Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
39063 commits 9 branches 0 tags 111 MiB
Commit graph

39063 commits

This branch
This branch
All branches
Author SHA1 Message Date
David Kirwan
e1d428d431 zabbix: update dependency lists 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-13 09:39:38 +01:00
Aurélien Bompard
aebbaf022b
FMN: increase the redis connect timeout 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-13 10:12:01 +02:00
David Kirwan
2ce8906f5f zabbix: formatting issue in zabbix web config template 
rework db task for creating zabbix user

Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-13 08:10:33 +01:00
Pavel Raiskup
a8cc7b4c9b copr: opensuse-thumbleweed chroots work without bootstrap image 2023-06-13 09:08:20 +02:00
Pavel Raiskup
cd7df06b87 copr: enable bootstrap image for openSUSE chroots 
Copy the latest configs from mock-core-configs, and add
'use_bootstrap_image = True'.
 2023-06-13 08:31:48 +02:00
Kevin Fenzi
2273173a9b koji_hub: update scm policy 
Drop modules, they are controlled by mbs
fix typo on containers (should be container)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-12 14:10:07 -07:00
Kevin Fenzi
3a5c8c63d4 download-ib02: create a temp download host on new virthost so we can sync data to it 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-12 10:28:57 -07:00
David Kirwan
e8155ab92e zabbix: db configuration 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 13:57:44 +01:00
David Kirwan
51190f66be zabbix: debug args to shell command 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 13:27:54 +01:00
David Kirwan
701dca3ef7 zabbix: rearrange task import 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 13:18:00 +01:00
David Kirwan
949049047e zabbix: rename template files 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 12:45:26 +01:00
David Kirwan
be8fcb49c9 zabbix: install zabbix rpm 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 12:28:53 +01:00
David Kirwan
325c691693 zabbix: remove keytab roles from playbook 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 12:11:36 +01:00
David Kirwan
79ed7fdc45 zabbix: fix user/group file ownership for keytabs 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 12:08:11 +01:00
David Kirwan
99b51133f1 zabbix: restore original playbook layout 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 11:55:12 +01:00
David Kirwan
c5cad9e168 zabbix_server: readd handlers 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 11:23:06 +01:00
David Kirwan
88e544bf53 zabbix: readd base roles 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 11:11:30 +01:00
David Kirwan
a8263f98e9 zabbix: add zabbix_server role 
WIP

Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-12 10:50:58 +01:00
Kevin Fenzi
49c105e55a koji_hub: allow scratch builds from scm 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-11 08:27:30 -07:00
Kevin Fenzi
a36b0101c6 koji_builder: increase sleep time a bit to see if it helps db load 
Right now all builders ask the hub for jobs every 15s.
Bump that out a bit to see if it lowers the pressure on the db server.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-10 20:54:28 -07:00
Kevin Fenzi
f99659cea8 koji_hub: re-add scm policy for scm plugin 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 11:35:23 -07:00
Kevin Fenzi
95fcfe8375 koji_hub: fix matches to include allow 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 11:26:30 -07:00
Kevin Fenzi
aba961e27f koji_hub: dammit, disable outage messages 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 09:46:04 -07:00
Kevin Fenzi
bcb281d40e koji_hub: fix template for hub policy 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-09 09:37:13 -07:00
Tomas Kopecek
8d99c12ea4 Move SCM policies to the koji hub 
Moving all SCM policies previously defined in each builder to
centralized hub configuration. From now on, any SCM policy change just
needs updating the hub config and reloading it. Builders need nor change
nor reload.

Related: https://pagure.io/fedora-infrastructure/issue/9728

Signed-off-by: Tomas Kopecek <tkopecek@redhat.com>
 2023-06-09 16:18:12 +00:00
Kevin Fenzi
0f4026b2a1 koji_builder: test dnf5 changes in staging 
With dnf5 becoming default in rawhide, we need to make sure to override
things to use dnf4 for making buildroots for now until dnf5 is ready to
take that on.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 13:30:19 -07:00
Kevin Fenzi
d0968906bf ibiblio02: fix duplicate variable 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 10:04:41 -07:00
Kevin Fenzi
19830a2265 ibiblio02: add vpn ccd file 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:38:06 -07:00
Kevin Fenzi
199e58faf6 ibiblio02: do not specify ipv6 prefix twice 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:23:31 -07:00
Kevin Fenzi
b9190670cb ibiblio02: adjust connection settings 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:20:33 -07:00
Kevin Fenzi
bfd7518efd ibiblio: use linux-system-roles/networking on new servers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-08 09:16:39 -07:00
Pavel Raiskup
8ce78aaca3 copr-be: Promote Fedora 38 builders to production 2023-06-08 17:30:30 +02:00
Pavel Raiskup
0fc0655e47 copr-builders: don't do gpg checks for epel-6 builds, take #2 2023-06-08 17:19:52 +02:00
Pavel Raiskup
7b1cf87845 copr-builders: don't do gpg checks for epel-6 builds 
Our builders are on Fedora 38 which distrust SHA-1, and I don't see a
way to opt-out from this policy.  Building for epel-6 is already on the
edge, so..
 2023-06-08 17:07:34 +02:00
Pavel Raiskup
860f0ed488 copr-be-dev: move builder images to F38 2023-06-08 13:58:53 +02:00
Kevin Fenzi
8e50b0ebda virthosts: increase process limit on new servers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 18:44:14 -07:00
Lukas Holecek
41272fa237 resultsdb: Use upstream image for prod instance 
Related to: https://pagure.io/fedora-infrastructure/issue/11321
 2023-06-07 23:59:34 +00:00
Kevin Fenzi
cf5ca54701 ipa: exclude the ipa postgres user in favor of local one 
We have a postgres user in ipa to prevent people from making an account
with that name, but we need/want to use a local version of this on
database servers, not the ipa one. We need the local one because the ipa
one is locked and this prevents database backups from working.
(Locked accounts can't run cron jobs).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 16:52:25 -07:00
Kevin Fenzi
1a9d6577be ibiblio02: reindent network_connections and sort more readably 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 16:16:48 -07:00
Kevin Fenzi
793a658d92 ibiblio02: adjust connection settings 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 16:11:36 -07:00
Kevin Fenzi
4f63381843 ibiblio02: add new virthost at ibiblio 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-07 15:46:00 -07:00
Kevin Fenzi
10a6a0a18b download-cc-rdu03: how about rhel9? 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 14:45:37 -07:00
Kevin Fenzi
521606e11e download-cc-rdu01: readd on new virthost 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 13:30:38 -07:00
Kevin Fenzi
34ea0dfcb3 autosign: add quotes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 10:29:45 -07:00
Kevin Fenzi
4f0fe17dc1 autosign: fix up import for newer ansible 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 10:27:04 -07:00
Tomáš Hrčka
d601017cad Update roles/robosignatory/templates/robosignatory.toml.j2 2023-06-06 16:50:12 +00:00
Tomas Hrcka
cc3715271d Enable signing for f39-python sidetag 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-06-06 16:45:34 +00:00
Aurélien Bompard
228d284a88
Collectd: add the FMN users source 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-06 18:09:27 +02:00
Kevin Fenzi
3b3f720557 vmhost-x86-cc03: revive with new name and hw. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-06 08:51:03 -07:00
Aurélien Bompard
b8e6fc6146
Fixup last commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-06 12:46:51 +02:00