Greg Sutcliffe
985f5e5608
Zabbix: Correct agent conf file location for RHEL9
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-22 16:41:18 +01:00
Greg Sutcliffe
d9108c43b3
Zabbix: update agent package lists for newer packages
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-22 16:35:16 +01:00
Greg Sutcliffe
fe81326dc4
Zabbix: add BMC host_vars to monitor BMC interfaces on the host entry
2025-07-22 16:23:21 +01:00
Greg Sutcliffe
75609617d3
Zabbix: Cleanup, defaults, and MGMT interface items
...
Fairly big commit, this does:
- Any host including zabbix_agent will now register iteself with the server
This means we can drop auto-registration once it's tested
- Any host with a "bmc:" entry in host_vars will add items/triggers to monitor it
This means we don't need separate "hosts" for the MGMT interfaces
- Reverted to a single base template
The split ones were overkill, we can handle the builders with host macros
- Added defaults to the roles
This lets us override the connection vars from host/group vars (useful for testing)
- Lint & minor cleanup
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-22 16:23:21 +01:00
David Kirwan
6d6914ded9
forgejo: reneabling storage creation temporarially
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2025-07-22 15:35:36 +01:00
David Kirwan
20375bcf10
forgejo: dependency_update doesn't appear to be valid option on module
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2025-07-22 14:35:04 +01:00
Michal Konecny
dcdc636596
[base] Install missing iptables package on ppc64le
...
The Fedora 42 on ppc64le needs iptables-legacy package as well.
2025-07-22 11:24:11 +02:00
Aurélien Bompard
be82a1ee19
Add a system to apply patches to Pagure's dist-git
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-07-22 09:54:40 +02:00
Kevin Fenzi
d9979632e6
dhcpd: remove duplicate entry
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-21 17:34:04 -07:00
Kevin Fenzi
a3dd45c855
buildvm: all these are f42 already, just adjust the more generic groups files
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-21 17:31:11 -07:00
Jiri Kyjovsky
1c4ca1994e
copr-backend: add x86_64_v2 tags
2025-07-22 00:43:55 +02:00
Kevin Fenzi
ea119bea09
ibiblio05: try and drop auto_gateway: no
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-21 15:33:26 -07:00
Kevin Fenzi
86eb4f3e9d
ibiblio05: adjust network for new vlan
...
ibiblio wants to move us to a new vlan. They have already setup things
so we can tag into that vlan on their side, so this just configures a
br1 bridge with that vlan tagged. The existing vm's should be able to be
on the existing vlan for now, but this will let us provision on that
network/vlan.
Also, it seems that I didn't set these up correctly network wise.
They are just using the interfaces directly instead of using a bond over
them. This configuration does that correctly.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-21 15:09:28 -07:00
Kevin Fenzi
b44c28e08d
inventory: add some buildhw's to inventory/nagios
...
We want to monitor the a64 and x86 buildhw devices too.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-21 14:36:43 -07:00
Kevin Fenzi
ff15dbd044
buildhw-x86-04: provision
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-21 14:17:04 -07:00
Kevin Fenzi
772b14d5dd
noc01 / dhcp: drop duplicate
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-21 13:25:39 -07:00
Kevin Fenzi
8e6286b823
noc01 / dhcp: add some hardware for installs
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-21 13:17:04 -07:00
Kevin Fenzi
2f4f0e8354
buildvm-a64: off by one error
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-21 13:11:50 -07:00
Kevin Fenzi
30dac8c0ae
bvmhost-a64-4*: fix up some ips
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-21 12:52:54 -07:00
Kevin Fenzi
7d98656f2b
buildvm-a64-41 to 48: add 8 more aarch64 buildvms
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-21 12:20:41 -07:00
Adam Williamson
7387394898
openqa/worker: fix nfs hostname
...
d'oh.
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2025-07-21 10:14:34 -07:00
Aurélien Bompard
a1c3a34ff5
RabbitMQ Centos Monitoring: fix the timer
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-07-21 15:36:50 +02:00
Aurélien Bompard
a51c0ea353
RabbitMQ: setup sending the queue metrix to CentOS
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-07-21 15:23:42 +02:00
Aurélien Bompard
ca69e3a82d
FMN: add the Distgit DB credentials
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-07-21 12:54:19 +02:00
Kevin Fenzi
499c499507
noc01 / dhcpd: yeah, ips do not have 5 octets
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-18 12:56:52 -07:00
Kevin Fenzi
bc4d6bb2c2
bvmhost-a64-05: add to dhcpd for provisioning
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-18 12:24:01 -07:00
Kevin Fenzi
f6e453b0ff
bvmhost-a64-05: add another aarch64 bvmhost
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-18 12:14:52 -07:00
Kevin Fenzi
5d67480275
noc01 / dhcp: fix duplicate entry
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-18 11:56:09 -07:00
Kevin Fenzi
54148b3006
noc01 / dhcp: fix some ip misassignments
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-18 11:51:40 -07:00
Kevin Fenzi
9c1bb508b5
nagios: try a different way to not run mail_queue check externally
...
Revert the previous thing that tried to move a template to a file, and
instead move it back to a template and just conditionalize it only to
apply on rdu3_internal nagios.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-18 10:25:26 -07:00
Kevin Fenzi
fafc5b1baa
Revert "nagios / external: make mail_queue internal only"
...
This reverts commit 84f03db63c .
2025-07-18 10:22:29 -07:00
Kevin Fenzi
1a3c1dc9e2
os-control: make sure butane is installed so we can make machine operator config changes
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-18 09:59:49 -07:00
Kevin Fenzi
a601c59604
bvmhost-p10-01: bump procs warning a bit
...
This is alerting a lot at 4000, bump it to 4500.
It has a lot of processes running on it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-18 09:58:48 -07:00
Kevin Fenzi
168d030d9c
nagios: turns out this newline is important syntax wise
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-18 09:34:01 -07:00
Michal Konecny
c55be5b392
[people] Update rewrite rule for user pages
...
For some unknown reason from httpd 2.60 the user.fedoraproject.org is
prefixed with / by mod_rewrite and the regex doesn't match anymore.
This is the last thing that is keeping
https://pagure.io/fedora-infrastructure/issue/12092 from being closed.
2025-07-18 13:56:37 +02:00
Michal Konecny
163446f4dc
[ipa] Add ipa machines to VPN
...
The IPA machines are currently not reachable through VPN. This is
because they are missing firewall rules for VPN as they need to
have vpn variable set to include them.
2025-07-18 10:44:39 +02:00
Kevin Fenzi
72789a919f
rabbitmq: switch datacenter out for rdu3
...
This was useful when we had clusters in iad2 and rdu3, but it didn't
actually quite work then and it definitely doesn't now. :)
Datacenters like 'aws' do not have their own clusters, they use the one
in rdu3. So, just switch it back to hard coding.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-17 18:00:47 -07:00
Kevin Fenzi
ca1185ec42
noc01 / dhcpd config: add in mgmt for all the old iad2 hw in rdu3
...
This hardware was the 'newest' of the things in iad2.
So, it should have some life left in it.
Some of them are going to be builders/build related things, and others
openqa. We may shuffle this around some more, but this is a first wild
guess.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-17 17:56:10 -07:00
Michal Konecny
0e8dd65fc5
[base] Remove tasks to disable iptables/nftables
...
It doesn't make sense to disable something that isn't installed. Let's
instead make sure that the package is not installed.
2025-07-17 18:29:28 +02:00
Greg Sutcliffe
7f877e95ee
Zabbix: Add prod Matrix room ID - take2
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-17 17:16:13 +01:00
Greg Sutcliffe
32f290bf88
Zabbix: Add prod Matrix room ID
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-17 17:14:20 +01:00
Michal Konecny
e8d1095e67
[hosts] Add ipa vpn entries to cloud hosts
...
Most of the cloud hosts are on VPN, this will allow them to reach the IPA hosts.
2025-07-17 17:36:54 +02:00
Pedro Moura
82ed86f420
removed easyfix page from apps-fp-o
...
Signed-off-by: Pedro Moura <pmoura@redhat.com >
2025-07-17 15:26:29 +00:00
Greg Sutcliffe
9c0311e50e
Zabbix: Move templates to the first item, as they are dependencies
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-17 15:55:11 +01:00
Greg Sutcliffe
c92b966d9e
Zabbix: Add new NOC usergroup, configure SAML better
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-17 12:56:20 +01:00
Greg Sutcliffe
1c9623a923
Zabbix: Use correct IDP/SAML urls and typo fixes
...
Also add a tag to the whole role so it can be easily selected in the playbook
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-17 12:36:29 +01:00
Greg Sutcliffe
f988af3e97
Zabbix: Add SAML config and cleanup older stuff
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-17 12:20:23 +01:00
Greg Sutcliffe
ea4f07c9d7
Revert "Zabbix: Add ipsilon oidc entry for zabbix-stg"
...
Zabbix uses SAML, not OIDC, which I misunderstood
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-17 12:20:23 +01:00
Michal Konecny
daafbfc969
[pagure] Add staging machine to staging group
...
The pagure staging machine is not in staging group and instead uses prod
variables. Let's fix that.
2025-07-17 12:18:59 +02:00
Kevin Fenzi
20f9de9a38
bvmhost-p10-01: increase procs warning and crit thresholds
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-16 21:00:47 -07:00