WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-24 10:31:56 +08:00
Code Issues Packages Projects Releases Wiki Activity
43,607 Commits 9 Branches 0 Tags
fa58d2541d3d6bc55e1abadaacecd995dcf0ff76
Commit Graph

26443 Commits

Author SHA1 Message Date
Michal Konecny
fa58d2541d [fas2discourse] Install make package 
Make package is needed as well, let's install it and then remove all the
dangerous packages when we are done.
 2025-07-01 17:49:04 +00:00
James Antill
ea5ca95c57 Change iad2 things to rdu3 for zabbix. Namely haproxy/agent. 
Signed-off-by: James Antill <james@and.org>
 2025-07-01 13:29:08 -04:00
Michal Konecny
d66dff49a1 [fas2discourse] Install missing git package 
The playbook is complaining about git command missing, let's install it then.
 2025-07-01 19:05:25 +02:00
Michal Konecny
b4a80bed38 [fas2discourse] Fix the path to oc binary 
/root/bin/oc doesn't exist, the oc is located in /bin/oc. I assume that
this was just some manually created symlink, so let me fix that.
 2025-07-01 18:47:52 +02:00
James Antill
45f22c0f64 collectd: Cleanup the task name. 
Signed-off-by: James Antill <james@and.org>
 2025-07-01 11:43:24 -04:00
James Antill
57e51802a8 collectd: Install collectd-rrdtool plugin in el9. 
Signed-off-by: James Antill <james@and.org>
 2025-07-01 11:40:03 -04:00
Aurélien Bompard
f80b327d1b Mirrormanager: use our own domain for pvs 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-01 17:17:54 +02:00
Aurélien Bompard
7a4fecf6d0 Fix the resultsdb image url 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-01 12:43:19 +02:00
Aurélien Bompard
09c76c5b28 Fix ResultsDB variables 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-01 11:59:46 +02:00
Aurélien Bompard
bbd0e7febe Use fqdn for ntap-rdu3 in mirrormanager as well 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-01 09:11:59 +02:00
Aurélien Bompard
748b4b0116 Badges: use the FQDNs for the DB hostnames 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-01 09:01:10 +02:00
Aurélien Bompard
e9ca033354 Fix typo 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-01 08:09:25 +02:00
Aurélien Bompard
95d4404a34 Use the real hostname for tahrir's DB 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-01 07:32:05 +02:00
James Antill
b5338d9050 nagios: gateway-hosts: Add conditionals for nagios_location as rdu3. 
Signed-off-by: James Antill <james@and.org>
 2025-06-30 22:00:55 -04:00
James Antill
a960bf8e7c nrpe: Add 10.16.163.10 to allowed_hosts. 
Signed-off-by: James Antill <james@and.org>
 2025-06-30 20:59:28 -04:00
Kevin Fenzi
ac0abd5853 proxies: switch openqa stg to use rdu3 and add a tag for easily setting it up 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 17:40:44 -07:00
Adam Williamson
75298197ce Remove cisco openh264 repo on all Fedora systems 
We used to do this only on builders, but right now it's causing
problems on all hosts during the infra move:

2025-06-30T23:35:32+0000 INFO Serious error - Curl code (28): Timeout was reached for https://kojipkgs.fedoraproject.org/repos-dist/f42-infra/latest/x86_64/repodata/repomd.xml [Connection timed out after 30001 milliseconds]

and we don't actually need this repo for any infra systems, I
don't think. Let's just disable it for every Fedora host.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-06-30 16:37:54 -07:00
Adam Williamson
4dc01bc892 openQA: rename openvswitch bridge device to avoid conflict 
On the new rdu3 worker hosts, br0 already exists and is the main
system 'interface' (it's a bridge on two bonded physical interfaces
connected to different switches, to make networking upgrades
easier). So we can't call our openvswitch bridge 'br0' any more.
Let's try calling it 'openqabr0' and see if anything explodes.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-06-30 16:14:01 -07:00
Aurélien Bompard
f29615eda4 Certgetter is now in rdu3 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-01 01:12:29 +02:00
Aurélien Bompard
07bee7f2f4 Make distgit use its own RabbitMQ user 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-01 00:53:22 +02:00
Kevin Fenzi
ccfd1dafa1 batcave: add python3-sqlalchemy for repo2json script 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 15:34:26 -07:00
Kevin Fenzi
da9483f583 batcave: setup facls for private repo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 15:33:21 -07:00
Kevin Fenzi
4ad6508bac batcave: fix acls for dns repo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 14:11:50 -07:00
James Antill
99d4f5215b rsyslog: Copy over log01.iad2 rsyslog.conf to log01.rdu3 
Signed-off-by: James Antill <james@and.org>
 2025-06-30 16:19:32 -04:00
Kevin Fenzi
6d4f4da388 openvpn/server: install the right ccd files in rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 11:56:45 -07:00
Michal Konecny
0328532987 [mailman3] Remove IAD2 
There are a lot of things still pointing to IAD2, let's redirect them to RDU3.
 2025-06-30 20:27:53 +02:00
Kevin Fenzi
fc396674c9 proxies: ipa web ui, missed a iad2 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 10:15:19 -07:00
Kevin Fenzi
4edce82deb proxies: send ipa web ui to rdu3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-30 10:11:28 -07:00
Michal Konecny
3321f79d70 [mirror_pagure_ansible] Don't point to iad2 
We are moving away from IAD2 let's not reference it.
 2025-06-30 18:41:28 +02:00
Jiri Kyjovsky
1c9a1b4a7e copr-backend: switch powerful instances to power10 2025-06-30 16:10:46 +02:00
Aurélien Bompard
5203378066 Don't put so much public stuff in the ansible repo, where we don't have env variables 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-06-30 11:00:18 +02:00
Aurélien Bompard
2f22b5edea Fix kerneltest wsgi script broken by f513e7c 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-06-30 11:00:17 +02:00
James Antill
99f6f54346 mailman: No service for rdu3, yet. 
Signed-off-by: James Antill <james@and.org>
 2025-06-29 16:10:51 -04:00
James Antill
b909188491 mailman: No sending emails from rdu3, yet. 
Signed-off-by: James Antill <james@and.org>
 2025-06-29 16:00:05 -04:00
Kevin Fenzi
da58790976 batcave01: drop srm, its not actually in epel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 15:57:44 -07:00
Kevin Fenzi
a130888041 bastion / rdu3 / openvpn_server: setup ccd files for rdu3 bastion openvpn 
This deploys a new set of ccd files to bastion*rdu3 for openvpn.
Right now bastion01.iad2 is the vpn hub/server for all connections.
Once dns is changed and clients restarted, they will connect to
bastion01.rdu3.

These ccd files swap the iad2 for rdu3 servers.
So, for example now 'wiki01.vpn.fedoraproject.org', or 'wiki01' as the
proxies call it, will go to wiki01.iad2.fedoraproject.org.

After the dns switch and client reconnects here,
wiki01.vpn.fedoraproject.org/wiki01's ip will be claimed by
wiki01.rdu3.fedoraproject.org instead and wiki01.iad2 will get a dynamic
ip (or will be just turned off).

This will allow us to more easly move services from proxies.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-28 08:12:44 -07:00
Kevin Fenzi
1b027f42dd releng-compose: nftables, allow rdu3 noc 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-27 20:43:59 -07:00
Kevin Fenzi
56c028d684 bastion: nftables, allow rdu3 noc 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-06-27 20:40:54 -07:00
Francois Andrieu
3fea252fd8 use rsyslogd v8 conf as the default 2025-06-28 01:41:02 +00:00
James Antill
9a3b4670bf koji_builder: Replace openh264.repo instead of remove, due to upgrades. 
Signed-off-by: James Antill <james@and.org>
 2025-06-27 20:06:48 -04:00
James Antill
5d24121a32 koji_builder: Remove openh264 repo, packages are external. 
Signed-off-by: James Antill <james@and.org>
 2025-06-27 17:52:59 -04:00
James Antill
1d37a90bda koji_builder: Change out edk2-arm for edk2-aarch64 
Signed-off-by: James Antill <james@and.org>
 2025-06-27 15:54:47 -04:00
Francois Andrieu
80f922c6ff replace iad2 ocp-stg certificate with rdu3 2025-06-27 16:49:04 +00:00
Aurélien Bompard
00e719bb1f MirrorManager: in staging, don't run the cronjobs that need to access the mirrorlist proxies in prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-06-27 17:32:48 +02:00
Aurélien Bompard
5fbb502c4f Fix indentation 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-06-27 17:16:26 +02:00
Aurélien Bompard
b402aedb72 Remove some references to iad2 in bodhi-backend's playbook 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-06-27 15:33:33 +02:00
James Antill
0ec1c900a4 mailman: Remove missing static files notify. 
Signed-off-by: James Antill <james@and.org>
 2025-06-27 09:24:44 -04:00
Aurélien Bompard
80acc1e431 Replace references to iad2 with the datacenter variable in openshift apps playbooks 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-06-27 14:58:12 +02:00
Aurélien Bompard
38d138e9e0 Relay RabbitMQ on the proxies in RDU3 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-06-27 14:32:48 +02:00
Aurélien Bompard
bc4fac90cb Replace references to iad2 with the datacenter variable in openshift apps 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-06-27 12:25:21 +02:00