Commit Graph

4083 Commits

Author SHA1 Message Date
David Kirwan
765e619525 communishift: gitlabce
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-07-29 08:29:59 +01:00
Nils Philippsen
c901eae7ae rabbitmq: Fix typo making sudo groups ineffective
This amends commit dbbf94a411.

Signed-off-by: Nils Philippsen <nils@redhat.com>
2024-07-23 19:25:32 +02:00
Ryan Lerch
cebe9b9cb7 add communishift-forgejo project
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-07-23 08:50:26 +10:00
Kevin Fenzi
81a9f2ceaf bastion: add sysadmin-eln
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-22 07:54:37 -07:00
Adam Williamson
295c0ccb25 openqa: run aarch64 updates on prod too
Seems to be working fine on stg.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-07-19 17:22:59 -07:00
Adam Williamson
27ed0ce621 openqa: test running update tests on aarch64 on stg
We really ought to do this. Capacity and reliability are issues,
so I'm going to try it with a small set of core tests at first.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-07-19 09:59:51 -07:00
Kevin Fenzi
64c216b79d compose-eln01: not external
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-17 17:19:20 -07:00
Kevin Fenzi
33fe776dca compose-eln: add missing host/group vars
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-17 17:07:33 -07:00
Kevin Fenzi
33627c2ada bvmhost-a64s moving to buildhw
We have these 7 emags that were bvmhosts running 32bit arm builders.
Since we no longer need those, lets repurpose them as aarch64 buildhw.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-16 17:32:35 -07:00
Kevin Fenzi
34e1bb3e8d pagure: block some ips that are using too much resources
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-11 16:33:03 -07:00
Michal Konecny
2f1529f76e [mailman3] Disable sending e-mails on staging
This commit is setting both mailman and hyperkitty to devmode and doesn't allow
them to sent mails anywhere.

I tested that from web UI and using `mail` command on the machine.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-07-11 09:30:42 +02:00
Kevin Fenzi
99514bbad0 koji / staging: move hub and builders in staging to fedora 40
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-09 13:32:12 -07:00
Michal Konecny
14ee2219b6 [mailman3] Move the staging/prod vars to respective group_vars
This will make the mailman playbook much cleaner. Thanks @arrfab for the idea.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-07-04 10:11:05 +02:00
Adam Williamson
07f6d5967e Revert "Try new openQA scratch build out on lab"
This reverts commit b75517e07d. I
totally forgot I changed how we deploy scratch builds now. Sigh.
2024-07-03 20:42:25 -07:00
Adam Williamson
b75517e07d Try new openQA scratch build out on lab
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-07-03 18:48:45 -07:00
Stephen Smoogen
432a3a497b Go through and remove entries for EL6 and EL7
Using `git grep el6` and `git grep el7` and variants like EL-7 or
el-7, I found various entries and files which were no longer needed
with the current ansible. I updated text or tests to later versions of
RHEL as needed.

found entries for the fedora ami's for the original cloud and removed
those entries also.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
2024-07-03 22:20:30 +00:00
Michal Konecny
f1b6be6e9c [mailman3] Add more memory to staging instance
Mailman3 is a hungry beast, let's give her more food.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-07-03 11:09:07 +02:00
Kevin Fenzi
e838841868 mirrormanager: retire vm's now that it's moved to openshift
Lets retire these rhel7 vm's from ansible/running.
I will be saving off the disks and xml for all of the vm's, so in the
event we need to bring something back or look at something, we can do
so.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-01 13:44:04 -07:00
Michal Konecny
c609ecb432 Revert "Add IPs to blocked_ips"
This reverts commit d4ee518e5d.
2024-07-01 18:15:00 +02:00
Michal Konečný
d4ee518e5d Add IPs to blocked_ips
There are two IPs hammering pagure.io, so let's stop that.

Signed-off-by: Michal Konečný <michal.konecny@pacse.eu>
2024-07-01 09:29:01 +00:00
Michal Konecny
517d9b1426 [mailman3] Update the vars
Add the missing Fedora authenticator for OIDC and remove the 16Gb memory limit
as it's set in group_vars.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-06-27 17:30:20 +02:00
Kevin Fenzi
b1490df609 pagure.io: bump memory to handle load better
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-26 14:35:48 -07:00
Kevin Fenzi
71b7104525 communishift: add eventbot project
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-21 10:39:05 -07:00
Kevin Fenzi
cbf687a58f communishift: add metrics project
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-17 15:28:53 -07:00
Adam Williamson
0127f5397f openQA prod workers: disable updates-testing again
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-06-10 15:59:37 -07:00
Michal Konecny
06ed86e690 [mailman3] Migrate initial-data.json from mailman role
This JSON file contains authentication providers set up in mailman. This change
should allow it to be used in mailman3 role.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-05-30 16:15:54 +02:00
Kevin Fenzi
d366194a22 module-build-service (mbs): retire service
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.

Note that toddlers needs to be adjusted still, that will happen after
this.

Thanks for all the modules!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-22 13:38:53 -07:00
Kevin Fenzi
9dab52444b rabbitmq / staging: bump these all up to 8gb memory
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-17 08:32:47 -07:00
David Kirwan
66defc189e zabbix: attach monitoring template to rabbitmq
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-05-16 09:22:21 +01:00
Pedro Moura
3f5658481f raise lvm size for proxies stg
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2024-05-09 13:30:31 +00:00
Kevin Fenzi
006e32d664 badges (old rhel7 vm based one): retire
Since we moved badges into openshift, we no longer should need to have
any of the old rhel7 vm's around or the roles that were used on them
(these have been re-implemented in the openshift app role).

Thanks badges! You live on in openshift!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-06 11:32:28 -07:00
Kevin Fenzi
ced9b3cffd proxies: bump maxrequestworkers up to avoid filling up
This has been hitting us on a few proxies (14 and now 3).

There's no particular harm to increasing this, they seem to handle
things just fine.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-04 13:26:44 -07:00
Leo Puvilland
9c92be59b5 flatpak-cache: allow sysadmin-qa, sysadmin-openqa doesn't exist oops
Signed-off-by: Leo Puvilland <leo@craftcat.dev>
2024-05-04 17:41:04 +00:00
Kevin Fenzi
f5e74ac2ec proxies: just make them 100G
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-04 10:35:21 -07:00
Leo Puvilland
fca6a0390d enable and configure VM for flatpak-cache
Signed-off-by: Leo Puvilland <leo@craftcat.dev>
2024-05-03 18:52:33 +00:00
Kevin Fenzi
01a4cc7bcc Revert "signing: move to mtu 9000"
This reverts commit e9dcb46226.

Turns out autosign02 and sign-vault02 are both on 1G links, not 10G
as I thought. So, just keep them all on 1500 for now.
2024-04-28 09:39:46 -07:00
Kevin Fenzi
e9dcb46226 signing: move to mtu 9000
All our iad2 stuff is using jumbo frames, so move these also to that.
This might hopefully prevent weird connection lockups I am now seeing
with the new sigul.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-28 08:50:16 -07:00
Aurélien Bompard
894ba795f8 Factor the hostname of the datanommer server in staging and prod
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-04-25 17:08:58 +02:00
David Kirwan
81ffe56f4a zabbix: move https to http for proxies template
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-04-25 12:51:32 +01:00
David Kirwan
9d97299285 zabbix: template to handle external hosts
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-04-25 11:26:49 +01:00
Kevin Fenzi
3b2853b5d4 nagios / staging: fix staging vmhost mgmt
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-18 14:20:03 -07:00
Kevin Fenzi
838338e312 IAD2 datacenter changes
There were folks on site this week to rack new machines/pull old
machines, and unfortunately we don't really have much control over when
this happens based on our freeze, so I am just pushing this as part of
the 'do whats required to handle an outage'.

We did the following changes:

- removed old autosign01 (was out of service as we moved to autosign02 a
  while ago)

- removed vmhost-x86-08/09. We also want to migrate off 07 soon and
  remove it next visit. A new vmhost-x86-08 is installed to replace
  these 3.

- removed vmhost-x86-03/04.stg. Added new vmhost-x86-01.stg to replace
  them both.

- added a new kernel02 to replace kernel01 the next onsite trip.
  This machine still needs switch ports configured.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-18 12:53:13 -07:00
Kevin Fenzi
0d40c3e1bd koji: 56gb memory for prod hubs
Sometime in the past we manually bumped memory on these, but when I
reinstalled koji02 it got the lower limit set here in ansible.
So, move both of them to 56gb and hopefully fix koji02 falling over
under load.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-14 13:17:59 -07:00
Pavel Raiskup
660a436c50 Revert "copr-be: decrease the number of VMs"
The machine has 2CPU now.

This reverts commit 482371aa13.
2024-04-03 15:16:40 +02:00
Pavel Raiskup
482371aa13 copr-be: decrease the number of VMs
There's just one CPU for now:
https://pagure.io/fedora-infrastructure/issue/11755
2024-04-02 13:40:11 +02:00
Leo Puvilland
be00c5f65e Create communishift namespace for lrossett
Signed-off-by: Leo Puvilland <leo@craftcat.dev>
2024-04-02 00:59:14 +00:00
Kevin Fenzi
e037bf02f7 kerneltest: moved to OpenShift
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-01 17:41:06 -07:00
Kevin Fenzi
7aa571d30a ipa: 50G disks by default
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-29 10:35:01 -07:00
Kevin Fenzi
c84b99223c osbs: raise a glass for it's service
This removes osbs and allmost all it's associated playbooks and files.

It served long and well, but we no longer need it.
flatpaks are building with a koji-flatpak plugin.
base/minimal/toolbox containers are building with kiwi.
We aren't building any other containers right now, and we did they could
be added to kiwi.

This is the end of an era... I look with nostolga on
ansible-ansible-openshift-ansible (a role to setup ansible on a control
host and run it from our ansible).

Good bye osbs!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-28 12:52:07 -07:00
Pavel Raiskup
20d43f939f copr-pulp: setup ipv6 2024-03-13 21:26:45 +01:00