Commit Graph

9900 Commits

Author SHA1 Message Date
Kevin Fenzi
be1b1503d6 group_vars/all: default nbdr to false for non rdu3 hardware
Non rdu3 hardware doesn't have access to tang.
There's some slight exceptions on some hosts that use tpm,
but we can override that in hosts vars.

Also drop the rdu3 datacenter check, we can just use the
nbde boolean to determine if we run it or not.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-09 15:26:23 -07:00
Kevin Fenzi
c87cb347dd compose-x86-riscv01: try quotes
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-07 16:25:22 -07:00
Kevin Fenzi
e051b69c8b compose-x86-riscv01: this is a secondary instance
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-07 16:11:52 -07:00
Kevin Fenzi
a3872218b5 ibiblio02: reconfigure network/add new vlan on br1
We want to move things over to the new vlan at ibiblio,
so setup ibiblio02 to have a br1 bridge on that vlan.
Note that the current setup before this commit was not even
correct and after this it should correctly be using 2
interfaces bonded with the 2 bridges over it (one of them
tagged for the new vlan, one of them on the default (old)).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-07 15:36:25 -07:00
Kevin Fenzi
68d7e76db9 inventory: remove some no longer existant hosts and groups
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-06 17:00:09 -07:00
Kevin Fenzi
2d5b729a7c proxies: move last f41 proxies to f42.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-06 16:33:51 -07:00
Kevin Fenzi
777343ed38 staging: add rdu3.fedoraproject.org to dns search order
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-05 20:57:10 -07:00
Adam Williamson
16f753c5ac Whoops, drop stray openqa_tap12_workers reference
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-07-31 13:17:12 -07:00
Adam Williamson
e00c3a7e78 Deploy new openQA aarch64 workers
Give one to prod and one to stg, and make them tap2 workers.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-07-31 13:15:04 -07:00
Greg Sutcliffe
15ba14e0bd Zabbix: cloud servers need to talk to zabbix over the vpn
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-31 15:56:06 +01:00
Greg Sutcliffe
e04efe44ca Zabbix: ignore swap on bvm-a64
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-31 15:17:00 +01:00
Greg Sutcliffe
729a9542ea Zabbix: set higher memory threshold for a64 hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-31 15:09:46 +01:00
Greg Sutcliffe
04dcafe578 Zabbix: ignore vnet* on builder hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-31 14:57:04 +01:00
Greg Sutcliffe
b4651f8b5b Zabbix: Add method to define ping-only hosts in host_vars
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-31 12:52:04 +01:00
Greg Sutcliffe
a1b2783a67 Zabbix: ensure existence of correct hostgroups
also applies the correct hostgroups when creating/updating hosts

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-31 12:51:43 +01:00
Greg Sutcliffe
922fec19e2 Zabbix: adjust read/write alerts for Pagure & host
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-31 10:39:55 +01:00
Kevin Fenzi
c48af3dad4 openqa-a64-worker04: add dhcp and host vars
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-30 19:18:18 -07:00
Kevin Fenzi
a8711c244c openqa-a64-03: add host vars
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-30 17:55:39 -07:00
Kevin Fenzi
8e4ecd355a smtp-mm: 2gb memory is too low anymore
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-30 16:07:05 -07:00
Kevin Fenzi
97b39b6966 smtp-mm-ib01: move to new vlan
Reinstall this vm over on ibiblio05 which has a bridge to the new vlan.
This will be a nice test if everything is working on that vlan before we
move more important things over to it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-30 15:21:58 -07:00
Greg Sutcliffe
322e1a78e4 Zabbix: ignore vnet* on colo_virt
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-30 21:01:35 +01:00
Greg Sutcliffe
ce30505b5c Zabbix: lower threshold for stg proxy swap
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-30 17:06:01 +01:00
Greg Sutcliffe
3537ad5da3 Zabbix: monitor s390 by ping
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-30 16:26:16 +01:00
Greg Sutcliffe
4a7e9c89d6 Zabbix: that should be on bvm-s390, not buildvm
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-30 13:00:07 +01:00
Greg Sutcliffe
edaf645db4 Zabbix: s390.stg seems to reference zabbix01.iad2 for some reason
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-30 12:48:18 +01:00
Greg Sutcliffe
1479c0ca27 Zabbix: Point colo hosts at Zabbix rdu3 via VPN
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-30 11:54:31 +01:00
Greg Sutcliffe
ddebdf6bde Zabbix: Change swap threshold for pkgs01, often busy
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-30 11:41:08 +01:00
Greg Sutcliffe
42774b3ff7 Zabbix: Change disk/swap tresholds for pagure02
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-30 11:36:44 +01:00
Greg Sutcliffe
66e2129002 Zabbix: Use VPN DNS name for zabbix on pagure*
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-30 10:50:46 +01:00
Greg Sutcliffe
d98ce7802b Zabbix: Put pagure-stg01 into prod zabbix (via vpn)
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-30 10:26:20 +01:00
Pavel Raiskup
e6cf44da56 copr: promote tested images to production 2025-07-28 19:50:02 +02:00
Pavel Raiskup
17122b9409 copr: re-uploaded aarch64 image
With the correct --arch aarch64 metadata.
2025-07-28 19:22:53 +02:00
Pavel Raiskup
c542c03f44 copr-dev: try a new set of builder images
Relates: https://github.com/fedora-copr/copr/pull/3803
2025-07-28 14:20:01 +02:00
Greg Sutcliffe
e72d2b062b Communishift: add missing name atttribute to communishift-admins
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-28 10:49:03 +01:00
Greg Sutcliffe
64bc5c86ac Zabbix: ignore tun interfaces on log01
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-28 09:45:32 +01:00
Greg Sutcliffe
93c5faa6c1 Communishift: two new projects for Discourse and Jitsi
See Pagure tickets 12661 and 12615

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-28 09:43:35 +01:00
Pavel Raiskup
c1f51e0f32 vmhost-p09-copr01: try to go with nftables
Other hypervisors run with iptables, but the p09 machine is Fedora 42,
and we need libvirt-daemon-driver-network package which on Fedora 42
installs nftables anyway.
2025-07-28 09:13:16 +02:00
Adam Williamson
3cb07acd5c minor openQA comment tweak in inventory
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-07-24 14:05:14 -07:00
Kevin Fenzi
c6ed99beb9 nagios: drop some trailing .s on entries that confuses nagios http_check plugin
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-24 13:36:52 -07:00
Kevin Fenzi
3a4aea0cd9 pagure: add another network to blocklist
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-24 13:06:59 -07:00
Greg Sutcliffe
43d29fc0bf Added buildhw-x86-13.rdu3.fedoraproject.org - in the other places
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-24 15:58:13 +01:00
Greg Sutcliffe
65802a3b1c Hostvars: Added buildhw-x86-13.rdu3.fedoraproject.org
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-24 15:53:41 +01:00
Greg Sutcliffe
2133e1a71c Zabbix: copy stg host_vars to prod, they seem to work
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-24 09:32:45 +01:00
Kevin Fenzi
1b43d4160c nagios: fix duplicate mgmt host 01 that should have been 02
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-23 17:01:07 -07:00
Kevin Fenzi
7adb9a6510 f40-test: f40 is eol, drop instance
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-23 16:27:38 -07:00
Kevin Fenzi
3d079e3fdb Revert "[pagure] Add staging machine to staging group"
This reverts commit daafbfc969.

Turns out pagure-stg01 is 'special'. ;(

It's a staging machine in the sense that we use it to test pagure
changes before deploying them on prod, but it's not in the rdu3
datacenter at all, it's external to that.

Our rdu3 staging env has no vpn/outside access, so there's no way for
this machine to reach ipa0X.stg ipa servers to enroll with.

So, we wanted to keep it in production as far as things like which ipa
server it enrolls with, etc.
2025-07-23 13:24:54 -07:00
Kevin Fenzi
b87f7de156 pagure: add another network thats hitting the api very hard
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-23 13:13:30 -07:00
Greg Sutcliffe
0a53bacdce Zabbix: ignore internal vnet interfaces when doing network monitoring for vm hosts too
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-23 14:18:36 +01:00
Greg Sutcliffe
a11cf08594 Zabbix: ignore internal vnet interfaces when doing network monitoring for bvm hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-23 13:24:44 +01:00
Greg Sutcliffe
ffbb5e8777 Zabbix: Override package list for Zabbix server
The server uses the upstream release RPM, not EPEL, so
the package names are different. Our pattern for OS vars
override host_vars, so we have to explictly set an override var

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-23 11:12:34 +01:00