WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-01 14:02:12 +08:00
Code Issues Packages Projects Releases Wiki Activity
45,104 Commits 9 Branches 0 Tags
37e2d34eb6cd693ff293ea26e1a549be395efbec
Commit Graph

10193 Commits

Author SHA1 Message Date
Adam Williamson
37e2d34eb6 proxies: block IP attempting SQL injections on openQA (prod) 
My staging effort seems to have worked, so let's do prod too.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-12-30 08:58:11 -08:00
Adam Williamson
3e8c446877 proxies: block IP attempting SQL injections on openQA 
I hope I got this right. This IP is trying Little Bobby Tables
attacks on openQA and it's making the servers crash.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-12-30 08:46:28 -08:00
James Antill
c127602949 Remove rest of f41-test. 
Signed-off-by: James Antill <james@and.org>
 2025-12-26 12:46:03 -05:00
James Antill
efa0061ca5 Remove f41-test from inventory. 
Signed-off-by: James Antill <james@and.org>
 2025-12-25 08:35:47 -05:00
Greg Sutcliffe
9fae8c7d2d Zabbix: First try of the CMDB-in-Zabbix-Inventory idea (#12817) 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-12-22 15:09:07 +00:00
Pavel Raiskup
cd95aa0095 copr-be: try to use x86 copr04 2025-12-20 15:54:12 +01:00
James Antill
c68ec66f3e Move prox01.stg to F43. 
Signed-off-by: James Antill <james@and.org>
 2025-12-19 14:39:12 -05:00
Greg Sutcliffe
149047b50d Copr: fix IP hostvars on vmhost-x86-copr04 - again 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-12-19 11:51:57 +00:00
Greg Sutcliffe
f639e26c12 Copr: fix IP hostvars on vmhost-x86-copr04 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-12-19 11:43:49 +00:00
David Kirwan
1a18ff41fd communishift: mark project communishift-fedora-coreos-ai-helpers do not 
clean up.

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-12-18 16:09:42 +00:00
Kevin Fenzi
c4f5d8ea2e proxies / proxies_stg: fix comment about max workers and set to 3200 both places 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-14 09:45:38 -08:00
Kevin Fenzi
e6e014780d proxies: sync up prod proxies mem/cpus and add more in stg 
We manually added cpus and memory in the past to 01/10/101/110, so
update ansible so it matches whats deployed now.

On staging, 2 cpus isn't going to cut it anymore, so just bump them up
to be the same as prod.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-13 12:34:17 -08:00
Kevin Fenzi
6ceed5e1b9 smtp-auth-iso01: add ipv6 address 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-12 15:57:15 -08:00
Kevin Fenzi
6789314251 smtp-mm-iso01: add ipv6 address 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-12 15:54:15 -08:00
Kevin Fenzi
5acda7f784 proxy03: set dc to not be rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-12 15:50:08 -08:00
Kevin Fenzi
52dffb8df4 proxy03: fix dns search order 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-12 15:05:49 -08:00
Kevin Fenzi
182104ec0f proxy03: use mac address from ansible 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-12 14:56:25 -08:00
Kevin Fenzi
e1524d1fd0 smtp-mm-iso01: use correct hostname in inventory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-12 14:20:16 -08:00
Kevin Fenzi
e8bd81d11d vmhost-x86-iso03: add to inventory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-12 13:58:12 -08:00
Kevin Fenzi
e7c35d4d2b vmhost-x86-iso02: update mac addresses 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-12 13:56:36 -08:00
Kevin Fenzi
16ce599474 vmhost-x86-iso02: add to inventory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-12 12:58:15 -08:00
Kevin Fenzi
a81f88f031 vmhost-x86-iso02: update mac addresses 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-12 12:55:07 -08:00
Kevin Fenzi
73c0c6214f proxy14: try and set it for a rdu3-iso datacenter 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-12 10:29:11 -08:00
Michal Konecny
9fb417b79a [proxy14] Fix typo in host_vars 
This caused ticketkey playbook to fail and all proxies started alerting
about old age of ticketkey.
 2025-12-12 10:52:14 +01:00
Kevin Fenzi
a3dbedb3e7 proxy14: adjust dns search path 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 21:06:44 -08:00
Kevin Fenzi
2d78574d7e smtp-mm-iso01 host vars to the correct name 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 18:57:07 -08:00
Kevin Fenzi
2ea32b924f proxies: update hostnames for proxy03/14 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 17:53:29 -08:00
Kevin Fenzi
117c334dae rename smtp-mm-cc-rdu01 to smtp-mm-iso01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 17:13:39 -08:00
Kevin Fenzi
0498dd6bd9 proxy03: correct vmhost 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 17:11:40 -08:00
Kevin Fenzi
3b3399c6d8 proxy03 and proxy14 adjustments for rdu3 move 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 16:30:02 -08:00
Kevin Fenzi
1f055f415b download-iso01: add missing network info 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 15:06:38 -08:00
Kevin Fenzi
9fdcd69f80 download-cc-rdu01 becomes download-iso01.rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 15:02:59 -08:00
Kevin Fenzi
af10d77d68 smtp-auth-iso01: use rdu3 domain in name 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 14:51:06 -08:00
Kevin Fenzi
8b85f0e197 vmhost-x86-iso04: add to inventory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 14:36:25 -08:00
Kevin Fenzi
b11f24402e vmhost-x86-iso04: fix mac addresses 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 14:31:49 -08:00
Kevin Fenzi
8ccc39cb7d smtp-auth: fix vmhost 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 14:26:47 -08:00
Kevin Fenzi
7d4c52b418 smtp-auth-iso01: provision in rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 14:24:14 -08:00
Kevin Fenzi
f1e7c95538 vmhost-x86-copr04: fix ipv6 address 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 12:51:36 -08:00
Kevin Fenzi
af85968a22 vmhost-p09-copr01: fix ipv6 config 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 12:51:00 -08:00
Kevin Fenzi
61866b9046 update rdu2-cc to rdu3 hardware 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 11:30:41 -08:00
Kevin Fenzi
48d97a929d proxies: increase max workers to 3200 
There's no log messages about it, but we have been seeing some odd
connection reset messages and collectd shows we are near the 2500 limit
we had.

So, bump this to 3200 (based on 8 cpus * 300 ).
If we need to bump this more, we probibly need to add cpus.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-11 10:21:27 -08:00
James Antill
5fe62a9b5f Fix typo for DNS search key. 
Signed-off-by: James Antill <james@and.org>
 2025-12-11 12:49:31 -05:00
Pavel Raiskup
e0f9b863d1 copr-be: boost the x86 power a bit more in AWS 
(we still don't have x86 hypervisors re-reacked)
 2025-12-11 08:37:11 +01:00
Kevin Fenzi
4b16351ce0 rdu2-cc to rdu3 dc move reorg 
move all the rdu2-cc machines to rdu3, reconfigure things.

We will want to fill in a bit more info and check each of these before
using them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-10 14:02:52 -08:00
Kevin Fenzi
b2edd04363 retrace03: set ipv6 correctly 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-10 12:23:12 -08:00
Kevin Fenzi
d8319efcb2 retrace03: use correct ip var 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-10 12:18:41 -08:00
Kevin Fenzi
c7ee62b09b retrace03: move to rdu3 and reconfigure 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-10 12:12:50 -08:00
Pavel Raiskup
50223282e7 copr-fe: deploy anubis 
Relates: https://pagure.io/fedora-infrastructure/issue/12971
Fixes: https://github.com/fedora-copr/copr/issues/4064

Co-authored-by: Jiri Kyjovsky <j1.kyjovsky@gmail.com>
 2025-12-10 16:01:04 +01:00
Greg Sutcliffe
222ecbf573 Zabbix: apply load macro to all copr hosts instead of just the backend 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-12-10 10:54:25 +00:00
Kevin Fenzi
144a8e55c4 proxy110: move to f43 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-12-09 16:16:49 -08:00