debuginfod: add both stg and prod debuginfod vms

We are moving this to vm's as the nfs storage on openshift isn't up to
the i/o that this application needs.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

inventory/group_vars/debuginfod

@@ -0,0 +1,28 @@
+---
+# Define resources for this group of hosts here. 
+lvm_size: 500000
+mem_size: 8192
+max_mem_size: 16384
+num_cpus: 4
+
+deployment_type: prod
+
+tcp_ports: [ 80 ]
+
+primary_auth_source: ipa
+ipa_host_group: debuginfod
+ipa_host_group_desc: debuginfod servers
+ipa_client_shell_groups:
+- fi-apprentice
+- sysadmin-noc
+- sysadmin-veteran
+- sysadmin-debuginfod
+ipa_client_sudo_groups:
+- sysadmin-debuginfod
+
+csi_security_category: Low
+csi_primary_contact: "#fedora-admin"
+csi_purpose:  Provides debuginfod services
+csi_relationship: |
+ - This server provides a debuginfod server to allow downloading debuginfod
+

inventory/group_vars/debuginfod_stg

@@ -0,0 +1,28 @@
+---
+# Define resources for this group of hosts here. 
+lvm_size: 500000
+mem_size: 8192
+max_mem_size: 16384
+num_cpus: 4
+
+deployment_type: stg
+
+tcp_ports: [ 80 ]
+
+primary_auth_source: ipa
+ipa_host_group: debuginfod
+ipa_host_group_desc: debuginfod servers
+ipa_client_shell_groups:
+- fi-apprentice
+- sysadmin-noc
+- sysadmin-veteran
+- sysadmin-debuginfod
+ipa_client_sudo_groups:
+- sysadmin-debuginfod
+
+csi_security_category: Low
+csi_primary_contact: "#fedora-admin"
+csi_purpose:  Provides debuginfod services
+csi_relationship: |
+ - This server provides a debuginfod server to allow downloading debuginfod
+

inventory/host_vars/debuginfod01.iad2.fedoraproject.org

@@ -0,0 +1,12 @@
+---
+nm: 255.255.255.0
+gw: 10.3.163.254
+dns: 10.3.163.33
+ks_url: http://10.3.163.35/repo/rhel/ks/kvm-fedora-33
+ks_repo: http://10.3.163.35/pub/fedora/linux/releases/33/Server/x86_64/os/
+volgroup: /dev/vg_guests
+eth0_ip: 10.3.163.109
+vmhost: vmhost-x86-06.iad2.fedoraproject.org
+datacenter: iad2
+virt_install_command: "{{ virt_install_command_one_nic }}"
+sar_script_user: root

inventory/host_vars/debuginfod01.stg.iad2.fedoraproject.org

@@ -0,0 +1,10 @@
+---
+nm: 255.255.255.0
+gw: 10.3.166.254
+dns: 10.3.163.33
+ks_url: http://10.3.163.35/repo/rhel/ks/kvm-fedora-33
+ks_repo: http://10.3.163.35/pub/fedora/linux/releases/33/Server/x86_64/os/
+volgroup: /dev/vg_guests
+eth0_ip: 10.3.166.62
+vmhost: vmhost-x86-08.stg.iad2.fedoraproject.org
+datacenter: iad2

inventory/inventory

@@ -663,6 +663,7 @@ db-fas01.stg.iad2.fedoraproject.org
 db-koji01.stg.iad2.fedoraproject.org
 db01.stg.iad2.fedoraproject.org
 db03.stg.iad2.fedoraproject.org
+debuginfod01.stg.iad2.fedoraproject.org
 oci-candidate-registry01.stg.iad2.fedoraproject.org
 oci-registry01.stg.iad2.fedoraproject.org
 # fedimg01.stg.iad2.fedoraproject.org
@@ -1008,6 +1009,12 @@ copr-db-stg.aws.fedoraproject.org
 # virthost-aarch64-os01.fedorainfracloud.org
 # virthost-aarch64-os02.fedorainfracloud.org
 
+[debuginfod]
+debuginfod01.iad2.fedoraproject.org
+
+[debuginfod_stg]
+debuginfod01.stg.iad2.fedoraproject.org
+
 [pagure]
 pagure02.fedoraproject.org
 

main.yml

@@ -32,6 +32,7 @@
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/copr-frontend-cloud.yml
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/copr-keygen.yml
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/datagrepper.yml
+- import_playbook: /srv/web/infra/ansible/playbooks/groups/debuginfod.yml
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/dns.yml
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/download.yml
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/fas.yml

playbooks/groups/debuginfod.yml

@@ -0,0 +1,32 @@
+- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=debuginfod:debuginfod_stg"
+
+- name: make the box be real
+  hosts: debuginfod:debuginfod_stg
+  user: root
+  gather_facts: True
+
+  vars_files:
+   - /srv/web/infra/ansible/vars/global.yml
+   - "/srv/private/ansible/vars.yml"
+   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
+
+  pre_tasks:
+  - import_tasks: "{{ tasks_path }}/yumrepos.yml"
+
+  roles:
+  - base
+  - rkhunter
+  - nagios_client
+  - hosts
+  - ipa/client
+  - collectd/base
+  
+  - role: nfs/client
+    mnt_dir: '/mnt/fedora_koji_prod'
+    nfs_src_dir: "fedora_koji"
+
+  tasks:
+  - import_tasks: "{{ tasks_path }}/motd.yml"
+
+  handlers:
+  - import_tasks: "{{ handlers_path }}/restart_services.yml"

playbooks/include/proxies-reverseproxy.yml

@@ -751,9 +751,8 @@
   - role: httpd/reverseproxy
     website: debuginfod.fedoraproject.org
     destname: debuginfod
-    balancer_name: app-os
-    targettype: openshift
-    keephost: true
-    when: env == "staging"
+    remotepath: /
+    localpath: /
+    proxyurl: http://debuginfod01
     tags: debuginfod
 

playbooks/include/proxies-websites.yml

@@ -975,7 +975,6 @@
     server_aliases: [debuginfod.stg.fedoraproject.org]
     cert_name: "{{wildcard_cert_name}}"
     tags: debuginfod
-    when: env == "staging"
 
   - role: httpd/website
     site_name: calendar.fedoraproject.org