WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-30 21:41:53 +08:00
Code Issues Packages Projects Releases Wiki Activity
43,966 Commits 9 Branches 0 Tags
04dcafe578f9cd6d98ad525529341b35f424ad4e
Commit Graph

43966 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Adam Williamson
5543191485 correct MAC addresses for openqa-x86-worker01 again 
ok this time use the output from the right machine adam

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-02 21:16:27 -07:00
Adam Williamson
88e7907d4b correct MAC addresses for openqa-x86-worker01 
grrr.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-02 21:12:25 -07:00
Kevin Fenzi
d97f99cdf4 coreos-ostree-importer: set storageClassName to nothing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 20:57:21 -07:00
James Antill
ec5be36747 distgit: Add a mini docs comment for IP_ALLOWED_INTERNAL, just in case. 
Signed-off-by: James Antill <james@and.org>
 2025-07-02 23:35:35 -04:00
James Antill
8885a76136 distgit: Change iad2 to rdu3 IPs for distgit. 
Signed-off-by: James Antill <james@and.org>
 2025-07-02 23:25:05 -04:00
Adam Williamson
099406f1b9 openqa/worker tap: set CAP_NET_ADMIN on qemu 
I have no idea why we didn't need this before, but we seem to
need it now.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-02 20:08:18 -07:00
Adam Williamson
5e737c675c openqa: disable ppc64le on lab for now 
We don't have any workers. We may turn this back on later, or...
not.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-02 19:54:44 -07:00
Adam Williamson
03c5676da3 Rename br0 to bondbr0 on all openQA worker hosts 
This is the main system connection, a bridge over a pair of
bonded ethernet ports. We want to let the openQA openvswitch
bridge be br0 in case that makes it fricking work again, so this
needs to be called something else to allow that.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-02 17:35:29 -07:00
Adam Williamson
9d931214ea Revert "openQA: rename openvswitch bridge device to avoid conflict" 
This reverts commit 4dc01bc892 and
a follow-up commit. I'm having trouble getting things to work
and want to see if it works if we go back to having the openQA
bridge be br0, and rename the bridge used for the system's bonded
network connection to something else instead.
 2025-07-02 17:25:18 -07:00
Adam Williamson
10b68ac01f openqa/worker: remove old unused files 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-02 17:23:42 -07:00
Adam Williamson
b343d8de52 Try and fix openQA bridge config 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-02 16:20:39 -07:00
Kevin Fenzi
90ed0a38e0 pkgs: change the pagure user to uid 1000 for suexec, block in sssd 
The pagure user needs to be uid 1000 because suexec won't let users with
uid under that suexec. ;(

Also, filter pagure user out in sssd so we get the local user.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 15:25:17 -07:00
Adam Williamson
f7ca68a38e openqa/dispatcher: install resultsdb_conventions 
I thought/assumed/knew/something? that resultsdb_conventions_fedora
required resultsdb_conventions, but right now it seems it doesn't.
It *should*, but I can't fix it right now as the buildsystem is
down, so let's just install it here...

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-02 15:20:09 -07:00
Kevin Fenzi
70ee9cda84 pkgs: set ipa_host_group_desc or ipa playbook errors 
failed: [pkgs01.rdu3.fedoraproject.org -> ipa01.rdu3.fedoraproject.org] (item=ipa_host_group_desc) => {"ansible_loop_var": "item", "changed": false, "item": "ipa_host_group_desc", "msg": "`ipa_host_group_desc` is not defined"}

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 14:52:48 -07:00
Kevin Fenzi
7855344443 pkgs: create a local pagure user. 
Seems like we set this up many years ago for staging, but then we added
a comment to do it for prod and never did.

This is needed in todays rdu3 setup. The pagure user needs to be local
so it can sudo with the local sudo config instead of the ipa sudo
config.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 14:46:56 -07:00
Kevin Fenzi
1df69acbfd kojibuilder: nftables: drop a rdu3 restriction, we need this for s390x as well 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 14:15:46 -07:00
Kevin Fenzi
2b7406be4c poddlers: use fqdn for memcached02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 14:02:03 -07:00
Kevin Fenzi
160cbd7932 inventory: switch everything back to mtu 1500 
We have been hitting lots of weird problems going accross vlans in rdu3
with mtu 9000. For now and to stablize things, lets just switch
everything back to 1500. We can revisit this down the road, but stablity
is better than a few % of overhead.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 13:26:11 -07:00
Kevin Fenzi
07b5336e55 nftables: rework for s390x builders, rip out iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 12:40:06 -07:00
Kevin Fenzi
2e4c63f83d kickstarts: The first few sank into the swamp, but this one... this one... 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 12:02:14 -07:00
Kevin Fenzi
9c956c6505 kickstarts: need Everything repo too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 11:41:31 -07:00
Kevin Fenzi
6b70553e22 kickstarts: add missing /os to path 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 11:34:33 -07:00
Kevin Fenzi
abeb65c40a kickstarts: fix transposed path in url 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 11:11:30 -07:00
Kevin Fenzi
40147157cb kickstarts: fix s390x url 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 10:56:16 -07:00
Kevin Fenzi
c5fea2e61c buildvm_s390x: actually use the new kickstart 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 10:43:54 -07:00
Kevin Fenzi
aaffab1d9d kickstarts: add a special s390x kickstart that uses infra directly 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 10:36:46 -07:00
Kevin Fenzi
846638ba2c postfix: fix some relayhosts that were still trying to use iad2 in rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 10:04:54 -07:00
Kevin Fenzi
c9cf6c1e38 buildvm-s390x: no bad hosts file 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 09:46:39 -07:00
Adam Williamson
38982adb55 Try and complete openQA prod and lab deployments to RDU3 
OK, I think we're ready to try this now...

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-02 09:42:35 -07:00
Kevin Fenzi
8c770773bd buildvm-s390x: move to f42 and fix dns config 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 09:34:33 -07:00
Kevin Fenzi
132ab49c72 dns: drop rdu3 and s390x networks from the iad2 view 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 09:04:07 -07:00
Adam Williamson
6606be7010 openqa tap: tell os-autoinst-openvswitch to use the right bridge 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-02 08:37:35 -07:00
Adam Williamson
e9ab8f359d Put openqa_lab_workers in rdu3_production too 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-02 08:28:20 -07:00
Kevin Fenzi
d204be1d72 inventory: clean up runroot and osbuild groups for rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-02 07:55:01 -07:00
Michal Konecny
f020dbead1 [firmitas] Change the oc binary location 
/root/bin/oc doesn't exist, let's change it to just oc as in other
playbooks.

I also don't understand why firmitas deployment is completely different
than rest of our openshift applications.
 2025-07-02 16:02:14 +02:00
David Kirwan
94baab8525 forgejo: fix filename for oadp template secret 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-07-02 14:25:34 +01:00
David Kirwan
a41a2a6b9e forgejo; comment out secret creation 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-07-02 14:15:45 +01:00
David Kirwan
405861d802 forgejo: rename template of oadp secret file 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-07-02 14:07:13 +01:00
David Kirwan
5210e9b9b9 forgejo: fixing linting errors in dataapplication 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-07-02 14:00:13 +01:00
David Kirwan
804abcdfff forgejo: removed tagging entry in dataprotectionapplication config 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-07-02 13:54:05 +01:00
Aurélien Bompard
ea5784a05e Fix zodbot-announce-commits 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-02 13:04:38 +02:00
Aurélien Bompard
e9a7756ab5 mirrormanager: fix the supplementalgroups 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-02 13:04:38 +02:00
Aurélien Bompard
7e65c9cff6 Remove proxy04 and proxy12 from mirrorlist_proxies, they are unreachable 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-02 13:04:38 +02:00
Miroslav Suchý
a2b5388be3 bump up numbers of reserved instances for copr builders 2025-07-02 11:54:44 +02:00
Aurélien Bompard
a8ee75153d MirrorManager: remove the iad2 proxies from the mirrorlist_proxies group 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-02 09:11:24 +02:00
Aurélien Bompard
6c44a3d62e Fix conditional 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-02 09:05:38 +02:00
Samyak Jain
081a6d30d4 [fedoal] Update ImageStreamTag to python3.6-ubi8 to fix the deployment issue 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-07-02 12:04:59 +05:30
Samyak Jain
b0d5256c1b [fedoal] Update ImageStreamTag to python3.9-ubi8 to fix the deployment issue 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-07-02 10:18:25 +05:30
Kevin Fenzi
0b9c751c8a kojipkgs: mount ostree nfs volumes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-01 21:33:59 -07:00
Adam Williamson
69c9099615 openqa/worker tap: 'nogroup' is no more, must use 'nobody' 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-01 17:40:25 -07:00