Commit Graph

43966 Commits

Author SHA1 Message Date
David Kirwan
7d58229d5b forgejo: backups configuration for the OADP operator
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-06-25 16:49:24 +01:00
Aurélien Bompard
9eee5543c1 FMN: expire messages after 1 day
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-25 16:00:38 +02:00
Aurélien Bompard
3fa3a0fc19 Fix erlang SSL path
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-25 15:18:05 +02:00
Aurélien Bompard
165c56fbf8 Move the bodhi sweeper configuration to the bodhi role
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-25 15:11:27 +02:00
Michal Konecny
f1b1deb66f [ipa/server] Increase nsslapd sizelimit
It seems that the issue https://github.com/dogtagpki/pki/issues/5133 we
are hitting now is because the limit on the newly deployed is set only
to 2000, which makes it reach the LDAP administrative limit.
2025-06-25 11:47:25 +00:00
Greg Sutcliffe
f432c56f48 qvmhost-x86-0{2,3,4,5}.rdu3.fedoraproject.org: add new host to rdu3
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-25 12:43:11 +01:00
Aurélien Bompard
7f1e3a1b73 Attempt to fix the RabbitMQ CLI tools
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-25 13:06:58 +02:00
Greg Sutcliffe
eaf47a29b2 qvmhost-x86-01.rdu3.fedoraproject.org: add new host to rdu3
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-25 10:54:19 +01:00
Aurélien Bompard
4f26cf4337 Fix python3_fact to run on hosts where there is no /usr/bin/python
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-25 09:50:56 +02:00
Kevin Fenzi
901600c950 kickstarts: fix up rhel8 post
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 18:36:15 -07:00
Kevin Fenzi
7444b4d73f rhel8 kickstart: also exclude rhc
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 18:14:46 -07:00
Kevin Fenzi
6d5b9846b1 add rhel8 kickstart and post
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 18:01:18 -07:00
Kevin Fenzi
230b2bff74 pkgs01.stg.rdu3: install a pkgs in rdu3 for staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 17:47:21 -07:00
Greg Sutcliffe
f96be4ab4f OpenQA: add first RDU3 worker - and also to inventory
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-25 00:25:45 +01:00
Greg Sutcliffe
2512552861 OpenQA: add first RDU3 worker
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-25 00:25:12 +01:00
Kevin Fenzi
7aa7553b84 batcave01.rdu3: use vmhost in the right datacenter
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 15:48:48 -07:00
Kevin Fenzi
5abc226b99 batcave: where batman hangs out working on the batcomputer
Add a batcave01 in rdu3. Note that any changes made to this host before
the cutover may be wiped out by syncing content from the old one, so
probibly you shouldn't use it yet.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 15:41:41 -07:00
Kevin Fenzi
8f352f9868 ocp / staging / rdu3: give these control plane nodes the correct gateway
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 15:25:40 -07:00
James Antill
a634122b7f postgresql-server: Fix db-datanommer02 typo.
Signed-off-by: James Antill <james@and.org>
2025-06-24 18:15:12 -04:00
Kevin Fenzi
41dcbe734f haproxy: correct bootstrap hostname
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 14:40:16 -07:00
Kevin Fenzi
a5e3b32175 haproxy: add stg rdu3 openshift apis
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 14:36:30 -07:00
Kevin Fenzi
78f9a7a523 add missing _ip
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 13:53:44 -07:00
Kevin Fenzi
a3e074ecbc openshift / staging / rdu3: set correct ocp version
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 13:46:25 -07:00
Kevin Fenzi
f68fa52107 openshift / staging / rdu3: fix kernel filename
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 12:54:22 -07:00
Kevin Fenzi
3d208ad979 openshift / staging / rdu3: enable bootstrap node, fix path on kernel download.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 12:51:15 -07:00
Kevin Fenzi
d77950adc1 openshift / staging: put control plane vms on different hosts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 12:45:09 -07:00
Kevin Fenzi
aa3e21cb89 nftables / kojibuilder/rdu3: also allow proxy01/10.iad2 external ips for kojipkgs there, fix after move
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 12:17:42 -07:00
Kevin Fenzi
327bf02f05 nftables / kojibuilder: more copypasta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 11:55:12 -07:00
Kevin Fenzi
3b73e26506 nftables / kojibuilder: move rdu3 to the proper section, fix syntax errors
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 11:50:14 -07:00
James Antill
f446135409 Add rdu3 DB names to conditionals in postgresql_server tasks.
Signed-off-by: James Antill <james@and.org>
2025-06-24 18:47:31 +00:00
James Antill
34a0144950 Add prod db03.rdu3.* to groups/mariadb-server.yml
Signed-off-by: James Antill <james@and.org>
2025-06-24 18:47:31 +00:00
James Antill
b4a9b84fec Add prod db*.rdu3.* to groups/postgresql-server.yml
Signed-off-by: James Antill <james@and.org>
2025-06-24 18:47:31 +00:00
James Antill
95befdfe01 db*.rdu3: Add prod rdu3 DB servers using el9
Signed-off-by: James Antill <james@and.org>
2025-06-24 18:47:31 +00:00
Kevin Fenzi
713af9ea3a proxies: move coreos cincinnati to rdu3 openshift
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 11:44:16 -07:00
Kevin Fenzi
ef87a8d197 nftables / kojibuilder: adjust ipa rules to allow rdu3 to us iad2 servers for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 11:38:42 -07:00
Greg Sutcliffe
5a89228bde OCP: Clean up DNS and eth0 variables
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-24 18:28:00 +00:00
Greg Sutcliffe
176d62edc3 OCP: Add host/group vars for staging RDU3 ocp cluster
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-24 18:28:00 +00:00
Kevin Fenzi
96dbff9277 nftables / kojibuilder / rdu3: temp allow external iad infra
Right now we are sending infra web requests (like for packages) to the
iad2 batcave01 via external. Lets allow this so we can install builders,
then change dns/drop it once we move.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 11:23:20 -07:00
Kevin Fenzi
0efed466be nftables: some more tweaks, add batcave01.iad2 to be able to manage rdu3 builders, adjust osuosl for new external ips
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 10:35:37 -07:00
Kevin Fenzi
545dfcf84e buildvm_aarch64_rdu3: fedora 42 here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 10:27:16 -07:00
Aurélien Bompard
a3d07546d5 Fix typo
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-24 18:21:39 +02:00
Aurélien Bompard
0ca9152d61 Open firewall for rabbitmq in RDU3
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-24 18:18:31 +02:00
James Antill
b697488d03 nftables.kojibuilder: NFS is also split, not shared.
Signed-off-by: James Antill <james@and.org>
2025-06-24 11:40:21 -04:00
Aurélien Bompard
2e243f0b28 SSSd wants its conf snippets to have the same perms as sssd.conf
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-24 17:38:45 +02:00
Greg Sutcliffe
1a17a7f9e6 postfix: quick-and-dirty fix for SMTP nftables on bastion.rdu3
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-24 10:17:51 +01:00
Greg Sutcliffe
11fb7208ad postfix: Set relayhost correctly for rdu3 hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-24 10:17:51 +01:00
Michal Konecny
39ca0fe099 [ipsilon] Add RDU3 centos machines
To prevent removing RDU3 centos machines from HBAC rule let's add them
to task. For more info see https://pagure.io/fedora-infrastructure/issue/12514
2025-06-24 08:11:51 +00:00
Aurélien Bompard
573a151de1 RabbitMQ: use the new configuration file format in RDU3
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-24 10:00:03 +02:00
James Antill
34ff986944 nftables.kojibuilder: Add more rdu3 changes. Add comments.
Signed-off-by: James Antill <james@and.org>
2025-06-24 01:09:58 -04:00
James Antill
cb326914b5 Add db03.stg.rdu3.* to groups/mariadb-server.yml
Signed-off-by: James Antill <james@and.org>
2025-06-24 01:58:01 +00:00