Commit Graph

43401 Commits

Author SHA1 Message Date
Ralph Bean
2cc804b346 Add temporary tahrir.salt config value. 2013-06-21 16:16:02 +00:00
Ralph Bean
4a3da6d9cf Use sqlalchemy forward-compat. 2013-06-21 16:14:45 +00:00
Ralph Bean
3aa0648fc2 Adjust some tahrir permissions. 2013-06-21 15:59:01 +00:00
Ralph Bean
df53e2e577 Adjust tahrir.ini for use under mod_wsgi. 2013-06-21 15:57:17 +00:00
Ralph Bean
4473c17104 First try at a badges-frontend role for stg. 2013-06-21 15:34:33 +00:00
Seth Vidal
5053d35c18 - template our nrpe.cfg
- setup vars for nrpe_procs_crit and nrpe_procs_warn
- set the value for crit and warn higher for mirrorlists to stop their whining
2013-06-20 20:47:00 +00:00
Seth Vidal
3575d0e55f change process/thread count on mirrorlist_server wsgi process from 6/25 to 45/1 2013-06-20 17:25:58 +00:00
Seth Vidal
0172854c1b new, shiny list-vms-per-host
really a WHOLE lot faster than the func one
2013-06-19 20:59:52 +00:00
Seth Vidal
c67b4421c5 rename build-infra to bvirthost, add a virtservers group 2013-06-19 20:12:32 +00:00
Seth Vidal
7a054e535c put groups into the :children group header for subgrouping 2013-06-19 20:03:48 +00:00
Ralph Bean
1219b3fcd2 Add some tags to try and speed things up. 2013-06-19 18:17:53 +00:00
Seth Vidal
12f2818954 add NF and F to prefix each host so you can grep for which is which 2013-06-18 19:06:23 +00:00
Seth Vidal
e17c382de4 - remove now-unused persistent_cloud_nodisks
- update persistent_cloud to use new when: conditional instead of when_filed and only_if
2013-06-18 16:58:09 +00:00
Ralph Bean
4e595dd7ce Syntax seems wrong again. 2013-06-18 04:16:57 +00:00
Ralph Bean
f732ae00d5 Try a different approach to handling absent fedmsg_certs. 2013-06-18 04:10:40 +00:00
Ralph Bean
b3241ee8ab Typofix. 2013-06-18 03:58:19 +00:00
Ralph Bean
dbcf1530d1 Declare certs for badges backend. 2013-06-18 03:54:26 +00:00
Ralph Bean
82bfa4d87b Copy fedmsg cert config from group_vars for stg to group_vars for prod (for the future). 2013-06-18 03:52:27 +00:00
Ralph Bean
280a687729 Revert "Provide a global default for fedmsg_certs so that with_items will always pass the yaml syntax check."
This reverts commit 405583c5e2.
2013-06-18 03:49:17 +00:00
Ralph Bean
405583c5e2 Provide a global default for fedmsg_certs so that with_items will always pass the yaml syntax check. 2013-06-18 03:30:20 +00:00
Ralph Bean
747ec776fe Correct typo on the cert name. 2013-06-18 03:24:19 +00:00
Ralph Bean
88971011e2 Whoops. Remove a holdover from when I was thinking this through. 2013-06-18 03:21:35 +00:00
Ralph Bean
ca8a6bd251 Apparently you have to use this expansion syntax here. 2013-06-18 03:18:39 +00:00
Ralph Bean
350fa8eeab Use a different syntax for nested var substitution. 2013-06-18 03:14:30 +00:00
Ralph Bean
0ed7bb239f Revert "Revert "Try copying fedmsg certs using a nested var.""
This reverts commit 7e517cf6f2.
2013-06-18 03:13:11 +00:00
Ralph Bean
7e517cf6f2 Revert "Try copying fedmsg certs using a nested var."
This reverts commit 4ff627affe.
2013-06-17 23:27:07 +00:00
Ralph Bean
4ff627affe Try copying fedmsg certs using a nested var. 2013-06-17 23:16:48 +00:00
Kevin Fenzi
c1276b3c0c Set mirrorlist check back to 4h and tweak process check 2013-06-17 21:46:33 +00:00
Kevin Fenzi
c2f1c5993c Add ibiblio/osuosl resolv.confs 2013-06-17 21:38:29 +00:00
Kevin Fenzi
96ce778a87 Set correct mode/ownership 2013-06-17 21:26:12 +00:00
Kevin Fenzi
7ef93ded5d First cut at moving over nrpe client scripts. 2013-06-17 21:13:31 +00:00
Seth Vidal
e43cd8a91c - add nrpe allows to global iptables
- clean up a lot of the BSI from releng iptables
2013-06-17 21:05:31 +00:00
Kevin Fenzi
9f27b9c1e5 Add nrpe to accept from noc01 to mirrorlists. 2013-06-17 20:26:08 +00:00
Seth Vidal
497afe78cc add resolv_mods=no to /etc/sysconfig/network so rebooting doesn't nuke our name servers 2013-06-17 19:27:08 +00:00
Matt Domsch
726ccd2929 remove MM hotfixes, included in 1.4.1 2013-06-17 19:16:13 +00:00
Ralph Bean
8313016b84 Open port 3000 on badges-backend01.stg. 2013-06-17 19:04:50 +00:00
Kevin Fenzi
97e1c4ff63 Set mirrorlists to use 2GB for now. 2013-06-17 18:55:37 +00:00
Ralph Bean
3b069f53e5 Pull badge rule definitions from the other repo. 2013-06-17 18:29:17 +00:00
Ricky Elrod
b29df9ff97 probably need to fix it here, too. 2013-06-17 15:46:39 +00:00
Ricky Elrod
718765d4fa I have no idea what I'm doing. But maybe this will fix it. :) 2013-06-17 15:41:52 +00:00
Seth Vidal
3fe1284f0d quote it b/c.... maybe the @? 2013-06-17 14:17:09 +00:00
Seth Vidal
79e83d9d96 ansible 1.2 breaks $FILE and $PIPE - so I went and fixed it everywhere :( 2013-06-17 13:54:53 +00:00
Ricky Elrod
94802c6a27 Add docs on how to terminate instances. 2013-06-17 13:31:45 +00:00
Patrick Uiterwijk
b2aa553fe2 Grant sysadmin-noc access to mirrorlist-* 2013-06-16 19:19:57 +00:00
Matt Domsch
41f43db80e mirrorlists are now refreshed daily 2013-06-15 04:43:05 +00:00
Matt Domsch
fc3cd53252 mirrorlist_server: reduce memory usage considerably
Rather than loading in the entire 500k entries of the global netblock
    list, only load in the ~30k entries that match ASNs that our mirrors
    have explicitly claimed as being relevant to them, either as the
    Host.asn or in the HostPeerASN list.

    This has the effect of reducing memory size by about half for the
    overall program, which, should improve fork() time and reduce failure
    to insufficient RAM available.
2013-06-15 03:18:00 +00:00
Matt Domsch
b10428ccc9 try again with hotfix 2013-06-14 23:04:50 +00:00
Matt Domsch
f2b872ab4a add mirrorlist_server.py hotfix 2013-06-14 22:55:44 +00:00
Matt Domsch
ba59adcfdb more mirrorlist changes coming from puppet 2013-06-14 20:39:41 +00:00
Matt Domsch
577f3300a2 mirror puppet's supervisord.conf 2013-06-14 20:30:54 +00:00