This should 'fix' result reporting in staging resultsdb (and
future prod), see
infra/tickets#12997 and
infra/tickets#13235 .
This probably isn't ultimately the correct fix but it should make
things work for now. The real issue seems to be that the
RevereProxied custom WSGI app wrapper, which we copied around to
various apps back in the day and which attempts to handle the app
being reverse-proxied, doesn't handle all proxied headers and/or
doesn't handle comma-separated list values. The long-term fix is
likely to be using werkzeug's ProxyFix in a wrapper instead, see
infra/tickets#12997 (comment) .
Signed-off-by: Adam Williamson <awilliam@redhat.com>
This also relocates the `httpchecks` roles to the right place,
as putting it in it's own role was a bit of hack. Having it in
the proxy role is better.
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
This also removes the Nagios config - it'll be looking in the wrong
place. A Zabbix replacement check will follow in the next commit.
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
This fixes intermittent 502 Bad Gateway errors during long-running
koji connections (like watch-task or watch-logs).
For more details on proxy keepalive and ttl, see:
https://httpd.apache.org/docs/2.4/mod/mod_proxy.htmlFixes#12913
Signed-off-by: Victor Koycheff <victorkoycheff@gmail.com>
This machine moved from rdu2-cc to rdu3, we missed changing these at the
time.
For copr it should use the external hostname.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
* Fix typos (disgit -> distgit)
* Run with rbac-playbook
* Use correct relative path when run with rbac-playbook
Resolvesepel/releng#85
Signed-off-by: Carl George <carlwgeorge@gmail.com>
This machine is in the rdu3 isolated network.
For now, just setup a simple kickstart on one disk and a playbook that
does the normal base role things. We can adjust from here.
This machine has 1 nvme and another spinning rust device.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This machine is disabled in koji and not frozen, so using it to deploy
and test this setup. Once I can manually sign something with it, we can
look at enabling it for real (after freeze).
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Some hosts don't seem to be setup right for sudo/become (copr mostly).
Just use root like our normal ansible stuff does.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
There's no need to keep ocp-rdu3 around anymore, we only used
it when we were moving datacenters last year.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit standardizes the regex redirection used for all Fedora Docs
sites where a language code is involved in the original site and the
redirected site. This new regex pattern matches anything between the
slashes where the language code for the Fedora Docs site appears. This
allows for greater flexibility of anything that may appear now or in the
future for the language codes, including some that use two letters and
others that use four letters.
It makes the redirect consistent across all Fedora Docs redirects, in
the general aim of promoting a common best practice for Fedora Docs
redirects for old site names to new ones.
CC: @pbokoc@pboy
Signed-off-by: Justin Wheeler <jwheel@redhat.com>
