infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
39843 commits 9 branches 0 tags 110 MiB
Commit graph

4137 commits

Author SHA1 Message Date
Kevin Fenzi
ec0dc97b36 torrent01: setup rhel9 torrent server 
This will replace the existing rhel7 torrent02.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-28 15:02:05 -08:00
Tomas Hrcka
c4aeb449f2 [stg] Drop aarch64 osbs cluster from staging 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-11-28 00:17:29 +00:00
Tomas Hrcka
67ed29bbc7 [stg] OSBS point to archived location of kickstart 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-11-21 16:09:29 +01:00
Tomas Hrcka
3f147d403a [stg] OSBS update vars to point to archive 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-11-21 15:43:35 +01:00
Tomas Hrcka
3336628c43 Revert "[stg] Try to upgrade osbs to f39" 
Didnt work

Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-11-21 15:37:12 +01:00
Tomas Hrcka
4626ea62ce [stg] Try to upgrade osbs to f39 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-11-21 12:03:22 +01:00
Seddik Alaoui Ismaili
b496f4b9c4 allow rsync from log01 2023-11-19 17:08:18 +01:00
Kevin Fenzi
638889e97e value: make sure value02 has backup targets correct and clean up old value01 host vars 2023-11-16 15:49:16 -08:00
Michal Konecny
4025b4d158 [IPA] Move ipa02.stg to RHEL9 
The ipa02.stg is currently behaving strangely, let's try to move it to RHEL9, as
discussed in https://pagure.io/fedora-infrastructure/issue/10358, to solve the
issue.

The backup is available on vmhost-x86-02.stg in case anything goes wrong.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-11-16 11:12:54 +01:00
Kevin Fenzi
88683eef68 notifs: clean up some more missed parts from retirement 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 18:16:06 -08:00
Kevin Fenzi
a60ca7159f nuancier: retire and remove from ansible 
See https://pagure.io/fedora-infrastructure/issue/11371
This service is retired.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 10:44:00 -08:00
Kevin Fenzi
58183eb8ee proxies / staging: move stg proxies to f39 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 17:09:50 -08:00
Kevin Fenzi
24a237ad3d releng-compose: move a bunch of composers to f39 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 16:41:39 -08:00
Kevin Fenzi
deef8d3b35 bodhi-backend01.stg: was moved to f38 a while ago 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-09 13:09:19 -08:00
Kevin Fenzi
9314b70862 db-koji01: more tuning 
Tweak some of the knobs to try and get things more happy with the heavy
load it's under. Note that cpus change will need a reboot before it's
active. The other changes have all been applied and it seems to be doing
a little better with this. Perhaps with some more cpus we can get it
stable (but yet not swamping i/o).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-09 10:09:24 -08:00
David Kirwan
9c3a24e79a
zabbix: Zabbix production configuration 2023-11-09 12:55:26 +00:00
Kevin Fenzi
c455c1b635 bodhi-backend01: add note about not upgrading to f39+ until epel7 is gone 
See https://pagure.io/releng/issue/11664 for more info.
Basically createrepo_c in f39+ will not work for making epel7 updates,
so we need to wait until it goes EOL before upgrading here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-06 11:54:41 -08:00
Kevin Fenzi
cd6cbe632e bodhi: move to version 7.2.2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-10-03 10:21:22 -07:00
Kevin Fenzi
ceec274e27 retrace: configure ipv6 address 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-09-21 17:06:05 -07:00
Kevin Fenzi
d55ae6a8fa noc02: fix network variables to new style 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-09-21 13:13:32 -07:00
Kevin Fenzi
baf6dbc0b0 noc02: move to rhel9 and ibiblio02 
This is a rhel7 instance, move it to rhel9.
Also, ibiblio01 is old and going away, so move it to 02.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-09-21 13:10:46 -07:00
Michal Konecny
079a115f8f Disable ipa_initial on ipa03.stg 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-09-20 16:41:23 +02:00
Michal Konecny
dd6b5b1546 Set new ipa host ipa_initial variable to 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-09-20 15:36:48 +02:00
Michal Konecny
2d088b91ca Add ipa03 host on staging 
This is a test host to deploy ipa on RHEL9.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2023-09-20 13:42:03 +02:00
Kevin Fenzi
d6bfc86fba sign-vault01.stg: try setting staging datacenter directly here 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-09-11 14:27:42 -07:00
Kevin Fenzi
3f40f8086d sign-vault01.stg: drop datacenter here to use the staging variable 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-09-11 14:24:08 -07:00
Kevin Fenzi
e3d54b6cf1 sign-vault01.stg: definitely not external 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-09-11 14:18:32 -07:00
Kevin Fenzi
778ab691a3 sign-bridge01/sign-vault01 / staging: move to rhel9 
Moving these to rhel9 to test new sigul.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-09-11 13:55:44 -07:00
Kevin Fenzi
48a207abc1 db-koji01: Some adjustments to avoid any outages 
Using the 'fix outage' clause in freeze here. ;)

Basically adjust db-koji01 to use more memory and avoid
saturating i/o. With these settings, page loads look faster
and i/o is not saturated. We should try adding more cpus and such,
but that will require a reboot, so avoiding for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-08-26 10:46:03 -07:00
Kevin Fenzi
4bb210adf1 db-koji01: try putting effective_io_concurrency back to 0 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-08-25 18:14:17 -07:00
Kevin Fenzi
1d8e8256e1 add host_vars for new maintainer_test instances 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-08-24 14:53:43 -07:00
Kevin Fenzi
062913f1f3 iad2 proxies need to use 9000 mtu 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-08-20 13:06:19 -07:00
Jakub Kadlcik
aac1379587 copr-pulp: using centos again 2023-08-20 15:47:39 +02:00
Jakub Kadlcik
f575e55d3f copr-pulp: try ec2-user 2023-08-20 14:18:12 +02:00
Jakub Kadlcik
629b70f29a copr-pulp: trying RHEL now 2023-08-20 14:09:13 +02:00
Jakub Kadlcik
17fc31ba63 copr-pulp: I think I need to set ansible_ssh_user instead of remote_user 2023-08-20 13:33:58 +02:00
Kevin Fenzi
db450f7313 qvmhost: use 9000 mtu like everything else 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-08-16 18:08:54 -07:00
Kevin Fenzi
a14b081ab3 proxies / staging: set external as a host var 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-08-15 12:08:39 -07:00
Kevin Fenzi
b1fc001c0f db-koji01.stg: move the rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-08-13 09:44:50 -07:00
Kevin Fenzi
f77d05ce5a too many -s 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-26 17:52:39 -07:00
Kevin Fenzi
7c92b78f2c f36 is eol, remove f36-test 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-26 17:21:42 -07:00
Kevin Fenzi
6013c68312 tang01: move to rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-26 17:04:36 -07:00
Kevin Fenzi
f31c6ce417 tang02: move to rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-26 16:20:56 -07:00
Tomáš Hozza
b74b3a2da8 Add ppc64le osbuild-workers 
Add playbooks, var files and role for setting up osbuild-composer
ppc64le workers. These are needed in order to build Fedora Workstation
ISO on ppc64le.

Related to:
 - https://pagure.io/fedora-infrastructure/issue/11243
 - https://fedoraproject.org/wiki/Changes/FedoraWorkstationImageBuilder

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
 2023-07-26 16:40:09 +00:00
Kevin Fenzi
22dde8163b unbound: remove and retire unbound servers 
These instances served long and well as fallback resolvers for
dnssec-trigger. This is no longer needed or used, so lets remove them.
See https://pagure.io/fedora-infrastructure/issue/11415

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-24 14:40:43 -07:00
Kevin Fenzi
fcd9c449ad pagure: set dns2, otherwise the default is a internal iad2 one 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-21 11:31:01 -07:00
Kevin Fenzi
00490e9426 autosign: all not external 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-18 17:53:05 -07:00
Kevin Fenzi
bdfd9d8517 batcave02: drop batcave02, it's batcave01 now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-13 17:21:50 -07:00
Kevin Fenzi
78422a3fd2 batcave01(NEW AND IMPROVED): adjust for rhle9 move 
Fix the kickstart/repo for reinstall.
Add rhel-system-roles for linux-system-roles/networking
Drop some python2 items that aren't available in rhel9 anymore.
Collapse the batcave02 stuff into batcave01

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-07-13 16:21:24 -07:00
Kevin Fenzi
679f7f6f16 iptables: clean up osbuild and add a external block set scaffolding 
Setup osbuild so it only needs to exist on the specific builders in the
osbuild channel, not all builders.
Also, setup things so we can add a blocklist that will block external
subnets/ip's if we need to do so. Currently it should just be an empty
set, but we can implement it as needed/desired starting with the ips we
already were blocking on just some hosts.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 12:41:07 -07:00