Commit Graph

43966 Commits

Author SHA1 Message Date
Greg Sutcliffe
985f5e5608 Zabbix: Correct agent conf file location for RHEL9
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-22 16:41:18 +01:00
Greg Sutcliffe
d9108c43b3 Zabbix: update agent package lists for newer packages
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-22 16:35:16 +01:00
Greg Sutcliffe
fe81326dc4 Zabbix: add BMC host_vars to monitor BMC interfaces on the host entry 2025-07-22 16:23:21 +01:00
Greg Sutcliffe
75609617d3 Zabbix: Cleanup, defaults, and MGMT interface items
Fairly big commit, this does:
- Any host including zabbix_agent will now register iteself with the server
  This means we can drop auto-registration once it's tested
- Any host with a "bmc:" entry in host_vars will add items/triggers to monitor it
  This means we don't need separate "hosts" for the MGMT interfaces
- Reverted to a single base template
  The split ones were overkill, we can handle the builders with host macros
- Added defaults to the roles
  This lets us override the connection vars from host/group vars (useful for testing)
- Lint & minor cleanup

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-22 16:23:21 +01:00
David Kirwan
6d6914ded9 forgejo: reneabling storage creation temporarially
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-07-22 15:35:36 +01:00
David Kirwan
20375bcf10 forgejo: dependency_update doesn't appear to be valid option on module
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-07-22 14:35:04 +01:00
Michal Konecny
dcdc636596 [base] Install missing iptables package on ppc64le
The Fedora 42 on ppc64le needs iptables-legacy package as well.
2025-07-22 11:24:11 +02:00
Aurélien Bompard
be82a1ee19 Add a system to apply patches to Pagure's dist-git
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-22 09:54:40 +02:00
Kevin Fenzi
d9979632e6 dhcpd: remove duplicate entry
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-21 17:34:04 -07:00
Kevin Fenzi
a3dd45c855 buildvm: all these are f42 already, just adjust the more generic groups files
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-21 17:31:11 -07:00
Jiri Kyjovsky
1c4ca1994e copr-backend: add x86_64_v2 tags 2025-07-22 00:43:55 +02:00
Kevin Fenzi
ea119bea09 ibiblio05: try and drop auto_gateway: no
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-21 15:33:26 -07:00
Kevin Fenzi
86eb4f3e9d ibiblio05: adjust network for new vlan
ibiblio wants to move us to a new vlan. They have already setup things
so we can tag into that vlan on their side, so this just configures a
br1 bridge with that vlan tagged. The existing vm's should be able to be
on the existing vlan for now, but this will let us provision on that
network/vlan.

Also, it seems that I didn't set these up correctly network wise.
They are just using the interfaces directly instead of using a bond over
them. This configuration does that correctly.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-21 15:09:28 -07:00
Kevin Fenzi
b44c28e08d inventory: add some buildhw's to inventory/nagios
We want to monitor the a64 and x86 buildhw devices too.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-21 14:36:43 -07:00
Kevin Fenzi
ff15dbd044 buildhw-x86-04: provision
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-21 14:17:04 -07:00
Kevin Fenzi
772b14d5dd noc01 / dhcp: drop duplicate
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-21 13:25:39 -07:00
Kevin Fenzi
8e6286b823 noc01 / dhcp: add some hardware for installs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-21 13:17:04 -07:00
Kevin Fenzi
2f4f0e8354 buildvm-a64: off by one error
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-21 13:11:50 -07:00
Kevin Fenzi
30dac8c0ae bvmhost-a64-4*: fix up some ips
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-21 12:52:54 -07:00
Kevin Fenzi
7d98656f2b buildvm-a64-41 to 48: add 8 more aarch64 buildvms
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-21 12:20:41 -07:00
Adam Williamson
7387394898 openqa/worker: fix nfs hostname
d'oh.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-07-21 10:14:34 -07:00
Aurélien Bompard
a1c3a34ff5 RabbitMQ Centos Monitoring: fix the timer
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-21 15:36:50 +02:00
Aurélien Bompard
a51c0ea353 RabbitMQ: setup sending the queue metrix to CentOS
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-21 15:23:42 +02:00
Aurélien Bompard
ca69e3a82d FMN: add the Distgit DB credentials
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-21 12:54:19 +02:00
Kevin Fenzi
499c499507 noc01 / dhcpd: yeah, ips do not have 5 octets
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-18 12:56:52 -07:00
Kevin Fenzi
bc4d6bb2c2 bvmhost-a64-05: add to dhcpd for provisioning
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-18 12:24:01 -07:00
Kevin Fenzi
f6e453b0ff bvmhost-a64-05: add another aarch64 bvmhost
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-18 12:14:52 -07:00
Kevin Fenzi
5d67480275 noc01 / dhcp: fix duplicate entry
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-18 11:56:09 -07:00
Kevin Fenzi
54148b3006 noc01 / dhcp: fix some ip misassignments
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-18 11:51:40 -07:00
Kevin Fenzi
9c1bb508b5 nagios: try a different way to not run mail_queue check externally
Revert the previous thing that tried to move a template to a file, and
instead move it back to a template and just conditionalize it only to
apply on rdu3_internal nagios.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-18 10:25:26 -07:00
Kevin Fenzi
fafc5b1baa Revert "nagios / external: make mail_queue internal only"
This reverts commit 84f03db63c.
2025-07-18 10:22:29 -07:00
Kevin Fenzi
1a3c1dc9e2 os-control: make sure butane is installed so we can make machine operator config changes
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-18 09:59:49 -07:00
Kevin Fenzi
a601c59604 bvmhost-p10-01: bump procs warning a bit
This is alerting a lot at 4000, bump it to 4500.
It has a lot of processes running on it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-18 09:58:48 -07:00
Kevin Fenzi
168d030d9c nagios: turns out this newline is important syntax wise
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-18 09:34:01 -07:00
Michal Konecny
c55be5b392 [people] Update rewrite rule for user pages
For some unknown reason from httpd 2.60 the user.fedoraproject.org is
prefixed with / by mod_rewrite and the regex doesn't match anymore.

This is the last thing that is keeping
https://pagure.io/fedora-infrastructure/issue/12092 from being closed.
2025-07-18 13:56:37 +02:00
Michal Konecny
163446f4dc [ipa] Add ipa machines to VPN
The IPA machines are currently not reachable through VPN. This is
because they are missing firewall rules for VPN as they need to
have vpn variable set to include them.
2025-07-18 10:44:39 +02:00
Kevin Fenzi
72789a919f rabbitmq: switch datacenter out for rdu3
This was useful when we had clusters in iad2 and rdu3, but it didn't
actually quite work then and it definitely doesn't now. :)

Datacenters like 'aws' do not have their own clusters, they use the one
in rdu3. So, just switch it back to hard coding.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-17 18:00:47 -07:00
Kevin Fenzi
ca1185ec42 noc01 / dhcpd config: add in mgmt for all the old iad2 hw in rdu3
This hardware was the 'newest' of the things in iad2.
So, it should have some life left in it.

Some of them are going to be builders/build related things, and others
openqa. We may shuffle this around some more, but this is a first wild
guess.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-17 17:56:10 -07:00
Michal Konecny
0e8dd65fc5 [base] Remove tasks to disable iptables/nftables
It doesn't make sense to disable something that isn't installed. Let's
instead make sure that the package is not installed.
2025-07-17 18:29:28 +02:00
Greg Sutcliffe
7f877e95ee Zabbix: Add prod Matrix room ID - take2
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 17:16:13 +01:00
Greg Sutcliffe
32f290bf88 Zabbix: Add prod Matrix room ID
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 17:14:20 +01:00
Michal Konecny
e8d1095e67 [hosts] Add ipa vpn entries to cloud hosts
Most of the cloud hosts are on VPN, this will allow them to reach the IPA hosts.
2025-07-17 17:36:54 +02:00
Pedro Moura
82ed86f420 removed easyfix page from apps-fp-o
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2025-07-17 15:26:29 +00:00
Greg Sutcliffe
9c0311e50e Zabbix: Move templates to the first item, as they are dependencies
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 15:55:11 +01:00
Greg Sutcliffe
c92b966d9e Zabbix: Add new NOC usergroup, configure SAML better
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 12:56:20 +01:00
Greg Sutcliffe
1c9623a923 Zabbix: Use correct IDP/SAML urls and typo fixes
Also add a tag to the whole role so it can be easily selected in the playbook

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 12:36:29 +01:00
Greg Sutcliffe
f988af3e97 Zabbix: Add SAML config and cleanup older stuff
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 12:20:23 +01:00
Greg Sutcliffe
ea4f07c9d7 Revert "Zabbix: Add ipsilon oidc entry for zabbix-stg"
Zabbix uses SAML, not OIDC, which I misunderstood

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 12:20:23 +01:00
Michal Konecny
daafbfc969 [pagure] Add staging machine to staging group
The pagure staging machine is not in staging group and instead uses prod
variables. Let's fix that.
2025-07-17 12:18:59 +02:00
Kevin Fenzi
20f9de9a38 bvmhost-p10-01: increase procs warning and crit thresholds
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-16 21:00:47 -07:00