1
0
Fork 0
forked from infra/ansible
Commit graph

43,830 commits

Author SHA1 Message Date
72789a919f rabbitmq: switch datacenter out for rdu3
This was useful when we had clusters in iad2 and rdu3, but it didn't
actually quite work then and it definitely doesn't now. :)

Datacenters like 'aws' do not have their own clusters, they use the one
in rdu3. So, just switch it back to hard coding.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-17 18:00:47 -07:00
ca1185ec42 noc01 / dhcpd config: add in mgmt for all the old iad2 hw in rdu3
This hardware was the 'newest' of the things in iad2.
So, it should have some life left in it.

Some of them are going to be builders/build related things, and others
openqa. We may shuffle this around some more, but this is a first wild
guess.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-17 17:56:10 -07:00
0e8dd65fc5 [base] Remove tasks to disable iptables/nftables
It doesn't make sense to disable something that isn't installed. Let's
instead make sure that the package is not installed.
2025-07-17 18:29:28 +02:00
7f877e95ee
Zabbix: Add prod Matrix room ID - take2
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 17:16:13 +01:00
32f290bf88
Zabbix: Add prod Matrix room ID
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 17:14:20 +01:00
e8d1095e67 [hosts] Add ipa vpn entries to cloud hosts
Most of the cloud hosts are on VPN, this will allow them to reach the IPA hosts.
2025-07-17 17:36:54 +02:00
82ed86f420 removed easyfix page from apps-fp-o
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2025-07-17 15:26:29 +00:00
9c0311e50e
Zabbix: Move templates to the first item, as they are dependencies
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 15:55:11 +01:00
c92b966d9e
Zabbix: Add new NOC usergroup, configure SAML better
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 12:56:20 +01:00
1c9623a923
Zabbix: Use correct IDP/SAML urls and typo fixes
Also add a tag to the whole role so it can be easily selected in the playbook

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 12:36:29 +01:00
f988af3e97
Zabbix: Add SAML config and cleanup older stuff
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 12:20:23 +01:00
ea4f07c9d7
Revert "Zabbix: Add ipsilon oidc entry for zabbix-stg"
Zabbix uses SAML, not OIDC, which I misunderstood

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-17 12:20:23 +01:00
daafbfc969 [pagure] Add staging machine to staging group
The pagure staging machine is not in staging group and instead uses prod
variables. Let's fix that.
2025-07-17 12:18:59 +02:00
20f9de9a38 bvmhost-p10-01: increase procs warning and crit thresholds
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-16 21:00:47 -07:00
97dab9dcaf iscsi_client: readd role, apply to power10 host and switch guests to use it
This re-adds a iscsi_client role we had in iad2 back in in rdu3.
When then apply it to bvmhost-p10-01 to login and use a iscsi lun from
the rdu3 netapp. We then move the buildvm-ppc64le vm's to use this iscsi
volume instead of local storage.

As we reinstall those builders they will use the iscsi volume.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-16 15:19:56 -07:00
James Antill
8b1d56b8d9 log01: Make sure simple_message_to_bus is in PATH for countme.
Signed-off-by: James Antill <james@and.org>
2025-07-16 15:13:44 -04:00
ce574cf4ce basessh: fix conditional
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-16 11:59:38 -07:00
9d22211952 basessh: remove rhel7 stuff and clean up template
This should largely have no effect, but makes things easiler to
follow/read. We have 0 rhel7 instances left so removing all those
conditionals.

Also, rename the sshd_config teplate to be .j2 like all our other
templates.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-16 11:57:10 -07:00
James Antill
a4aab5d51c log01: Install simple_message_to_bus for countme.
Signed-off-by: James Antill <james@and.org>
2025-07-16 11:10:56 -04:00
978916004d
Zabbix: Add ipsilon oidc entry for zabbix-stg
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-16 10:23:31 +01:00
84f03db63c nagios / external: make mail_queue internal only
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-15 18:23:40 -07:00
f73944f190 nagios: try and adjust things so noc02 / nagios-external works again
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-15 17:23:22 -07:00
4f7b2ef98d inventory: clean up some duplicate variables
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-15 17:18:12 -07:00
James Antill
23641d29ab distgit: Copy the rsyslog logrotate from copr.
Signed-off-by: James Antill <james@and.org>
2025-07-15 19:43:48 -04:00
75cebd40eb Really drop ns03 from openQA worker DNS config
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-07-15 15:18:11 -07:00
e9435623a1 Drop broken ns03 from openQA worker network config temporarily
This server isn't working and we can't figure out why not. It's
a problem for openQA because we copy the host's DNS config into
'advanced networking' openQA guests, and then when we do a
FreeIPA deployment test, it picks up both DNS servers, tries to
confirm both work, and fails. So we need to take ns03 out until
it's fixed.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-07-15 15:11:58 -07:00
1a41934f52 ns03: fix another copy pasta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-15 12:32:05 -07:00
989b73537d proxy01: do not give proxy01 ns01s ip
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-15 12:19:49 -07:00
dce80c9d1a sign-vault02: provision in rdu3
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-15 09:34:56 -07:00
286cc834a1
Zabbix: Comment zabbix-agent in server playbook, it's causing some issues I need to look at
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-15 16:08:48 +01:00
Jakub Kadlcik
225351a2c8 copr-be: make sure dist-git-client is up-to-date 2025-07-15 13:40:38 +02:00
a26d68ebec
Zabbix: Refactor sync-noc-membership and add zabbix-agent to server playbook
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-15 12:29:51 +01:00
5376cbe713 bodhi-backend01: recycle db connections after 600 seconds
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-14 20:43:09 -07:00
11c4c4f211 inventory: add ipv6 addresses to various hosts that need them
We don't have ipv6 routing setup yet, but are scheduled to work on that
soon. To get ready for that, lets add ipv6 addresses to the (few)
machines that will actually need them.

We do not want to add ipv6 to all hosts. The vast majority of them never
need to talk to the outside world directly and shouldn't have a ipv6
address that can do this.

These few hosts are ones with external nat mappings where it is
desireable that they be able to handle ipv6 connections.

Note that we also do NOT want to add any of these to dns until
they are known working. We also will likely have to adjust nftables
to allow the services on ipv6 that we do on ipv4 (if they make sense).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-14 15:02:06 -07:00
d8cab8b424
FMN: fix configuration variable
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-14 23:09:08 +02:00
be410884f9 kernel02: this is using a bond/bridge now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-14 13:34:58 -07:00
23f98071f8 kernel02 for rdu3
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-14 13:31:50 -07:00
4f01c21e72 bvmhost-p09-05: fix mac3 address
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-14 12:07:41 -07:00
b04d0d372f readd bvmhost-p09-05 in rdu3
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-14 11:19:30 -07:00
57a7517abb
forgejo: remove OADP operator content, create netapp PVC
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-07-14 15:50:23 +01:00
a54397cea8
forgejo: disable creation of the PVC by helm chart
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-07-14 15:19:18 +01:00
7ff5ac563e [mailman3] Remove the authentication options 2
Remove the authentication options also from group vars.
2025-07-14 15:41:49 +02:00
19f13fa83f [mailman3] Remove non working authentication options
https://pagure.io/fedora-infrastructure/issue/12653
2025-07-14 15:04:11 +02:00
e0ed8cd7dd [mailman3] Add automatic restart on web
The gunicorn is sometimes getting killed by OOM (I assume it's the AI
scrapers). So let's add automatic restart to get it back on track.
2025-07-14 10:39:13 +02:00
0d71c0bce0 Nagios: remove http check on p10 mgmt interface
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-11 20:06:33 +00:00
9f06fe9e9c Selinux: allow NRPE to follow symlinks when checking files
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-07-11 20:03:17 +00:00
195d6b3b15
set empty string for storageclass for fedora-ostree-pruner
This was done in d97f99c for coreos-ostree-importer. Here I add a
comment with more context to the the coreos-ostree-importer one and
add the same config to the fedora-ostree-pruner.
2025-07-11 15:42:54 -04:00
f32e35dc41 koji: restore some web endpoints now, uncomment if load becomes too bad
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-11 11:16:09 -07:00
20ca80e25f
fixup the fixup
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-11 18:15:13 +02:00
c1d5cb0c9f
Fixup last commit
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-11 18:14:24 +02:00