WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 03:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity
43,915 Commits 9 Branches 0 Tags
ee45812237818a48718a957d743a1d08479b2ac9
Commit Graph

43915 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Greg Sutcliffe
ee45812237 Communishift: use EPEL dependencies instead of Pip 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-28 10:40:05 +01:00
Greg Sutcliffe
64bc5c86ac Zabbix: ignore tun interfaces on log01 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-28 09:45:32 +01:00
Greg Sutcliffe
93c5faa6c1 Communishift: two new projects for Discourse and Jitsi 
See Pagure tickets 12661 and 12615

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-28 09:43:35 +01:00
Pavel Raiskup
c1f51e0f32 vmhost-p09-copr01: try to go with nftables 
Other hypervisors run with iptables, but the p09 machine is Fedora 42,
and we need libvirt-daemon-driver-network package which on Fedora 42
installs nftables anyway.
 2025-07-28 09:13:16 +02:00
Kevin Fenzi
0f1a3e91d3 robosignatory: disable f43->f43 signing to process mass rebuild faster 
Also, comment section we will need in a few weeks to resign all of f43
with f44 key for branching.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-27 08:47:31 -07:00
Pavel Raiskup
07bc636371 copr: upload-qcow2-images-be.j2: drop useless argument 2025-07-26 09:34:30 +02:00
Pavel Raiskup
561fd37e64 copr: uploading images fixes 2025-07-25 16:40:39 +02:00
Pavel Raiskup
591bff5336 copr: upload images from backend 2025-07-25 16:25:41 +02:00
Michal Konecny
2804ccc26f [mailman3] Set timeout to default 30 s 
The timeout was set to 1000 because of the issues with missing index.
With index rebuild the default of 30 seconds should be enough.
 2025-07-25 13:27:06 +02:00
Michal Konecny
fda46faaaf [mailman3] Tweak gunicorn config to prevent OOM 
After some tweaking I found out that using gthreads workers is
for some reason causing memory spikes and switching to standard
sync worker prevents those.
 2025-07-25 12:41:20 +02:00
Michal Konecny
d6ff0dc33b [mailman3] Restart the thread more often 
The mailman on staging is still having memory issues, lowering the
number of requests to process before restart helped a little.
 2025-07-25 09:49:49 +02:00
Michal Konecny
be433f7221 [openvpn] Remove bastion-iad01 from client conf 
IAD2 is no more, let's remove the bastion from openvpn conf.
 2025-07-25 09:48:40 +02:00
Adam Williamson
3cb07acd5c minor openQA comment tweak in inventory 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-24 14:05:14 -07:00
Kevin Fenzi
c6ed99beb9 nagios: drop some trailing .s on entries that confuses nagios http_check plugin 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-24 13:36:52 -07:00
Kevin Fenzi
3a4aea0cd9 pagure: add another network to blocklist 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-24 13:06:59 -07:00
Kevin Fenzi
e36386c30d nagios: no nomail check at all externally 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-24 10:44:24 -07:00
Kevin Fenzi
ff30e93f7d dns: drop old phx2 zone 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-24 10:44:24 -07:00
Greg Sutcliffe
43d29fc0bf Added buildhw-x86-13.rdu3.fedoraproject.org - in the other places 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-24 15:58:13 +01:00
Greg Sutcliffe
65802a3b1c Hostvars: Added buildhw-x86-13.rdu3.fedoraproject.org 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-24 15:53:41 +01:00
Greg Sutcliffe
10669733cc Kickstart: fix mistake in openqa KS 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-24 15:43:00 +01:00
Greg Sutcliffe
f7d6395a20 Kickstart: 8disk F42 kickstart 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-24 15:36:26 +01:00
Pavel Raiskup
7c7a5a6bc0 copr: do not rhsm unregister when machine is broken 
This speeds the resalloc DELETING phase a lot for broken machines.
 2025-07-24 13:06:40 +02:00
Greg Sutcliffe
2133e1a71c Zabbix: copy stg host_vars to prod, they seem to work 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-24 09:32:45 +01:00
Ryan Lerch
72819f0f76 (forgejo): Disable SSH to remove clone URLs from UI 
Disables the SSH server functionality in Forgejo to prevent SSH clone URLs from being displayed in the user interface. This aligns with the current policy of not supporting SSH cloning for repositories on this instance.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-07-24 13:17:38 +10:00
Kevin Fenzi
0e2ee2ead0 releng-compose: install fedpkg for scripts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-23 17:38:27 -07:00
Kevin Fenzi
1b43d4160c nagios: fix duplicate mgmt host 01 that should have been 02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-23 17:01:07 -07:00
Kevin Fenzi
7adb9a6510 f40-test: f40 is eol, drop instance 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-23 16:27:38 -07:00
Kevin Fenzi
5579a14d86 bodhi-backend: re-enable sqlite for f41/f42 updates 
Enable sqlite for f41/f42 for now. mdapi still needs this.
A replacement application that will not need it is under development
Once that replaces mdapi we can drop sqlite again.

See https://pagure.io/fedora-infrastructure/issue/12669

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-23 23:14:13 +00:00
Kevin Fenzi
3d079e3fdb Revert "[pagure] Add staging machine to staging group" 
This reverts commit daafbfc969.

Turns out pagure-stg01 is 'special'. ;(

It's a staging machine in the sense that we use it to test pagure
changes before deploying them on prod, but it's not in the rdu3
datacenter at all, it's external to that.

Our rdu3 staging env has no vpn/outside access, so there's no way for
this machine to reach ipa0X.stg ipa servers to enroll with.

So, we wanted to keep it in production as far as things like which ipa
server it enrolls with, etc.
 2025-07-23 13:24:54 -07:00
Kevin Fenzi
b87f7de156 pagure: add another network thats hitting the api very hard 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-23 13:13:30 -07:00
Kevin Fenzi
edd8677758 base / iptables: don't try and disable ip6tables on rhel8 with nftables 
rhel8 instances using nftables don't have iptables-services installed,
because we remove 'iptables'. On rhel9 and fedora iptables-services only
needs iptables-libs installed, so it's there and works to disable.

Once the last things (rhel8 copr hypervisors) are moved to nftables, we
can drop all this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-23 13:10:55 -07:00
Greg Sutcliffe
0a53bacdce Zabbix: ignore internal vnet interfaces when doing network monitoring for vm hosts too 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 14:18:36 +01:00
Akashdeep Dhar
0d04c6d32c badges: flask is dead, long live staging! 
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
 2025-07-23 12:55:39 +00:00
Greg Sutcliffe
24bab53bbb Zabbix: remove incorrect leftover delegate_to 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 13:47:58 +01:00
Greg Sutcliffe
a11cf08594 Zabbix: ignore internal vnet interfaces when doing network monitoring for bvm hosts 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 13:24:44 +01:00
Michal Konecny
de0183c39a [badges] Fix syntax error in badges vars file 
When trying to run the badges playbook it failed on this line. And as
it's not the list I'm removing the - at start of the line.
 2025-07-23 13:09:04 +02:00
Akashdeep Dhar
6ca9e7d1c1 Add t0xic0der as badges appowners 
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
 2025-07-23 16:18:07 +05:30
Greg Sutcliffe
ffbb5e8777 Zabbix: Override package list for Zabbix server 
The server uses the upstream release RPM, not EPEL, so
the package names are different. Our pattern for OS vars
override host_vars, so we have to explictly set an override var

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 11:12:34 +01:00
Greg Sutcliffe
f54dabecf5 Zabbix: Only monitor ping for STGmgmt IPs 
Turns out we don't have 80/443 access from .stg to .mgmt so
we can only monitor ping for these hosts

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 10:56:46 +01:00
Greg Sutcliffe
9eda8d8508 Zabbix: Drop autoreg, move PSK config to the host entry 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 10:51:37 +01:00
Greg Sutcliffe
0f7d5cb568 Zabbix: Revert change to agent path, settling on EPEL agent packages 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 10:38:55 +01:00
Greg Sutcliffe
b3c29a7d76 Zabbix: use internal host for the agent, not the API host 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 10:24:11 +01:00
Greg Sutcliffe
76b7e1289e Zabbix: use EPEL/Fedora package names for the zabbix-agent 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-23 10:12:42 +01:00
Samyak Jain
ddfe9e6a5d robosignatory: f43-rebuild auto signing mass rebuild tag as builds happen 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-07-23 03:55:25 +00:00
Kevin Fenzi
807e80d0c3 memcached02.stg.rdu3.fedoraproject.org is in staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-22 18:43:19 -07:00
Kevin Fenzi
27c2c0b2b3 inventory: debuginfod01.stg is in the staging group 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-22 17:04:32 -07:00
Kevin Fenzi
ab4e2e9cee buildvm-a64-40: this vm is on bvmhost-a64-04 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-22 15:40:37 -07:00
Kevin Fenzi
6c759ec459 buildhw-x86-04: fill in mac addresses 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-22 15:37:35 -07:00
Pedro Moura
19f27e9eed removed easyfix from proxies-miscellaneous and sundries 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
 2025-07-22 22:22:06 +00:00
Greg Sutcliffe
985f5e5608 Zabbix: Correct agent conf file location for RHEL9 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-22 16:41:18 +01:00