1
0
Fork 0
forked from infra/ansible
Commit graph

10,501 commits

Author SHA1 Message Date
aaa3c9403f Add buildhw-x86-05/06/07
These are all old iad2 hardware we want to add as builders.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-29 17:39:29 +00:00
76f7751d11 downloads: add osuosl mirrors to acls
These osuosl mirrors want to get pre bitflip content, so add them to
acls here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-29 10:25:29 -07:00
James Antill
3e0e89ba7f riscv-koji: Permanently increase mem_size/max_mem_size.
Signed-off-by: James Antill <james@and.org>
2026-04-29 12:16:42 -04:00
36df8e0ac5 vmhost-x86-copr04 is down, let's not try to start VMs on it 2026-04-23 16:57:06 +02:00
583c76363d openQA: drop aarch64 concurrent workers to 45
We're just getting too many flakes on aarch64 tests. Let's see if
this helps.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-04-22 09:11:58 -07:00
cd5d720e6d copr-be: drop Power8 hypervisors from our configuration 2026-04-22 09:19:13 +02:00
bce5f8bbc9 copr-hypervisor: reform things as a single list which the role expects
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-17 11:06:20 -07:00
53234bcece copr-hypervisor / x86: bind second and third luks devices
These machines have a /dev/md3 and /dev/md4 that are encrypted, but we
were only binding /dev/md2, so boots would wait for a passphrase.

This binds all of them (they have the same passphrase and can use the
same tang server they just need to be bound to do so)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-17 11:03:03 -07:00
b5e2300700 wiki: increase cpus to 16 to handle load
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-17 09:05:29 -07:00
3ac5d6b344 [ipsilon] Remove ipsilon02.stg from inventory
With the decommission of OpenID we no longer need this machine on
staging. Let's get rid of it.

See infra/tickets#13265 for more details.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-04-16 12:15:56 +02:00
44d37df386 Onboard happinesspackets project to communishift
infra/tickets#13238

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-04-14 15:22:21 +02:00
James Antill
d3db58fc89 vmhost-x86-01.stg: Use ipa02.stg as ipa_server
Signed-off-by: James Antill <james@and.org>
2026-04-07 16:00:09 -04:00
88f165d25c
Zabbix/Copr: copy zabbix staging groupvars to copr_dev_aws
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-04-01 13:17:20 +01:00
5470bdff4d bump up number of reserved instances 2026-04-01 14:15:19 +02:00
Jiri Kyjovsky
35af14084d copr-rpmeta: remove prod bday 2026-04-01 13:39:12 +02:00
Jiri Kyjovsky
5b71b2f834 copr-rpmeta: hostnames added + birthday production 2026-04-01 13:13:47 +02:00
Jiri Kyjovsky
13487e6389 copr: rpmeta remove birthday 2026-03-31 21:56:06 +02:00
Jiri Kyjovsky
f6ca11deea copr: add MVP for rpmeta service 2026-03-31 17:40:45 +02:00
6283e1f4a4
Zabbix/Psql: Up threshold for locks on busy DBs
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-30 15:43:21 +01:00
b610443a6c bump up number of reserved instances 2026-03-26 14:59:59 +01:00
877ad6b91c
Zabbix: disable http(s) bmc checks in stg, not reachable
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-26 13:42:15 +00:00
8cd324d0e8
Zabbix: fix external_hosts inventory
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-26 13:36:09 +00:00
a0d52dff1a Zabbix: re-use base monitoring role in zabbix_server for non-Ansible hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-26 13:33:02 +00:00
James Antill
c64432a279 compose*: Update remaining hosts from F42 to F43.
Signed-off-by: James Antill <james@and.org>
2026-03-25 21:07:50 -04:00
fc72c13c8c communishift: add draft-share project. ticket 13172
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-03-24 16:06:52 -07:00
276556a4fb refactor: delete fasjson_aliases variable and checks 2026-03-24 17:36:21 +00:00
c5c1fb730f Enable fasjson for email alias creation
Fixes infra/tickets#13219
2026-03-24 17:36:21 +00:00
Jiri Podivin
2d82fba337 Increasing quota of pods and memory
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-03-23 18:52:07 +00:00
4fdc9ee95b gpu servers: add some groups to have shell access
This adds 2 groups to the gpu servers for shell access.
Only sysadmin-gpu has sudo access, but these users can login/do non root
things.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-03-23 10:39:26 -07:00
640791dd96
Zabbix: disable monitoring http for Power9 bmc
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-23 16:35:23 +00:00
6645a421ab
Zabbix: Re-enable https(s) bmc checks now the firewall is sorted
Stg is still blocked but prod seems OK now...

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-23 14:39:48 +00:00
0a19698e74 [colo-virt] Add correct postfix group
This machines are on VPN, so they should be in the corresponding postfix group.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-03-23 10:47:54 +01:00
f713c3ad74 inventory / secure-boot: enable a64 builder
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-03-20 12:43:57 -07:00
910579198f
Zabbix: Disable 80/443 BMC for iso hosts until we can fix networking
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-20 16:05:54 +00:00
1d38738c5d
Zabbix: Disable https(s) bmc checks until firewalls can be sorted
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-20 13:17:51 +00:00
4748df11f3
Zabbix: Add defaults for hostgroups
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-20 12:06:30 +00:00
edc040bb3b Zabbix/inventory: add more BMC lists to hardware machines and refer to it from zabbix_inventory
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-20 11:43:51 +00:00
2d118fd906
Zabbix: Double thresholds for smtp-mm-*
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-19 16:07:14 +00:00
4308b42b2d
Zabbix: Raise threshold on fmn queue
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-19 16:05:06 +00:00
170ab3455d secureboot: setup permissions for new pesign
pesign needs to map the socket into the chroot/container, but also set
acls to allow the users in the container to use it. We setup a
secureboot group to map these builders and only run this setup on them.

For now buildhw-x86-02 is the only builder we want to enable.
Once we know it's working well we can retire the bkernel role and repave
buildhw-x86-01. buildhw-a64-02 will be added once we fix the aarch64
signing.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-03-18 11:36:05 -07:00
James Antill
745e6a2aaf *-test* hosts: Add f44-test host file.
Signed-off-by: James Antill <james@and.org>
2026-03-17 13:57:49 -04:00
925e6a6df5 proxies / staging: we do not have worker04/worker05 in staging in rdu3
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-03-16 16:16:23 -07:00
36f773ece9 [postfix] Add missing variable to retrace group
The host_group variable was missing in retrace group, so the postfix
role took standard rdu3 main.cf file instead. Let's define the variable.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-03-16 12:29:56 +01:00
bd716659c6
Inventory: quote dates because Zabbix API wants that
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-12 17:01:28 +00:00
4e9c4751bc
Inventory: trim trailing whitespace with sed
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-12 15:49:27 +00:00
ec5c717b1f
Initial round of Zabbix HW inventory info 2026-03-12 15:49:24 +00:00
ee8a20b1f6
Zabbix: enable agent-based reporting on s390 bvmhosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-12 13:59:23 +00:00
5ec7103314
Zabbix: role/OS vars won't work in other roles, use a hostvar instead
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-12 13:04:57 +00:00
4cb953f9e5 download: add mirror to acls ( infra/tickets#13180 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-03-12 01:02:37 +00:00
aedf43d1f3 Restore arcane breadcrumbs (broken Forge links)
Also some minor changes to satisfy yamllint.

Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-03-11 21:09:36 +00:00