This is a hack to work around SPF screwing us for @fedoraproject.org
aliases. It only fixes email from @redhat.com, but due to bugzilla thats
a lot of email.
Without this:
bugzilla@redhat.com -> user@fedoraproject.org (expands) ->
user@gmail.com sent out directly to gmail and gets rejected because
we aren't in the redhat.com SPF record.
With this:
bugzilla@redhat.com -> user@fedoraproject.org (expands) ->
user@gmail.com but sent to mx2.redhat.com to deliver. Since
mx2.redhat.com definitely is in the redhat.com SPF record the email is
delivered fine and SPF checks pass.
This won't help for other domains with -all SPF records, but at least it
helps for all the redhat.com emails, of which there are a lot going to
fedoraproject.org aliases. :)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We need vpn to reach the ipa servers.
Instead lets try and fix this by not specifying the group in
nagios/client.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This used to be a role-specific handler, though we have a special
upgrade playbooks (e.g. copr-keygen-upgrade.yml) that failed because
they use but don't import the copr/* roles (and role handlers). So we
would have to either import role-specific handlers explicitly, or do
this commit.
I removed all the old files, inventory, playbooks, roles and other from
services we no longer run or use. There was a bunch of cruft in there
and I hope that will make the repo cleaner and easier to look for things
we actually do run and care about.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This should avoid us turning on interfaces the config is telling
us shouldn't be turned on. Should only affect openQA-related
boxes, as those are the only ones that use ansible_ifcfg_disabled
at present. It is defined as an empty list in group_vars/all, so
we shouldn't need to worry about it not being defined. Also
converts from the deprecated with_items syntax to loop syntax.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
This includes some tweaks to the core fedmsg roles to allow a
'generic' way of indicating that a box should use fedmsg-hub-3
not fedmsg-hub, and make the restart notification work for that.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
RabbitMQ recommends[0] that the open file descriptor limit be set to a
minimum of 50K. It recommends that the maximum number of open
connections be multiplied by 2 and added to the total number of queues.
Finally, it suggests that 500K isn't an unreasonable setting. This sets
the default to 500K and makes the value configurable.
Signed-off-by: Jeremy Cline <jcline@redhat.com>
Frank Ch. Eigler