Commit Graph

43391 Commits

Author SHA1 Message Date
Kevin Fenzi
d77950adc1 openshift / staging: put control plane vms on different hosts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 12:45:09 -07:00
Kevin Fenzi
aa3e21cb89 nftables / kojibuilder/rdu3: also allow proxy01/10.iad2 external ips for kojipkgs there, fix after move
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 12:17:42 -07:00
Kevin Fenzi
327bf02f05 nftables / kojibuilder: more copypasta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 11:55:12 -07:00
Kevin Fenzi
3b73e26506 nftables / kojibuilder: move rdu3 to the proper section, fix syntax errors
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 11:50:14 -07:00
James Antill
f446135409 Add rdu3 DB names to conditionals in postgresql_server tasks.
Signed-off-by: James Antill <james@and.org>
2025-06-24 18:47:31 +00:00
James Antill
34a0144950 Add prod db03.rdu3.* to groups/mariadb-server.yml
Signed-off-by: James Antill <james@and.org>
2025-06-24 18:47:31 +00:00
James Antill
b4a9b84fec Add prod db*.rdu3.* to groups/postgresql-server.yml
Signed-off-by: James Antill <james@and.org>
2025-06-24 18:47:31 +00:00
James Antill
95befdfe01 db*.rdu3: Add prod rdu3 DB servers using el9
Signed-off-by: James Antill <james@and.org>
2025-06-24 18:47:31 +00:00
Kevin Fenzi
713af9ea3a proxies: move coreos cincinnati to rdu3 openshift
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 11:44:16 -07:00
Kevin Fenzi
ef87a8d197 nftables / kojibuilder: adjust ipa rules to allow rdu3 to us iad2 servers for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 11:38:42 -07:00
Greg Sutcliffe
5a89228bde OCP: Clean up DNS and eth0 variables
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-24 18:28:00 +00:00
Greg Sutcliffe
176d62edc3 OCP: Add host/group vars for staging RDU3 ocp cluster
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-24 18:28:00 +00:00
Kevin Fenzi
96dbff9277 nftables / kojibuilder / rdu3: temp allow external iad infra
Right now we are sending infra web requests (like for packages) to the
iad2 batcave01 via external. Lets allow this so we can install builders,
then change dns/drop it once we move.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 11:23:20 -07:00
Kevin Fenzi
0efed466be nftables: some more tweaks, add batcave01.iad2 to be able to manage rdu3 builders, adjust osuosl for new external ips
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 10:35:37 -07:00
Kevin Fenzi
545dfcf84e buildvm_aarch64_rdu3: fedora 42 here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-24 10:27:16 -07:00
Aurélien Bompard
a3d07546d5 Fix typo
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-24 18:21:39 +02:00
Aurélien Bompard
0ca9152d61 Open firewall for rabbitmq in RDU3
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-24 18:18:31 +02:00
James Antill
b697488d03 nftables.kojibuilder: NFS is also split, not shared.
Signed-off-by: James Antill <james@and.org>
2025-06-24 11:40:21 -04:00
Aurélien Bompard
2e243f0b28 SSSd wants its conf snippets to have the same perms as sssd.conf
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-24 17:38:45 +02:00
Greg Sutcliffe
1a17a7f9e6 postfix: quick-and-dirty fix for SMTP nftables on bastion.rdu3
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-24 10:17:51 +01:00
Greg Sutcliffe
11fb7208ad postfix: Set relayhost correctly for rdu3 hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-06-24 10:17:51 +01:00
Michal Konecny
39ca0fe099 [ipsilon] Add RDU3 centos machines
To prevent removing RDU3 centos machines from HBAC rule let's add them
to task. For more info see https://pagure.io/fedora-infrastructure/issue/12514
2025-06-24 08:11:51 +00:00
Aurélien Bompard
573a151de1 RabbitMQ: use the new configuration file format in RDU3
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-24 10:00:03 +02:00
James Antill
34ff986944 nftables.kojibuilder: Add more rdu3 changes. Add comments.
Signed-off-by: James Antill <james@and.org>
2025-06-24 01:09:58 -04:00
James Antill
cb326914b5 Add db03.stg.rdu3.* to groups/mariadb-server.yml
Signed-off-by: James Antill <james@and.org>
2025-06-24 01:58:01 +00:00
James Antill
a783db6a1c Add db*.stg.rdu3.* to groups/postgresql-server.yml
Signed-off-by: James Antill <james@and.org>
2025-06-24 01:58:01 +00:00
James Antill
aa74975752 db*.stg.rdu3: Add stg.rdu3 DB servers using el9.
Signed-off-by: James Antill <james@and.org>
2025-06-24 01:58:00 +00:00
Kevin Fenzi
eb0237711d builders / rdu3: add a pile of x86 and a64 builders, with some x86-riscv
It should be ok to deploy these before koji exists there.
kojid won't start without intervention, so we should be able to deploy
and start it when koji is ready.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 16:58:20 -07:00
Kevin Fenzi
c2facbdcf9 bvmhost-a64-01: fix duplicate mac address
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 16:52:47 -07:00
Kevin Fenzi
a114df060c move kojipkgs02 and compose-eln in rdu3 to allow space for builders
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 16:02:08 -07:00
Kevin Fenzi
58bdf975c0 dns: actually serve the rdu3 mgmt zone to requests for it instead of the iad2 one
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 15:53:20 -07:00
Kevin Fenzi
88e2ad41f2 inventory: correctly group staging bvmhosts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 15:45:20 -07:00
Kevin Fenzi
d7ecffec22 nftables / staging / rdu3: allow noc01 in rdu3 staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 15:33:45 -07:00
Kevin Fenzi
c7c9c8b73b buildhw-a64-01/02.rdu3: add to inventory, configure
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 15:08:19 -07:00
Kevin Fenzi
9e930c0b69 bvmhost-a64 / rdu3: fix ips
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 14:55:28 -07:00
Kevin Fenzi
67a4fbabb4 bvmhost-a64: fix some mac addresses
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 14:50:24 -07:00
Kevin Fenzi
84fa1657fb bvmhost-a64 / rdu3: fix ip address var
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 14:40:42 -07:00
Kevin Fenzi
fd50d8b840 bvmhost-a64-01.stg: add to right group
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 14:39:30 -07:00
Kevin Fenzi
d293f61b0e bvmhost-a64-01.stg: fix mac addresses
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 14:34:23 -07:00
Kevin Fenzi
8b7515d710 bvmhost-a64: add to correct group
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 14:23:56 -07:00
Kevin Fenzi
63b3d333d6 bvmhost-a64 for rdu3
Here's the 4 bvmhost's for rdu3 + one staging one.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 14:22:10 -07:00
Dusty Mabe
b7bd7b0e35 openshift-apps/coreos-cincinnati: switch to following main branch
If we ever need to use a git sha here again we can just update the
fcos_cincinnati_git_ref vars the same way we did in the past. For
now let's just follow what's in the main branch.
2025-06-23 14:53:07 -04:00
Aurélien Bompard
f185573c41 Do stuff on iad2_internal also on rdu3_internal
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-23 19:02:44 +02:00
Kevin Fenzi
20ba9db962 kickstarts: drop tmpwatch from aarch64 kickstart
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-23 09:40:29 -07:00
David Kirwan
038d535eee forgejo: add missing templating variable
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-06-23 17:37:52 +01:00
David Kirwan
b43d4f815a forgejo: backups, OADP operator configuration (WIP)
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-06-23 17:34:38 +01:00
Aurélien Bompard
d22bde741d Nagios: template the mail_queue.cfg file
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-23 18:11:28 +02:00
Aurélien Bompard
0b7bab72e6 Nagios: filter the hostgroups again
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-23 17:37:32 +02:00
Aurélien Bompard
2695b3448a Toddlers in IPA: use the full host name
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-23 17:24:03 +02:00
Aurélien Bompard
8be052d10f Toddler cleaning-packager-groups: fix service name
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-23 17:05:17 +02:00