Commit Graph

495 Commits

Author SHA1 Message Date
Kevin Fenzi
713af9ea3a proxies: move coreos cincinnati to rdu3 openshift
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 11:44:16 -07:00
Kevin Fenzi
bb34f3506a nagios-rdu3: add website, proxy, vpn endpoint
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-20 20:48:07 -07:00
Kevin Fenzi
a6c096617b proxies: openshift rdu3
So, we renamed the cluster with the ocp-rdu3 name, so drop all this
special handling. All the proxies should be able to reach it by that
name and via the vpn endpoints it has.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-16 11:10:08 -07:00
Kevin Fenzi
23d71ae40f proxies / rdu3: set rdu3 proxies to proxy to the rdu3 openshift cluster
The iad2 and rdu3 openshift clusters have the same name
(yes, I know, I was trying to be clever!)
So, in rdu3 we want *.apps.ocp.fedoraproject.org to proxy to the rdu3
cluster and everywhere else to the iad2 cluster (until we move).
This should point proxy01.rdu3 and proxy10.rdu3 the right way.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-16 09:42:55 -07:00
Kevin Fenzi
e7e6db8d8d proxies: rename ocp4-rdu3 to ocp4_rdu3 to hopefully get jinja2 to leave it alone
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-14 14:30:00 -07:00
Kevin Fenzi
2f25595228 proxies / rdu3: perhaps destname cannot have a . in it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-14 13:40:37 -07:00
Kevin Fenzi
63b02e9098 proxies: use double quotes
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-14 13:09:42 -07:00
Kevin Fenzi
2691464323 proxies: set ocp4 false when ocp4-rdu3 is true
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-14 12:56:54 -07:00
Kevin Fenzi
e1132667d3 proxies: add a ocp-rdu3 site/endpoint to get to the new rdu3 prod openshift
We can't use easily the existing hostname/site, as that goes to the
current iad2 cluster, so setup a -rdu3 version for now.
After we switch we can drop this and repoint the main one to the new
cluster.

Hopefully this all works and does the right thing.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-14 12:35:20 -07:00
Kevin Fenzi
33415d8399 proxies: riscv reverse proxies are not on ocp4
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-27 15:39:00 -07:00
Kevin Fenzi
a4985b880b proxies / riscv-kojipkgs: try and get it to use the right template
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-24 16:44:12 -07:00
Kevin Fenzi
3c4d4250c0 proxies / riscv-kojipkgs: also need to set proxyurl
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-24 16:34:02 -07:00
Kevin Fenzi
81ca9bd8a1 proxies: add a riscv-kojipkgs virthost/proxy
We are actually just pointing these to the hub for now, but we have them
seperated in case we want to make a seperate kojipkgs for this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-24 16:23:11 -07:00
Michal Konecny
6428f8f772 Sunset github2fedmsg and fedmsg
This commit is removing all the fedmsg related stuff from ansible
repository.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-13 10:08:51 +00:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
Kevin Fenzi
835cc165dd proxies: add tags for riscv-koji
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-27 14:38:20 -08:00
Kevin Fenzi
6675345f58 riscv-koji secondary hub
Here's a pull request to setup a secondary riscv-koji hub.

There are still outstanding issues, but things should be
good enough to merge and deploy the initial instance and
interate from there. Also I plan to run a --check --diff to make sure
there's no changes on primary hubs/etc.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-24 19:12:04 +00:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
Ryan Lerch
2cf38c1f17 [yaml-lint] fix yamllint errors and warnings on plabooks
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-25 19:04:25 +10:00
Kevin Fenzi
5c2d61d9f8 epylog: remove/retire
We haven't used epylog in a long time, it's unmaintained upstream and
never was ported to python3 that I know of.

So, lets stop pretending that it is something we should keep here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 11:37:07 -07:00
Kevin Fenzi
e3e2cb1d93 odcs: retire service ( infra 12192 )
Time to retire ODCS. ELN is moved off and that was the last thing using
it. Thanks for all the service ODCS!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 18:21:51 +00:00
Aurélien Bompard
f26baf7de2 Deploy webhook-to-fedora-messaging to prod
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-09-03 09:57:57 +02:00
Kevin Fenzi
be65fcee91 pdc: remove old reverseproxy too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-02 14:01:16 -07:00
Kevin Fenzi
643e5ae324 lists: add tag for proxies websites/reverseproxy
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-03 10:01:37 -07:00
Kevin Fenzi
6123c903b9 fedoraplanet: setup to direct to openshift from proxies
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-27 13:35:59 -07:00
Kevin Fenzi
1f6703aa5a kanban: missing .
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-29 14:11:50 -07:00
Kevin Fenzi
8b037438c1 kanban: fix site name for staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-29 14:02:16 -07:00
Kevin Fenzi
d2ed67db1c kanban.qa: add site to proxies.
We have to use letsencrypt here because this is not a direct
fedoraproject.org site, so it can't use our wildcard cert.
This may break our certbot setup, but will give it a try.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-29 13:12:58 -07:00
Aurélien Bompard
2fa0df5004 Fixup last commit
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-05-29 09:33:38 +02:00
Aurélien Bompard
02b5245e28 Switch mirrormanager to the Openshift version
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-05-29 09:14:09 +02:00
Kevin Fenzi
719e5db2fa message-tagging-service: retire
This service tagged things based on mbs builds.
Since mbs is retired now, no need for this to be around either.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-22 14:37:28 -07:00
Kevin Fenzi
d366194a22 module-build-service (mbs): retire service
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.

Note that toddlers needs to be adjusted still, that will happen after
this.

Thanks for all the modules!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-22 13:38:53 -07:00
Leo Puvilland
e802586209 flatpak-cache: fix naming of group and remove all traces of old deployment
Signed-off-by: Leo Puvilland <leo@craftcat.dev>
2024-05-04 10:02:55 -07:00
Kevin Fenzi
4da77268dd openscanhub: proxy setup for both prod and stg
Change the stg conditionals so both prod and stg are setup.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-24 16:22:34 +00:00
Aurélien Bompard
86c0b2e50c Fix the last badges-related commit on the staging proxy
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-04-22 17:18:22 +02:00
Aurélien Bompard
f75f5d7823 Badges: update the proxies to point to openshift
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-04-22 12:38:47 +02:00
Kevin Fenzi
c84b99223c osbs: raise a glass for it's service
This removes osbs and allmost all it's associated playbooks and files.

It served long and well, but we no longer need it.
flatpaks are building with a koji-flatpak plugin.
base/minimal/toolbox containers are building with kiwi.
We aren't building any other containers right now, and we did they could
be added to kiwi.

This is the end of an era... I look with nostolga on
ansible-ansible-openshift-ansible (a role to setup ansible on a control
host and run it from our ansible).

Good bye osbs!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-28 12:52:07 -07:00
Ryan Lerch
0e5f6796ea kerneltest: prepare for openshift prod kerneltest
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-03-21 11:28:23 +10:00
Ryan Lerch
82045c1266 kerneltest: fix website location
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-03-21 09:43:19 +10:00
Ryan Lerch
ba7dc4258d kerneltest: use kerneltest.fedoraproject.org instead
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-03-21 09:23:24 +10:00
Ryan Lerch
f6aaf4fdaf set the proxy to point to openshift kerneltest
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-03-21 06:42:04 +10:00
Leo Puvilland
29d51dc5b6 flatpak-cache: new reverse proxy to flatpak-cache directly
Signed-off-by: Leo Puvilland <leo@craftcat.dev>
2024-03-01 11:13:51 -08:00
Kevin Fenzi
1dac8232a6 openscanhub / staging: add proxy config
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-16 12:17:54 -08:00
Leo Puvilland
161b9350ad flatpak-cache: switch to http and not https
Signed-off-by: Leo Puvilland <leo@craftcat.dev>
2024-01-16 09:47:18 -08:00
Kevin Fenzi
0399029031 flatpak-cache: setup a seperate website for flatpak-cache
We need this to be seperate from the main apps.ocp site, because that
one does a ssl redirect that we don't want it to.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-01-15 15:17:48 -08:00
Kevin Fenzi
3808d867de value01/value01.stg: retire
These are old rhel7 instances. The only thing left on them is fedmsg-irc
(sending to one irc channel, fedora-releng). Move everything to use the
newer rhel8 value02 instead.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-15 12:13:38 -08:00
Kevin Fenzi
a60ca7159f nuancier: retire and remove from ansible
See https://pagure.io/fedora-infrastructure/issue/11371
This service is retired.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-15 10:44:00 -08:00
David Kirwan
21b43ab931 zabbix: reworking apache config
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-09 15:15:48 +00:00
David Kirwan
9c3a24e79a zabbix: Zabbix production configuration 2023-11-09 12:55:26 +00:00
Kevin Fenzi
50c61979f0 Revert "zabbix: Add configuration for zabbix prod to haproxy"
This reverts commit d7b20fa114.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-07 06:16:29 -08:00