Commit Graph

15 Commits

Author SHA1 Message Date
Pavel Raiskup
43b8ee52d8 copr-hypervisor: try to go back with iptables
VMs fail to boot for some reason, and per recent #copr Matrix discussion
this might be the thing.
2025-04-28 18:51:38 +02:00
Pavel Raiskup
1a0e17f586 copr-hypervisors: retry IPA with 'vpn: true' 2024-02-13 17:09:10 +01:00
Pavel Raiskup
02186b57fa copr-hypervisor: disable ipa/client for now
It seems that the rdu-cc boxes do not have access to ipa servers.
2024-02-13 16:47:41 +01:00
Pavel Raiskup
1c2b21cfb6 copr/hypervisor: add missing variable for ipa/client to work 2024-02-13 06:45:13 +01:00
Pavel Raiskup
9fc7f71ea3 copr-hypervisor: provide the missing ipa/client vars 2024-02-13 00:00:48 +01:00
Pavel Raiskup
c5b8752b26 copr-hypervisor: give the copr team members sudo access 2024-02-12 23:44:07 +01:00
Pavel Raiskup
511b1999c2 copr-hypervisor: don't operate with main.ini
The commit a12c6d9396 wasn't enough, there
are other undefined variables.
2023-08-22 10:22:10 +02:00
Pavel Raiskup
a12c6d9396 copr-hypervisor: fix playbook failure 2023-08-22 09:20:49 +02:00
Pavel Raiskup
2667ac065f inventory/copr: drop unused hosts/vars
The non-aws variant is not used for a looong time.  It just confuses
contributors now.  The stg is not used either.
2022-12-04 15:02:29 +01:00
Kevin Fenzi
580cd252c5 Inventory group/host variables: Sort yaml
This was done using yq (
https://mikefarah.gitbook.io/yq/operators/sort-keys )

Doing things this way makes it much easier to see if a variable is set
in a file or if two hosts differ in what variables they set. Hopefully
we can keep things sorted moving forward.

Basically this means just sort a-z anything you add to any host or group
vaiable and it will be in the right place.

Additionally, this enforces 'normal' intent rules for all the variable
files which we should also try and obey. 2 spaces for first level, 3 for
next, etc. When in doubt you can run yq on it.

This should cause NO actual vairable changes, it's all just readability
fixing for humans, ansible parses it exactly the same.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-11-16 13:27:57 -08:00
Pavel Raiskup
b07be9977e copr-hv: undefined variables, #3 2021-05-10 00:38:02 +02:00
Stephen Smoogen
fd7fa6e915 remove duplicate vpn:. this is not the reason that copr01 died but it will clean out errors when running ansible-playbook 2021-04-28 12:48:01 -04:00
Pavel Raiskup
8ebff52f89 copr-hv: allow @sysadmin-copr to ssh as 'copr', not root 2021-04-23 14:31:47 +02:00
Pavel Raiskup
e78f4671e2 copr-hv: allow root-ssh for copr admins 2021-04-23 14:27:48 +02:00
Kevin Fenzi
8a59695693 Add maintainer_test and copr vmhosts to vpn
We need to add these hosts to the vpn to use ipa for auth on them.
They are in the 192.168.100 network, which is the 'more restricted'
subnet of vpn. After the freeze we will probibly want to lock this down
more with a rule on all hosts except ipa* to reject everything from
them. In the mean time the firewall rules blocking most things should be
ok for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-04-16 11:38:26 -07:00