Kevin Fenzi
d77950adc1
openshift / staging: put control plane vms on different hosts
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-24 12:45:09 -07:00
Kevin Fenzi
aa3e21cb89
nftables / kojibuilder/rdu3: also allow proxy01/10.iad2 external ips for kojipkgs there, fix after move
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-24 12:17:42 -07:00
Kevin Fenzi
327bf02f05
nftables / kojibuilder: more copypasta
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-24 11:55:12 -07:00
Kevin Fenzi
3b73e26506
nftables / kojibuilder: move rdu3 to the proper section, fix syntax errors
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-24 11:50:14 -07:00
James Antill
f446135409
Add rdu3 DB names to conditionals in postgresql_server tasks.
...
Signed-off-by: James Antill <james@and.org >
2025-06-24 18:47:31 +00:00
James Antill
34a0144950
Add prod db03.rdu3.* to groups/mariadb-server.yml
...
Signed-off-by: James Antill <james@and.org >
2025-06-24 18:47:31 +00:00
James Antill
b4a9b84fec
Add prod db*.rdu3.* to groups/postgresql-server.yml
...
Signed-off-by: James Antill <james@and.org >
2025-06-24 18:47:31 +00:00
James Antill
95befdfe01
db*.rdu3: Add prod rdu3 DB servers using el9
...
Signed-off-by: James Antill <james@and.org >
2025-06-24 18:47:31 +00:00
Kevin Fenzi
713af9ea3a
proxies: move coreos cincinnati to rdu3 openshift
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-24 11:44:16 -07:00
Kevin Fenzi
ef87a8d197
nftables / kojibuilder: adjust ipa rules to allow rdu3 to us iad2 servers for now
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-24 11:38:42 -07:00
Greg Sutcliffe
5a89228bde
OCP: Clean up DNS and eth0 variables
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-06-24 18:28:00 +00:00
Greg Sutcliffe
176d62edc3
OCP: Add host/group vars for staging RDU3 ocp cluster
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-06-24 18:28:00 +00:00
Kevin Fenzi
96dbff9277
nftables / kojibuilder / rdu3: temp allow external iad infra
...
Right now we are sending infra web requests (like for packages) to the
iad2 batcave01 via external. Lets allow this so we can install builders,
then change dns/drop it once we move.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-24 11:23:20 -07:00
Kevin Fenzi
0efed466be
nftables: some more tweaks, add batcave01.iad2 to be able to manage rdu3 builders, adjust osuosl for new external ips
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-24 10:35:37 -07:00
Kevin Fenzi
545dfcf84e
buildvm_aarch64_rdu3: fedora 42 here
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-24 10:27:16 -07:00
Aurélien Bompard
a3d07546d5
Fix typo
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-06-24 18:21:39 +02:00
Aurélien Bompard
0ca9152d61
Open firewall for rabbitmq in RDU3
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-06-24 18:18:31 +02:00
James Antill
b697488d03
nftables.kojibuilder: NFS is also split, not shared.
...
Signed-off-by: James Antill <james@and.org >
2025-06-24 11:40:21 -04:00
Aurélien Bompard
2e243f0b28
SSSd wants its conf snippets to have the same perms as sssd.conf
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-06-24 17:38:45 +02:00
Greg Sutcliffe
1a17a7f9e6
postfix: quick-and-dirty fix for SMTP nftables on bastion.rdu3
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-06-24 10:17:51 +01:00
Greg Sutcliffe
11fb7208ad
postfix: Set relayhost correctly for rdu3 hosts
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org >
2025-06-24 10:17:51 +01:00
Michal Konecny
39ca0fe099
[ipsilon] Add RDU3 centos machines
...
To prevent removing RDU3 centos machines from HBAC rule let's add them
to task. For more info see https://pagure.io/fedora-infrastructure/issue/12514
2025-06-24 08:11:51 +00:00
Aurélien Bompard
573a151de1
RabbitMQ: use the new configuration file format in RDU3
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-06-24 10:00:03 +02:00
James Antill
34ff986944
nftables.kojibuilder: Add more rdu3 changes. Add comments.
...
Signed-off-by: James Antill <james@and.org >
2025-06-24 01:09:58 -04:00
James Antill
cb326914b5
Add db03.stg.rdu3.* to groups/mariadb-server.yml
...
Signed-off-by: James Antill <james@and.org >
2025-06-24 01:58:01 +00:00
James Antill
a783db6a1c
Add db*.stg.rdu3.* to groups/postgresql-server.yml
...
Signed-off-by: James Antill <james@and.org >
2025-06-24 01:58:01 +00:00
James Antill
aa74975752
db*.stg.rdu3: Add stg.rdu3 DB servers using el9.
...
Signed-off-by: James Antill <james@and.org >
2025-06-24 01:58:00 +00:00
Kevin Fenzi
eb0237711d
builders / rdu3: add a pile of x86 and a64 builders, with some x86-riscv
...
It should be ok to deploy these before koji exists there.
kojid won't start without intervention, so we should be able to deploy
and start it when koji is ready.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 16:58:20 -07:00
Kevin Fenzi
c2facbdcf9
bvmhost-a64-01: fix duplicate mac address
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 16:52:47 -07:00
Kevin Fenzi
a114df060c
move kojipkgs02 and compose-eln in rdu3 to allow space for builders
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 16:02:08 -07:00
Kevin Fenzi
58bdf975c0
dns: actually serve the rdu3 mgmt zone to requests for it instead of the iad2 one
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 15:53:20 -07:00
Kevin Fenzi
88e2ad41f2
inventory: correctly group staging bvmhosts
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 15:45:20 -07:00
Kevin Fenzi
d7ecffec22
nftables / staging / rdu3: allow noc01 in rdu3 staging
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 15:33:45 -07:00
Kevin Fenzi
c7c9c8b73b
buildhw-a64-01/02.rdu3: add to inventory, configure
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 15:08:19 -07:00
Kevin Fenzi
9e930c0b69
bvmhost-a64 / rdu3: fix ips
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 14:55:28 -07:00
Kevin Fenzi
67a4fbabb4
bvmhost-a64: fix some mac addresses
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 14:50:24 -07:00
Kevin Fenzi
84fa1657fb
bvmhost-a64 / rdu3: fix ip address var
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 14:40:42 -07:00
Kevin Fenzi
fd50d8b840
bvmhost-a64-01.stg: add to right group
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 14:39:30 -07:00
Kevin Fenzi
d293f61b0e
bvmhost-a64-01.stg: fix mac addresses
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 14:34:23 -07:00
Kevin Fenzi
8b7515d710
bvmhost-a64: add to correct group
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 14:23:56 -07:00
Kevin Fenzi
63b3d333d6
bvmhost-a64 for rdu3
...
Here's the 4 bvmhost's for rdu3 + one staging one.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 14:22:10 -07:00
Dusty Mabe
b7bd7b0e35
openshift-apps/coreos-cincinnati: switch to following main branch
...
If we ever need to use a git sha here again we can just update the
fcos_cincinnati_git_ref vars the same way we did in the past. For
now let's just follow what's in the main branch.
2025-06-23 14:53:07 -04:00
Aurélien Bompard
f185573c41
Do stuff on iad2_internal also on rdu3_internal
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-06-23 19:02:44 +02:00
Kevin Fenzi
20ba9db962
kickstarts: drop tmpwatch from aarch64 kickstart
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-06-23 09:40:29 -07:00
David Kirwan
038d535eee
forgejo: add missing templating variable
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2025-06-23 17:37:52 +01:00
David Kirwan
b43d4f815a
forgejo: backups, OADP operator configuration (WIP)
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2025-06-23 17:34:38 +01:00
Aurélien Bompard
d22bde741d
Nagios: template the mail_queue.cfg file
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-06-23 18:11:28 +02:00
Aurélien Bompard
0b7bab72e6
Nagios: filter the hostgroups again
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-06-23 17:37:32 +02:00
Aurélien Bompard
2695b3448a
Toddlers in IPA: use the full host name
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-06-23 17:24:03 +02:00
Aurélien Bompard
8be052d10f
Toddler cleaning-packager-groups: fix service name
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-06-23 17:05:17 +02:00