WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-30 05:20:49 +08:00
Code Issues Packages Projects Releases Wiki Activity
43,401 Commits 9 Branches 0 Tags
7aa7553b84af5dc8efa78e9d8a4e50dde369052d
Commit Graph

4114 Commits

Author SHA1 Message Date
James Antill
a634122b7f postgresql-server: Fix db-datanommer02 typo. 
Signed-off-by: James Antill <james@and.org>
 2025-06-24 18:15:12 -04:00
James Antill
34a0144950 Add prod db03.rdu3.* to groups/mariadb-server.yml 
Signed-off-by: James Antill <james@and.org>
 2025-06-24 18:47:31 +00:00
James Antill
b4a9b84fec Add prod db*.rdu3.* to groups/postgresql-server.yml 
Signed-off-by: James Antill <james@and.org>
 2025-06-24 18:47:31 +00:00
Michal Konecny
39ca0fe099 [ipsilon] Add RDU3 centos machines 
To prevent removing RDU3 centos machines from HBAC rule let's add them
to task. For more info see https://pagure.io/fedora-infrastructure/issue/12514
 2025-06-24 08:11:51 +00:00
James Antill
cb326914b5 Add db03.stg.rdu3.* to groups/mariadb-server.yml 
Signed-off-by: James Antill <james@and.org>
 2025-06-24 01:58:01 +00:00
James Antill
a783db6a1c Add db*.stg.rdu3.* to groups/postgresql-server.yml 
Signed-off-by: James Antill <james@and.org>
 2025-06-24 01:58:01 +00:00
Kevin Fenzi
243687ab0e log01.rdu3: also mount nfs and setup other crons on log01.rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-22 09:13:26 -07:00
Kevin Fenzi
bb34f3506a nagios-rdu3: add website, proxy, vpn endpoint 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-20 20:48:07 -07:00
Kevin Fenzi
449385c8b0 nagios: move rdu3 hosts over to noc01.rdu3 
Also open firewalls to allow noc03.rdu3 to access them.
Also enable nagios_server on noc01.rdu3.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-20 20:29:24 -07:00
Kevin Fenzi
a1b905d8e4 virthost: drop these conditionals for nagios_client and collectd 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-20 19:47:10 -07:00
Greg Sutcliffe
f6209410a7 backup01.rdu3: add new host to rdu3 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-06-20 13:22:57 +01:00
Kevin Fenzi
a15935f6ac tang: setup tang for rdu3 virthosts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-19 15:16:36 -07:00
Kevin Fenzi
ae1a0c4800 buildvm-ppc64le-osbuild: drop these for now as they are not currently needed 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-19 09:57:26 -07:00
Kevin Fenzi
c3b66efa9f download/rdu3: also try nfs mounts in rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-16 14:16:23 -07:00
Kevin Fenzi
f9c8e842b7 download / rdu3: add rdu3 download servers 
This will allow us to test ro mounts from the rdu3 netapp.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-16 14:02:36 -07:00
Kevin Fenzi
f3b3dfb855 bodhi-backend: fix missing quote 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-11 10:43:11 -07:00
Kevin Fenzi
e5cef312a8 bodhi-backend01.rdu3: add bodhi-backend in rdu3 
This does not include actual bodhi role or nfs mounts yet.
It's mostly just to allow testing of new signing infra.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-11 09:04:49 -07:00
Kevin Fenzi
2cc8fabdbf virthost: no collectd client packages on rhel10 yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-30 20:06:07 -07:00
Kevin Fenzi
56c8dcc832 virthost: no zabbix client packages on rhel10 yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-30 19:56:43 -07:00
Kevin Fenzi
1052da754a virthost: no nagios client packages on rhel10 yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-30 19:49:57 -07:00
Kevin Fenzi
8f0ce956eb virthost: no rkhunter on rhel10 yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-30 19:43:30 -07:00
Kevin Fenzi
ec28dcbcb9 os-control: install unzip and tar as they are used later in playbooks 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-30 17:15:48 -07:00
Kevin Fenzi
76bda7e176 New kickstarts role 
Move kickstarts into ansible from the side repo they were in before.
Hopefully this will make it easier for people to contibute to them
and see what they are. All sensitive info here should be templated
out from the private repo.

note that before we merge/run this, we need to move the old repo
out of the way in the location we are syncing to.
We can gradually move other kickstarts out of the old repo into this
role as we need them to build rdu3 out.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-28 21:57:12 +00:00
Kevin Fenzi
9dc7f4adcf noc01.rdu3: someday I will get logic right 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-22 10:35:33 -07:00
Kevin Fenzi
2259edea1a noc01.rdu3: adjust openvpn logic 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-22 10:30:43 -07:00
Kevin Fenzi
81f9f0d09c noc01.rdu3: add a rdu3 noc server 
No nagios for now, but dhcp and tftp and such.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-22 10:01:27 -07:00
Kevin Fenzi
ebe5fa82a1 rdu3: fix a logic conditional thinko 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 16:28:25 -07:00
Kevin Fenzi
0442382c59 dns: no vpn wanted in rdu3 dns either 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 15:47:23 -07:00
Kevin Fenzi
f8eacdb62b bastion01.rdu3: A wild bastion01.rdu3 appears, lets try and configure it. 
This should setup a already installed bastion01.rdu3 vm so we can use it
to get to other rdu3 machines.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-21 12:37:13 -07:00
Jiri Kyjovsky
69237d1349 copr/pulp: remove pulp playbooks 
Pulp folks gave us their instance, we don't have to maintaint our own
anymore.
 2025-05-05 10:56:24 +02:00
Kevin Fenzi
dc1b09121b ipsilon: use correct centos stg ipsilon host for hbac rule 
This was using the wrong host and thus removing the correct one.
Fixing it to use the right host.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-04-24 09:26:09 -07:00
Aurélien Bompard
292c7f6c6e Deploy journal-to-fedora-messaging on IPA (staging for now) 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-03-28 12:37:56 +01:00
Kevin Fenzi
1f2bba4489 bvmhost-a64 / buildhw-a64: enable nbde role here as well 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-26 16:17:37 -07:00
Kevin Fenzi
4ab30bdc37 backup: also add nbde role to backup server 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-25 11:33:11 -07:00
Kevin Fenzi
f54142e770 backup: add serial console config here 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-25 11:29:59 -07:00
Samyak Jain
b4e6f57a4a playbooks/groups/secondary.yml: Install isomd5sum package on secondary servers 
Added `isomd5sum` to the list of installed packages in `playbooks/groups/secondary.yml`
to support checksum verification tests on `secondary01.fedoraproject.org`.

This ensures that `isomd5sum` is available for testing workflows, particularly for
QA tasks related to Fedora media checksums.

Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-03-19 21:19:58 +00:00
Kevin Fenzi
401d40c098 compose-x86-riscv: adjust some nfs client logic 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 16:01:55 -08:00
Kevin Fenzi
3a2574b495 releng-compose: no ftp mount on compose-x86-riscv01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 14:52:38 -08:00
Kevin Fenzi
f0663ae52f compose-riscv01: add a secondary x86 compose host for riscv 
This vm will hopefully allow for composing images, repos, etc

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 13:56:23 -08:00
Kevin Fenzi
4dc4029ad7 koji_hub: enable mod_wsgi role in prod as well 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 13:19:55 -08:00
Kevin Fenzi
72cc6a829a koji-hub / staging: fix typos 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 13:04:45 -08:00
Kevin Fenzi
5c492b87a1 koji_hub / staging: try and include mod_wsgi role 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 13:02:31 -08:00
Adam Williamson
28fbce1a39 Belatedly lift F41 Final freeze, remove unused RelEngFrozen 
It seems this has been set true ever since F41 Final freeze. It
probably should have been set false after F41 shipped, but we
missed it.

We did freeze for F42 branching, but I'm pretty sure we declared
that over now. Next freeze is on Feb 18, for Beta.

Also, the RelEngFrozen variable is no longer used by anything.
It was only ever used for one thing in Bodhi config, but that
use was removed in 02cdf36 . So let's get rid of the variable.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-02-13 08:34:27 -08:00
Michal Konecny
6428f8f772 Sunset github2fedmsg and fedmsg 
This commit is removing all the fedmsg related stuff from ansible
repository.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-02-13 10:08:51 +00:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers 
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-02-10 20:31:49 +00:00
Kevin Fenzi
ea5ae957d4 buildvm-x86-riscv: add to playbook 
Not gonna work unless the hosts are in the playbook. ;)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-06 15:26:18 -08:00
Kevin Fenzi
bd21aa17c5 add riscv x86 builders 
We want a pair of x86_64 buildvm's to do tasks that don't need to be on
a riscv instance (create/newrepos, etc).

So adjust playbooks and add them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-06 15:19:13 -08:00
Michal Konecny
7b58dfdce8 Remove fedmsg and github2fedmsg from staging 
The messaging bridges openshift project and github2fedmsg VM were
already removed in staging. This is to clean the ansible playbooks.

I will create a separate one for production after this one is merged.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-02-04 09:13:40 +01:00
Kevin Fenzi
23d8ef1210 noc-cc01: install ipmitool 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-28 14:33:49 -08:00
Kevin Fenzi
ef73ee4495 buildvm_s390x: drop mention of non existant buildvm-s390x-24 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-27 17:55:13 -08:00