Kevin Fenzi
ff6abd5a08
Switch db-qa01 to prod and make it rhel7
2015-01-30 22:09:11 +00:00
607cc4ae27
updating qadevel.stg to f21, working ip
2015-01-30 21:02:20 +00:00
Kevin Fenzi
a210330f64
Set mirrorlists to use the vpn postfix group
2015-01-29 21:33:27 +00:00
497f77b7aa
adding local use case to taskotron roles, fixing up some vars to be more consistent
2015-01-29 16:51:31 +00:00
Kevin Fenzi
b0f2edab2f
We need group vars since we moved this to another group
2015-01-27 16:29:44 +00:00
Kevin Fenzi
0a8c78bedb
Make a mirrorlist2 playbook and group and move host1plus mirrorlist to it.
2015-01-27 15:20:18 +00:00
Kevin Fenzi
02220697f9
Drop proxy02.stg, it's gone man
2015-01-27 00:36:36 +00:00
Kevin Fenzi
dfcf080ae8
Setup hosts file for blockerbugs hosts, add blockerbugs02 to ansible.
2015-01-26 23:51:50 +00:00
Kevin Fenzi
655d61ff6e
Add blockerbugs01 to prod ansible
2015-01-26 23:30:44 +00:00
Kevin Fenzi
e0f9414d8a
Proxies need 4 cpus, 2 just don't cut it.
2015-01-26 23:14:35 +00:00
Kevin Fenzi
29d93de617
Add proxy04 to ansible setup.
2015-01-26 19:40:53 +00:00
Ralph Bean
fde47c6b09
Add csi information for askbot.
2015-01-26 17:42:35 +00:00
Miroslav Suchý
0d5253915a
Revert "try to open few ports from rabbitmq and OS"
...
This reverts commit 1e36b52363
.
2015-01-26 15:14:17 +00:00
Miroslav Suchý
1e36b52363
try to open few ports from rabbitmq and OS
...
FIXME some of them can be probbaly open only to internal network
2015-01-26 11:17:06 +00:00
Stephen Smoogen
7eeb1195e4
and then this got rebuilt and there was much rejoicing.
2015-01-25 22:11:34 +00:00
Kevin Fenzi
0df10cc67c
Drop koji03/04 from inventory and fix check_koji nagios check
2015-01-23 21:35:01 +00:00
Kevin Fenzi
c76fb08f0a
Bump number of processes here.
2015-01-23 21:15:20 +00:00
Kevin Fenzi
7902c62425
Adjust for moving koji01/02 to production.
2015-01-23 19:33:38 +00:00
Pierre-Yves Chibon
48e2a3d6d7
Move back the variables to what they should be
...
fasClient was failing as it could not put the username in places.
At first I thought this was an issue related to the first time we run fasClient
and I thus introduced a way-around by making the first run be w/o the use of
these variables and later in the role, add a new fas.conf template that would
use these variables.
It turned out that the problem was coming from fasClient itself (change merged
upstream but not deployed) so all my efforts were useless.
Reverting all things back to their original state and we'll just look into
fixing fasClient properly.
2015-01-23 17:59:36 +01:00
Pierre-Yves Chibon
c738b857ad
Rename fas_client_admin_app and fas_client_restricted_app
2015-01-23 15:06:09 +01:00
Pierre-Yves Chibon
11c29174ce
If it doesn't work, go back to the original
2015-01-23 15:02:28 +01:00
Pierre-Yves Chibon
a1d1ebce1b
Bring back the -s and try %(user)s instead of %(username)s
2015-01-23 14:57:46 +01:00
Pierre-Yves Chibon
bd450e9d20
Try w/o -s for now
2015-01-23 14:51:38 +01:00
Kevin Fenzi
05ccee91be
Make sure stg builder mounts things rw
2015-01-22 22:18:19 +00:00
Valentin Gologuzov
f8750acbe8
typo
2015-01-22 20:37:53 +01:00
Valentin Gologuzov
207faba0fc
[copr] [prod] close access to keygen on 80 port, allow connections only from copr-be-dev.cloud
2015-01-22 20:36:45 +01:00
Valentin Gologuzov
00aa88339d
[copr] [stg] close access to keygen on 80 port, allow connections only from copr-be-dev.cloud
2015-01-22 20:19:38 +01:00
Kevin Fenzi
6d95f3fd75
First stab at blockerbugs ansible playbooks and blockerbugs01.stg config
2015-01-22 17:16:21 +00:00
Pierre-Yves Chibon
d7ccb81b6a
Looks like the cvs groups does not exist in fact
2015-01-22 18:08:52 +01:00
Pierre-Yves Chibon
7a2f626fc9
Specify otherwise the groups with shell access
2015-01-22 18:06:52 +01:00
Pierre-Yves Chibon
ccea2d68bf
Set the -s options for pkgs admins
2015-01-22 17:57:58 +01:00
Kevin Fenzi
46f6f38586
Add postfix_group vpn to a bunch of vpn hosts.
2015-01-22 13:21:05 +00:00
Valentin Gologuzov
0762e2de50
[copr] backend: enable package signing
2015-01-22 14:09:41 +01:00
Kevin Fenzi
fb06e50069
Set max nrpe limits higher on proxy03
2015-01-21 22:08:51 +00:00
Kevin Fenzi
0462f44c4b
Some more proxy adjustments
2015-01-21 17:21:54 +00:00
Kevin Fenzi
fb9ca0217d
Fix datacenter
2015-01-20 21:26:22 +00:00
Kevin Fenzi
ec15817ec4
Use actual correct ks and url links
2015-01-20 20:50:18 +00:00
Kevin Fenzi
bc1d906cd2
Add first cut at a ansible prod proxy: proxy03.fedoraproject.org
2015-01-20 20:42:17 +00:00
Kevin Fenzi
7556477e62
Adjust tummy vm's to new lvm vg and switch them to rhel7.
2015-01-20 19:20:04 +00:00
Kevin Fenzi
1bef69a718
Add tummy01 to ansible
2015-01-20 19:07:06 +00:00
Kevin Fenzi
76be370eac
Add db05 to backups too
2015-01-19 18:43:18 +00:00
Kevin Fenzi
0a1170a065
Add copr-keygen to backups.
2015-01-19 18:35:09 +00:00
Ralph Bean
9fa2c79048
Copy in fedmsg certs for fas02 and fas03.
2015-01-16 18:24:17 +00:00
Stephen Smoogen
48425f4222
add items for qa12->qa14
2015-01-15 21:58:21 +00:00
Ralph Bean
8bd05bd0ff
These should be in the 3000s, not 8000s.
2015-01-15 16:01:55 +00:00
Kevin Fenzi
0c1e54cd31
INPUT INPUT? pizza pizza
2015-01-14 22:47:19 +00:00
Kevin Fenzi
80697f766e
Add some keepalived iptables rules.
2015-01-14 22:44:27 +00:00
Kevin Fenzi
25df2ed36b
Lets test some keepalived. yee haw.
2015-01-14 22:11:43 +00:00
Ralph Bean
185ef53b13
Define CSI metadata for the anitya nodes.
2015-01-14 20:41:20 +00:00
Ralph Bean
04a9a90751
Open additional ports on fas servers for fedmsg.
2015-01-14 20:28:51 +00:00