Kevin Fenzi
be1b1503d6
group_vars/all: default nbdr to false for non rdu3 hardware
...
Non rdu3 hardware doesn't have access to tang.
There's some slight exceptions on some hosts that use tpm,
but we can override that in hosts vars.
Also drop the rdu3 datacenter check, we can just use the
nbde boolean to determine if we run it or not.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-09 15:26:23 -07:00
Kevin Fenzi
c87cb347dd
compose-x86-riscv01: try quotes
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-07 16:25:22 -07:00
Kevin Fenzi
e051b69c8b
compose-x86-riscv01: this is a secondary instance
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-07 16:11:52 -07:00
Kevin Fenzi
a3872218b5
ibiblio02: reconfigure network/add new vlan on br1
...
We want to move things over to the new vlan at ibiblio,
so setup ibiblio02 to have a br1 bridge on that vlan.
Note that the current setup before this commit was not even
correct and after this it should correctly be using 2
interfaces bonded with the 2 bridges over it (one of them
tagged for the new vlan, one of them on the default (old)).
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-07 15:36:25 -07:00
Kevin Fenzi
68d7e76db9
inventory: remove some no longer existant hosts and groups
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-06 17:00:09 -07:00
Kevin Fenzi
2d5b729a7c
proxies: move last f41 proxies to f42.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-06 16:33:51 -07:00
Kevin Fenzi
777343ed38
staging: add rdu3.fedoraproject.org to dns search order
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-08-05 20:57:10 -07:00
Adam Williamson
16f753c5ac
Whoops, drop stray openqa_tap12_workers reference
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2025-07-31 13:17:12 -07:00
Adam Williamson
e00c3a7e78
Deploy new openQA aarch64 workers
...
Give one to prod and one to stg, and make them tap2 workers.
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2025-07-31 13:15:04 -07:00
Greg Sutcliffe
15ba14e0bd
Zabbix: cloud servers need to talk to zabbix over the vpn
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-31 15:56:06 +01:00
Greg Sutcliffe
e04efe44ca
Zabbix: ignore swap on bvm-a64
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-31 15:17:00 +01:00
Greg Sutcliffe
729a9542ea
Zabbix: set higher memory threshold for a64 hosts
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-31 15:09:46 +01:00
Greg Sutcliffe
04dcafe578
Zabbix: ignore vnet* on builder hosts
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-31 14:57:04 +01:00
Greg Sutcliffe
b4651f8b5b
Zabbix: Add method to define ping-only hosts in host_vars
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-31 12:52:04 +01:00
Greg Sutcliffe
a1b2783a67
Zabbix: ensure existence of correct hostgroups
...
also applies the correct hostgroups when creating/updating hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-31 12:51:43 +01:00
Greg Sutcliffe
922fec19e2
Zabbix: adjust read/write alerts for Pagure & host
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-31 10:39:55 +01:00
Kevin Fenzi
c48af3dad4
openqa-a64-worker04: add dhcp and host vars
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-30 19:18:18 -07:00
Kevin Fenzi
a8711c244c
openqa-a64-03: add host vars
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-30 17:55:39 -07:00
Kevin Fenzi
8e4ecd355a
smtp-mm: 2gb memory is too low anymore
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-30 16:07:05 -07:00
Kevin Fenzi
97b39b6966
smtp-mm-ib01: move to new vlan
...
Reinstall this vm over on ibiblio05 which has a bridge to the new vlan.
This will be a nice test if everything is working on that vlan before we
move more important things over to it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-30 15:21:58 -07:00
Greg Sutcliffe
322e1a78e4
Zabbix: ignore vnet* on colo_virt
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-30 21:01:35 +01:00
Greg Sutcliffe
ce30505b5c
Zabbix: lower threshold for stg proxy swap
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-30 17:06:01 +01:00
Greg Sutcliffe
3537ad5da3
Zabbix: monitor s390 by ping
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-30 16:26:16 +01:00
Greg Sutcliffe
4a7e9c89d6
Zabbix: that should be on bvm-s390, not buildvm
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-30 13:00:07 +01:00
Greg Sutcliffe
edaf645db4
Zabbix: s390.stg seems to reference zabbix01.iad2 for some reason
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-30 12:48:18 +01:00
Greg Sutcliffe
1479c0ca27
Zabbix: Point colo hosts at Zabbix rdu3 via VPN
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-30 11:54:31 +01:00
Greg Sutcliffe
ddebdf6bde
Zabbix: Change swap threshold for pkgs01, often busy
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-30 11:41:08 +01:00
Greg Sutcliffe
42774b3ff7
Zabbix: Change disk/swap tresholds for pagure02
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-30 11:36:44 +01:00
Greg Sutcliffe
66e2129002
Zabbix: Use VPN DNS name for zabbix on pagure*
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-30 10:50:46 +01:00
Greg Sutcliffe
d98ce7802b
Zabbix: Put pagure-stg01 into prod zabbix (via vpn)
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-30 10:26:20 +01:00
Pavel Raiskup
e6cf44da56
copr: promote tested images to production
2025-07-28 19:50:02 +02:00
Pavel Raiskup
17122b9409
copr: re-uploaded aarch64 image
...
With the correct --arch aarch64 metadata.
2025-07-28 19:22:53 +02:00
Pavel Raiskup
c542c03f44
copr-dev: try a new set of builder images
...
Relates: https://github.com/fedora-copr/copr/pull/3803
2025-07-28 14:20:01 +02:00
Greg Sutcliffe
e72d2b062b
Communishift: add missing name atttribute to communishift-admins
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-28 10:49:03 +01:00
Greg Sutcliffe
64bc5c86ac
Zabbix: ignore tun interfaces on log01
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-28 09:45:32 +01:00
Greg Sutcliffe
93c5faa6c1
Communishift: two new projects for Discourse and Jitsi
...
See Pagure tickets 12661 and 12615
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-28 09:43:35 +01:00
Pavel Raiskup
c1f51e0f32
vmhost-p09-copr01: try to go with nftables
...
Other hypervisors run with iptables, but the p09 machine is Fedora 42,
and we need libvirt-daemon-driver-network package which on Fedora 42
installs nftables anyway.
2025-07-28 09:13:16 +02:00
Adam Williamson
3cb07acd5c
minor openQA comment tweak in inventory
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2025-07-24 14:05:14 -07:00
Kevin Fenzi
c6ed99beb9
nagios: drop some trailing .s on entries that confuses nagios http_check plugin
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-24 13:36:52 -07:00
Kevin Fenzi
3a4aea0cd9
pagure: add another network to blocklist
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-24 13:06:59 -07:00
Greg Sutcliffe
43d29fc0bf
Added buildhw-x86-13.rdu3.fedoraproject.org - in the other places
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-24 15:58:13 +01:00
Greg Sutcliffe
65802a3b1c
Hostvars: Added buildhw-x86-13.rdu3.fedoraproject.org
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-24 15:53:41 +01:00
Greg Sutcliffe
2133e1a71c
Zabbix: copy stg host_vars to prod, they seem to work
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-24 09:32:45 +01:00
Kevin Fenzi
1b43d4160c
nagios: fix duplicate mgmt host 01 that should have been 02
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-23 17:01:07 -07:00
Kevin Fenzi
7adb9a6510
f40-test: f40 is eol, drop instance
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-23 16:27:38 -07:00
Kevin Fenzi
3d079e3fdb
Revert "[pagure] Add staging machine to staging group"
...
This reverts commit daafbfc969 .
Turns out pagure-stg01 is 'special'. ;(
It's a staging machine in the sense that we use it to test pagure
changes before deploying them on prod, but it's not in the rdu3
datacenter at all, it's external to that.
Our rdu3 staging env has no vpn/outside access, so there's no way for
this machine to reach ipa0X.stg ipa servers to enroll with.
So, we wanted to keep it in production as far as things like which ipa
server it enrolls with, etc.
2025-07-23 13:24:54 -07:00
Kevin Fenzi
b87f7de156
pagure: add another network thats hitting the api very hard
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-07-23 13:13:30 -07:00
Greg Sutcliffe
0a53bacdce
Zabbix: ignore internal vnet interfaces when doing network monitoring for vm hosts too
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-23 14:18:36 +01:00
Greg Sutcliffe
a11cf08594
Zabbix: ignore internal vnet interfaces when doing network monitoring for bvm hosts
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-23 13:24:44 +01:00
Greg Sutcliffe
ffbb5e8777
Zabbix: Override package list for Zabbix server
...
The server uses the upstream release RPM, not EPEL, so
the package names are different. Our pattern for OS vars
override host_vars, so we have to explictly set an override var
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-07-23 11:12:34 +01:00