Move packit-stg to MP+

[jpopelka]

• packit--stg project/namespace
• Get started MP+ docs

Pre-requisites:

• Label resources for MP+ #469
• Create sandbox namespace the MP+ way #471
• More MP+ related tuning #474
• people in the Packit (Rover) group have namespace-admin role to be able to change RBAC
• MP+ firewall rules #490

Similar to #380, you should

• update vars/packit/stg_template.yaml (and your local-only stg.yaml)
  • project: packit--stg
  • host: https://api.mpp-e1-preprod.syvu.p1.openshiftapps.com:6443
  • postgres_version: 15 (to use PostgreSQL-15 instead of default v13)
• move the database first (DEPLOYMENT=stg make deploy TAGS=postgres)
• deploy the rest
• switch DNS
  • I'm not sure about the default router hostname, whether to take it from status:ingress:routerCanonicalHostname of a route or whether we need to consult this doc
• scale down the old one

[mfocko]

Notes:

• storage class for redis-pvc
• managed_platform ansible fact not always set
• had to update sandbox OC project
• definitely can't have special characters in the postgres password, don't even ask how I know that…
• Docker Hub deserves long and painful death… screw your quotas
• and what the hell is going on with the ssh-keyscan on the pkgs.fedoraproject.org????
• MP+ console is accessible only from the VPN, and also the DNS »on the VPN« is not very reliable for these changes… fml
• ssh-keyscan doesn't work… I can scan github.com, but neither pkgs.fedoraproject.org or gitlab.com
• fedmsg… grow up please…
• try this too https://source.redhat.com/departments/it/digitalsolutionsdelivery/it-infrastructure/itcloudservices/itocp/managedplatformplusbetatesting/setting_up_routes_in_mp_internalexternalext_waf_shard

[jpopelka]

Follow-up card: #509

[mfocko]

Round 2

• Scale down auto-prod packit-stg
• Dump the postgres
• Deploy postgres
• Restore postgres
• Deploy the rest
• Check firewall
• Switch the DNS
• Scale down everything on the auto-prod