WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-30 21:41:53 +08:00
Code Issues Packages Projects Releases Wiki Activity
43,966 Commits 9 Branches 0 Tags
04dcafe578f9cd6d98ad525529341b35f424ad4e
Commit Graph

26663 Commits

Author SHA1 Message Date
Greg Sutcliffe
1f472c9754 Zabbix: improve tagging and make sure Ping Hosts are in All Hosts 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-31 14:32:18 +01:00
Yaakov Selkowitz
71c5c4a8f1 flatpak-indexer: migrate to valkey 
redis was dropped in Fedora 41 due to the license change:

https://fedoraproject.org/wiki/Changes/Replace_Redis_With_Valkey
27798b9109
 2025-07-31 13:12:19 +00:00
Michal Konecny
750151cd6e [flatpak-indexer] Use empty storageClassName 
The named volumes doesn't have any storage class set, so the storage
class doesn't match. This should fix it.
 2025-07-31 15:07:40 +02:00
Greg Sutcliffe
b4651f8b5b Zabbix: Add method to define ping-only hosts in host_vars 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-31 12:52:04 +01:00
Greg Sutcliffe
a1b2783a67 Zabbix: ensure existence of correct hostgroups 
also applies the correct hostgroups when creating/updating hosts

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-31 12:51:43 +01:00
Yaakov Selkowitz
246e643b2e flatpak-indexer: update images 
Also, fix the imagestream reference to the fedora image.
 2025-07-31 08:45:18 +00:00
Michal Konecny
d5f83a7272 [nagios] Use server checks on noc01 
Just move datanommer check to server plugins, so it's the same as before.
 2025-07-31 10:26:01 +02:00
Michal Konecny
e4afc6cf7a [nagios_server] Remove datanommer check 
This check is already installed as part of nagios_client playbook. The
nagios_server role contained old version which doesn't work anymore. Let's get rid
off it.
 2025-07-31 10:02:02 +02:00
Kevin Fenzi
c48af3dad4 openqa-a64-worker04: add dhcp and host vars 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-30 19:18:18 -07:00
Kevin Fenzi
627c51d892 noc01 / dhcpd: add openqa-a64-worker03 to dhcp 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-30 17:32:41 -07:00
Kevin Fenzi
b259bb5465 batcave01: add new vlan at ibiblio to allows 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-30 15:38:13 -07:00
Kevin Fenzi
496110d184 bodhi / backend: set sqlite = True globally 
Both the packages app and mdapi really prefer sqlite data existing.
packages setup a workaround to try and recreate the repodata
locally with sqlite, but it's not working with epel10 branches
at least.

Since all this does is take up a small bit of space, lets
just (at least for now) enable it globally.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-30 14:02:10 -07:00
Greg Sutcliffe
e332937c54 Zabbix: template updates 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-30 16:37:24 +01:00
Greg Sutcliffe
5fb8726bcd Zabbix: Add zabbix_agent tag to API host-creation tasks 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-30 10:50:46 +01:00
David Kirwan
46c8cfff0f forgejo: create the PVC first 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-07-30 10:49:52 +01:00
Kevin Fenzi
c05160fede download / rsyncd logrotate: compress log weekly 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-29 16:43:59 -07:00
Kevin Fenzi
9a22870dd7 candidate-registry: set network to 10.16 instead of the old iad2 10.3 
This apache config is needed in order to allow auth to upload to the
candidate registry. Without it, skopeo just gives a perm denied.
Anytime the datacenter networks change this will also need updated.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-29 15:28:51 -07:00
Mattia Verga
855ff668eb bodhi: update blacklist for homepage users stats 
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
 2025-07-29 21:10:53 +00:00
Michal Konecny
2f1ee9e0d6 [ansible-server] Set transfer_method to smart 
When trying to run the playbook for
bvmhost-p09-05.rdu3.fedoraproject.org I encountered an error when
copying files through scp. After some digging I found this in the
ansible documentation
https://docs.ansible.com/ansible/latest/collections/ansible/builtin/ssh_connection.html#parameter-ssh_transfer_method
and it helped with that.
Let's make the change permanent with this commit.
 2025-07-29 14:19:10 +02:00
David Kirwan
398252f899 forgejo; update task to create PV 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-07-29 13:14:29 +01:00
David Kirwan
c51b5532f9 forgejo; add pv template, update pvc to point at pv 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-07-29 13:13:11 +01:00
Pavel Raiskup
8e74de5f80 copr: powerful osuosl machines can build arch_power9 builds 
Per Resalloc ERROR:
ERROR 2025-07-29 07:46:12,024 PID:903186:140127796283200(Manager)
Couldn't find appropriate on demand pool for ticket=4209285, it will
never be resolved!
 2025-07-29 09:54:50 +02:00
Pavel Raiskup
1a079c61d2 copr: delete _all_ OSUOSL machines 
Relates: https://github.com/fedora-copr/copr/issues/3092
 2025-07-29 08:07:17 +02:00
Pavel Raiskup
17122b9409 copr: re-uploaded aarch64 image 
With the correct --arch aarch64 metadata.
 2025-07-28 19:22:53 +02:00
Pavel Raiskup
53638672c7 copr: upload-qcow2-images-be.j2: select ami architecture explicitly 
Otherwise it goes with x86_64 (since the uploading machine is x86).
 2025-07-28 14:42:55 +02:00
Michal Konecny
31b05ab861 [nagios_client] Install the nagios script on noc 
To get the datanommer checks working on noc01, we need to install the
nagios scripts on noc01 as well.
 2025-07-28 13:00:14 +02:00
Michal Konecny
eb732ee1ac [nagios_client] Fix yamllint errors 2025-07-28 12:09:29 +02:00
Michal Konecny
88132737b5 [nagios_client] Fix ansible-lint errors 2025-07-28 11:58:02 +02:00
Michal Konecny
4670886484 [nagios_client] Install datanommer checks on noc01 
https://pagure.io/fedora-infrastructure/issue/12402
 2025-07-28 11:58:02 +02:00
Kevin Fenzi
0f1a3e91d3 robosignatory: disable f43->f43 signing to process mass rebuild faster 
Also, comment section we will need in a few weeks to resign all of f43
with f44 key for branching.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-27 08:47:31 -07:00
Pavel Raiskup
07bc636371 copr: upload-qcow2-images-be.j2: drop useless argument 2025-07-26 09:34:30 +02:00
Pavel Raiskup
561fd37e64 copr: uploading images fixes 2025-07-25 16:40:39 +02:00
Pavel Raiskup
591bff5336 copr: upload images from backend 2025-07-25 16:25:41 +02:00
Michal Konecny
2804ccc26f [mailman3] Set timeout to default 30 s 
The timeout was set to 1000 because of the issues with missing index.
With index rebuild the default of 30 seconds should be enough.
 2025-07-25 13:27:06 +02:00
Michal Konecny
fda46faaaf [mailman3] Tweak gunicorn config to prevent OOM 
After some tweaking I found out that using gthreads workers is
for some reason causing memory spikes and switching to standard
sync worker prevents those.
 2025-07-25 12:41:20 +02:00
Michal Konecny
d6ff0dc33b [mailman3] Restart the thread more often 
The mailman on staging is still having memory issues, lowering the
number of requests to process before restart helped a little.
 2025-07-25 09:49:49 +02:00
Michal Konecny
be433f7221 [openvpn] Remove bastion-iad01 from client conf 
IAD2 is no more, let's remove the bastion from openvpn conf.
 2025-07-25 09:48:40 +02:00
Kevin Fenzi
e36386c30d nagios: no nomail check at all externally 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-24 10:44:24 -07:00
Kevin Fenzi
ff30e93f7d dns: drop old phx2 zone 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-24 10:44:24 -07:00
Greg Sutcliffe
10669733cc Kickstart: fix mistake in openqa KS 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-24 15:43:00 +01:00
Greg Sutcliffe
f7d6395a20 Kickstart: 8disk F42 kickstart 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-24 15:36:26 +01:00
Pavel Raiskup
7c7a5a6bc0 copr: do not rhsm unregister when machine is broken 
This speeds the resalloc DELETING phase a lot for broken machines.
 2025-07-24 13:06:40 +02:00
Ryan Lerch
72819f0f76 (forgejo): Disable SSH to remove clone URLs from UI 
Disables the SSH server functionality in Forgejo to prevent SSH clone URLs from being displayed in the user interface. This aligns with the current policy of not supporting SSH cloning for repositories on this instance.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-07-24 13:17:38 +10:00
Kevin Fenzi
5579a14d86 bodhi-backend: re-enable sqlite for f41/f42 updates 
Enable sqlite for f41/f42 for now. mdapi still needs this.
A replacement application that will not need it is under development
Once that replaces mdapi we can drop sqlite again.

See https://pagure.io/fedora-infrastructure/issue/12669

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-23 23:14:13 +00:00
Kevin Fenzi
edd8677758 base / iptables: don't try and disable ip6tables on rhel8 with nftables 
rhel8 instances using nftables don't have iptables-services installed,
because we remove 'iptables'. On rhel9 and fedora iptables-services only
needs iptables-libs installed, so it's there and works to disable.

Once the last things (rhel8 copr hypervisors) are moved to nftables, we
can drop all this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-23 13:10:55 -07:00
Akashdeep Dhar
0d04c6d32c badges: flask is dead, long live staging! 
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
 2025-07-23 12:55:39 +00:00
Greg Sutcliffe
24bab53bbb Zabbix: remove incorrect leftover delegate_to 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 13:47:58 +01:00
Greg Sutcliffe
ffbb5e8777 Zabbix: Override package list for Zabbix server 
The server uses the upstream release RPM, not EPEL, so
the package names are different. Our pattern for OS vars
override host_vars, so we have to explictly set an override var

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 11:12:34 +01:00
Greg Sutcliffe
9eda8d8508 Zabbix: Drop autoreg, move PSK config to the host entry 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 10:51:37 +01:00
Greg Sutcliffe
0f7d5cb568 Zabbix: Revert change to agent path, settling on EPEL agent packages 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 10:38:55 +01:00