1
0
Fork 0
forked from infra/ansible
Commit graph

4,631 commits

Author SHA1 Message Date
7ef3477bbb pagure_stg_ro: use staging wildcard cert 2026-08-05 10:01:35 +10:00
2671d0dd65 bastion: increase size to match up with kickstart
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-08-03 16:04:51 -07:00
9ebe561942 communishift: give more storage too to log-detective to debug efs rxw issues ( ticket 13400 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-31 10:47:03 -07:00
2874fae4ce communishift: give more pvcs to log-detective to debug efs rxw issues ( ticket 13400 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-31 10:42:20 -07:00
d0dc782933 ipsilon: add more cpus
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-31 09:15:49 -07:00
81b4357326 ipa_server_nodes: readd all ipa nodes )affects noggin
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-30 16:48:55 -07:00
28e06b904c ipa: set server nodes to use 03
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-28 09:34:33 -07:00
0aae9cd104 ipa: use 16 cpus for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-28 08:22:34 -07:00
4912749942 flatpak-cache: make disk larger
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-27 12:53:37 -07:00
f86535899b ipa: give all ipa servers in prod 16G memory
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-25 09:32:32 -07:00
a6996701b4 ipa_server: switch this to 02
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-24 09:47:28 -07:00
47c1d9cd7a ipa_servers: take ipa01 out of noggin rotation
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-24 09:45:16 -07:00
5a99afa60c [ipa] Add all servers as server_nodes
For some reason only ipa01 was on ipa_server_nodes variable. Which
caused noggin to stop working as it's using this variable.

Let's fix it.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-24 17:08:03 +02:00
3b989bcece download: add new linuxfoundation ip
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-22 15:28:32 -07:00
b48606202d communishift: add more resources for copr ( ticket 13409
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 09:45:08 -07:00
96d3eaaae8 take ipa02 out of list for fasjson also
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-17 18:27:58 -07:00
d0ec720155 communishift / copr: increase some limits per ticket 13409
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-17 09:44:32 -07:00
1fa43050e4 sundries: increase mem and cpus
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-16 15:01:30 -07:00
8faba1ca7b
Add stg override to Zabbix proxy template
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-14 12:23:36 +01:00
6d145951e6 disable ipa03 in ipa_server_nodes, used by noggin
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-13 19:00:15 -07:00
8b998b792b openqa: add pagure keys to scheduler AMQP config
Whoops, this is needed to make scheduling in response to dist-git
comments and flag changes work. I must have done it manually on
staging before.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-07-13 11:12:59 -07:00
b9a1fa57f3 openqa: enable dist-git testing in prod
This should enable dist-git PR testing in prod, and make *only*
prod report status back to dist-git (staging no longer should).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-07-10 18:21:28 -07:00
dd027f50c6 Revert "[ipa] Switch ipa_server to ipa03.stg"
This reverts commit 0a1c8efada.
2026-07-10 13:41:13 +02:00
0a1c8efada [ipa] Switch ipa_server to ipa03.stg
This is temporary to reinstall ipa01.stg

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-10 13:26:32 +02:00
c51e04de81 Collectd: cleanup collectd everywhere except FMN
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 11:01:41 +00:00
b74bb8e1a3 communishift: add pvc handling and allow 3 for happinesspackets
Per infra/tickets#13437

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 14:40:17 -07:00
cc06635ada
Zabbix: kojipkgs uses a different port for Varnish
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 10:24:30 +01:00
537ab5d20f Revert "nbde: set threshold to 5"
This reverts commit db0b9e4f0c.

This is not the correct knob to adjust number of attempts.
This is number of things that have to be successfull before unlock.
1 is right here. ;(
2026-06-29 15:25:28 -07:00
d6f46658ec
Revert "Refs 13419 - disable worker 04/05 in the proxies as httpd-lb isn't doing it's thing"
This reverts commit bdf834a3e9. The
workers are back online now, and we can use them again.
2026-06-26 09:08:04 +01:00
db0b9e4f0c nbde: set threshold to 5
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-25 14:27:07 -07:00
a16deeb465
Postfix: use postfix_group variable to get the right main.cf for maintainer_test
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-25 15:28:25 +01:00
bdf834a3e9
Refs 13419 - disable worker 04/05 in the proxies as httpd-lb isn't doing it's thing
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-25 10:45:12 +01:00
465c2ca3ec Revert "openQA etc: use a single-cert CA cert file for staging rabbitmq (#13422)"
This reverts commit 49f42faa1b.
I've updated to latest fedora-messaging and want to see if this
is unnecessary now.
2026-06-25 09:50:35 +01:00
13c67bd1c2 proxies: bump max connections up more
Seems like there are a ton of really small connections and it starts
hitting the limit (although it never logs that it's out, I think because
they free up quickly).

See if this solves the transitory alerts we see.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-23 15:21:10 -07:00
2c85bbbdf1 readd communishift-happinesspackets ( ticket #13238 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-22 13:46:15 -07:00
bca0d4843a
Zabbix: use non-vpn server target for maintainer test hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-22 16:00:23 +01:00
a574775086
Zabbix: use correct and not-typoed server target for maintainer_test hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-22 15:44:08 +01:00
474152f472
Zabbix: use correct server target for maintainer_test hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-22 15:35:53 +01:00
47e4cedcff Define openqa_env_prefix for servers
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-21 00:11:49 +01:00
49f42faa1b openQA etc: use a single-cert CA cert file for staging rabbitmq (#13422)
See infra/tickets#13422
for details on this. It seems like rabbitmq staging has been
switch to the 'new' CA cert, and the consumers don't actually
read/trust both certs in the combined CA cert file, only the
first (old) one, so they don't trust the new one. This should
deploy and use a new file with only the new CA cert in it. We
copy it out of the private repo for convenience but it's not
actually private, hence the 0644 perms.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-20 14:39:13 +02:00
7c8d8a1794 Revert "openQA: try using old pki cert/key on staging"
This reverts commit 293930446b. It
doesn't look like it helped.
2026-06-20 11:19:24 +02:00
293930446b openQA: try using old pki cert/key on staging
I'm having auth issues on openQA staging, I believe it *may* be
to do with the changes Aurelien made in
6fe8b98de21747dc16d59dcf5096da719a541296 . Let's see if using the
old key and cert helps.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-20 11:14:30 +02:00
73a749e915
Zabbix: add 100 to postfix queue triggers for smtp-mm
spammers are making the queues longer, lets allow a bit more headroom

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-19 13:11:56 +01:00
6de0108ef7 openQA dist-git PR test result reporting config (staging)
This *should* configure a new queue and consumer for openQA to
report dist-git PR test results back. It's all a bit speculative
ATM, may need some tweaking. Mostly applied only on staging for
now.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-19 13:25:02 +02:00
83f050747d Add communishift copr project ( ticket 13409 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-18 15:20:46 -07:00
Jakub Kadlcik
2e6e48414b copr: upgrade builders to F44
Fix https://github.com/fedora-copr/copr/issues/4306
2026-06-11 13:57:33 +02:00
99fdaaf68d openqa nftables: gah quickfix
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-08 17:21:48 -07:00
b16be7cbdc openqa: try and fix custom nftables rule
Looks like 'nat' was renamed, let's try using the variable.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-08 17:11:49 -07:00
36c203a312 openqa: use updates-testing on prod again
This is to get the latest snapshot packages that we've been
testing on staging, they look good.
2026-06-08 16:46:07 -07:00
9b7ad64e73 openqa: don't use updates-testing on prod workers
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-05 16:34:29 -07:00