Ralph Bean
15a506191d
Remove erroneous host from stg haproxy config.
2017-09-25 18:31:05 +00:00
Ralph Bean
f8d4b1e0f0
Proxy configuration for ODCS in stg.
2017-09-25 18:01:11 +00:00
Patrick Uiterwijk
4005fd5929
Fix krb5 with failover
...
Seems like IPA 4.5.0 broke active/active failover of krb5 KDC.
While we wait on getting that fixed, let's set us up for active/passive failover on the HTTPD end.
Since we can't do active/passive for UDP (there's no checks there), let's just remove ipa02 for those.
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-09-15 22:53:35 +00:00
Kevin Fenzi
3ae95a6169
fix names
2017-08-22 19:49:20 +00:00
Kevin Fenzi
4047dc3228
move file for env name
2017-08-22 19:45:25 +00:00
Kevin Fenzi
9d330280ef
add prod os CA and make haproxy use it
2017-08-22 19:41:07 +00:00
Kevin Fenzi
fcf82e738c
drop 2 mirrorlists we do not need
2017-08-10 22:40:39 +00:00
Patrick Uiterwijk
5bd010cc68
Move to registry02/03 in production
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2017-08-04 00:22:01 +02:00
Ralph Bean
bf6db455d1
Try sticky haproxy sessions for pdc to share some of the load.
2017-08-01 17:27:12 +00:00
Patrick Uiterwijk
67939cfd7a
New OS certificate
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-06-29 15:17:47 +00:00
Kevin Fenzi
04e93913b4
update openshift ca from current install
2017-05-25 19:35:48 +00:00
Kevin Fenzi
eb1dd0ae0f
look, you can fix a error with 0s
2017-05-16 15:24:23 +00:00
Patrick Uiterwijk
f3b344d52f
We expect a 503
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-12 15:42:22 +00:00
Patrick Uiterwijk
02df22e6c2
Fix cert validation
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-12 15:37:09 +00:00
Patrick Uiterwijk
331a664f1e
Updatecert
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-12 15:03:41 +00:00
Patrick Uiterwijk
3fa5e3123b
Create app.os.fp.o
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-12 14:29:04 +00:00
Patrick Uiterwijk
2b365b3c32
Add the newest openshift cert
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-12 02:34:39 +00:00
Patrick Uiterwijk
4a5126fb84
os api is moved to 443
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-11 21:41:05 +00:00
Ricky Elrod
061cb575b4
happy, puiterwijk?
...
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org >
2017-05-11 19:58:14 +00:00
Ricky Elrod
bbe6c25b6f
try os-master proxy setup
...
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org >
2017-05-11 19:49:31 +00:00
Kevin Fenzi
31254f9775
kill paste0* instances
2017-04-11 19:42:45 +00:00
Ralph Bean
abdc3271d5
Re-enable pdc-web01 in staging only.
2017-04-07 12:47:07 +00:00
Ralph Bean
242067b390
Tell haproxy to use pdc-web02 instead of pdc-web01.
2017-04-06 17:54:14 +00:00
Kevin Fenzi
ac41432c7c
re-add 02
2017-04-05 23:08:35 +00:00
Kevin Fenzi
86307b7147
take kojipkgs02 back out
2017-04-05 22:56:07 +00:00
Kevin Fenzi
331fd4b512
ok, fingers crossed, lets put kojipkgs02 back in
2017-04-05 22:49:06 +00:00
Kevin Fenzi
fc0a6e176f
take kojipkgs02 out to test it with varnish
2017-04-05 21:55:21 +00:00
Kevin Fenzi
78106fe297
modernpaste02 only in prod
2017-03-04 19:34:08 +00:00
Kevin Fenzi
b5c4af2f26
add modernpaste02 to haproxy and varnish to cache paste static stuff
2017-03-04 19:32:54 +00:00
Kevin Fenzi
077cbc03d6
remove fedorahosted from nagios
2017-03-02 22:16:19 +00:00
Kevin Fenzi
e77bd253f6
add registery02 to haproxy
2017-03-02 01:26:23 +00:00
Ralph Bean
4a38cb21b6
Wire proxies up to mbs.fp.o.
2017-03-01 18:38:52 +00:00
Stephen Smoogen
ea5a7338cf
and we no longer need mirrorlist-ibiblio after rebuild
2017-02-22 20:29:36 +00:00
Ricky Elrod
954eac7bb1
lift stg conditional in haproxy
...
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org >
2017-02-15 21:19:35 +00:00
Kevin Fenzi
21c04b5f7a
it is a poor man that can only think of one way to spell a word
2017-02-13 21:02:09 +00:00
Kevin Fenzi
66d866ea3a
and switch haproxy to use mirrorlist-proxy group
2017-02-13 20:58:26 +00:00
Kevin Fenzi
077697ac19
move mirrorlist-host1plus to a backup only
2017-02-11 06:44:22 +00:00
Patrick Uiterwijk
839bc15371
Enable proxy05 local mirrorlist
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-02-09 22:47:41 +00:00
Patrick Uiterwijk
833f251ed7
Check local mirrorlist stuff very often
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-02-08 23:25:44 +00:00
Kevin Fenzi
74bcf7d2a9
fix mirrorlist-phx2 in haproxy
2017-02-08 21:18:57 +00:00
Kevin Fenzi
69e6e12825
lets add proxy02 local containers to haproxy
2017-02-08 21:14:55 +00:00
Patrick Uiterwijk
9fd58d90ad
Add a control socket to haproxy
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-02-02 15:23:07 +00:00
Ralph Bean
be699ca7d0
stg proxy configuration for mbs.
2017-02-01 12:36:25 +00:00
Kevin Fenzi
dc8b2cf293
make kojipkgs02 non backup
2017-01-20 00:12:07 +00:00
Kevin Fenzi
1553e84332
make kojipkgs02 a backup for now until we can sort the srpm doom
2017-01-18 00:11:55 +00:00
Kevin Fenzi
8b054eeed7
Ok, last one to try.
2017-01-17 23:23:58 +00:00
Kevin Fenzi
7f251f982a
ok, lets go back to this balancer
2017-01-17 22:29:27 +00:00
Kevin Fenzi
b3849bf68f
Load balance based on the appserver header.
2017-01-17 21:55:04 +00:00
Kevin Fenzi
6058f70de8
set this back to roundrobin
2017-01-17 02:58:17 +00:00
Kevin Fenzi
478cb60723
switch to balance kojipkgs on uri
2017-01-16 21:28:06 +00:00