WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-05 10:10:08 +08:00
Code Issues Packages Projects Releases Wiki Activity
41,474 Commits 9 Branches 0 Tags
289bda56985f9cf20ff56b091e367a3e94de24ff
Commit Graph

74 Commits

Author SHA1 Message Date
Stephen Smoogen
432a3a497b Go through and remove entries for EL6 and EL7 
Using `git grep el6` and `git grep el7` and variants like EL-7 or
el-7, I found various entries and files which were no longer needed
with the current ansible. I updated text or tests to later versions of
RHEL as needed.

found entries for the fedora ami's for the original cloud and removed
those entries also.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2024-07-03 22:20:30 +00:00
Kevin Fenzi
c0eba5712b openvpn /client: drop another unneeded conditional 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-16 14:25:17 -07:00
Kevin Fenzi
519b756751 openvpn / client: drop another unneeded conditional 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-16 14:20:19 -07:00
Kevin Fenzi
9403ed2309 openvpn / client: drop tons of old cruft for el6 and old openvpn 
We had a bunch of old el6 conditionals in here, and we have 0 el6
machines. We also now have some CentOS instances, so we shouldn't check
for RedHat or Fedora anymore. Also, everything is using the newer
openvpn now so no need to make sure the old one is stopped.
This should not affect the vast majority of hosts, but it should allow
the el7/el8-test instances vpns to actually work.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-16 14:09:33 -07:00
Stephen Smoogen
32552ec77e fix some entries pointing to bastion02 to bastion-iad 2020-06-11 14:10:04 -04:00
Kevin Fenzi
d5afca0080 iad2: drop conditionals, just connect to gateway 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-01 09:48:07 -07:00
Kevin Fenzi
508353cc74 openvpn/client: fix all non phx2 openvpn clients to have a remote again 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-27 09:18:12 -07:00
Kevin Fenzi
998a7beb31 iad2: openvpn/client: point all the iad2 instances to use the iad2 bastion 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-05-18 13:33:12 -07:00
Kevin Fenzi
81fb4582e7 ansible: change when conditions to use == instead of is when checking strings. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Karsten Hopp
c9ed62ac32 update ansible_distribution_major_version conditionals 
Signed-off-by: Karsten Hopp <karsten@redhat.com>
 2020-04-24 21:34:10 +02:00
Karsten Hopp
60c2d50072 openvpn: dnf -> package, with_item changes 2019-06-11 15:00:23 +00:00
Kevin Fenzi
bcc42fad9c Add back a client.conf for rhel6 hosts (fas servers) 2018-09-29 18:28:39 +00:00
Kevin Fenzi
514d2b75ef also masters get messed up by this 2018-09-27 23:10:46 +00:00
Patrick Uiterwijk
325155810b Actually use the ansible hostname 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-18 05:51:46 +02:00
Patrick Uiterwijk
8ad630412f Make OpenVPN use tun1 for os-node's 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-09-18 05:49:15 +02:00
Patrick Uiterwijk
64f17dd5f7 Also fix paths for el6 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-08-17 04:55:48 +00:00
Patrick Uiterwijk
78ae75ac8a Fix client cert paths 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-08-17 04:39:50 +00:00
Patrick Uiterwijk
2948514084 Use the variable, not the string 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-01-02 02:14:00 +00:00
Patrick Uiterwijk
543acabdb1 Try to ensure that haproxy and varnish get started after VPN comes up on proxies 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-01-02 02:11:43 +00:00
Kevin Fenzi
fc484f796c drop some old openvpn stuff 2017-11-25 21:44:59 +00:00
Patrick Uiterwijk
65a6ad06f2 This service does not exist on newly installed boxes 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-21 23:07:56 +00:00
Patrick Uiterwijk
936e8b261a yum accepted pkg=, package calls it name= 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2017-10-09 00:38:26 +02:00
Patrick Uiterwijk
adcbf72f03 Packageize this, packageize that, packageize the world 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-10-08 22:25:52 +00:00
Kevin Fenzi
881735b5eb another corner case since f24 has systemd and el6 does not 2017-05-14 23:45:27 +00:00
Kevin Fenzi
5055c83e85 and try and handle f24 here too 2017-05-14 23:39:39 +00:00
Kevin Fenzi
636d7623ad try and use correct logic 2017-05-14 23:36:21 +00:00
Kevin Fenzi
52318bbc49 try and handle cases for f24 not being updated to the new setup either 2017-05-14 23:26:45 +00:00
Kevin Fenzi
50c070a79b fix version here too 2017-05-14 21:56:00 +00:00
Kevin Fenzi
714506a905 handle poor old rhel6 2017-05-14 21:51:47 +00:00
Patrick Uiterwijk
4cc1b78ff3 Check the certificate key usage 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-05-14 20:57:39 +00:00
Kevin Fenzi
6005665db7 also need cert and key under client 2017-05-14 20:55:45 +00:00
Kevin Fenzi
179cc4dd54 switch openvpn to use seperate service units and directories for client and server, hopefully in a mostly transparent way that will not cause much outage 2017-05-14 19:01:17 +00:00
Kevin Fenzi
8a6e51a9a6 change state=running to start=started as the old one is going away in ansible 2.7 2017-04-13 01:37:21 +00:00
Kevin Fenzi
215c38198e Disable openvpn client handler for now 2016-08-31 18:57:02 +00:00
Kevin Fenzi
12ed1dd6f7 Update out vpn configs for better encryption. 2016-08-31 18:50:14 +00:00
Kevin Fenzi
1c6e9a11f4 Another pile of trailing whitespace fixes 2016-08-08 19:42:36 +00:00
Tim Flink
bf03de72d0 fixing logic for openvpn package install w/dnf 2015-11-26 01:27:59 +00:00
Pierre-Yves Chibon
1c183896c8 Install the openvpn client package with dnf on F22+ 2015-11-17 15:29:29 +01:00
Patrick Uiterwijk
fe6f551049 Move fix-routes.sh to openvpn base and run it on restart 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-11-04 23:09:43 +00:00
Patrick Uiterwijk
b2b07e8bcd Running the script doesnt work yet. But we still want the script. 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-10-23 03:11:02 +00:00
Patrick Uiterwijk
50511a65e7 Make fix-routes not terminate with status 2 if it fixed it 
This will make openvpn think something went wrong and terminate the connection.
I did this to make it easily visible when running with ansible, but in this case
it messes things up.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-10-23 02:41:01 +00:00
Patrick Uiterwijk
d5bdc65887 Add script to OpenVPN for VPN route fixing 
This will make sure that always after a start/restart the
VPN routes are created

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-10-23 02:15:43 +00:00
Patrick Uiterwijk
b1db3bafd8 Disable persist-tun for openvpn 
This should solve the issue where RHEL7 machines that get a network
hiccup need an OpenVPN restart to restore their routes.

The code is broken in the current upstream OpenVPN release, such that
it does tear down some of the routes during a ping-restart (when the
connection is dropped due to network hiccups), but the reconnection
code does not restore the routes.
I am working on an upstream patch to fix this, but in the meantime
disabling persist-tun will make sure that OpenVPN does the entire
initialization upon reconnection, which makes sure that all routes
are created.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2015-10-21 18:26:32 +00:00
Kevin Fenzi
2873cdd427 Move all puppet_private stuff to ansible private so we can stop using puppet private. 2015-09-25 18:16:23 +00:00
Kevin Fenzi
275f4b5203 Change all instances of ansible_distribution_major_version to filter to int for comparisons. 2015-05-27 22:27:39 +00:00
Kevin Fenzi
05e35e953d This is now fixed in a systemd update in rhel7.1 so drop the workaround 2015-04-22 14:40:57 +00:00
Kevin Fenzi
fb1c3a6eeb Work around rhel 7.1 systemd template bug: https://bugzilla.redhat.com/show_bug.cgi?id=1206007 2015-03-26 13:41:48 +00:00
Kevin Fenzi
10b316d114 Does this need quotes? 2014-12-15 19:40:37 +00:00
Kevin Fenzi
1cd3cb534b Try this one. 2014-12-15 19:39:30 +00:00
Kevin Fenzi
aabdcd15d6 Split this out to see if we can debug it some. 2014-12-15 19:37:22 +00:00