infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
16827 commits 9 branches 0 tags 110 MiB
Commit graph

146 commits

Author SHA1 Message Date
Patrick Uiterwijk
9fd58d90ad Add a control socket to haproxy 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-02-02 15:23:07 +00:00
Ralph Bean
be699ca7d0 stg proxy configuration for mbs. 2017-02-01 12:36:25 +00:00
Kevin Fenzi
dc8b2cf293 make kojipkgs02 non backup 2017-01-20 00:12:07 +00:00
Kevin Fenzi
1553e84332 make kojipkgs02 a backup for now until we can sort the srpm doom 2017-01-18 00:11:55 +00:00
Kevin Fenzi
8b054eeed7 Ok, last one to try. 2017-01-17 23:23:58 +00:00
Kevin Fenzi
7f251f982a ok, lets go back to this balancer 2017-01-17 22:29:27 +00:00
Kevin Fenzi
b3849bf68f Load balance based on the appserver header. 2017-01-17 21:55:04 +00:00
Kevin Fenzi
6058f70de8 set this back to roundrobin 2017-01-17 02:58:17 +00:00
Kevin Fenzi
478cb60723 switch to balance kojipkgs on uri 2017-01-16 21:28:06 +00:00
Kevin Fenzi
ce7555b642 try and tweak haproxy to balance by source 2017-01-16 20:05:56 +00:00
Kevin Fenzi
1cb0972193 add kojipkgs to proxy01/10 and haproxy 2017-01-15 20:16:41 +00:00
Patrick Uiterwijk
ebf89e06c9 Texlive needs ALMOST two full hours. Let's raise to just above the actual time 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-30 00:51:56 +00:00
Patrick Uiterwijk
842af31f80 Bump Koji max response timeout (https://pagure.io/koji/issue/259) 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-28 20:37:16 +00:00
Patrick Uiterwijk
1e9775a1be ipa01 is also available in stg 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-20 06:01:34 +00:00
Patrick Uiterwijk
795c659f7a Only use IPA01 for API access since sessions are not synchronized 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-20 05:50:43 +00:00
Patrick Uiterwijk
fc9c169878 Add secondary kojis to haproxy 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 00:08:07 +00:00
Kevin Fenzi
6e68371bf3 haproxy cannot have koji defined in non phx2 without vpn 2016-12-13 01:23:46 +00:00
Patrick Uiterwijk
449597f9f8 Put koji behind proxies in prod 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-11 23:31:02 +00:00
Patrick Uiterwijk
38ca639db5 In production, its pkgs02 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-10 03:22:33 +00:00
Kevin Fenzi
0e6058d810 move prod src behind haproxy too 2016-12-09 06:33:23 +00:00
Kevin Fenzi
a4845e2318 change src to proxy for pkgs 2016-12-09 04:36:05 +00:00
Kevin Fenzi
4d766c88ef move pkgs in stg behind the proxy as well 2016-12-09 03:33:45 +00:00
Kevin Fenzi
0a0df18b19 switch koji in stg to use proxy01.stg 2016-12-08 18:35:27 +00:00
Patrick Uiterwijk
55d73ac464 Use IPA UI for checking 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-04 02:47:40 +00:00
Kevin Fenzi
7c2f7158d1 Fix haproxy for proxy restarting too 2016-12-01 22:29:34 +00:00
Patrick Uiterwijk
224a31edf0 Update openqa status check URL 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-30 18:58:58 +00:00
Patrick Uiterwijk
5cc380caa7 ipa02 is back in sync, re-enable it 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-28 10:38:30 +00:00
Patrick Uiterwijk
10f4327933 Ipa02 is non-replicated, take it out 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-28 08:58:19 +00:00
Kevin Fenzi
b1a2d105c9 In ansible 2.2 always_run is depreciated. Switch to check_mode. 2016-11-01 16:29:49 +00:00
Patrick Uiterwijk
fa67aa9531 The backends actually use 88 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-25 16:52:01 +00:00
Patrick Uiterwijk
bf5ec300ff Add krb:1088 to haproxy 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-25 16:46:32 +00:00
Patrick Uiterwijk
39c59360d8 We now also have certificates for production IPA 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 13:59:19 +00:00
Patrick Uiterwijk
1c74f98cca Add production IPA cert 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 13:46:34 +00:00
Patrick Uiterwijk
0a5758a918 Add IPA to proxies 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-13 11:23:52 +00:00
Patrick Uiterwijk
6550392ee7 Deploy mirrorlist as docker container on staging 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-09 00:43:05 +00:00
Kevin Fenzi
a21b3b5448 Drop gallery from stg. 2016-09-16 17:34:13 +00:00
Ricky Elrod
1c43c268bc Add proxy config for stg only 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2016-09-06 04:55:23 +00:00
Patrick Uiterwijk
18d37c7875 Enable candidate registry on prod 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-09-02 14:34:57 +00:00
Patrick Uiterwijk
0cd6667e7f Create candidate registry at proxy 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-08-29 16:50:20 +00:00
Kevin Fenzi
221479b040 Rework haproxy template so we do not have a block of whitespace changes with staging conditionals 2016-08-08 17:08:42 +00:00
Patrick Uiterwijk
4790fb31d8 Update check url for ipa 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-08-04 21:47:52 +00:00
Patrick Uiterwijk
0a85ce47cf This is not a client cert... 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-08-04 21:26:40 +00:00
Patrick Uiterwijk
ffd0a12fa4 Fix stg 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-08-04 21:25:11 +00:00
Patrick Uiterwijk
28ebec92ee Proxy IPA through haproxy 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-08-04 21:23:07 +00:00
Ricky Elrod
56ca900f6e missed this one 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2016-08-03 09:26:16 +00:00
Ricky Elrod
447341f88d blah paths 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2016-08-03 08:30:26 +00:00
Ricky Elrod
d0e6cdf04c try adding fas3 to haproxy stg? 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2016-08-03 07:34:38 +00:00
Pierre-Yves Chibon
499a4b49af pps is port 80 2016-07-27 15:59:00 +02:00
Pierre-Yves Chibon
0279643468 Add ++ service to the proxies 2016-07-27 15:19:24 +02:00
Pierre-Yves Chibon
e9c9707c51 Move mdapi to run at port 8080 2016-07-27 14:20:04 +02:00