Ralph Bean
2cc804b346
Add temporary tahrir.salt config value.
2013-06-21 16:16:02 +00:00
Ralph Bean
4a3da6d9cf
Use sqlalchemy forward-compat.
2013-06-21 16:14:45 +00:00
Ralph Bean
3aa0648fc2
Adjust some tahrir permissions.
2013-06-21 15:59:01 +00:00
Ralph Bean
df53e2e577
Adjust tahrir.ini for use under mod_wsgi.
2013-06-21 15:57:17 +00:00
Ralph Bean
4473c17104
First try at a badges-frontend role for stg.
2013-06-21 15:34:33 +00:00
Seth Vidal
5053d35c18
- template our nrpe.cfg
...
- setup vars for nrpe_procs_crit and nrpe_procs_warn
- set the value for crit and warn higher for mirrorlists to stop their whining
2013-06-20 20:47:00 +00:00
Seth Vidal
3575d0e55f
change process/thread count on mirrorlist_server wsgi process from 6/25 to 45/1
2013-06-20 17:25:58 +00:00
Seth Vidal
0172854c1b
new, shiny list-vms-per-host
...
really a WHOLE lot faster than the func one
2013-06-19 20:59:52 +00:00
Seth Vidal
c67b4421c5
rename build-infra to bvirthost, add a virtservers group
2013-06-19 20:12:32 +00:00
Seth Vidal
7a054e535c
put groups into the :children group header for subgrouping
2013-06-19 20:03:48 +00:00
Ralph Bean
1219b3fcd2
Add some tags to try and speed things up.
2013-06-19 18:17:53 +00:00
Seth Vidal
12f2818954
add NF and F to prefix each host so you can grep for which is which
2013-06-18 19:06:23 +00:00
Seth Vidal
e17c382de4
- remove now-unused persistent_cloud_nodisks
...
- update persistent_cloud to use new when: conditional instead of when_filed and only_if
2013-06-18 16:58:09 +00:00
Ralph Bean
4e595dd7ce
Syntax seems wrong again.
2013-06-18 04:16:57 +00:00
Ralph Bean
f732ae00d5
Try a different approach to handling absent fedmsg_certs.
2013-06-18 04:10:40 +00:00
Ralph Bean
b3241ee8ab
Typofix.
2013-06-18 03:58:19 +00:00
Ralph Bean
dbcf1530d1
Declare certs for badges backend.
2013-06-18 03:54:26 +00:00
Ralph Bean
82bfa4d87b
Copy fedmsg cert config from group_vars for stg to group_vars for prod (for the future).
2013-06-18 03:52:27 +00:00
Ralph Bean
280a687729
Revert "Provide a global default for fedmsg_certs so that with_items will always pass the yaml syntax check."
...
This reverts commit 405583c5e2 .
2013-06-18 03:49:17 +00:00
Ralph Bean
405583c5e2
Provide a global default for fedmsg_certs so that with_items will always pass the yaml syntax check.
2013-06-18 03:30:20 +00:00
Ralph Bean
747ec776fe
Correct typo on the cert name.
2013-06-18 03:24:19 +00:00
Ralph Bean
88971011e2
Whoops. Remove a holdover from when I was thinking this through.
2013-06-18 03:21:35 +00:00
Ralph Bean
ca8a6bd251
Apparently you have to use this expansion syntax here.
2013-06-18 03:18:39 +00:00
Ralph Bean
350fa8eeab
Use a different syntax for nested var substitution.
2013-06-18 03:14:30 +00:00
Ralph Bean
0ed7bb239f
Revert "Revert "Try copying fedmsg certs using a nested var.""
...
This reverts commit 7e517cf6f2 .
2013-06-18 03:13:11 +00:00
Ralph Bean
7e517cf6f2
Revert "Try copying fedmsg certs using a nested var."
...
This reverts commit 4ff627affe .
2013-06-17 23:27:07 +00:00
Ralph Bean
4ff627affe
Try copying fedmsg certs using a nested var.
2013-06-17 23:16:48 +00:00
Kevin Fenzi
c1276b3c0c
Set mirrorlist check back to 4h and tweak process check
2013-06-17 21:46:33 +00:00
Kevin Fenzi
c2f1c5993c
Add ibiblio/osuosl resolv.confs
2013-06-17 21:38:29 +00:00
Kevin Fenzi
96ce778a87
Set correct mode/ownership
2013-06-17 21:26:12 +00:00
Kevin Fenzi
7ef93ded5d
First cut at moving over nrpe client scripts.
2013-06-17 21:13:31 +00:00
Seth Vidal
e43cd8a91c
- add nrpe allows to global iptables
...
- clean up a lot of the BSI from releng iptables
2013-06-17 21:05:31 +00:00
Kevin Fenzi
9f27b9c1e5
Add nrpe to accept from noc01 to mirrorlists.
2013-06-17 20:26:08 +00:00
Seth Vidal
497afe78cc
add resolv_mods=no to /etc/sysconfig/network so rebooting doesn't nuke our name servers
2013-06-17 19:27:08 +00:00
Matt Domsch
726ccd2929
remove MM hotfixes, included in 1.4.1
2013-06-17 19:16:13 +00:00
Ralph Bean
8313016b84
Open port 3000 on badges-backend01.stg.
2013-06-17 19:04:50 +00:00
Kevin Fenzi
97e1c4ff63
Set mirrorlists to use 2GB for now.
2013-06-17 18:55:37 +00:00
Ralph Bean
3b069f53e5
Pull badge rule definitions from the other repo.
2013-06-17 18:29:17 +00:00
Ricky Elrod
b29df9ff97
probably need to fix it here, too.
2013-06-17 15:46:39 +00:00
Ricky Elrod
718765d4fa
I have no idea what I'm doing. But maybe this will fix it. :)
2013-06-17 15:41:52 +00:00
Seth Vidal
3fe1284f0d
quote it b/c.... maybe the @?
2013-06-17 14:17:09 +00:00
Seth Vidal
79e83d9d96
ansible 1.2 breaks $FILE and $PIPE - so I went and fixed it everywhere :(
2013-06-17 13:54:53 +00:00
Ricky Elrod
94802c6a27
Add docs on how to terminate instances.
2013-06-17 13:31:45 +00:00
Patrick Uiterwijk
b2aa553fe2
Grant sysadmin-noc access to mirrorlist-*
2013-06-16 19:19:57 +00:00
Matt Domsch
41f43db80e
mirrorlists are now refreshed daily
2013-06-15 04:43:05 +00:00
Matt Domsch
fc3cd53252
mirrorlist_server: reduce memory usage considerably
...
Rather than loading in the entire 500k entries of the global netblock
list, only load in the ~30k entries that match ASNs that our mirrors
have explicitly claimed as being relevant to them, either as the
Host.asn or in the HostPeerASN list.
This has the effect of reducing memory size by about half for the
overall program, which, should improve fork() time and reduce failure
to insufficient RAM available.
2013-06-15 03:18:00 +00:00
Matt Domsch
b10428ccc9
try again with hotfix
2013-06-14 23:04:50 +00:00
Matt Domsch
f2b872ab4a
add mirrorlist_server.py hotfix
2013-06-14 22:55:44 +00:00
Matt Domsch
ba59adcfdb
more mirrorlist changes coming from puppet
2013-06-14 20:39:41 +00:00
Matt Domsch
577f3300a2
mirror puppet's supervisord.conf
2013-06-14 20:30:54 +00:00