008454b6df
db.aws: try this - add msuchy as root user
2024-10-23 18:29:20 +02:00
61f2e86764
second try to configure db.stg.aws
...
This should be separate SQL server in AWS for instances in AWS.
First customer is planned fossology instance, and then maybe copr servers
2024-10-23 16:19:49 +02:00
307060801c
communishift: marked projects not to be cleaned up by clean up script
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-10-21 08:11:33 +01:00
2803a028a6
[ipsilon_stg] Change the group that has access to sysadmin-noc
...
We are currently not able to create a new group in ipa on staging. But to gain
access to @luhliarik to test https://pagure.io/fedora-infrastructure/issue/12092
let's use some existing group.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-10-18 13:06:38 +02:00
a3b2904a2a
logdetective02: birthday no more
2024-10-17 14:42:08 +02:00
549eaa2834
logdetective02: mount data volume
2024-10-17 14:40:50 +02:00
7c3e93ce27
[ipsilon_stg] Add shell and sudo access groups
...
This should help as solving access for @luhliarik to help resolve
https://pagure.io/fedora-infrastructure/issue/12092
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-10-16 10:08:01 +00:00
95f385cf4d
openqa: bump the load average threshold on p09 worker hosts
...
They seem to be hitting this nonsense cap, bump it.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-10-15 13:17:24 -07:00
2ac3166624
logdetective02 is an EC2 host
2024-10-15 16:14:15 +02:00
a2a79c3dc7
logdetective02: birthday
2024-10-15 13:56:17 +02:00
362f4b7b63
logdetective02: new box
...
https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org/thread/4ZZQBIJ5XS7HSP44EXMD4OKGXDUPBV34/
2024-10-15 13:51:33 +02:00
e325a03d40
communishift: onboard communishift-commops-datanom project
...
Infra #12119
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-10-15 12:49:54 +01:00
c451d542c2
pagure: pagure has 24 cpus right now
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-14 12:55:45 -07:00
2083a05dac
Make NBDE device configurable, fix it on single-disk openQA hosts
...
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-10-09 17:32:40 +00:00
0a8303b3bd
openqa-a64-worker04: bump load threshold again
...
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-10-09 10:01:49 -07:00
18e8b51c87
openqa-a64-worker04: bump back to 35 workers
...
We've got a big backlog of queued aarch64 tests, looks like 20
just wasn't enough :/
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-10-09 09:20:45 -07:00
11971f0bb0
Revert "openqa-p09: use md0 as the device for nbde"
...
This reverts commit 5a7c8491db
2024-10-08 17:37:01 -07:00
5a7c8491db
openqa-p09: use md0 as the device for nbde
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-08 17:34:29 -07:00
a31716efb5
set openqa_nbde in lab as well as prod
...
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-10-08 15:51:45 -07:00
11814c789a
db-openqa01: move to rhel9
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-08 15:17:59 -07:00
68af8cadda
Try to prepare openQA worker host vars for redeployment
...
We intend to use disk encryption and udev network interface
naming on all hosts with the re-deployment, so this attempts to
set up for that.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-10-08 14:37:44 -07:00
4521007e25
ppc64le-test02: put in cloud group for now
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-04 14:05:12 -07:00
e70c7f9969
bvmhost-x86-riscv01: update ip address info
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-04 13:28:05 -07:00
d3831e8178
ppc64le-test02: setup network config
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-04 11:11:32 -07:00
16d03722b1
ppc64le-test02: add power10 test instance at osuosl
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-04 10:50:13 -07:00
56cdb275af
[mailman] Increase the lvm size for staging
...
Now that the fulltext search index is finally generated, we need to resize the
LVM again. That should be the last time.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-10-04 09:01:01 +02:00
47334a564e
certificates / staging: new cert for *.apps.ocp.stg
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-03 17:48:39 -07:00
c04dd50fbf
certificates: move to new 2024 wildcard fedoraproject.org cert
...
The old one expires in about 57 days, but might as well just renew it
early and avoid problems later.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-03 16:50:01 -07:00
51390ae115
proxies / iad2: memory to 16g
...
proxy01/10 were bumped to 16gb a while back, so make sure the ansible
host vars match that.
proxy101/110 (the internal ones used by hosts inside iad2) had only 8g
and were looking pretty loaded. So, bump them up to 16gb as well in
ansible. I already manually increased them to 16g, but this way if we
reinstall them they will be correct.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-03 14:32:03 -07:00
f5ceec7303
inventory / all vars: try adding a 'state: up' to default network-connections
...
On builders currently, they install and everything is up, but
NetworkManager doesn't tell systemd-resolved the new information
(nameservers, search domains, etc). Hopefully adding this will allow it
to actually tell systemd-resolved about it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-02 09:03:09 -07:00
b4fdeeefd8
Revert "Fix ansible_python variable missing"
...
This reverts commit 60a02a8c7e
2024-10-02 13:55:04 +02:00
60a02a8c7e
Fix ansible_python variable missing
...
This should fix the `'ansible.vars.hostvars.HostVarsVars object' has no
attribute 'ansible_python'` error when trying to run buildvm.yml playbook with
ppc64le builder.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-10-02 12:46:15 +02:00
04a661b60d
kojipkgs: move to f40
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-01 15:59:58 -07:00
86fa3d87f5
proxies: move to f40
...
We still want to probibly do reinstalls on these, but move them to f40
via upgrade for now.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-01 14:41:59 -07:00
0028d383e0
inventory: drop copr_db_stg and group since it no longer seems defined
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-01 14:24:27 -07:00
a300e295bf
update numbers of reserved instances for builders
...
additionally slightly bump up priority of aarch64 builders so they are likely used for src.rpm building
2024-10-01 10:44:25 +02:00
2ce17f4745
koji / staging: more memory for koji01.stg
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-30 17:55:05 -07:00
4d5243ee7f
[mailman] Increase the LVM size for staging
...
The size of fulltext index for staging is roughly around 200 GB, which causes
nagios to alert about disk space. Let's increase the default space for future deployment.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-09-27 09:41:59 +02:00
8a18b535f8
gluster: remove old gluster role
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 11:40:42 -07:00
e3e2cb1d93
odcs: retire service ( infra 12192 )
...
Time to retire ODCS. ELN is moved off and that was the last thing using
it. Thanks for all the service ODCS!
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 18:21:51 +00:00
f72ff64029
bastion / iptables: Add internal RH mxes and drop global allow
...
We want to allow internal mx'es to send us email still.
We want to drop the global allow for port 25 now that we hopefully have
all the legit senders listed.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 10:55:20 -07:00
42cae5591f
bastion: adjust smtp firewall rules for mimecast
...
Setup things so we accept smtp connections from all the places we
currently do, but also from mimecast as incoming emails may come via
that. We don't want to globally allow everyone to inject emails here.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 10:36:47 -07:00
fd5437fe3e
bvmhost-x86-riscv01: add new virthost for secondary riscv stuff
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-23 15:23:19 -07:00
b7d61b6a77
buildhw-x86-01/05: fix dns search
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-19 15:33:10 -07:00
c60a3afe99
relvalconsumer: update AMI consumer routing keys
...
This should cover both before and after
https://pagure.io/cloud-image-uploader/pull-request/28 if it
gets merged.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-09-12 16:58:36 -07:00
6354a6bd38
communishift: add communishift-commops-analytics project
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-09-12 13:42:39 +01:00
79ee807af5
vmhost-x86-copr01: update mac addresses
...
https://pagure.io/fedora-infrastructure/issue/11950
2024-09-12 07:48:26 +02:00
1764f3f86f
communishift: add communishift-fossology
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-09-11 15:39:48 +01:00
d2920ad85d
zabbix: add templates group var to releng_compose_eln
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-09-09 17:05:54 +01:00
01aa61f145
decommission openqa-a64-worker01 for now
...
It seems to have memory issues. Comment it out and promote 03 to
createhdds and tap1 duties.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-09-05 15:28:09 -07:00
