Kevin Fenzi
1b1c9c4968
add back in containers
2018-01-12 20:05:41 +00:00
Stephen Smoogen
ece29a885c
remove the mirrorlist2 items from haproxy
2018-01-12 19:38:51 +00:00
Ricky Elrod
a5d017c71f
new os-master cert
...
Signed-off-by: Ricky Elrod <relrod@redhat.com >
2017-11-29 07:14:00 +00:00
Patrick Uiterwijk
cc1795cec7
Also add koji stuff on other internal proxies
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-11-24 21:45:48 +00:00
Patrick Uiterwijk
0a98934168
Make the haproxy admin file root owned, the group isn't available due to selinux
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-11-22 19:37:27 +00:00
Ralph Bean
2adfc5a305
Enable odcs prod nodes.
2017-10-13 14:45:16 +00:00
Patrick Uiterwijk
5a5fe6a93a
Revert "Not now please"
...
This reverts commit cabef76b08 .
2017-10-12 18:59:41 +00:00
Patrick Uiterwijk
cabef76b08
Not now please
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-10-12 18:58:18 +00:00
Patrick Uiterwijk
253481598f
Automated rewrite of haproxy.cfg to new split frontend and backend
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-10-08 23:32:20 +00:00
Patrick Uiterwijk
936e8b261a
yum accepted pkg=, package calls it name=
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2017-10-09 00:38:26 +02:00
Patrick Uiterwijk
039b08354a
Yum allowed state=installed. Lets use state=present consistently
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-10-08 22:31:03 +00:00
Patrick Uiterwijk
adcbf72f03
Packageize this, packageize that, packageize the world
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-10-08 22:25:52 +00:00
Ralph Bean
e088283bfb
URL change for odcs.
2017-10-05 18:02:31 +00:00
Ralph Bean
5e6d8e074f
Fix PDC haproxy entry, to the original intent.
2017-10-05 13:36:02 +00:00
Ralph Bean
15a506191d
Remove erroneous host from stg haproxy config.
2017-09-25 18:31:05 +00:00
Ralph Bean
f8d4b1e0f0
Proxy configuration for ODCS in stg.
2017-09-25 18:01:11 +00:00
Patrick Uiterwijk
4005fd5929
Fix krb5 with failover
...
Seems like IPA 4.5.0 broke active/active failover of krb5 KDC.
While we wait on getting that fixed, let's set us up for active/passive failover on the HTTPD end.
Since we can't do active/passive for UDP (there's no checks there), let's just remove ipa02 for those.
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-09-15 22:53:35 +00:00
Kevin Fenzi
3ae95a6169
fix names
2017-08-22 19:49:20 +00:00
Kevin Fenzi
4047dc3228
move file for env name
2017-08-22 19:45:25 +00:00
Kevin Fenzi
9d330280ef
add prod os CA and make haproxy use it
2017-08-22 19:41:07 +00:00
Kevin Fenzi
fcf82e738c
drop 2 mirrorlists we do not need
2017-08-10 22:40:39 +00:00
Patrick Uiterwijk
5bd010cc68
Move to registry02/03 in production
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2017-08-04 00:22:01 +02:00
Ralph Bean
bf6db455d1
Try sticky haproxy sessions for pdc to share some of the load.
2017-08-01 17:27:12 +00:00
Patrick Uiterwijk
67939cfd7a
New OS certificate
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-06-29 15:17:47 +00:00
Kevin Fenzi
04e93913b4
update openshift ca from current install
2017-05-25 19:35:48 +00:00
Kevin Fenzi
eb1dd0ae0f
look, you can fix a error with 0s
2017-05-16 15:24:23 +00:00
Patrick Uiterwijk
f3b344d52f
We expect a 503
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-12 15:42:22 +00:00
Patrick Uiterwijk
02df22e6c2
Fix cert validation
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-12 15:37:09 +00:00
Patrick Uiterwijk
331a664f1e
Updatecert
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-12 15:03:41 +00:00
Patrick Uiterwijk
3fa5e3123b
Create app.os.fp.o
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-12 14:29:04 +00:00
Patrick Uiterwijk
2b365b3c32
Add the newest openshift cert
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-12 02:34:39 +00:00
Patrick Uiterwijk
4a5126fb84
os api is moved to 443
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2017-05-11 21:41:05 +00:00
Ricky Elrod
061cb575b4
happy, puiterwijk?
...
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org >
2017-05-11 19:58:14 +00:00
Ricky Elrod
bbe6c25b6f
try os-master proxy setup
...
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org >
2017-05-11 19:49:31 +00:00
Kevin Fenzi
31254f9775
kill paste0* instances
2017-04-11 19:42:45 +00:00
Ralph Bean
abdc3271d5
Re-enable pdc-web01 in staging only.
2017-04-07 12:47:07 +00:00
Ralph Bean
242067b390
Tell haproxy to use pdc-web02 instead of pdc-web01.
2017-04-06 17:54:14 +00:00
Kevin Fenzi
ac41432c7c
re-add 02
2017-04-05 23:08:35 +00:00
Kevin Fenzi
86307b7147
take kojipkgs02 back out
2017-04-05 22:56:07 +00:00
Kevin Fenzi
331fd4b512
ok, fingers crossed, lets put kojipkgs02 back in
2017-04-05 22:49:06 +00:00
Kevin Fenzi
fc0a6e176f
take kojipkgs02 out to test it with varnish
2017-04-05 21:55:21 +00:00
Kevin Fenzi
78106fe297
modernpaste02 only in prod
2017-03-04 19:34:08 +00:00
Kevin Fenzi
b5c4af2f26
add modernpaste02 to haproxy and varnish to cache paste static stuff
2017-03-04 19:32:54 +00:00
Kevin Fenzi
077cbc03d6
remove fedorahosted from nagios
2017-03-02 22:16:19 +00:00
Kevin Fenzi
e77bd253f6
add registery02 to haproxy
2017-03-02 01:26:23 +00:00
Ralph Bean
4a38cb21b6
Wire proxies up to mbs.fp.o.
2017-03-01 18:38:52 +00:00
Stephen Smoogen
ea5a7338cf
and we no longer need mirrorlist-ibiblio after rebuild
2017-02-22 20:29:36 +00:00
Ricky Elrod
954eac7bb1
lift stg conditional in haproxy
...
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org >
2017-02-15 21:19:35 +00:00
Kevin Fenzi
21c04b5f7a
it is a poor man that can only think of one way to spell a word
2017-02-13 21:02:09 +00:00
Kevin Fenzi
66d866ea3a
and switch haproxy to use mirrorlist-proxy group
2017-02-13 20:58:26 +00:00