WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 12:07:34 +08:00
Code Issues Packages Projects Releases Wiki Activity
43,852 Commits 9 Branches 0 Tags
ff15dbd0447c3aba2bd2662e07bbf5d808f01a7b
Commit Graph

43852 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kevin Fenzi
ff15dbd044 buildhw-x86-04: provision 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-21 14:17:04 -07:00
Kevin Fenzi
772b14d5dd noc01 / dhcp: drop duplicate 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-21 13:25:39 -07:00
Kevin Fenzi
8e6286b823 noc01 / dhcp: add some hardware for installs 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-21 13:17:04 -07:00
Kevin Fenzi
2f4f0e8354 buildvm-a64: off by one error 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-21 13:11:50 -07:00
Kevin Fenzi
30dac8c0ae bvmhost-a64-4*: fix up some ips 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-21 12:52:54 -07:00
Kevin Fenzi
7d98656f2b buildvm-a64-41 to 48: add 8 more aarch64 buildvms 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-21 12:20:41 -07:00
Adam Williamson
7387394898 openqa/worker: fix nfs hostname 
d'oh.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-21 10:14:34 -07:00
Aurélien Bompard
a1c3a34ff5 RabbitMQ Centos Monitoring: fix the timer 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-21 15:36:50 +02:00
Aurélien Bompard
a51c0ea353 RabbitMQ: setup sending the queue metrix to CentOS 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-21 15:23:42 +02:00
Aurélien Bompard
ca69e3a82d FMN: add the Distgit DB credentials 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-07-21 12:54:19 +02:00
Kevin Fenzi
499c499507 noc01 / dhcpd: yeah, ips do not have 5 octets 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-18 12:56:52 -07:00
Kevin Fenzi
bc4d6bb2c2 bvmhost-a64-05: add to dhcpd for provisioning 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-18 12:24:01 -07:00
Kevin Fenzi
f6e453b0ff bvmhost-a64-05: add another aarch64 bvmhost 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-18 12:14:52 -07:00
Kevin Fenzi
5d67480275 noc01 / dhcp: fix duplicate entry 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-18 11:56:09 -07:00
Kevin Fenzi
54148b3006 noc01 / dhcp: fix some ip misassignments 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-18 11:51:40 -07:00
Kevin Fenzi
9c1bb508b5 nagios: try a different way to not run mail_queue check externally 
Revert the previous thing that tried to move a template to a file, and
instead move it back to a template and just conditionalize it only to
apply on rdu3_internal nagios.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-18 10:25:26 -07:00
Kevin Fenzi
fafc5b1baa Revert "nagios / external: make mail_queue internal only" 
This reverts commit 84f03db63c.
 2025-07-18 10:22:29 -07:00
Kevin Fenzi
1a3c1dc9e2 os-control: make sure butane is installed so we can make machine operator config changes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-18 09:59:49 -07:00
Kevin Fenzi
a601c59604 bvmhost-p10-01: bump procs warning a bit 
This is alerting a lot at 4000, bump it to 4500.
It has a lot of processes running on it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-18 09:58:48 -07:00
Kevin Fenzi
168d030d9c nagios: turns out this newline is important syntax wise 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-18 09:34:01 -07:00
Michal Konecny
c55be5b392 [people] Update rewrite rule for user pages 
For some unknown reason from httpd 2.60 the user.fedoraproject.org is
prefixed with / by mod_rewrite and the regex doesn't match anymore.

This is the last thing that is keeping
https://pagure.io/fedora-infrastructure/issue/12092 from being closed.
 2025-07-18 13:56:37 +02:00
Michal Konecny
163446f4dc [ipa] Add ipa machines to VPN 
The IPA machines are currently not reachable through VPN. This is
because they are missing firewall rules for VPN as they need to
have vpn variable set to include them.
 2025-07-18 10:44:39 +02:00
Kevin Fenzi
72789a919f rabbitmq: switch datacenter out for rdu3 
This was useful when we had clusters in iad2 and rdu3, but it didn't
actually quite work then and it definitely doesn't now. :)

Datacenters like 'aws' do not have their own clusters, they use the one
in rdu3. So, just switch it back to hard coding.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-17 18:00:47 -07:00
Kevin Fenzi
ca1185ec42 noc01 / dhcpd config: add in mgmt for all the old iad2 hw in rdu3 
This hardware was the 'newest' of the things in iad2.
So, it should have some life left in it.

Some of them are going to be builders/build related things, and others
openqa. We may shuffle this around some more, but this is a first wild
guess.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-17 17:56:10 -07:00
Michal Konecny
0e8dd65fc5 [base] Remove tasks to disable iptables/nftables 
It doesn't make sense to disable something that isn't installed. Let's
instead make sure that the package is not installed.
 2025-07-17 18:29:28 +02:00
Greg Sutcliffe
7f877e95ee Zabbix: Add prod Matrix room ID - take2 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-17 17:16:13 +01:00
Greg Sutcliffe
32f290bf88 Zabbix: Add prod Matrix room ID 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-17 17:14:20 +01:00
Michal Konecny
e8d1095e67 [hosts] Add ipa vpn entries to cloud hosts 
Most of the cloud hosts are on VPN, this will allow them to reach the IPA hosts.
 2025-07-17 17:36:54 +02:00
Pedro Moura
82ed86f420 removed easyfix page from apps-fp-o 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
 2025-07-17 15:26:29 +00:00
Greg Sutcliffe
9c0311e50e Zabbix: Move templates to the first item, as they are dependencies 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-17 15:55:11 +01:00
Greg Sutcliffe
c92b966d9e Zabbix: Add new NOC usergroup, configure SAML better 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-17 12:56:20 +01:00
Greg Sutcliffe
1c9623a923 Zabbix: Use correct IDP/SAML urls and typo fixes 
Also add a tag to the whole role so it can be easily selected in the playbook

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-17 12:36:29 +01:00
Greg Sutcliffe
f988af3e97 Zabbix: Add SAML config and cleanup older stuff 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-17 12:20:23 +01:00
Greg Sutcliffe
ea4f07c9d7 Revert "Zabbix: Add ipsilon oidc entry for zabbix-stg" 
Zabbix uses SAML, not OIDC, which I misunderstood

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-17 12:20:23 +01:00
Michal Konecny
daafbfc969 [pagure] Add staging machine to staging group 
The pagure staging machine is not in staging group and instead uses prod
variables. Let's fix that.
 2025-07-17 12:18:59 +02:00
Kevin Fenzi
20f9de9a38 bvmhost-p10-01: increase procs warning and crit thresholds 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-16 21:00:47 -07:00
Kevin Fenzi
97dab9dcaf iscsi_client: readd role, apply to power10 host and switch guests to use it 
This re-adds a iscsi_client role we had in iad2 back in in rdu3.
When then apply it to bvmhost-p10-01 to login and use a iscsi lun from
the rdu3 netapp. We then move the buildvm-ppc64le vm's to use this iscsi
volume instead of local storage.

As we reinstall those builders they will use the iscsi volume.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-16 15:19:56 -07:00
James Antill
8b1d56b8d9 log01: Make sure simple_message_to_bus is in PATH for countme. 
Signed-off-by: James Antill <james@and.org>
 2025-07-16 15:13:44 -04:00
Kevin Fenzi
ce574cf4ce basessh: fix conditional 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-16 11:59:38 -07:00
Kevin Fenzi
9d22211952 basessh: remove rhel7 stuff and clean up template 
This should largely have no effect, but makes things easiler to
follow/read. We have 0 rhel7 instances left so removing all those
conditionals.

Also, rename the sshd_config teplate to be .j2 like all our other
templates.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-16 11:57:10 -07:00
James Antill
a4aab5d51c log01: Install simple_message_to_bus for countme. 
Signed-off-by: James Antill <james@and.org>
 2025-07-16 11:10:56 -04:00
Greg Sutcliffe
978916004d Zabbix: Add ipsilon oidc entry for zabbix-stg 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2025-07-16 10:23:31 +01:00
Kevin Fenzi
84f03db63c nagios / external: make mail_queue internal only 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-15 18:23:40 -07:00
Kevin Fenzi
f73944f190 nagios: try and adjust things so noc02 / nagios-external works again 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-15 17:23:22 -07:00
Kevin Fenzi
4f7b2ef98d inventory: clean up some duplicate variables 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-15 17:18:12 -07:00
James Antill
23641d29ab distgit: Copy the rsyslog logrotate from copr. 
Signed-off-by: James Antill <james@and.org>
 2025-07-15 19:43:48 -04:00
Adam Williamson
75cebd40eb Really drop ns03 from openQA worker DNS config 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-15 15:18:11 -07:00
Adam Williamson
e9435623a1 Drop broken ns03 from openQA worker network config temporarily 
This server isn't working and we can't figure out why not. It's
a problem for openQA because we copy the host's DNS config into
'advanced networking' openQA guests, and then when we do a
FreeIPA deployment test, it picks up both DNS servers, tries to
confirm both work, and fails. So we need to take ns03 out until
it's fixed.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-07-15 15:11:58 -07:00
Kevin Fenzi
1a41934f52 ns03: fix another copy pasta 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-15 12:32:05 -07:00
Kevin Fenzi
989b73537d proxy01: do not give proxy01 ns01s ip 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-07-15 12:19:49 -07:00