WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-03 08:00:06 +08:00
Code Issues Packages Projects Releases Wiki Activity
37,299 Commits 9 Branches 0 Tags
42e930e97f22ca75a3e7fbbf6658d8d5efe27f2e
Commit Graph

876 Commits

Author SHA1 Message Date
Mark O Brien
2115b4101c proxy routes for ocp4 stg.release-monitoring.org 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-07 10:31:00 +00:00
Kevin Fenzi
a087bf17f3 proxies/reversproxy: set some more load balancers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 17:05:26 -07:00
Kevin Fenzi
2e2035011c proxies / reverseproxypass: missed one balancer 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 15:36:41 -07:00
Kevin Fenzi
42bc4ea41a proxies / reverseproxy: try just always setting balancer_members and dropping the set facts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 11:47:17 -07:00
Kevin Fenzi
bf979b32ba proxies / reverseproxypass: just set balancer_members for ocp3 hosts for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 10:26:09 -07:00
Kevin Fenzi
2ce1199ae8 proxies / reverseproxypass: try setting this 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-05 09:55:57 -07:00
Kevin Fenzi
07385d35ed proxies: drop old totpcgi provision 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-04 21:40:17 -07:00
Kevin Fenzi
52a8936914 proxies: rework reversepassproxy and mark all ocp4 / ocp3 apps 
The ocp3 cluster is reachable/available via the vpn, so any proxy can
reach it.

The ocp4 cluster is (at least for now) only reachable/available from the
iad2 proxies (proxy01/proxy10).

There's a firefox bug that causes it to reuse h2 connections, and in
some cases try and request something of a non iad2 proxy that it can't
reach. To work around this in those cases we need to send a 421 back to
the client so it doesn't do that.

This moves that logic into the template so all ocp4: true hosts do this
by default. Also, we default the balancer nodes so we only have to
change them in one place if we remove/add a compute node.

Finally, we mark all the ocp3 apps with 'ocp4: false' so we know what
they are and can move them more easily.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-03 13:14:28 -07:00
Kevin Fenzi
633ce0f3ff proxies / reverseproxy: also set ipsilon-project to staging only here for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 18:21:22 -07:00
Kevin Fenzi
aab01df96d proxies: set ipsilon-project to just staging for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 17:39:02 -07:00
Kevin Fenzi
44d7104a7d proxies: websites: add a cert_name to ipsilon-project.org 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-01 15:42:57 -07:00
Aurélien Bompard
848170ce72 Too early for certbot, we need to update the DNS first 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-28 10:05:13 +02:00
Aurélien Bompard
bb9f43dde1 Setup the proxies for the ipsilon website 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-27 21:28:43 +02:00
Mark O Brien
5d5b7776d4 add tags for mirrors.centos.org 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-05-16 15:37:41 +01:00
Aurélien Bompard
b57ec0f90a Migrate FASJSON to OCP4 in prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-16 13:22:27 +02:00
Aurélien Bompard
6c6792a231 Deploy the Noggin update to prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-16 10:34:09 +02:00
Mark O Brien
90d6a7be09 add not staging to prod proxy block for coroes-cincinnati 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-05-13 11:54:36 +01:00
Mark O Brien
9336a3ce4e add proxy blocks for staging coroes-cincinnati 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-05-13 11:49:24 +01:00
Mark O Brien
f4f54f8809 use different nodes for staging updates-coroes-cincinnati 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-05-13 11:25:34 +01:00
Mark O Brien
415244f7e6 update routes for the rest of coreos-cincinnati to ocp4 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-05-13 10:55:02 +01:00
Mark O Brien
b250adcce2 update routes for coreos-cincinnati to ocp4 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-05-13 10:29:50 +01:00
Aurélien Bompard
5cbf46d3b4 Move Noggin to OCP4 on staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-13 11:03:24 +02:00
Kevin Fenzi
f4484019c8 proxy / stg: make sure zabbix uses stg website in stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-05 17:23:11 -07:00
Aurélien Bompard
c1c5ef42fd Move FASJSON to OCP4 on staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-05 11:56:45 +02:00
Mark O Brien
0729bce300 update certs for ocp3 stg and prod and ocp4 stg 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-04-28 09:54:41 +00:00
Leonardo Rossetti
d36793f68b move resultsdb /web to / 2022-04-27 17:52:50 -03:00
Leonardo Rossetti
ae51108229 remove resultsdb api from reverse proxy 2022-04-27 17:52:29 -03:00
Kevin Fenzi
666caebe25 buildvm / staging: s390x staging builder is z/vm 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-04-26 17:09:19 -07:00
Kevin Fenzi
508665d3f8 proxies / staging: adjust more for resultsdb 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-04-26 16:12:38 -07:00
Kevin Fenzi
97659b755b resultsdb / staging: point stg proxies to ocp4 resultsdb 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-04-26 09:43:20 -07:00
David Kirwan
577b69a525 asknot: add ocp4 var to whatcanidoforfedora role 
Signed-off-by: Prakash Mishra <prakashmishra1598@gmail.com>
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2022-04-15 12:48:40 +01:00
David Kirwan
73db76bc1a asknot: added ocp4 flag to whatcanidoforfedora deploy role 
Signed-off-by: Prakash Mishra <prakashmishra1598@gmail.com>
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2022-04-15 12:28:01 +01:00
David Kirwan
46b773c87a asknot: deploying whatcanidoforfedora.org to ocp4 cluster 
Signed-off-by: Prakash Mishra <prakashmishra1598@gmail.com>
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2022-04-15 10:10:01 +01:00
Aurélien Bompard
0c9619a8a9 Move Bodhi to OCP4 on staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-04-14 10:51:32 +02:00
Kevin Fenzi
edf1010bc0 calendar: fix url for fedocal in apps and redirect for old calendars 
fedocal moved to calendar.fedoraproject.org, so use that in apps.
Also some links to the old admin.fedoraproject.org/calendar/whatever
still exist, so redirect those to calendar.fedoraproject.org/whatever

Fixes ticket 10616

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-04-04 10:47:15 -07:00
Francois Andrieu
d6ef9ec6e2 docs: enable gzip compression 2022-04-03 17:58:58 +00:00
Mark O Brien
96b0d69ad5 proxies: update wildcard to 2022 for stg in more places 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-03-31 10:53:35 +01:00
Mark O Brien
8aed865328 proxies: update wildcard to 2022 for stg 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-03-31 10:47:24 +01:00
Mark O Brien
9237239faf proxies: add tag for fasjon website config 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-03-31 10:27:50 +01:00
Rick Elrod
36f8cca7e5 Revert "Revert "Revert "Revert "Revert "Revert "Disable prerelease redirects"""""" 
This reverts commit fec1dba8e5.
 2022-03-29 07:54:01 -05:00
Mark O Brien
4a8f590a3c proxies: correct cert name for 2022 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-03-16 14:34:22 +00:00
Kevin Fenzi
2afcc62cc6 proxies: update *.id.fedoraproject.org wildcard to 2022 version 
The old 2020 cert expires on 2022-03-07 which is only 5 days from now.
This moves it to a new 2022 cert that lasts 1 year.
This will need the proxies playbook run after it's pushed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-03-03 22:17:55 +00:00
Kevin Fenzi
e2f4b0dfa2 proxies / copr: re-add copr site so we update the cert on it next time. pushing this during freeze as it is an outage of copr stuff 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-03-02 14:55:14 -08:00
Kevin Fenzi
c7537a7bb9 staging: move to new wildcard stg cert 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-03-01 14:21:08 -08:00
Kevin Fenzi
1e712cdc30 Revert "Revert "wildcard-2022.fedoraproject.org cert"" 
This reverts commit 4430178b29.

It's time to put this back before the cert expires and before we go into
Beta freeze. Hopefully the odd issue with armv7 qemu guests having a
time behind real time is not still happening.
 2022-02-21 10:19:17 -08:00
Mark O Brien
2ebf5c4a44 ocp: update wildcard cert to 2022 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-02-17 17:38:00 +00:00
Silvie Chlupova
48d5523dc5 copr: remove copr.stg.fedoraproject.org, we don't use it. 
This is an old initiative, we wanted to have two frontend instances,
but we never used it.
 2022-02-10 14:36:58 +01:00
František Zatloukal
fbcf6c40c5 Blockerbugs: SPlit proxy configuration for stg and prod 2022-02-08 12:33:46 +01:00
Mark O Brien
adc33f38f4 blockerbugs: use loop for balancer members 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-02-08 11:27:56 +00:00
František Zatloukal
fdec077685 Blockerbugs: adjust proxy for prod on ocp 2022-02-08 12:18:43 +01:00