WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-07-16 11:40:28 +08:00
Code Issues Packages Projects Releases Wiki Activity
15,648 Commits 9 Branches 0 Tags
074f018c198f736f4cf034ea4e46dfe9224f3ea1
Commit Graph

3550 Commits

Author SHA1 Message Date
Adam Miller
090c85d868 set osbs to use krb5 for koji auth instead of ssl certs 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-23 21:36:59 +00:00
Patrick Uiterwijk
c9b0592bff Make the osbs keytab go to the nodes 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 21:01:35 +00:00
Kevin Fenzi
fb191cb0d5 Drop common_scripts task 2016-11-23 17:56:02 +00:00
Patrick Uiterwijk
dcc0030b13 Deploy keytab after master is provisioned 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 17:30:21 +00:00
Patrick Uiterwijk
c585ca7873 Keytabs owned by root 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 17:26:12 +00:00
Patrick Uiterwijk
56813c3f5c These are roles 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 17:24:21 +00:00
Patrick Uiterwijk
a541bf05df Give keytabs to OSBS cluster for koji 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 17:23:41 +00:00
Adam Williamson
2e09ca2d00 turn 'filterlist' into 'imagelist', using productmd 
This adopts https://pagure.io/quick-fedora-mirror/pull-request/27
and adapts to it, so we get `imagelist` files rather than
`filterlist` files (see recent commits for this). The rationale
is more fully explained in that PR (and in PR #26 also) - on
further inspection it turns out that we have to filter out an
awful lot of extensions to create small filterlists for all
three modules, and I'm worried that other file extensions may
appear in the future and cause the filterlists to suddenly get
bigger again. Instead, we have create-filelist use the productmd
constant that defines valid image formats, and only include files
that match those formats in the list. The downside of this
approach is we have to ensure productmd on all the systems that
run `create-filelist` is kept up to date if the list of valid
image formats changes.
 2016-11-23 09:21:45 -08:00
Patrick Uiterwijk
49dd063d22 Issue HTTP cert for pkgs 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 16:01:22 +00:00
Patrick Uiterwijk
29ecff4c36 Bodhi frontends also need access to koji, so give them keytabs too 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 15:05:51 +00:00
Patrick Uiterwijk
5393398816 Use existing bodhi.fp.o dns entry 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 14:54:57 +00:00
Patrick Uiterwijk
940076e8d4 Create a shared keytab for both backends 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 14:50:11 +00:00
Patrick Uiterwijk
338ed07bc1 Generate bodhi/ service keytabs 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 14:47:45 +00:00
Kevin Fenzi
dda5584a35 release day commit: readd prerelease redirect, add cloud to atomic redirect, add latest cloud image redirects, setup alt site for websites 2016-11-22 12:41:54 +00:00
Kevin Fenzi
77884fb982 adjust regex here to handle lang hopefully 2016-11-21 18:14:53 +00:00
Kevin Fenzi
40ce0076db add cloud to atomic download redirect for stg 2016-11-21 18:06:33 +00:00
Kevin Fenzi
fecc569a72 add cloud to atomic redirect in staging 2016-11-21 17:58:08 +00:00
Kevin Fenzi
50932cb3ac set prerelease redirect in staging and comment removing it for tomorrow in both prod and stg 2016-11-21 17:47:18 +00:00
Ricky Elrod
c85d395719 prepare modernpaste01.phx2 
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
 2016-11-21 14:00:27 +00:00
Stephen Smoogen
18eb0897ea remove dell-fx boxes from build group. remove dell-fx boxes from virthost group 2016-11-14 22:56:50 +00:00
Adam Miller
f5f67dcc6b Revert "testing registry uri in staging OSBS" 
This reverts commit ef6ad2cf1e.
 2016-11-14 18:17:28 +00:00
Kevin Fenzi
402f919bb3 do not install the pagure on pkgs02.stg 2016-11-11 22:06:18 +00:00
Adam Miller
82a9a2e925 fix fedora dnsmasq config path for osbs nodes 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-11 21:46:21 +00:00
Adam Miller
ef6ad2cf1e testing registry uri in staging OSBS 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-11 21:26:59 +00:00
Kevin Fenzi
f8ee75bb7b Add www.getfedora.org in as a server alias. 2016-11-11 20:08:20 +00:00
Adam Miller
059337652b apply fixes from Patrick for OSBS node dnsmasq and proxy iptables 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-08 23:38:25 +00:00
Adam Miller
1686f64886 add systemctl daemon-reload handler for osbs docker unit 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-07 22:36:25 +00:00
Adam Miller
94abf19917 add handler to restart docker service when firewall rules are changed 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-07 21:30:10 +00:00
Kevin Fenzi
68964a2f57 osbs-nodes-stg is handled by osbs-cluster playbook now 2016-11-07 20:52:25 +00:00
Adam Miller
c2334b450c fix missing whitespace typo in osbs-cluster 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-07 20:40:26 +00:00
Adam Miller
fbe0181672 docker bridge interface firewall rules for osbs overlay cluster network 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-07 20:39:03 +00:00
Adam Miller
066000e23b add osbs old build cleanup for openshift cluster 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-07 20:26:17 +00:00
Kevin Fenzi
ad0fbf4b84 semi colin is no longer used for host/group seperator. Only use : 2016-11-04 18:27:42 +00:00
Peter Robinson
cd7007a091 builders: run keytab/service after kojid is installed because it needs /etc/kojid/ to be there 2016-11-03 19:03:17 +00:00
Patrick Uiterwijk
acd9f3ef62 Allow specifying krb_builder to setup a builder as using krb 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-03 12:58:24 +00:00
Adam Miller
9700600909 remove un-needed debug from osbs-cluster 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-01 16:32:40 +00:00
Kevin Fenzi
b1a2d105c9 In ansible 2.2 always_run is depreciated. Switch to check_mode. 2016-11-01 16:29:49 +00:00
Adam Miller
1fe7e9264d only refresh image streams on the osbs master 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-01 16:04:53 +00:00
Adam Miller
5078474ca2 use git module version (not refspec) in ansible-ansible-openshift-ansible 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-01 13:34:59 +00:00
Pierre-Yves Chibon
aa744918ca While mentioned in the dependencies let's be explicit about git/checks 2016-11-01 09:32:22 +01:00
Adam Miller
924fb9c132 set osbs-control hosts to use ansible pipelining 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-10-31 22:13:16 +00:00
Adam Miller
7ec9a81c73 update openshift-ansible refspec to latest 3.3.x release 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-10-31 22:02:52 +00:00
Adam Miller
ceb6aa2fb4 make sure docker-storage-config conf is in place before openshift deploy 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-10-31 20:45:09 +00:00
Patrick Uiterwijk
0ef1c750f0 This is broken 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-31 20:27:07 +00:00
Patrick Uiterwijk
e5bcc58dc2 Temporarily disable keytab on nocs until fixed 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-31 20:21:43 +00:00
Adam Miller
da51f9bf6b don't need port 8443 for builder_openshift_url in scale-out, it's proxied to 443 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-10-31 16:20:43 +00:00
Adam Miller
2ae2aadfad add a handler to restart NM if needed in osbs cluster nodes 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-10-31 15:35:38 +00:00
Adam Miller
08df692f1d enable NM on osbs-cluster nodes for cluster dns inside overlay network 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-10-31 15:32:41 +00:00
Ralph Bean
a88873dc33 Added a script to create staging modules when requested. 
For https://pagure.io/fedora-infrastructure/issue/5543
 2016-10-31 14:08:06 +00:00
Patrick Uiterwijk
3ebca8f57e Create keytab for koschei/host 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-31 09:08:14 +00:00