Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
37446 commits 9 branches 0 tags 111 MiB
Commit graph

37446 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
dc6b7697c1 proxies / reverseproxy: unset balancer_members after each template so it can get set right for the next one 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 21:05:37 -07:00
Kevin Fenzi
e2deffab4e proxies / reverseproxy: consolidate non openshift-iad2 case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 14:51:33 -07:00
Kevin Fenzi
03fe998142 proxies / reverseproxy: also special case the old resultsdbapi 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 14:25:32 -07:00
Kevin Fenzi
77bdc05883 proxies / reverseproxy: work around taskotron with its own config 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 14:04:07 -07:00
Kevin Fenzi
6d99b43608 proxies / reverspassproxy: fix loop 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 20:51:46 -07:00
Kevin Fenzi
6a0727c9e6 proxies / openqa: rework conf file to avoid issue with openqa and its websockets 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 20:15:36 -07:00
Kevin Fenzi
dc3c271c62 mailman: add banner for survey 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 19:09:09 -07:00
Kevin Fenzi
2685496897 noggin: add survey banner. see ticket 10740 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 18:59:54 -07:00
Kevin Fenzi
b98ef3ec95 proxies / staging: set openshift_nodes_stg to openshift_nodes in this case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 18:26:36 -07:00
Kevin Fenzi
7455b3fdb1 proxies / reverseproxy: fix missing ) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 14:22:13 -07:00
Adam Williamson
479388a242 openqa: use updates-testing builds on all prod/stg 
We don't need the scratch builds on stg any more now we've sent
the new builds to updates-testing. We *do* want to use the builds
from u-t on prod now (I don't want to wait a week for the stable
push).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-03 13:25:05 -07:00
Kevin Fenzi
52a8936914 proxies: rework reversepassproxy and mark all ocp4 / ocp3 apps 
The ocp3 cluster is reachable/available via the vpn, so any proxy can
reach it.

The ocp4 cluster is (at least for now) only reachable/available from the
iad2 proxies (proxy01/proxy10).

There's a firefox bug that causes it to reuse h2 connections, and in
some cases try and request something of a non iad2 proxy that it can't
reach. To work around this in those cases we need to send a 421 back to
the client so it doesn't do that.

This moves that logic into the template so all ocp4: true hosts do this
by default. Also, we default the balancer nodes so we only have to
change them in one place if we remove/add a compute node.

Finally, we mark all the ocp3 apps with 'ocp4: false' so we know what
they are and can move them more easily.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 13:14:28 -07:00
Kevin Fenzi
5b3eadb7d5 ipsilon01: try again to upgrade 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 11:54:05 -07:00
Kevin Fenzi
575d1ea238 pagure: increase processes 
pagure was processing a lot of things, increasing this seemed to help.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 11:41:11 -07:00
Aurélien Bompard
6b9d639421
ipsilon: add sebooleans on f36 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-03 09:55:25 +02:00
Kevin Fenzi
6ef504d18c ipsilon01: move back to f34 for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 17:16:03 -07:00
Kevin Fenzi
dd25b74d82 ipsilon01: move to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 16:08:36 -07:00
Kevin Fenzi
a180488e0d ipsilon: drop staging conditional on wsgiscriptalias 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 15:28:32 -07:00
Kevin Fenzi
b68200e0bc ipsilon: make sure /etc/ipsilon/root is owned by ipsilon 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 15:25:22 -07:00
Kevin Fenzi
17959a301c base: no more docker anywhere, drop this 
We aren't using docker anywhere anymore, so we don't need to uselessly
try and restart it all the time.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 15:14:54 -07:00
Kevin Fenzi
618512b9eb ipsilon02: actually install with f36, not f34 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 15:04:54 -07:00
Kevin Fenzi
4970ed8ffe ipsilon: increase disk size and memory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 14:02:33 -07:00
Kevin Fenzi
b5036aac85 grokmirror: set correct manifest path 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 13:13:30 -07:00
Kevin Fenzi
530c06d70d internetx01: goodbye, farewell, amen 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 12:53:50 -07:00
Kevin Fenzi
e37f4d7917 grokmirror 2.0 changes 
grokmirror 2.0+ merges the old fsck and repos configs into one
grokmirror config.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 12:50:41 -07:00
Adam Williamson
629f56f464 openqa-a64-worker01: try using ifnames interface names 
I cannot get NM to stop bringing eth0 up, so let's try using
ifnames names for the interfaces instead.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-02 11:58:26 -07:00
Kevin Fenzi
a0d3e1f2c0 Revert "image-builder: enabling osbuild plugin on builders" 
This reverts commit d3ab265a97.

Seems this is causing kojid to not start on most all of the prod
builders, leaving builds waiting forever. ;(

Reverting it for now.
 2022-06-02 11:23:49 -07:00
Kevin Fenzi
df809aedf1 bugzilla2fedmsg: move prod to ocp4 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 10:26:50 -07:00
Kevin Fenzi
b987d8ee1e bugzilla2fedmsg: switch to new brokers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 10:20:55 -07:00
David Kirwan
d3ab265a97 image-builder: enabling osbuild plugin on builders 2022-06-02 15:14:40 +01:00
Mark O Brien
b3cacaaee6 set builder conf file per env 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-02 14:35:28 +01:00
Mark O Brien
6391dd3250 fix typo in image builder prod conf file 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-02 14:21:06 +01:00
Mark O Brien
8f89c71568 image builder prod conf file 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-02 14:13:49 +01:00
Mark O Brien
0df4c28f15 image builder prod setup 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-02 14:11:55 +01:00
Michal Konečný
4dbe3c40db [the-new-hotness] Prepare for new release in OCP4 
This commit will sync the staging with production for 1.2.0 release and changes
the host to OCP4 cluster.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-02 07:55:22 +00:00
Kevin Fenzi
2ff5956ff2 proxies: drop old zanata hack 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 20:52:46 -07:00
Kevin Fenzi
633ce0f3ff proxies / reverseproxy: also set ipsilon-project to staging only here for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 18:21:22 -07:00
Kevin Fenzi
aab01df96d proxies: set ipsilon-project to just staging for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 17:39:02 -07:00
Kevin Fenzi
44d7104a7d proxies: websites: add a cert_name to ipsilon-project.org 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 15:42:57 -07:00
Kevin Fenzi
af6eded475 bugzilla2fedmsg: switch back to old phx2 brokers for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 15:29:07 -07:00
Kevin Fenzi
9f32d7ab5e bugzilla2fedmsg / staging: try a different broker 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 15:22:01 -07:00
Kevin Fenzi
53eb9572b6 bugzilla2fedmsg: move to ocp4 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 14:52:45 -07:00
Kevin Fenzi
c0c1f0a006 bugzilla2fedmsg: switch to new bugzilla brokers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 14:44:59 -07:00
Kevin Fenzi
99cfb9940c proxy02: fix mac address to be whatever ansible facts has 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 14:19:26 -07:00
Kevin Fenzi
a6b33434f0 virt-install: set a default nameserver for the install 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 14:10:31 -07:00
Kevin Fenzi
e51fdf52ce proxy02: correct some network vars 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 13:58:47 -07:00
Kevin Fenzi
56d9be2bf3 dns: named.conf use /var/named for dir instead of / 
I think this is leftover from chroot named days. New bind requires a
writable directory for this and default is /var/named.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 13:42:02 -07:00
Kevin Fenzi
7177f9c7af colo_virt: set default dns servers and search for all colo_virt 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 13:29:06 -07:00
Kevin Fenzi
0071a5e9c7 named.conf: drop specifying port on transfer-source as it fails on new bind 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 13:03:46 -07:00
Kevin Fenzi
7d6f4c12ac add some rhel9 conditionals for collectd, but remove for nagios 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 12:10:05 -07:00