WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 12:07:34 +08:00
Code Issues Packages Projects Releases Wiki Activity
34,360 Commits 9 Branches 0 Tags
a4b5dfce5bb2d1663d232f9555981feb3702684e
Commit Graph

20384 Commits

Author SHA1 Message Date
Nils Philippsen
a4b5dfce5b ipa/client: only install sudoers on FAS clients 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-24 11:06:44 +00:00
Nils Philippsen
0fde62b23c GNOME backups: Be gone 
This hasn't been a thing since the colo move.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-24 10:52:25 +00:00
Carl George
4e16733d13 robosignatory: Use epel-8 key for epel8-next 2021-03-24 10:44:43 +00:00
Pierre-Yves Chibon
46476881a5 ircbot: add fm-podcast for the fedora-podcast project 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-24 10:13:58 +00:00
Mark O'Brien
e32c6c21b9 create daily data only backups of ipa 2021-03-23 18:06:38 +00:00
Aurélien Bompard
b8e6754f97 Use a VM for Ipsilon in prod too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-23 16:55:38 +00:00
Stephen Smoogen
2adb66f4d5 General cleanup of aliases and add mobrien to various places. 
Remove old smooge lines
Remove centos box which is no longer existant.

Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
 2021-03-23 16:52:20 +00:00
František Zatloukal
d7c26c5d1b oraculum: Add motd_password 2021-03-23 13:27:04 +01:00
Nick Bebout
0a09869a91 Actually it was requested to be codeofconduct@ 2021-03-22 22:03:41 +00:00
Nick Bebout
62e5539db3 Add code-of-conduct alias pointing to fpl+fcaic, sync changes to fasjson/files/aliases.static 2021-03-22 22:03:41 +00:00
Frank Ch. Eigler
9c2a3b93d9 debuginfod: follow storage PV rename into PVC objects 2021-03-22 18:54:41 +00:00
Frank Ch. Eigler
8b5b37cd4b debuginfod: typo fix on PV storage name 2021-03-22 18:54:41 +00:00
Frank Ch. Eigler
ea334535d3 debuginfod: almost ready for -stg 
- changed deploymentconfig to a template, to adapt to stg-sensitive PV name
- tweaked debuginfod command line
  - to match expected PV mount points
  - to reduce verbosity
  - to specify scanning parallelism
- specified a requested cpu (8) & ram (24GB) allocation
 2021-03-22 18:54:41 +00:00
Frank Ch. Eigler
496735b1a3 debuginfod: initial ansible/openshift work 2021-03-22 18:54:41 +00:00
Aurélien Bompard
2269f0ece1 Prepare Noggin & FASJSON for prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-22 17:53:42 +00:00
Mark O'Brien
f952b7a715 add ipsilon02 2021-03-22 15:38:28 +00:00
Pavel Raiskup
1192d848f2 copr-fe-stg: test stg openid in stg environment 2021-03-22 15:53:52 +01:00
Pavel Raiskup
314359cbf1 copr-backend: increase the prune time to 14 days 
We'll have enough space once the /usr/bin/copr_prune_srpms.py script is
run.
 2021-03-22 14:58:47 +01:00
Mark O'Brien
63ef253011 ipsilon: new prod vm 2021-03-22 11:54:33 +00:00
Francois Andrieu
f7054c12f7 languages: remove registry variable 2021-03-20 19:48:49 +01:00
Kevin Fenzi
02eac50add Add a ipa03 host. 
We want to add another ipa server host in case the load gets large when
we migrate from fas. We can always nuke this one or add more.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-19 21:14:42 +00:00
Kevin Fenzi
55cc28c3b1 base / iptables: Add rules to block staging networks on prod hosts 
In IAD2 the prod and stg hosts are on different VLANs, so we thought we
didn't need this. However, we are still seeing some odd mixing of prod
and stg fedmsgs, so likely some fedmsg port has become enabled accross
all the VLANS. In any case this should do no harm, it just adds 2
subnets on all prod hosts to block staging, except for a small number of
staging_friendly hosts (in the staging_friendly ansible group).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-19 20:08:05 +00:00
Francois Andrieu
ac93b011a8 languages: set volumeName for PVC 2021-03-19 18:47:12 +01:00
Francois Andrieu
5b8316be12 languages: initial deployment on staging 2021-03-19 17:28:21 +00:00
Nils Philippsen
3abcb2d011 ipa/client: clean sss caches on changes 
SSSD caches information, some types for hours by default. When changing
anything in IPA pertaining to a host this role is applied to, clean out
the caches on the host so the changes are effective immediately.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-03-19 09:27:51 +00:00
Michael Scherer
7118984b64 Fix traceback when the creation date is exactly at 0 ms 
nb found that one user was blocking the cronjob from running.
After looking closely, the problem was the creation date is
similar to 2017-02-01 09:10:20+00:00 , so without any dot,
as it was created at the exact microsecond the second started.

The usual format is 2017-02-01 09:10:20.012+00:00, where
split('.') work fine.

Since the traceback stop the whole cronjob, this prevented all
people whose login was after m from having the lifecycle badges.
 2021-03-19 08:14:02 +00:00
Kevin Fenzi
4fbfe6de26 retrace: oops, its home 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-18 12:30:52 -07:00
Kevin Fenzi
ab618af4de retrace: see if moving the homedir setting fixes issues 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-03-18 12:21:50 -07:00
Aurélien Bompard
979e09ab65 Master branch has been renamed to main 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-18 11:43:02 +01:00
Pierre-Yves Chibon
25ff2bea69 haproxy: let's assume zabbix is up for now 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-18 10:11:12 +01:00
Stephen Smoogen
a242509f6d clean up tftp files for external servers. 2021-03-17 16:27:27 -04:00
Stephen Smoogen
341f0c6287 change rdu internal network 
looked at the network data on tcpdump and
realized these systems were on the same network and were on the
172.23.1.0 network. Fix files which mention old network.

Signed-off-by: Stephen Smoogen <smooge@smoogespace.com>
 2021-03-17 15:38:21 -04:00
Pierre-Yves Chibon
7d1fbba00d haproxy: be more flexible for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 17:04:21 +01:00
Pierre-Yves Chibon
23c7ef8c20 haproxy: zabbix returns either 200 or 401 - maybe this way? 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 16:49:43 +01:00
Pierre-Yves Chibon
36de1196e1 haproxy: zabbix returns either 200 or 401 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 16:45:58 +01:00
Pierre-Yves Chibon
ea9d107ef8 haproxy: zabbix now returns 401 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 16:40:32 +01:00
Stephen Smoogen
d9d198d347 mv dhcpd config to correct file 2021-03-17 11:14:50 -04:00
Pierre-Yves Chibon
b3a0df510d haproxy: fix the path where haproxy check for zabbix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 15:58:50 +01:00
Adam Saleh
fac52a1f1f Changed the service name and added even more permissions. 2021-03-17 14:38:17 +01:00
Adam Saleh
fac2e43e3c Had to change the monitor to reapply servicemonitor. 2021-03-17 11:33:39 +01:00
Adam Saleh
d5183979c3 Add wildcard urls to prometheus clusterrole. 2021-03-17 11:19:54 +01:00
Adam Saleh
32771b4f92 Added named port bodhi-web to staging. 2021-03-17 11:07:17 +01:00
Adam Saleh
c430685141 Prometheus monitoring for Bodhi should only be enabled in staging 2021-03-17 10:54:40 +01:00
Adam Saleh
19786a9757 Added the correct monitoring-key label to bodhi-web. 2021-03-17 10:52:37 +01:00
Pierre-Yves Chibon
157e8029a8 haproxy: add support for zabbix in haproxy but stg only 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-03-17 10:34:30 +01:00
Adam Saleh
18cba631bb Adding podmonitor to bodhi-web. 2021-03-17 10:26:07 +01:00
František Zatloukal
b335f30404 oraculum: change oidc callback url to the correct domain 2021-03-17 09:39:23 +01:00
Adam Saleh
283d8a9dd3 Trying to figure out matchlabels for application-monitoring? 2021-03-17 00:31:50 +01:00
Adam Saleh
c34033124a Prometheus operator user was too low. 2021-03-16 23:43:35 +01:00
Adam Saleh
08df33d55b There was wrong namespace in the application-monitoring project 2021-03-16 23:37:21 +01:00