosts: update registry.redhat.io 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
c22c50363f openshift stg / update registry.redhat.io in stg cluster. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
3c98623792 openshift: fix registry.redhat.io ip in hosts. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
060e7d4bca openshift: update hosts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:08 +02:00
Kevin Fenzi
c8221b3377 os-hosts: change ip for registry.access.redhat.com. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Patrick Uiterwijk
f8324b9d0c Remove hosts entries 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-24 21:01:04 +02:00
Kevin Fenzi
b9100fd1ac repospanner: Set hosts entry for fedora03 (repospanner01.phx) so it can talk to itself over lo instead of hairpin 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-06 16:30:00 +00:00
Kevin Fenzi
adcfe8d241 os-stg: we no longer need a special hosts entry since the registry is now redhat.io domain. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-03-14 21:05:43 +00:00
Mikolaj Izdebski
4daf8a2337 hotness: Map release-monitoring.org host to proxy101 (#7615) 2019-03-07 19:17:05 +01:00
Kevin Fenzi
2f79e721aa we need a better solution for this 2018-11-13 20:16:38 +00:00
Patrick Uiterwijk
995dc8e1ef registry.rh.io has a new ip 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-08 06:49:04 +01:00
Kevin Fenzi
750c6e6059 Update prod openshift to v3.11 2018-11-03 21:21:36 +00:00
Kevin Fenzi
8b6a9db705 external ip for registry.redhat.io 2018-11-02 21:28:18 +00:00
Rick Elrod
cfaa6bb7f7 initial attempt at ansibilizing undercloud 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2018-11-01 22:50:04 +00:00
David Shier
c0f45892ff Removed all traces i could fild of the tagger and statscache (and stats_cache for databases) in ansible, proxy configs, and the nagios config. Pursuant to request in pagzre issue https://pagure.io/fedora-infrastructure/issue/7267 . - Odin2016 2018-10-03 17:50:38 +00:00
Pierre-Yves Chibon
baf160d03b Add a /etc/hosts file to blockerbugs01.stg so it resolves bugzilla 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2018-08-21 11:35:28 +02:00
Patrick Uiterwijk
6ac30e264e Add new sigul node names 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-08-18 12:26:58 +00:00
Rick Elrod
4a60ddc875 Nuke pkgdb some more... and probably break everything. 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2018-07-19 20:40:14 +00:00
Kevin Fenzi
cb22afd4fe Look, ask has moved away. I'm sure it will write us back someday... 2018-05-09 02:00:45 +00:00