WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-03 10:01:44 +08:00
Code Issues Packages Projects Releases Wiki Activity
32,723 Commits 9 Branches 0 Tags
bfcf91830b9bc72edcef66b2d2f044f31c7d1874
Commit Graph

32723 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kevin Fenzi
bfcf91830b proxies / staging: adjust fasjson website a bit 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-01 11:27:11 -07:00
Kevin Fenzi
f2fd9f897c koji_builder / kojid: on failure, restart kojid 
kojid from time to time hits OOM-killer and is killed, making the
builder basically never checkin or run builds until a manual restart.
Setting this should restart it after such a OOM event and hopefully keep
it processing.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-01 17:58:32 +00:00
Kevin Fenzi
69cec0c4f6 proxies / staging: add fasjson.stg website/reverseproxy 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-01 10:39:25 -07:00
Mark O'Brien
e4e6ede45b [proxies] add proxy37/38 2020-09-01 15:45:29 +01:00
Mark O'Brien
1826de3261 [batcave] allow access to new proxy servers 2020-09-01 14:53:49 +01:00
Aurélien Bompard
9717fadb44 Ansible modules for IPA: don't validate the certs 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 15:43:49 +02:00
Aurélien Bompard
105bd01e3a Typo in daf96ef 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 15:39:56 +02:00
Aurélien Bompard
6788ce0ab1 Noggin: re-enable Fedora Messaging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 15:37:08 +02:00
Aurélien Bompard
8334489a75 FASJSON: fixup install 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 15:36:36 +02:00
Aurélien Bompard
44734cabb1 Noggin: leave a space for FAS 2020-09-01 15:35:50 +02:00
Aurélien Bompard
daf96efd15 IPA: use ansible modules and tasks wherever possible 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 15:34:07 +02:00
Aurélien Bompard
944431bf59 IPA: Allow users to read their own data 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-01 00:11:45 +02:00
Kevin Fenzi
58aafea954 rabbitmq staging: Use correct kickstart 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 15:10:07 -07:00
Kevin Fenzi
48fbac9ea9 inventory: rabbitmq03.stg: move to vmhost-x86-05 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 14:55:16 -07:00
Kevin Fenzi
a1e25a4467 Add staging rabbitmq cluster machines. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 14:30:57 -07:00
Kevin Fenzi
c7cf438e8c fedora-web: adjust to staging not having sysadmin-releng group. 
Since we are not using fas in staging, but are switching to noggin, we
currently don't have the sysadmin-releng group. For now, just switch to
apache.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 14:09:02 -07:00
Aurélien Bompard
b2cdf5dc62 Now that IPA is the reference, allow users to change their own attributes 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 22:59:00 +02:00
Kevin Fenzi
e200f371dc fas_client: change cron to generate new aliases every 10min instead of once a day 
There seems to be a increase in number of people wanting to use their
fedoraproject.org alias right away. So, increase the time we generate
it. It currently takes 14seconds to run it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 20:55:23 +00:00
Kevin Fenzi
6e7844e5e6 sundries01.stg: This host has to be rhel7 for now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 13:30:55 -07:00
Kevin Fenzi
13b543f11b Add db-fas01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 10:42:39 -07:00
Aurélien Bompard
28ae976ab2 Add permissions to the noggin user to activate stageusers 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 19:12:54 +02:00
Aurélien Bompard
d5b73b81a5 Disable Fedora Messaging in Noggin 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 19:12:54 +02:00
Kevin Fenzi
3972fa34f8 inventory: add sundries01.stg to inventory too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 10:00:43 -07:00
Kevin Fenzi
f73f3fc218 Add db01.stg and sundries01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-31 09:58:18 -07:00
Stephen Smoogen
b5d1ea15db remember to put something in the [staging] group so it gets that groups environment variables 2020-08-31 11:56:54 -04:00
Aurélien Bompard
4be8fab65e Adjust healthz probes 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 17:47:51 +02:00
Aurélien Bompard
4fa318d86c Noggin: set the script_name env var 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 17:46:35 +02:00
Stephen Smoogen
fede1317e7 proxy*.stg.iad2.fedoraproject.org is not on the vpn 2020-08-31 11:09:14 -04:00
Aurélien Bompard
ab34b044a6 Noggin: set the application root 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 16:59:51 +02:00
Aurélien Bompard
7b2d93d56a Fix cutnpaste error 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 16:50:36 +02:00
Stephen Coady
aecb40588c add config flag to allow single run 
Signed-off-by: Stephen Coady <scoady@redhat.com>
 2020-08-31 15:19:08 +01:00
Luca BRUNO
659127219f coreos-cincinnati: build latest master (e13c758) 2020-08-31 11:36:58 +00:00
Aurélien Bompard
78736ad275 Configure the noggin route 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-08-31 12:52:16 +02:00
Nils Philippsen
45e9d773ac Reference staging openshift hosts in IAD2 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-08-31 12:00:31 +02:00
Kevin Fenzi
9e1301c417 planet: add fedora-messaging certs, user and config 
The venus package was changed to use fedora-messaging, but we need to
now install certs, make a rabbitmq user and add a config for it to use.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-30 10:46:24 -07:00
Stephen Smoogen
a8b9a38ec0 a host_vars for the proxy02.stg box 2020-08-28 14:32:03 -04:00
Stephen Smoogen
91dc7a083a put in second stage proxy for us to work with 2020-08-28 13:17:15 -04:00
Stephen Smoogen
2af95e59f4 put in changes for rdu-cc hosts 2020-08-28 11:22:38 -04:00
Stephen Smoogen
15348981f8 try to fix part of ticket #9273 by increasing the number of open files allowed on log servers and people as they have a large number of files to deal with. 2020-08-28 08:26:19 -04:00
Nils Philippsen
750dc6da45 Add playbooks to manually backup/restore IPA (stg) 
This is to be able to restore things to a clean slate when we test the
fas2ipa data migration script.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2020-08-27 23:30:24 +00:00
Mark O'Brien
2cc7c82fb2 [proxies] ensure dir exists 2020-08-27 15:13:19 +01:00
Kevin Fenzi
005af159b6 nfs/client: Correct netapp name for staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 15:53:44 -07:00
Kevin Fenzi
2af0042d5c koji01.stg: rename some files to the current domain name. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 15:46:55 -07:00
Kevin Fenzi
c9e3752a3f koji-hub: do not apply fas_client or 2fa in staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 15:38:07 -07:00
Kevin Fenzi
2379b465ab postgres / server / koji sessions script: remove 
Turns out copy module doesn't actually have a 'absent' state.
So, just remove this (we no longer need it as there's a timer on koji
hub that does this from there).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 13:50:33 -07:00
Kevin Fenzi
9ece52bcca Fix virthost names for stg instances. 
We renamed bvirthost to bvmhost...

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 13:28:28 -07:00
Kevin Fenzi
89befb587a postgresql: adjust playbook to not run fas_client role or 2fa task in stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 13:21:01 -07:00
Kevin Fenzi
345be768f9 add a db-koji01.stg and a koji01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 13:18:05 -07:00
Kevin Fenzi
af2a4c29e4 fas_client / aliases: update the 'releng' address with current members 
This has 2 folks that are no longer around, so update it with current
members.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-26 10:17:40 -07:00
Kevin Fenzi
1cf024e37f Freeze break request: add vpn ccd file and vpn role to retrace 
We need retrace03 on the vpn at least for now, or else 2fa won't work.
At some point when fasClient is gone we may be able to drop this
when we switch to sssd or something else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-08-25 14:12:12 -07:00