1
0
Fork 0
forked from infra/ansible
Commit graph

223 commits

Author SHA1 Message Date
f4bf421743 Fix yamllint octal-value errors by quoting file permission modes
Quote all file permission mode values (0755, 0644, 0600, 0750) as strings
to prevent yamllint from treating them as implicit octal numbers.
2026-08-05 21:27:26 +00:00
4e70adc8d4 Fix yamllint trailing-spaces errors by removing trailing whitespace
Remove all trailing spaces from YAML files to comply with yamllint
formatting requirements.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-08-05 21:27:26 +00:00
224ae2aed0 Fix yamllint document-start errors by adding YAML document markers
Add document start marker (---) to 28 YAML files that were missing it
to comply with yamllint requirements for proper YAML document structure.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-08-05 21:27:26 +00:00
c84661178f rabbitmq: clean up unused OSCI pipelines
2 and 9 were for pull request testing; we no longer use Jenkins
for this. 5 was used for a "RabbitMQ_Copr_Heartbeat" at some
point, but there is no consumer of this queue at present, I can
find no trace of it in Jenkins, and it was removed from the CI
docs in 2020:
1323242558
so I'm pretty sure it's dead. 16 was created in 6db9b16 by
@mvadkert because "we are extending one of our triggers to
another topic", but it was never documented in the CI docs, I can
find no record of there ever being a trigger repository that
would use it, and there is no current consumer of it.

This also adds comments that explain the use of each of the
remaining numbered queues.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-07-21 14:59:45 -07:00
c4a96be6cc
Zabbix: set owner of centos-monitoring rabbit scripts/units/timers correctly
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 16:41:06 +01:00
2818ab897e
Nagios: change ownership of centos sender script
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 16:06:48 +01:00
ea960ee1a7
Nagis: remove nrpe config from rabbitmq_cluster
This actually restores some code I deleted in March, because it's needed
for the CentOS sender. It now places that config in /etc/zabbix since
/etc/nrpe.d is going to be removed.

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 14:22:40 +01:00
Cristian Le
16f15b85a1 Add osci-pipeline queue for scratch-build-test 2026-06-26 21:36:54 +00:00
2519e23c78
Add cluster monitoring to rabbitmq03 in staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-24 07:39:05 +02:00
b00e0aaf59
RabbitMQ: private keys need to match the certs, duh
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-23 11:01:06 +02:00
83a81d1ece
Restart RabbitMQ when the cert change
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-23 10:49:55 +02:00
f550f61788
Update the RabbitMQ cluster monitoring on staging
- split off the template into a node template and a cluster template
  (that only needs to be instanciated on one node)
- add certificate expiration monitoring in the cluster template

This is only on staging for now.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-23 10:35:20 +02:00
c42bde9860
RabbitMQ: use the old server certs in staging for now
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-23 10:34:47 +02:00
60a2cbec78
RabbitMQ: add the staging suffixes to users and queues
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-23 10:28:58 +02:00
03b0d89442 rabbitmq: add weblate user to send translation messages
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-19 09:01:42 -07:00
3202a6b388 Fix 'include_role' usage in rabbitmq setup
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-09 13:22:41 +00:00
0759572fcf Move the ELNBuildSync queue setup
Now that ELNBuildSync is being deployed via Ansible, we should keep its
queue setup with the rest of the playbook.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-09 13:22:41 +00:00
3457eea89b
Add the RabbitMQ user for the lookaside cache
Fixes: infra/tickets#13380

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 11:54:21 +02:00
72f01c98a7 amqp: Add queue for ELN->CS sync
This will be used for setting up automatic syncing of ELN builds into
CentOS Stream.

Fixes: infra/tickets#13226

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
2026-05-08 18:40:56 +00:00
9cad3bf76c
Nagios: Drop RabbitMQ checks as Zabbix handles this
This removes (almost) all the Nagios config for Rabbit, including the
templates in the Rabbit role(s).

It leaves the nagios user, because Zabbix is also using it.

It also adds a Matrix-level notification for high queues, above the one
that goes to the UI.

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-03-12 12:30:02 +00:00
74e2f728c5
Add the logdetective-packit user in RabbitMQ
Creating a certificate is not sufficient.

Fixes: infra/tickets#12989

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-03-09 10:10:56 +01:00
7053ad1c4f rabbitmq_cluster: remove two osci queues that are no longer needed
See infra/tickets#12810

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-02-16 15:12:11 -08:00
0bb245c653
Zabbix | Rabbit: Fix hardcoded STG entry in zabbix agent drop-in
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-02-05 11:12:42 +00:00
5443368122
Zabbix: Add RabbitMQ monitoring ... to the correct role
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-12-04 14:27:59 +00:00
Cristian Le
144fbc70fd RabbitMQ: Add rmdepcheck queue
Signed-off-by: Cristian Le <git@lecris.dev>
2025-12-04 01:47:32 +00:00
f2739e64ae
RabbitMQ: be more specific for the server-named queues to avoid conflict with exchange names
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-11-12 12:48:05 +01:00
825afa22f1
Remove unused OSCI pipelines queues in RabbitMQ
See: https://pagure.io/fedora-infrastructure/issue/12810

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-07 12:38:37 +02:00
948346f457 rabbitmq: drop some osci queues
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-09-26 13:35:11 -07:00
ba0393fece
Deploy a patch in distgit to fix Infra ticket 12622
See: https://pagure.io/fedora-infrastructure/issue/12622
Patch sent upstream: https://pagure.io/pagure/pull-request/5529

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-08-06 17:04:00 +02:00
a1c3a34ff5
RabbitMQ Centos Monitoring: fix the timer
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-21 15:36:50 +02:00
a51c0ea353
RabbitMQ: setup sending the queue metrix to CentOS
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-21 15:23:42 +02:00
72789a919f rabbitmq: switch datacenter out for rdu3
This was useful when we had clusters in iad2 and rdu3, but it didn't
actually quite work then and it definitely doesn't now. :)

Datacenters like 'aws' do not have their own clusters, they use the one
in rdu3. So, just switch it back to hard coding.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-17 18:00:47 -07:00
02abc93d59
Add a script to send queue metrics to CentOS's Zabbix
Fixes: https://pagure.io/fedora-infrastructure/issue/12617

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-09 15:13:32 +02:00
60b7c10cf4
RabbitMQ: set the max acknowledgment time to 6h
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-07 23:41:51 +02:00
83ce202846
Don't expire queues at all in the /pubsub vhost
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-07 17:13:08 +02:00
6c85fda0c9 Mass remove/replace iad2 -> rdu3, 10.3. -> 10.16.
Signed-off-by: Nils Philippsen <nils@redhat.com>
2025-07-03 20:05:02 +02:00
253e47796b
RabbitMQ: set the max message processing time to 2 hours
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-03 07:37:19 +02:00
05fee99f7a
Fix authentication in RabbitMQ (hopefully)
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-27 09:48:41 +02:00
af66688770
RabbitMQ: refactor the plugin activation
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-26 16:41:53 +02:00
06d83032c4
The fail_if_no_peer_cert option is a server-only value, it now fails
https://groups.google.com/g/rabbitmq-users/c/qAwG0zHI53o

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-26 16:35:09 +02:00
246b738631
RabbitMQ: use when filter instead of delegating to rabbitmq01
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-26 11:12:47 +02:00
a7e8047af7
Fixup 6ddb896537
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-26 11:04:34 +02:00
8248acbe1e
RabbitMQ: Drop the zmq.topic exchange, fedmsg has been retired
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-26 10:58:07 +02:00
6686ca4f7f
RabbitMQ: use when filter instead of delegating to rabbitmq01
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-26 10:57:38 +02:00
6ddb896537
RabbitMQ: fix the federation setting
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-26 10:57:03 +02:00
447ea9c8ad
RabbitMQ: create the /centos-odcs vhost before giving the nagios user access to it
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-26 09:20:42 +02:00
3fa3a0fc19
Fix erlang SSL path
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-25 15:18:05 +02:00
165c56fbf8
Move the bodhi sweeper configuration to the bodhi role
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-25 15:11:27 +02:00
7f1e3a1b73
Attempt to fix the RabbitMQ CLI tools
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-25 13:06:58 +02:00
573a151de1
RabbitMQ: use the new configuration file format in RDU3
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-24 10:00:03 +02:00