Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
39807 commits 9 branches 0 tags 111 MiB
Commit graph

39807 commits

This branch
This branch
All branches
Author SHA1 Message Date
Adam Williamson
e3a4908ae0 ...so close... 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 12:27:03 +02:00
Adam Williamson
31f4668476 openqa: tweak rabbit user creation stuff... 
ugh.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 12:25:21 +02:00
Adam Williamson
085e6e0828 unquote sent_topics 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 12:07:15 +02:00
Adam Williamson
9953afa06e openqa etc: fix up and improve AMQP messaging configuration 
This is triggered by
https://pagure.io/fedora-infrastructure/issue/11375 , but the
changes are rather extensive. Unfortunately, some of the
relevant files got messed up by the alphabetical sort thing that
got run on several group variable files a while ago, so that
confuses the diff a bit - I had to unwind those changes to make
the files readable again in order to make these changes.

Ultimately the goal here is to make the config more consistent
and more functional - the variables used and their names should
be more consistently related to what they're actually *for*,
which I didn't entirely understand when setting this up. So
we have variables for the username being used in each case and
we use that variable where we're referring to the username, for
instance. This should also make the whole thing about the cases
where listeners on the openQA stg/lab instance need to listen
to prod messages clearer, too. It also makes the user creation
clearer by doing it explicitly, just once per user, instead of
haphazardly doing it implicitly through the queue definitions.

And finally it should also actually fix 11375, by giving the
appropriate write permissions to each user.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 12:04:55 +02:00
František Zatloukal
bfb5745b4c Blockerbugs: switch stg to update_versioneer branch 2023-06-20 16:09:10 +02:00
František Zatloukal
f477927139 Revert "Revert "Blockerbugs: switch to ubi9"" 
This reverts commit d8c9093ca8.
 2023-06-20 14:44:56 +02:00
František Zatloukal
d8c9093ca8 Revert "Blockerbugs: switch to ubi9" 
This reverts commit 44b562c155.
 2023-06-20 14:36:56 +02:00
František Zatloukal
44b562c155 Blockerbugs: switch to ubi9 2023-06-20 14:21:52 +02:00
amedvede
175f4ed82a feat: moved the section with fas username that is used for comment on issues to be used for all toddlers 2023-06-20 09:43:30 +02:00
Adam Williamson
c40ecfef1d openqa: also listen for ODCS state change messages 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-19 18:12:56 +02:00
Pavel Raiskup
21be6fd294 copr: use smtp-auth-relay for all hosts 2023-06-19 11:08:23 +02:00
Pavel Raiskup
bee7b64fe5 main.cf files need to be moved before we claim they are templates 
Revert "postfix: install main.cf as template"

This reverts commit 57f75cbcab.
 2023-06-19 10:39:39 +02:00
Pavel Raiskup
57f75cbcab postfix: install main.cf as template 
There is no jinja in the current main.cf files, except for the Copr
main.cf that uses STARTTLS for SMTP relayhost.
 2023-06-19 10:33:33 +02:00
Pavel Raiskup
8d891f9b32 smtp-auth-relay: reset main.cf 
The postfix_group is used on multiple places.
 2023-06-19 10:26:46 +02:00
Pavel Raiskup
19bfd92e3b copr: fill smtp_auth_relay password correctly 2023-06-19 10:13:53 +02:00
Pavel Raiskup
82205131b7 smtp_auth_relay: new role, use by copr-dist-git-dev for now 2023-06-19 10:10:43 +02:00
Kevin Fenzi
2be84b22aa db-koji01: adjust to afffect current performance tuning 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-16 12:03:24 -07:00
Timothée Ravier
9240690c3a openshift: Remove Silverblue website 
The website is now available at https://fedoraproject.org/silverblue/
The repo for the previous website has been archived:
https://github.com/fedora-silverblue/silverblue-site
 2023-06-16 16:50:07 +00:00
Pavel Raiskup
be81e532c0 copr: revert back to the default Mageia configs 
The problems are fixed by:
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4b79d42761
 2023-06-16 11:16:57 +02:00
Kevin Fenzi
3daedbd42f smtp-mm-osuosl01: add more memory here to see if that gets it to install 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-15 19:37:53 -07:00
Tomas Hrcka
05eedc3f44 Add new mapping for opnh264 epel9 repositories to mirromanager 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-06-15 21:14:44 +00:00
Tomas Hrcka
627b39112f Add signing for f39-perl sidetag 
Fix the key

Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-06-15 20:53:58 +00:00
Pavel Raiskup
047e6f3c6c copr: Mageia Cauldron Mock build is broken with --use-bootstrap-image 
So revert back to the mock-core-configs default configuration; and wait
till https://github.com/xsuchy/distribution-gpg-keys/pull/99 is
resolved.
 2023-06-15 20:25:59 +02:00
Pavel Raiskup
e36f5cc939 copr: use_bootstrap_image for Mageia chroots 
Solving similar problems with keys as with openSUSE
before in cd7df06b87
 2023-06-15 08:24:43 +02:00
Kevin Fenzi
2cc5d18042 smtp-mm-osuosl01: move to rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 16:38:00 -07:00
Kevin Fenzi
7d2247369f dns: more tweaking for ddos handling 
Increase the window so we keep track of more queries
Set the max number of nxdomains to try and drop those.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 15:28:46 -07:00
Kevin Fenzi
e6d08451ca dns: adjust named config for DDoS 
Increase a number of values, add some limits.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 15:20:44 -07:00
Kevin Fenzi
adef5b55fd proxies: fix duplicate cert here, only use the wildcard one. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 11:58:16 -07:00
Kevin Fenzi
1c187bf308 download: update mirror acls for tier2 mirror 
Received on the mirror-admin list.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 10:16:47 -07:00
Dusty Mabe
466f7f1fd7
coreos-cincinnati: deploy current git (086c9f1) 2023-06-14 11:09:58 -04:00
Kevin Fenzi
b6d8e745d1 flatpak-indexer: add kalev to appowners 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 07:32:23 -07:00
David Kirwan
859c212770 zabbix: rename php-fpm config files 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-14 12:47:17 +01:00
David Kirwan
dcbfc405eb zabbix: replace template task with copy 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-14 12:13:58 +01:00
David Kirwan
c881ad8d65 zabbix: add templates for php-fpm 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-14 11:57:34 +01:00
Pavel Raiskup
b9c69f5cac copr: move epel-6 to rhel+epel from centos+epel 
Relates to the certificate issues
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/KOR3HE2VHHIPDBLDLXTYRMON6JQXCHMW/

The problem was the centos-6 key, not EPEL-6 key.

Reverts: 7b1cf87845
Reverts: 0fc0655e47
 2023-06-14 10:58:47 +02:00
Kevin Fenzi
11d24676b9 smtp-mm-cc-rdu01: move to new virthost 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 17:37:52 -07:00
Kevin Fenzi
d24435450b smtp-mm-cc-rdu01: move to rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 16:53:17 -07:00
Kevin Fenzi
abd52941ef smtp-mm: tweak tls options for rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 16:52:30 -07:00
Kevin Fenzi
14a3a6a2c1 smtp-mm / base / postfix: use gateway-chain cert 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 16:32:54 -07:00
Kevin Fenzi
a67ddb2267 smtp-mm-ib01: adjust variables 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 15:56:47 -07:00
Kevin Fenzi
f7c738a514 smtp-mm-ib01: move to rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 15:53:45 -07:00
Kevin Fenzi
9673a0f445 robosignatory: fix name of key for f39-python sidetag signing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 15:13:18 -07:00
Kevin Fenzi
10bf453112 koji_builder: dnf5 site changes 
We want to keep using dnf4 for koji builds, even after dnf5 is default
in rawhide. Once it's ready to do building as well, we can revert/drop
this. See https://pagure.io/releng/issue/11446

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-13 12:39:22 -07:00
Timothée Ravier
31ef29a34b Redirect kinoite.fp.org to the new website 
Redirect the kinoite subdomain to the new Kinoite website at:
https://fedoraproject.org/kinoite/

See: https://pagure.io/fedora-kde/SIG/issue/362#comment-861293
 2023-06-13 08:50:14 +00:00
David Kirwan
e1d428d431 zabbix: update dependency lists 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-13 09:39:38 +01:00
Aurélien Bompard
aebbaf022b
FMN: increase the redis connect timeout 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-13 10:12:01 +02:00
David Kirwan
2ce8906f5f zabbix: formatting issue in zabbix web config template 
rework db task for creating zabbix user

Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-13 08:10:33 +01:00
Pavel Raiskup
a8cc7b4c9b copr: opensuse-thumbleweed chroots work without bootstrap image 2023-06-13 09:08:20 +02:00
Pavel Raiskup
cd7df06b87 copr: enable bootstrap image for openSUSE chroots 
Copy the latest configs from mock-core-configs, and add
'use_bootstrap_image = True'.
 2023-06-13 08:31:48 +02:00
Kevin Fenzi
2273173a9b koji_hub: update scm policy 
Drop modules, they are controlled by mbs
fix typo on containers (should be container)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-12 14:10:07 -07:00