WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-02 14:30:45 +08:00
Code Issues Packages Projects Releases Wiki Activity
35,174 Commits 9 Branches 0 Tags
94de49399ac7b579dc7e90bdc42f30044f1f60c0
Commit Graph

772 Commits

Author SHA1 Message Date
Kevin Fenzi
b7a031c9fd fedoraloveskde.org: add site and pipeline to deploy it and dns zone 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-06-14 12:49:11 -07:00
Kevin Fenzi
7b28302fae fedocal: remove reverseproxy config for old app, it has moved to openshift 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-06-12 13:23:54 -07:00
Kevin Fenzi
1dc01d036e proxies: packages site is the same in prod and stg with an alias 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-21 11:11:35 -07:00
Brendan Early
e3484c5f3d packages-static: add proxy 2021-05-21 17:38:32 +00:00
Frank Ch. Eigler
7185d7774e debuginfod redirect+proxy: combine into handcrafted httpd conf file 2021-05-20 00:42:32 +00:00
Patrick Uiterwijk
31a3e49c9d proxies: Ensure that Ipsilon is told it's reached over HTTPS 
This should make sure that Ipsilon is aware it's reached over HTTPS from
external, and should make it use HTTPS for redirects

Related: https://pagure.io/fedora-infrastructure/issue/9943
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2021-05-12 17:46:22 +02:00
Frank Ch. Eigler
ab51e82014 debuginfod: balance redirect & reverse-proxy better 
Our ansible default ansible scripts don't like multiple /suburls being
individually proxied, so we ended up losing /buildid/* and keeping
/metrics.

Switch to using single /-level reverse-proxying AND wiki-redirection
clauses, and use a new template .conf file to break the tie with a
"ProxyPass / !"  directive.
 2021-05-11 09:10:34 -04:00
Kevin Fenzi
b9af57fa13 add tags for debuginfod redirects too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-10 11:57:55 -07:00
Frank Ch. Eigler
ada46c240c debuginfod reverse proxy: try v2 for wiki redirect 2021-05-10 18:44:41 +00:00
Frank Ch. Eigler
47b5976abd debuginfod: tweak server configuration and proxy frontend 
Codify a few debuginfod process parameters that appear to be working well.

Adjust incoming proxies to redirect the "/" URL to a wiki page, as
requested by FESCO.
 2021-05-10 12:24:39 +00:00
Rick Elrod
70fccad8ea Revert "Revert "Revert "Disable prerelease redirects""" 
This reverts commit 0b74b995d1.
 2021-04-27 07:42:39 -05:00
Pierre-Yves Chibon
d4894b011c proxies: redirect apps.fp.o/calendar to calendar.fp.o in openshift 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-04-09 09:37:51 +02:00
Frank Ch. Eigler
a93b8d24c0 debuginfod proxies: enable gzip 
elf/dwarf/source-code data from debuginfod is highly compressible.
Let's trade proxy CPU for reduce network traffic.
 2021-04-08 20:58:52 +00:00
Frank Ch. Eigler
c37d51d236 proxies/debuginfod: allow proxyopts 
debuginfod can take O(60s) to run certain webapi queries, so the httpd
mod_proxy default timeouts are too short.  Introduce an ansible
variable "proxyopts", expanded into the httpd ProxyPass and
ProxyPassReverse configuration lines.  Default to "", but set it
with pretty generous limits for debuginfod only.
 2021-04-08 20:58:52 +00:00
Stephen Smoogen
5db5700936 This will allow for X forwarded to be set for hosts which need it. [Currently only debuginfod] 2021-04-06 12:25:44 -04:00
Kevin Fenzi
658df6e677 debuginfod: move to port 8002 and add vpn 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 15:30:01 -07:00
Kevin Fenzi
044467fafe debuginfod: add both stg and prod debuginfod vms 
We are moving this to vm's as the nfs storage on openshift isn't up to
the i/o that this application needs.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-04-05 13:23:00 -07:00
Francois Andrieu
e57a3c9df4 languages: prod deployment 2021-04-05 18:37:27 +00:00
Kevin Fenzi
7dadf93f44 Deploy renewed openshift certs 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-27 12:05:35 -07:00
Aurélien Bompard
e5a5ba6a86 Switch the proxies to point to the new Ipsilon VM 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 14:25:57 +01:00
Aurélien Bompard
b8e6754f97 Use a VM for Ipsilon in prod too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-23 16:55:38 +00:00
Rick Elrod
0b74b995d1 Revert "Revert "Disable prerelease redirects"" 
This reverts commit ad55b9ddc8.
 2021-03-23 07:38:08 -05:00
Pierre-Yves Chibon
5dd4daa201 proxies: Update config for debuginfod in staging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-22 20:53:28 +01:00
Aurélien Bompard
c6c5bb0b54 Fixup last commit again 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 19:53:28 +01:00
Aurélien Bompard
355a731403 Fixup last commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 19:20:37 +01:00
Aurélien Bompard
2269f0ece1 Prepare Noggin & FASJSON for prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 17:53:42 +00:00
Francois Andrieu
d31cc6193d languages: fix reverse proxy configuration 2021-03-20 21:20:30 +01:00
Francois Andrieu
5b8316be12 languages: initial deployment on staging 2021-03-19 17:28:21 +00:00
Pierre-Yves Chibon
fd285a23ea proxies: we move zabbix to / directly 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 14:42:29 +01:00
Pierre-Yves Chibon
f8d45fd78e proxies: Add the header_scheme for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 14:15:17 +01:00
Pierre-Yves Chibon
2ee77518a4 proxies: add a trailing / for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 13:40:46 +01:00
Pierre-Yves Chibon
a58926a29e proxies: let's try keephost for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 11:55:44 +01:00
Pierre-Yves Chibon
8e768ffcd1 Revert "proxies: update the proxyurl for zabbix - this time to varnish" 
This reverts commit 2b53aa3951.
 2021-03-17 11:31:59 +01:00
Pierre-Yves Chibon
2b53aa3951 proxies: update the proxyurl for zabbix - this time to varnish 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 11:23:45 +01:00
Pierre-Yves Chibon
d5454095ef proxies: update the proxyurl for zabbix - again typi typo 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 11:21:42 +01:00
Pierre-Yves Chibon
43f2248de8 proxies: update the proxyurl for zabbix - again 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 11:19:13 +01:00
Pierre-Yves Chibon
c4ab25f363 proxies: update the proxyurl for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 11:17:26 +01:00
Pierre-Yves Chibon
d7cc7b3d02 proxies: only speak about zabbix.stg for now 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 10:57:15 +01:00
Pierre-Yves Chibon
1ffc8b4aa8 proxies: configure zabbix in stg 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 10:43:28 +01:00
Pierre-Yves Chibon
d06fecdac7 reverproxy: add missing tag 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 10:37:03 +01:00
Pierre-Yves Chibon
f65301f8ee proxies: set-up the reverseproxy for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 10:28:50 +01:00
Michael Scherer
a5601476b9 Remove communityblog from ansible 
It got moved to wpengine, so all the deployment bits
are no-op
 2021-02-04 21:11:49 +00:00
Michael Scherer
e1b408851a Remove build of fudcon 
The source code was removed in https://pagure.io/fedora-websites/c/f5646276cf629ffa32b87cb23afb99823d498510?branch=master
and the website is just a redirect.
 2021-02-04 21:05:18 +00:00
Pierre-Yves Chibon
a6ce5fa016 fedocal: enable header_scheme 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-02-01 17:27:27 +01:00
Pierre-Yves Chibon
a07f3e6710 proxy: set-up packager-dashboard 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-25 10:50:53 +01:00
Patrick Uiterwijk
c0a32daa34 proxies: add zezere 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2021-01-22 09:53:14 +01:00
Kevin Fenzi
723e97e5f3 resultsdb / staging: fix name from old phx2 resultsdb to new iad2 one 
In phx2 we had resultsdb-stg01.qa.fedoraproject.org, but now in iad2, we
have resultsdb01.stg.iad2.fedoraproject.org.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-20 11:29:59 -08:00
Kevin Fenzi
acd335509c proxies / redirects: if you use env_suffix in the sitename, you MUST use it in redirects too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-15 12:11:25 -08:00
Kevin Fenzi
2977ebd42e proxies / websites: add qa.stg to serveraliases for qa 
Right now staging doesn't know it should be answering for
qa.stg.fedoraproject.org only qa.fedoraproject.org, so it needs to know
this to allow access to staging qa hosts.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-15 10:56:44 -08:00
Kevin Fenzi
71c3f3fd4d proxies / websites: Some websites need to also be defined in stg 
We need some websites that we get both prod/stg certs for to exist in
stg so the letsencrypt challenge works.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-14 10:37:20 -08:00