These are internal proxies, they don't need to bother running anubis at
all, since they don't get any external traffic.
Just doing this to rule out some problem with additional proxy layer
and anubis causing the timeouts we are seeing.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This seems to be a similar case to the kojipkgs one, where we see from
time to time timeouts from proxies to pkgs01.
If it's a health check, haproxy will mark the backend down.
If it's a user request they will get a timeout and a 503 back.
This will help mitigate the second problem and retry those.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This adds 3 power9 machines in the new 'fedora-isolated' vlan
in rdu3. This is the vlan thats going to house the moved rdu2-cc
hardware in rdu3. We already moved these 3 machines from iad2
so we can use them to try out the new vlan and acls and such.
This adds host vars for the 3 new machines (mac address, ips, etc)
It adds them to the copr_hypervisor group in inventory
It adds their mgmt to dhcpd config so they get known ip's for
their mgmt interfaces instead of dynamic ones.
It adds a 8 disk ppc64le kickstart to install them with.
It also fixes the dhcpd config for the bvmhost-p09-01-stg mgmt
interface, it's off by one.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We are having problems with connections sometimes hanging from proxies
to kojipkgs. Lets try and mitigate that at the haproxy level and
hopefully improve things while we try and figure out what the underlying
cause is.
This should retry connections that failed for any 'retryable' output
(including timeout) and also it should try a _different_ backend than
the one that returned the error. This will not eliminate errors, but
should reduce them.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We have a bunch of hosts that don't run Ansible or aren't reachable,
such as builders or OpenShift workers. These are currently defined in
group_vars/nagios:rdu3_management_hosts.
This commit replicates the function for Zabbix, defining hosts with
ping-only checks as part of the server role.
I'm not *super happy* about how I've included this, but I'm putting it
on an refactor todo list along with some other things - this works for
now.
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
The "file+env_suffix" is a problem when dealing with hosts like
pagure-stg01 that actually exists in prod. We can't override env_suffix
without breaking many things.
Instead, the PSKs are now defined directly in the private vars, instead
of in a file, and the variable name is then read from inventory vars.
This means we can override it for a group/host.
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
