WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-03 21:22:29 +08:00
Code Issues Packages Projects Releases Wiki Activity
34,821 Commits 9 Branches 0 Tags
7bbdf4f679b0bc3cd96bca6f55d2f5bd329bc7e7
Commit Graph

7793 Commits

Author SHA1 Message Date
Kevin Fenzi
e8f5700edc new mac address for buildvm-ppc64le-34 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-04 13:00:26 -07:00
Kevin Fenzi
dc3f8a4e72 add eth0_ipv4 for virt-install 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-04 12:49:24 -07:00
Kevin Fenzi
0c22bca328 buildhw-x86-05: turns out we need dns for clevis 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-04 11:48:33 -07:00
Kevin Fenzi
cbf343dd4e fix buildhw-x86-05 nm 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-04 09:54:41 -07:00
Kevin Fenzi
7ef6f3ea42 Revert "buildhw-x86-02: try and not specify state" 
This reverts commit 926cb41759.
 2021-05-04 09:35:47 -07:00
Kevin Fenzi
926cb41759 buildhw-x86-02: try and not specify state 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-04 09:31:41 -07:00
Kevin Fenzi
44adfa7b09 buildhw: try setting persistent_state: present 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-04 09:26:50 -07:00
Kevin Fenzi
e6e066d3d7 buildhw: adjust some mac addresses and such 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-04 09:20:18 -07:00
Kevin Fenzi
3c12ef6aa9 Killed trailing spaces in group/host vars with fire. 
Normally it's just a nitpick to not have trailing spaces on variables.
However, for some things like mac address, it really matters.
Bunches of buildhw's were failing ansibile because they were passing
"mac address " to linux-system-roles networking and ansible was going
'huh, nope, I can't find that mac address here at all'.
So, just blow all the tailing spaces away to avoid any other variables
that hit this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-04 08:52:52 -07:00
Kevin Fenzi
f7f7a3e8de buildhw-x86-01: re-add disabled for eth1 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-04 08:48:12 -07:00
Pavel Raiskup
570d580e24 copr-hv: disable copr vmhost01 as it is not responding 2021-05-04 17:46:01 +02:00
Kevin Fenzi
98c8532ad6 buildhw-x86-01: remove space from end of mac address 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 18:50:15 -07:00
Kevin Fenzi
a7aac93e49 buildhw-x86-01: try not specifying eth1 state 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 18:24:54 -07:00
Kevin Fenzi
71e3a60ea1 group_vars/all: switch default to ipa 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 17:38:40 -07:00
Kevin Fenzi
6efdaca83b kernel_qa: add host_group_desc 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 17:32:06 -07:00
Kevin Fenzi
5c88af7d29 kernel_qa: try and use _ in the hostgroup name 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 17:27:11 -07:00
Kevin Fenzi
28c35a9b87 compose-rawhide01: move to f34 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 15:23:45 -07:00
Kevin Fenzi
b80b859c34 kojipkgs: move to f34 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 15:16:06 -07:00
Kevin Fenzi
bcfd447c94 bastion: allow sysadmin-kernel ssh access 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 15:05:18 -07:00
Kevin Fenzi
91be703c05 re-add kernel01 to enroll in ipa 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 14:45:20 -07:00
Kevin Fenzi
80b3c96f9d Move a bunch of machines to f34 from f32. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 14:43:28 -07:00
Stephen Smoogen
805a14569e add in bridge 2 onto the two vmhosts-cc boxes. 2021-05-03 16:30:40 -04:00
Kevin Fenzi
c935c54e9d oci-registries: Move staging and prod candidate to f34 
Also resize candidate-registery01 in prod as it was close to full.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 10:45:28 -07:00
Kevin Fenzi
bbd0b3c3e6 Move compose-x86-01.stg to f34. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-03 09:29:30 -07:00
Stephen Smoogen
d31b6543fc Put in a change for internal rsync to hopefully work with dl servers 2021-05-03 11:52:06 -04:00
Kevin Fenzi
d377ff4898 backups: ipa: back up dirserv logs (including audit) too. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-30 10:19:03 -07:00
Kevin Fenzi
629a0ddaf7 ppc64le-test: do not use nrpe checks here. 
This instance is in a lab somewhere and doesn't allow nrpe access.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-28 12:35:50 -07:00
Stephen Smoogen
fd7fa6e915 remove duplicate vpn:. this is not the reason that copr01 died but it will clean out errors when running ansible-playbook 2021-04-28 12:48:01 -04:00
Pavel Raiskup
8ebff52f89 copr-hv: allow @sysadmin-copr to ssh as 'copr', not root 2021-04-23 14:31:47 +02:00
Pavel Raiskup
e78f4671e2 copr-hv: allow root-ssh for copr admins 2021-04-23 14:27:48 +02:00
Adam Williamson
8cc6545c4a Drop openQA scratch builds 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-04-22 16:06:19 -07:00
Kevin Fenzi
daefe569a6 set primary_auth_source: ipa for staging builders 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-22 14:00:51 -07:00
Nick Bebout
393efad2be Remove sysadmin-atomic from group_vars also 2021-04-21 16:50:57 -05:00
Nick Bebout
832455904e Merge branch 'main' of ssh://pagure.io/fedora-infra/ansible 2021-04-21 16:39:59 -05:00
Nick Bebout
a5e8f0f6c0 Remove sysadmin-gnome from batcave since it was deleted 2021-04-21 15:56:06 -05:00
Kevin Fenzi
6e1ab9cd21 ipa / client: setup nopasswd sudo groups for maintainer test 
For the maintainer_tests instances we just want to allow anyone with
shell access ability to sudo with no password. In this case asking for
password/tokens could provide a MITM attack vector. This matches up with
the way they were setup before with fas2.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-21 16:18:47 +00:00
Ryan Lerch
44ba9627eb prepare for deploying bodhi 5.7.0 to staging 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2021-04-19 08:40:39 +10:00
Kevin Fenzi
548e3b5332 maintainer-test / copr-hypervisor: clean up playbook and variables. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-16 13:03:25 -07:00
Kevin Fenzi
8a59695693 Add maintainer_test and copr vmhosts to vpn 
We need to add these hosts to the vpn to use ipa for auth on them.
They are in the 192.168.100 network, which is the 'more restricted'
subnet of vpn. After the freeze we will probibly want to lock this down
more with a rule on all hosts except ipa* to reject everything from
them. In the mean time the firewall rules blocking most things should be
ok for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-16 11:38:26 -07:00
Mark O'Brien
8091926e71 ipa: add second stg server 2021-04-15 15:35:08 +01:00
Kevin Fenzi
5a7bf06620 buildvm-ppc64le: update mac addresses on hosts being reinstalled after bvmhost-p09-02 raid rebuild 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-12 08:30:31 -07:00
Kevin Fenzi
db93fb75cc buildvm-ppc64le: need eth0_ip for now for installs 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-12 08:05:26 -07:00
Kevin Fenzi
5c397154fc buildvm-a32-01.stg: new install, new mac 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 15:44:37 -07:00
Kevin Fenzi
e9966e543c virt-install: use inst. in front of anaconda parameters 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 15:28:44 -07:00
Kevin Fenzi
18bc52df65 buildvm-a32-01.stg: f34 is not released yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 14:55:09 -07:00
Kevin Fenzi
1d57a07876 buildvm-a32-01.stg: need to define eth0_ip also for virt-install 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 14:51:25 -07:00
Kevin Fenzi
469cc3e027 buildvm-a32-01.stg: switch to f34 and see if OOM bug is still there 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 14:47:21 -07:00
Kevin Fenzi
596af2682b Default x_forward to false to make last commit work 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-08 14:12:39 -07:00
Adam Williamson
a889649c46 openqa: bump asset size allocations a bit 
We have more space on the IAD servers, so let's use it.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-04-08 09:24:23 -07:00
Kevin Fenzi
f3ab68c101 zabbix/staging: try and exclude it from nagios monitoring harder 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 15:36:51 -07:00