Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
37346 commits 9 branches 0 tags 111 MiB
Commit graph

37346 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
b71846938f resultsdb-ci-listener: roll out in prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 11:02:50 -07:00
Kevin Fenzi
fefdd4205f resultsdb: add some more tags 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 10:24:38 -07:00
Kevin Fenzi
7860437b4e proxies / websites: add some tags for resultsdb 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 10:06:35 -07:00
Kevin Fenzi
c7b2f39a08 proxies: add resultsdb website in prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 09:37:44 -07:00
Kevin Fenzi
ab68a5f543 resultsdb: deploy in production 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-10 09:25:06 -07:00
Pavel Raiskup
3cd329b914 copr-be: move helpers.py on a syncronized place? 
Could help with eb1c4410e8
 2022-06-10 09:07:28 +02:00
Pavel Raiskup
adc7eb4f95 copr-frontend: fix the epel-{89} comment 2022-06-10 08:41:03 +02:00
Pavel Raiskup
a818ccb3cf copr-frontend: automatically apply the chroot comment changes 2022-06-10 08:21:16 +02:00
Pavel Raiskup
a67723b492 copr-fe: automatically comment chroots from config 2022-06-10 08:10:22 +02:00
Pavel Raiskup
2d140964cd copr-builders: move epel-9 from c9s+epel to rhel+epel 
RHEL 9 is GA, so we can align the EPEL 9 configuration to the current
EPEL 8 pattern.
 2022-06-10 07:36:11 +02:00
Kevin Fenzi
b44f2b56f7 debuginfod: up memory to 24gb 
Also set max mem to 128, so we can dynamically increase if we need to
from now on.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 14:22:48 -07:00
Kevin Fenzi
849126d89a openvpn: move ocp_nodes var to all, drop node-selector from testing 
Putting ocp_nodes in group_vars/all allows both proxies and openvpn
openshift app to use it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:51:56 -07:00
Kevin Fenzi
2f07f34aab openvpn: downgrade to avoid a bug in openvpn-2.5.7-1.fc36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:40:36 -07:00
Kevin Fenzi
f1499fdc5a openvpn: use ocp4, not ocp3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:26:55 -07:00
Kevin Fenzi
eb5aac39f4 openvpn: move ocp_nodes var up to playbook var 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:24:19 -07:00
Kevin Fenzi
3fb1742d93 openvpn: fix path to private key 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:18:05 -07:00
Francois Andrieu
7e084f5140 ocp4: setup VPN on worker nodes 
Deploy openvpn client on each node with a router.
OpenVPN certs needs to be available for each node in
/srv/private/ansible/files/vpn/pki/issued/$hostname.{crt,key}
 2022-06-09 20:13:59 +00:00
Leonardo Rossetti
877aa2f99f using resultsdb username and password 2022-06-09 20:11:28 +00:00
Kevin Fenzi
49cdae0e41 openvpn / server: add ccd files for ocp worker nodes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 13:04:57 -07:00
Kevin Fenzi
da157fa566 proxies / staging / taskotron: add /resultsdb_api/ to api redirect path 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-09 11:08:04 -07:00
Leonardo Rossetti
0cdacc2746 fixed cert path + removed dev env check 2022-06-09 17:10:00 +00:00
Aurélien Bompard
3da52306b2
Bodhi: workaround python's versioned path for static files 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 17:41:20 +02:00
Mark O Brien
91f3d3b0bc change nagios checks for http-bodhi to only run on ocp4 proxies 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 13:17:12 +01:00
Aurélien Bompard
d0b3ad7423
Add a warning about changing python versions 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:36:00 +02:00
Aurélien Bompard
186edfca9b
Actually the static files are shipped with Bodhi 
Also set the python version right.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:32:56 +02:00
Mark O Brien
8a9eb77bbd fix syntax error in reverse proxy playbook 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 12:21:05 +01:00
Aurélien Bompard
52134e8e00
Deploy the FM keys before using them 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:15:01 +02:00
Aurélien Bompard
e882eca30b
Don't hardcode the python version 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:10:22 +02:00
Aurélien Bompard
8fb52e6dd4
Read all the release vars 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 13:04:24 +02:00
Aurélien Bompard
0946ab8732
Read the FedoraRawhideNumber var 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 12:57:32 +02:00
Aurélien Bompard
dc07e0b447
Bodhi: we don't need the docs anymore 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 12:30:29 +02:00
Aurélien Bompard
0722089014
Bodhi should use F36 in Openshift too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 12:21:53 +02:00
Aurélien Bompard
a5c9af2728
Upgrade the bodhi version to 6.0.0 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-09 12:17:38 +02:00
Mark O Brien
80ea9226ac add back staging check 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 11:05:54 +01:00
Mark O Brien
fcd8d0c144 update bodhi to openshift4 and use openid connect 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 10:42:03 +01:00
Mark O Brien
353979f9ff update bodhi-backend01 ks to Fedora36 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-09 10:21:33 +01:00
Francois Andrieu
0cf78a2fe4 websites: fix content type for .pt translation files 2022-06-09 08:27:44 +02:00
Kevin Fenzi
82102f60a5 notifs-backend02: drop this service keytab for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 12:44:55 -07:00
Kevin Fenzi
13659c77b7 notifs*02.iad2: move these to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 12:29:08 -07:00
Kevin Fenzi
1cb5fa07a6 resultsdb: fix a few more things in stg and prep for prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 11:34:35 -07:00
Kevin Fenzi
55b62afe3f releng: move releng role before nfs mounts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 10:40:53 -07:00
Kevin Fenzi
463439136b inventory /group_vars: clean up a bunch of old phx2 networks for iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 10:34:01 -07:00
Kevin Fenzi
984fba841c compose-iot: move to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-08 10:25:42 -07:00
Nikolay Udovik
893275ab13 mediawiki - update reverse proxy ips. issue #10294. squashed commits 
update mediawiki reverse proxy ips. issue  #10294

mediawiki - update proxy13 and proxy30 addresses
 2022-06-08 16:50:35 +00:00
Mark O Brien
20afa16aa8 install osbuild rpm on prod builders 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-08 11:29:32 +01:00
Mark O Brien
35c4674df6 install osbuild plugin on prod builders 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-08 10:39:42 +01:00
Adam Williamson
a91dfc29e9 openqa: twiddle with the delegation stuff again 
Ugh, we delegate for the assetsize stuff too and there's tons of
that, splitting it would be awful. Let's try a different approach
with a new optional variable for the delegate target.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-07 16:32:04 -07:00
Adam Williamson
42e930e97f openqa-onebox: tweak db host stuff 
Using the machine's own hostname works for the ansible delegate
stuff but doesn't work for openQA itself (if you try and access
the DB by hostname like this, postgres denies access; you have
to use 'localhost' for postgres to allow it). Using 'localhost'
works for postgres but doesn't do the right thing for delegation.
Let's use 'localhost' and split the two play steps into
delegated and non-delegated versions.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-07 16:17:29 -07:00
Adam Williamson
1d594b13d6 openqa_onebox: use different db name for safety 
Just in case things go horribly wrong and we somehow hit a real
db server, let's not use the same db name as staging for safety.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-07 15:43:35 -07:00
Adam Williamson
e6746d768b postgresql_server: update for modern Fedora 
Looks like this role hasn't been used on a Fedora box for a
while so things are kinda broken. Re-arrange all the package
install sections to be together, use newer package names on
Fedora (the Fedora and EL >= 8 sections are identical for now
but I figured I'd keep them separate in case that changes), and
use the newer config file, not the older one, on Fedora.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-07 15:40:56 -07:00