WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-01 05:51:56 +08:00
Code Issues Packages Projects Releases Wiki Activity
43,572 Commits 9 Branches 0 Tags
ccfd1dafa1e9251daff3edbc4e0acf8a5c0311f2
Commit Graph

43572 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kevin Fenzi
ccfd1dafa1 batcave: add python3-sqlalchemy for repo2json script 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 15:34:26 -07:00
Kevin Fenzi
da9483f583 batcave: setup facls for private repo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 15:33:21 -07:00
Kevin Fenzi
fcbd689a9c proxies / rdu3: override ocp_nodes to use the direct connection for rdu3 proxies to openshift 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 15:15:58 -07:00
Adam Williamson
a8dfee88ab openqa: update db host to rdu3 
We're not doing prod *quite* yet, but since it's down now and you
can't really run plays in iad2 any more, not worth splitting this
up temporarily.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-06-30 15:10:23 -07:00
Kevin Fenzi
1812496bea maubot: switch db for cookies to rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 14:39:57 -07:00
James Antill
92aaf2b80e Add zabbix01.rdu3 and .stg. 
Signed-off-by: James Antill <james@and.org>
 2025-06-30 17:19:24 -04:00
Kevin Fenzi
4ad6508bac batcave: fix acls for dns repo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 14:11:50 -07:00
James Antill
99d4f5215b rsyslog: Copy over log01.iad2 rsyslog.conf to log01.rdu3 
Signed-off-by: James Antill <james@and.org>
 2025-06-30 16:19:32 -04:00
Adam Williamson
da9fe714d9 inventory: add openqa_lab to rdu3_staging 
to fix DNS! probably.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-06-30 12:03:51 -07:00
Kevin Fenzi
6d4f4da388 openvpn/server: install the right ccd files in rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 11:56:45 -07:00
Kevin Fenzi
2c0ab5948a add a tag for proxy nagios web 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 11:41:01 -07:00
Michal Konecny
0328532987 [mailman3] Remove IAD2 
There are a lot of things still pointing to IAD2, let's redirect them to RDU3.
 2025-06-30 20:27:53 +02:00
Kevin Fenzi
d831a03bef group_vars/all: change some defaults over to rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 10:26:55 -07:00
Kevin Fenzi
fc396674c9 proxies: ipa web ui, missed a iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 10:15:19 -07:00
Kevin Fenzi
4edce82deb proxies: send ipa web ui to rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 10:11:28 -07:00
Kevin Fenzi
cc03b32da8 inventory: switch to rdu3 ipa servers by default 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 10:10:21 -07:00
Michal Konecny
3321f79d70 [mirror_pagure_ansible] Don't point to iad2 
We are moving away from IAD2 let's not reference it.
 2025-06-30 18:41:28 +02:00
Adam Williamson
63bc9b50ca Replace openqa-lab01.iad2 with openqa-lab01.rdu3 
I think this should be everything. Also trimmed the extremely
generous resources allocated to the VM so they match the ones
used for the prod VM, as that's been working fine.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-06-30 08:19:05 -07:00
Jiri Kyjovsky
1c9a1b4a7e copr-backend: switch powerful instances to power10 2025-06-30 16:10:46 +02:00
Aurélien Bompard
24afcc8bd4 Fix zodbot deployment on value01.rdu3 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-06-30 11:11:55 +02:00
Aurélien Bompard
5203378066 Don't put so much public stuff in the ansible repo, where we don't have env variables 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-06-30 11:00:18 +02:00
Aurélien Bompard
2f22b5edea Fix kerneltest wsgi script broken by f513e7c 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-06-30 11:00:17 +02:00
James Antill
99f6f54346 mailman: No service for rdu3, yet. 
Signed-off-by: James Antill <james@and.org>
 2025-06-29 16:10:51 -04:00
James Antill
b909188491 mailman: No sending emails from rdu3, yet. 
Signed-off-by: James Antill <james@and.org>
 2025-06-29 16:00:05 -04:00
James Antill
8f2282e2c3 Add mailman01.rdu3 host_vars file, on vmhost-05. 
Signed-off-by: James Antill <james@and.org>
 2025-06-29 14:58:34 -04:00
James Antill
5d9a3e5e71 Add mailman01.rdu3. 
Signed-off-by: James Antill <james@and.org>
 2025-06-29 14:57:01 -04:00
Kevin Fenzi
d2a86d10e3 sign-vault01.rdu3: add to correct datacenter 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-29 09:35:12 -07:00
Kevin Fenzi
2f6b8de8c5 sign-vault.rdu3: also setup nbde and serial console in rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-29 09:27:22 -07:00
Kevin Fenzi
d29feb2c71 bvmhost-p10-01: no nbde for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 18:27:20 -07:00
Kevin Fenzi
46e93ae29b proxies: block a few more nets 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 17:07:23 -07:00
Kevin Fenzi
da58790976 batcave01: drop srm, its not actually in epel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 15:57:44 -07:00
Kevin Fenzi
a2dad69ed9 buildvm_aarch64_rdu3: set local rdu3 ipa server as default 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 15:29:40 -07:00
Kevin Fenzi
8c69141111 inventory: add buildhw-x86 to buildhw group 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 15:08:33 -07:00
Kevin Fenzi
36105cc348 inventory: leave the bootstrap group 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 15:06:08 -07:00
Kevin Fenzi
0f43b66635 buildhw-x86-02/03.rdu3: initial configuration as builders. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 15:03:53 -07:00
Kevin Fenzi
d0e1d725d8 inventory: drop ocp bootstrap node 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 15:03:38 -07:00
Kevin Fenzi
d2598f422c buildvm-ppc64le.rdu3: oddly, aarch64 kernel does not boot on ppc64le? 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 13:07:36 -07:00
Kevin Fenzi
842fc58fbb buildvm-ppc64le.rdu3: add to base group 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 13:04:27 -07:00
Kevin Fenzi
dc140eecbf buildvm-ppc64le.rdu3: deploy ppc64le builders in rdu3 
Note that these don't do nested virt due to the way we have the host
setup. We are working on changing that, but for now, this should work
fine for normal builds. Only parts of composes that need nested virt
will fail for a week or so until we get a power9 moved to the new dc
or reconfigure a power10 box.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 12:59:44 -07:00
Kevin Fenzi
da9b97676e nagios: There is not a bvmhost-x86-05 in rdu3 staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 12:45:39 -07:00
Kevin Fenzi
a81fd4e160 inventory: switch primary os-control host to be os-control01.rdu3 
This means openshift app playbook runs will deploy to rdu3 prod cluster
instead of the iad2 one. If there's still some need to deploy something
to iad2 (unlikely) you can modify the playbook to directly call
os-control01.iad2.

This should make it easier to deploy things to rdu3 prod cluster.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 09:47:07 -07:00
Kevin Fenzi
a130888041 bastion / rdu3 / openvpn_server: setup ccd files for rdu3 bastion openvpn 
This deploys a new set of ccd files to bastion*rdu3 for openvpn.
Right now bastion01.iad2 is the vpn hub/server for all connections.
Once dns is changed and clients restarted, they will connect to
bastion01.rdu3.

These ccd files swap the iad2 for rdu3 servers.
So, for example now 'wiki01.vpn.fedoraproject.org', or 'wiki01' as the
proxies call it, will go to wiki01.iad2.fedoraproject.org.

After the dns switch and client reconnects here,
wiki01.vpn.fedoraproject.org/wiki01's ip will be claimed by
wiki01.rdu3.fedoraproject.org instead and wiki01.iad2 will get a dynamic
ip (or will be just turned off).

This will allow us to more easly move services from proxies.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 08:12:44 -07:00
Kevin Fenzi
c1976110a8 rdu3: increase some proc limits in rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-27 21:19:49 -07:00
Kevin Fenzi
cfd9ac4059 memcached02: add to correct rdu3 group 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-27 21:02:24 -07:00
Kevin Fenzi
1b027f42dd releng-compose: nftables, allow rdu3 noc 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-27 20:43:59 -07:00
Kevin Fenzi
56c028d684 bastion: nftables, allow rdu3 noc 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-27 20:40:54 -07:00
Francois Andrieu
3fea252fd8 use rsyslogd v8 conf as the default 2025-06-28 01:41:02 +00:00
James Antill
ca73a63415 koji_builder: Don't need rdu3 contacting iad2. 
Signed-off-by: James Antill <james@and.org>
 2025-06-27 21:23:37 -04:00
Kevin Fenzi
032f6ecc60 buildhw: simplify bkernel role conditional 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-27 17:22:10 -07:00
James Antill
9a3b4670bf koji_builder: Replace openh264.repo instead of remove, due to upgrades. 
Signed-off-by: James Antill <james@and.org>
 2025-06-27 20:06:48 -04:00