Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
41207 commits 9 branches 0 tags 111 MiB
Commit graph

41207 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
df10e1c315 sundries01: move to rhel9 in prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-07-01 15:09:57 -07:00
Kevin Fenzi
2397e3fbc4 mirrormanager: remove no longer needed nagios check for frontend 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-07-01 14:37:55 -07:00
Kevin Fenzi
f37e5e52e0 mirrormanager: some leftover inventory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-07-01 14:02:53 -07:00
Kevin Fenzi
acd7bf10ca mirrormanager: some leftover inventory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-07-01 14:01:10 -07:00
Kevin Fenzi
e838841868 mirrormanager: retire vm's now that it's moved to openshift 
Lets retire these rhel7 vm's from ansible/running.
I will be saving off the disks and xml for all of the vm's, so in the
event we need to bring something back or look at something, we can do
so.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-07-01 13:44:04 -07:00
Kevin Fenzi
9064d0c26b sundries / staging: move sundries01.stg to rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-07-01 13:11:33 -07:00
Michal Konecny
98417787d6 [mailman3] Fix the YAML error 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-07-01 18:19:10 +02:00
Michal Konecny
c609ecb432 Revert "Add IPs to blocked_ips" 
This reverts commit d4ee518e5d.
 2024-07-01 18:15:00 +02:00
Michal Konecny
ae8efd0dd4 [mailman3] Fix the yamllint errors 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-07-01 18:04:42 +02:00
Michal Konecny
319bc2204a [mailman3] Add fedora-messaging certificates 
It seems that I forgot to actually create the certificates for new mailman
fedora archiver. Let's fix that.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-07-01 17:56:42 +02:00
Michal Konecny
171527dd94 [mailman3] Change the amount of workers back to 4 
10 workers were able to drain the memory of the machine in minutes.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-07-01 17:27:59 +02:00
Nils Philippsen
0d6c24558a batcave: Set git directories as safe 
Or else users in sysadmin-main can’t access the repositories.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2024-07-01 13:34:48 +00:00
Nils Philippsen
48f4990dd9 Fix typos 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2024-07-01 13:34:48 +00:00
Samyak Jain
2935b4ebe7 add vulkan-validation-layers to allowlist to include i686 pkgs 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-07-01 13:29:45 +00:00
Michal Konečný
d4ee518e5d Add IPs to blocked_ips 
There are two IPs hammering pagure.io, so let's stop that.

Signed-off-by: Michal Konečný <michal.konecny@pacse.eu>
 2024-07-01 09:29:01 +00:00
Kevin Fenzi
1f75c26aa6 rhel7: no need to sync it anymore 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-29 18:41:52 -07:00
Adam Williamson
60197fbddd Revert "kerneltest: use my branch on stg to investigate errors" 
This reverts commit a0a7e276a4. We
figured out the errors, so we don't need this any more.
 2024-06-28 12:19:31 -07:00
Kevin Fenzi
59829605c5 src.fedoraproject.org: adjust robots.txt 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-28 12:15:16 -07:00
Michal Konecny
0d4e40f7b2 [mailman3] Increase the default amount of gunicorn workers 
Mailman hourly job is making the web unresponsive, let's try if increasing the
amount of gunicorn workers improves the situation.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-28 11:10:48 +02:00
Michal Konecny
c69ef120c3 [mailman3] Add logrotate capabilities 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-28 11:02:10 +02:00
Michal Konecny
7b022d51bb [spamassassin] Add logging to spamassassin 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-28 10:56:18 +02:00
Michal Konecny
c8b62faaa4 [nagios_client] Fix for mailman api check 
The mailman is now returning HTTP/1.1 instead of HTTP/1.0.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-28 10:19:10 +02:00
Kevin Fenzi
efdb9445b9 planet: add stg alias 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-27 17:06:21 -07:00
Pedro Moura
755e2d4476 Adding route fedoraplanet.org 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
 2024-06-27 20:39:11 -03:00
Kevin Fenzi
4bcbc54efa people: retire people02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-27 15:38:03 -07:00
Kevin Fenzi
095d74eff4 people: also allow symlinks in public_git 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-27 15:29:34 -07:00
Pedro Moura
3f394e266e Planet: add new route 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
 2024-06-27 20:49:54 +00:00
Kevin Fenzi
6123c903b9 fedoraplanet: setup to direct to openshift from proxies 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-27 13:35:59 -07:00
Kevin Fenzi
a69d0e8617 people: only use tmpfs sssd on people02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-27 12:38:54 -07:00
Kevin Fenzi
d86d79615c people: add some more quotas for long time contributors 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-27 12:13:16 -07:00
James Antill
d7258e320e Add DNF countme nagios checks. 
Signed-off-by: James Antill <james@and.org>
 2024-06-27 17:35:23 +00:00
Michal Konecny
517d9b1426 [mailman3] Update the vars 
Add the missing Fedora authenticator for OIDC and remove the 16Gb memory limit
as it's set in group_vars.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-27 17:30:20 +02:00
David Kirwan
f4308fb4c3
firmitas: add namespace template 
add template for deployment
add tempalte for namespace creation
add template for persistent volume claim creation
add tasks to apply each template
add playbook
Add default values for firmitas_pagure_apikey and firmitas_pagure_host
yamllint changes
add buildconfig task/template

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2024-06-27 16:21:59 +01:00
Kevin Fenzi
696f49465c mailman: just default to 32gb memory for mailman01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-27 08:16:29 -07:00
Michal Konecny
e82fc43981 [spamassassin] Don't daemonize the process on systemd machines 
Running spamassassin with -d causes it to fail on systemd. Let's remove it.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-27 14:50:31 +00:00
Michal Konecny
80366bda57 [varnish] Fix the lists.fedoraproject.org 
The lists are now returning 302 instead of 301. I forgot to change that in varnish.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-27 16:29:22 +02:00
Michal Konecny
61330941e4 [base/postfix] Set the missing required configuration value 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-27 14:55:31 +02:00
Michal Konecny
62b319cadb [mailman3] Fix the migration task 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-27 14:14:12 +02:00
Michal Konecny
84e83a16e1 [mailman3] Use the correct syntax for env 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-27 13:58:36 +02:00
Michal Konecny
08f990cf79 [mailman3] We need admin access to database for migrations 
We didn't need that on staging, but on production the permissions are more
granular.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-27 13:47:20 +02:00
Michal Konecny
1d562201ed [mailman3] Use the same variable name everywhere 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-27 13:00:45 +02:00
Michal Konecny
897190bcc6 [mailman3] Fix for production deployment 
Don't use the same name for variables in ansible-private and playbook.
Remove fedmsg.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-27 12:53:03 +02:00
Michal Konecny
133b62a69a [mailman3] Prepare for production migration 
Update the var hosts and playbook before migration itself.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-27 10:14:18 +00:00
Michal Konecny
e97ec6d135 [mailman3] Fix missing import in sar script 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-06-27 10:14:18 +00:00
Nils Philippsen
205e2c9ed5 distgit/pagure: Set git directories as safe 
This was fixed previously for pagure.io in the context of
paguremirroring. Turns out, it affects all kinds of git operations, so
document and move accordingly.

Fixes: releng#12181
Fixes: fedora-infrastructure#12010

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2024-06-27 11:21:19 +02:00
Nils Philippsen
0adf0869a6 distgit/pagure: Appease yamllint 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2024-06-27 11:21:07 +02:00
Kevin Fenzi
b1490df609 pagure.io: bump memory to handle load better 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-26 14:35:48 -07:00
Adam Williamson
a0a7e276a4 kerneltest: use my branch on stg to investigate errors 
See https://pagure.io/fedora-infrastructure/issue/11952 , I'm
trying to get kerneltest / kernel-tests to work with OIDC auth
but getting "invalid input file" errors; need to deploy a
branch with the real errors behind that message logged at a
level we can see.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2024-06-26 12:57:51 -07:00
Kevin Fenzi
23318bb0d5 people: adjust some things new vm setup on rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-26 12:18:46 -07:00
Kevin Fenzi
a2a5d2917b people: adjust some things for rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-06-26 12:06:11 -07:00