pagure-stg-ro01 was missing from the [staging] inventory group, so it
got production wildcard cert vars instead of staging ones. Also pass
SSLCertificateChainFile through to httpd/website to avoid falling back
to the hardcoded 2025 production default.
This pr attempts to move sshd to port 222 on proxy01.stg and
proxy02.stg.
We want to do this (first here and then in prod) because we want to nat
in ssh from external and use haproxy to send that into
forge.fedoraproject.org. If we were using port 22 to connect here
it would conflict with forwarding it on to haproxy.
Note that we still need to actually get networking folks to make the nat
mapping and we still need to add haproxy config to send it into forge in
openshift, but this is the first step we need to get working before we
can do those things.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
For infra/tickets#13351
This makes a staging rhel10 vm thats just the same size / place
as pagure-stg01.
It still needs external ip's and nat in from those, but this should be
enough to install it and start setting things up.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We are no longer using the bkernel role (using the old card thats in
buildhw-x86-01), so this removes that role and mentions of it.
Also, because we are urgently building kernels all the time now,
add one more buildhw-x86 and one more buildhw-a64 to secure-boot channel
so we can build more/faster kernels.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
With the decommission of OpenID we no longer need this machine on
staging. Let's get rid of it.
See infra/tickets#13265 for more details.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
This machine is in the rdu3 isolated network.
For now, just setup a simple kickstart on one disk and a playbook that
does the normal base role things. We can adjust from here.
This machine has 1 nvme and another spinning rust device.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We still aren't able to get to mgmt on this host, but it's up and
operating normally, so we might as well use it for now.
If it goes down we can remove it again.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
The proxy05 is unavailable for last few days, let's remove it from
mirrorlist_proxies till the situation is resolved.
This will fix mirrorlist-statistics cronjob. See
https://pagure.io/fedora-infrastructure/issue/12993 for more info.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
move all the rdu2-cc machines to rdu3, reconfigure things.
We will want to fill in a bit more info and check each of these before
using them.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
