Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
16134 commits 9 branches 0 tags 111 MiB
Commit graph

16134 commits

This branch
This branch
All branches
Author SHA1 Message Date
Patrick Uiterwijk
29bc6303fe Ansible has a bug where state=null becomes state=link, contrary to documentation 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-27 22:57:34 +00:00
Michael Simacek
0d86a1c1cb Use regular vacuum in koschei cronjob 2016-11-27 17:36:03 +01:00
Patrick Uiterwijk
e49602b4e6 Disable GSSAPI for now, dummy account has no access to private user info 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-27 09:37:15 +00:00
Patrick Uiterwijk
2ae15056fd Use explicit ccache file 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-27 08:46:48 +00:00
Patrick Uiterwijk
3c052c4363 Put bodhi koji stuff in ansible 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-26 23:39:57 +00:00
Kevin Fenzi
a1ecb9decb fix for bash arrays from upstream. fixes multiple mod updates at once 2016-11-26 19:31:41 +00:00
Andrea Veri
a601e03376 GNOME Backups: enable backups on sdkbuilder, webapps3 2016-11-25 21:53:49 +00:00
Patrick Uiterwijk
56a5e43e07 RHBZ only wants email 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-25 01:13:58 +00:00
Patrick Uiterwijk
71c7858bb3 When we enable openidc, let's also install it 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-25 01:00:54 +00:00
Patrick Uiterwijk
0937430ff6 Enable OIDC in production 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-25 00:54:04 +00:00
Patrick Uiterwijk
830ef8668f Setup RHBZ Beta 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-25 00:53:42 +00:00
Patrick Uiterwijk
3dced471d8 Install mod_auth_gssapi 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 19:55:47 +00:00
Patrick Uiterwijk
c8f5fa271c Switch epylog to krb5 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 19:53:51 +00:00
Patrick Uiterwijk
5b6f50f69d Install the right plugin for nagios gssapi 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 19:36:59 +00:00
Patrick Uiterwijk
a9769e5704 Switch nagios over to krb 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 19:27:04 +00:00
Patrick Uiterwijk
dcd7d16253 Start moving nagios to direct krb 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 19:10:57 +00:00
Patrick Uiterwijk
4e97f8a34e Close this one 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 18:41:19 +00:00
Patrick Uiterwijk
3c16c8b240 Someone else also got annoyed by .stg all over the place 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 18:37:32 +00:00
Patrick Uiterwijk
1186d2f37b Non-staging gets non-staging keytab 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 18:29:18 +00:00
Patrick Uiterwijk
c449aa0283 This remember for X days is no longer working 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 18:20:58 +00:00
Patrick Uiterwijk
5a668c4792 Effectively disable session locking. Its useless anyway 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 18:09:22 +00:00
Patrick Uiterwijk
d3dc9adac9 Sessions duration cut by 4 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 18:08:03 +00:00
Patrick Uiterwijk
a18f9b62b0 This differs for prod vs stg 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 18:02:51 +00:00
Patrick Uiterwijk
fd0a78df1a Ipsilon 2.0 is in prod 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 18:01:47 +00:00
Patrick Uiterwijk
4bf3e4d04b This should be lowercase 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 16:38:18 +00:00
Patrick Uiterwijk
4a977b1c73 Deploy GSSAPI for Ipsilon in stg 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 16:34:50 +00:00
Patrick Uiterwijk
673f85066b Some more packages needed for Ipsilon 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 16:04:50 +00:00
Patrick Uiterwijk
bacf440c82 Issue keytabs for Ipsilon 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 15:57:15 +00:00
Patrick Uiterwijk
ec9680232e Pkgs actually has a keytab for pkgs 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-24 15:56:29 +00:00
Martin Krizek
c35decd9f1 buildmaster and buildslaves: install policycoreutils-python-utils for semanage 2016-11-24 13:09:00 +00:00
Martin Krizek
b8891699eb imagefactory-client: install missing dep, git 2016-11-24 09:27:35 +00:00
Martin Krizek
d2439b2ec2 taskotron-client: enable virtlogd on f24+ 2016-11-24 09:21:17 +00:00
Martin Krizek
3c57c1d289 taskotron-client: create buildslaves group before it's used 2016-11-24 09:11:15 +00:00
Adam Miller
8133febc22 fix typo causing syntax error for osbs-cluster playbook 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-23 22:24:08 +00:00
Patrick Uiterwijk
e78ea5e1c2 Add forgotten c 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 22:12:43 +00:00
Adam Miller
1bee593de6 fix osbs-client role templating 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-23 21:47:44 +00:00
Adam Miller
074f018c19 make the osbs_url variable name consistently named everywhere 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-23 21:41:23 +00:00
Adam Miller
ef18805470 enable maxamillion's atomic-reactor copr for STG osbs buildroot for testing 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-23 21:37:00 +00:00
Adam Miller
090c85d868 set osbs to use krb5 for koji auth instead of ssl certs 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-11-23 21:36:59 +00:00
Patrick Uiterwijk
d15e182de8 Cert auth to staging koji is now history 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 21:33:01 +00:00
Patrick Uiterwijk
c9b0592bff Make the osbs keytab go to the nodes 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 21:01:35 +00:00
Kevin Fenzi
b8f4139cd8 correct lockfile name 2016-11-23 18:32:52 +00:00
Patrick Uiterwijk
0bc8c56f06 This is also env-dependant 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 18:17:29 +00:00
Patrick Uiterwijk
b88c5c4da6 Seems IPA masters need a different krb5 conf 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 18:13:24 +00:00
Kevin Fenzi
3d02fede99 use common lock file for things that update fedora/secondary fullfiletimelists 2016-11-23 18:03:01 +00:00
Kevin Fenzi
fb191cb0d5 Drop common_scripts task 2016-11-23 17:56:02 +00:00
Kevin Fenzi
566dfe5929 fix spacing on with_fileglob 2016-11-23 17:45:47 +00:00
Patrick Uiterwijk
dcc0030b13 Deploy keytab after master is provisioned 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 17:30:21 +00:00
Adam Williamson
b99a4a6381 create-filelist: also skip the imagelist when making others 
add the imagelist's name to skip_files as we do for the other
two files. tibbs is committing the same change to upstream.
 2016-11-23 09:29:24 -08:00
Patrick Uiterwijk
c585ca7873 Keytabs owned by root 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 17:26:12 +00:00