Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
34634 commits 9 branches 0 tags 111 MiB
Commit graph

34634 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
421f5b7cd8 koji_hub / koji_builders: enable save_failed_tree 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-10 16:19:41 -08:00
Kevin Fenzi
acbf9e21f7 base / crypto-policy: always run, even in check mode 
We need to always run these even in check mode, because they register
things used in the last one of them. So, this could change this in check
mode if we modify it. Be careful!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-10 15:13:19 -08:00
Kevin Fenzi
b8bdf78196 mailman: adjust list footer to include spam reporting info 
See:
https://pagure.io/fedora-infrastructure/issue/9629
for more information.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-10 13:06:22 -08:00
Adam Williamson
09d42a7793 openqa/worker: update lab scratch build 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-02-10 11:08:24 -08:00
Aurélien Bompard
c5757a1bf6
Typo 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 18:02:41 +01:00
Aurélien Bompard
61eb449df1
No variable substitution outside of playbooks 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 18:00:15 +01:00
Pierre-Yves Chibon
dfc2844214 distgit/pagure: redirect users viewing files in the old default branch to the new default one 
Fixes https://pagure.io/fedora-infrastructure/issue/9620

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-02-10 17:58:53 +01:00
Aurélien Bompard
666e6e1685
Can't import a playbook from inside a playbook 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 17:55:09 +01:00
Kevin Fenzi
1fd16eb3e4 fedocal: re-add group file and port 80 access. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-10 08:31:44 -08:00
Aurélien Bompard
c871e09afe
Fix file module usage 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 16:55:29 +01:00
Aurélien Bompard
aa44a9956f
Fix task name 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 16:50:00 +01:00
Aurélien Bompard
7f75378a29
fix import_playbook 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 16:48:53 +01:00
Aurélien Bompard
8f51b77075
Add a manual playbook to uninstall ipa clients 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 16:41:54 +01:00
Aurélien Bompard
d520072024
IPA: disable the compat tree and the NIS tree 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-10 16:41:54 +01:00
Mohan Boddu
248807024f Enable autosigning on f34/branched 
Now that we got a compose, we can enable autosigning and let the builds
flow into f34 tag

Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-02-10 09:34:50 -05:00
Mohan Boddu
5f7e9bd5d9 Cleaning up the robosig config 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-02-10 14:32:51 +00:00
Miroslav Suchý
69e2bd3cb1 copr: define git_gc_depth for copr-dist-git 2021-02-10 12:28:33 +01:00
Adam Williamson
b2ccba7324 D'oh, missed a comment tag 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-02-09 17:43:13 -08:00
Adam Williamson
5c23f90dba openqa: deploy new scratch os-autoinst build on lab workers 
Testing it out.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-02-09 17:38:25 -08:00
Kevin Fenzi
fb0e96281c virthost: serial console: exclude buildvmhost-s390x properly 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-09 17:18:24 -08:00
Stephen Smoogen
e4719bdedd make sure that resultsdb is using the IAD2 networks versus PHX2 ones 2021-02-09 19:14:45 -05:00
Kevin Fenzi
cb048328a1 resultsdb: fix db host in ansible playbooks for resultsdb 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-09 15:06:49 -08:00
Mohan Boddu
10ef286ce3 Fixing the f35 modular signing 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-02-09 16:00:00 -05:00
Mohan Boddu
a907baabf4 Disable branched/f34 autosigning until we get a branched compose 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-02-09 15:47:29 -05:00
Pierre-Yves Chibon
1ae3ecd816 compose-tracker: add a tag for appowner 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-02-09 20:58:26 +01:00
Pierre-Yves Chibon
28a5191707 compose-tracker: give pingou access to the UI 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-02-09 20:57:35 +01:00
Tomas Hrcka
c6b02d2071 Branching f34 from rawhide 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2021-02-09 19:09:18 +01:00
Kevin Fenzi
bd9aa883d8 bodhi / backend: add debuginfo packages to rpm pungi updates config 
Right now, pungi for updates doesn't include debuginfo for all packages.
It skips ones that don't match any binary package. So we add a wildcard
to include all these as well.
See https://pagure.io/pungi/issue/1460 for more info.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-09 09:29:24 -08:00
Mohan Boddu
f6d75dfca0 Mass branching, move from master to rawhide 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-02-09 11:20:12 -05:00
Adam Saleh
0f606c1d70 Problem with env-var integer in prest definition. 2021-02-09 14:53:45 +01:00
Adam Saleh
3a6fca5b5c Typo in the route reference for prest in monitor dashboards. 2021-02-09 09:57:27 +01:00
Adam Saleh
6f6b6e0976 Added prest service to monitor-dashboards poc 2021-02-09 09:51:47 +01:00
Kevin Fenzi
d34274b02a rabbitmq_cluster: fix some typos 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-08 14:30:26 -08:00
Kevin Fenzi
ae62e4a4e7 rabbitmq_cluster: setup private mbs vhost/user 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-08 13:09:56 -08:00
Stephen Smoogen
8e73b7c5c5 fix the minimum for a guest to be enough to actually install a system 2021-02-08 13:33:25 -05:00
Kevin Fenzi
ce3181ae62 nuancier: open port 80 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-08 08:52:46 -08:00
Kevin Fenzi
dce4be062b nuancier: set wsgi vars for httpd role. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-08 07:58:18 -08:00
Pavel Raiskup
391e4ea7af copr-be: override centos-stream configs 
This is needed for now because we are updating mock-core-configs,
and there is an incompatible variant of the centos-stream configuration:
https://pagure.io/copr/copr/issue/1691
 2021-02-08 15:11:13 +01:00
Pavel Raiskup
fea22e3e45 copr-be: use the new SSL certificate 2021-02-08 14:06:31 +01:00
Kevin Fenzi
daa470f778 apps-fp-o: Change directory mode to 2755 since thats what it becomes after sync 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-07 17:16:26 -08:00
Kevin Fenzi
60f6cb5f50 compose-tracker: check out correct branch for prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-07 10:13:46 -08:00
Kevin Fenzi
c856c7e882 compose-tracker: move from f30 to f33. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-07 10:05:02 -08:00
Owen W. Taylor
67224d3b02 Add back regindexer and revert httpd config until flatpak-indexer is ready 
While we're getting flatpak-indexer tested and working in staging, we still
need regindexer, and we don't want the httpd config changes that are
part of the regindexer => flatpak-indexer change.

Fixes: https://pagure.io/fedora-infrastructure/issue/9631
Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
 2021-02-06 14:21:27 -05:00
Kevin Fenzi
074f2a2089 apps-fp-o: change directory to 0755 to match everywhere else. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-06 10:55:58 -08:00
Kevin Fenzi
b0919a564e httpd / redirectmatch: directories should be 755 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-06 10:19:33 -08:00
Owen W. Taylor
69e318a10a Add a flatpak-indexer openshift service 
flatpak-indexer replaces regindexer for creating an index of Fedora
Flatpaks. It adds an additional capability - creating "diffs" between image versions
allowing for incremental updates.

Add a new openshift namespace: flatpak-indexer, with three deploymentconfigs
in it:

 - flatpak-indexer: generates the index
 - flatpak-indexer-differ: worker(s) to run the expensive tardiff operation
 - redis: used for cache and communication between indexer and differ

The staging version of the indexer targets the *production* bodhi/koji/registry,
since we don't have useful Flatpak content in staging. This could be changed.

The registry reverse proxy configuration is updated to a slightly different
set of generated indexes (the 'annotations' indexes for F31 and older are
now suffixed with -annotations, and the 'labels' indexes unsuffixed.)

Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
 2021-02-05 21:19:30 +00:00
Kevin Fenzi
c349a7c25e chrony: try and fix chrony in staging 
In staging we set a 'staging' datacenter, but this makes the chrony
template think they are external hosts not in iad2, which is wrong.
So, add a conditional to make them use our internal iad2 ntp servers if
they are in staging datacenter too.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-05 12:24:03 -08:00
Kevin Fenzi
f9f87b928a buildvm / staging: add ipa/client to setup ssh/sudo access. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-02-05 11:47:08 -08:00
Mohan Boddu
1a302f3617 chmod composes TMPDIR to 755 
For some reason starting with F33, the tmp dirs are created with 700
perms and that is causing issues with running scripts in releng dir

Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-02-05 14:06:28 -05:00
Aurélien Bompard
29f4c6adf6
fas-changes: access key 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-02-05 17:40:42 +01:00