This section will list some of the operations that we have to automate to deploy/maintain/migrate/decommission services and/or infrastructure components used in the CentOS infra.
It makes sense to use what we build and distribute and we've always relied on CentOS Linux for our own infrastructure. To deploy it we just use our own mirror.centos.org mirrors pool and internal mirrors.
Deployed and maintained versions (in ansible roles and repositories) :
We also started to deploy RHEL in parallel for some services that will have to stay longer available (starting from CentOS Stream, expected life time is ~5y, versus 10y for RHEL). We point to an internal mirror for deployments and also use some TLS certs (subscription) to access Red Hat CDN to get updates (or point also to internal mirror)
Deployed and maintained versions (in ansible roles and repositories) :
Note
See internal ansible inventory group_vars/all
doc/notes/snippet around the rhel_*
variables about how to use this, not covered in public documentation for obvious easons