Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
33380 commits 9 branches 0 tags 111 MiB
Commit graph

33380 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pavel Raiskup
2013b14099 copr-be-dev, copr-keygen-dev: allow initial run against IPs 2020-11-11 09:42:06 +01:00
Pavel Raiskup
f6fe521591 copr: enable @copr/copr on devel instances 2020-11-11 09:32:06 +01:00
Pavel Raiskup
ff896361d8 copr-be-dev, copr-keygen-dev: new VMs with temp IPs 2020-11-11 09:22:09 +01:00
Adrian Reber
3509e0c04f mirrormanager: fix up typo in directory name 
Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-11-11 08:15:14 +01:00
Adrian Reber
8a89e5977b mirrormanager: install generate-mirrorlist-cache 
This installs the new rust-based generate-mirrorlist-cache tool which
can create the mirrorlist cache files much faster.

Signed-off-by: Adrian Reber <adrian@lisas.de>
 2020-11-11 06:31:47 +00:00
Will Woods
3dadedeb26 web-data-analysis: fix countme-update 
So it turns out that pip3 installs scripts to /usr/local/bin and cron
jobs don't have /usr/local/bin in the path.

This commit adds /usr/local/bin to PATH in countme-update.sh.

For Maximum Correctness we should probably get pip to tell us where it
installed countme-update-{rawdb,totals}.sh but this'll work just fine
as long as pip keeps installing scripts to /usr/bin or /usr/local/bin.

Signed-off-by: Will Woods <wwoods@redhat.com>
 2020-11-10 17:57:56 -05:00
Kevin Fenzi
5ac17bc51a varnish: adjust for f33 changes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-10 12:20:50 -08:00
lrossett
806b6bfbdc adding gitlab-centos queue and user 2020-11-10 17:26:05 +00:00
Pierre-Yves Chibon
998c84baaa dist-git: add missing type 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 17:26:26 +01:00
Pierre-Yves Chibon
872090ee54 dist-git: some more selinux policy changes 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 17:24:55 +01:00
Pierre-Yves Chibon
f4cb375000 selinux/module: Remove debugging statement now that things work 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:56:13 +01:00
Pierre-Yves Chibon
d503f374db distgit: some more selinux policy update 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:51:51 +01:00
Pierre-Yves Chibon
3351fbd3b4 drop run_once when install selinux policies 
Otherwise the policy doesn't get installed everywhere...

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:48:42 +01:00
Pierre-Yves Chibon
74890814a1 distgit: adjust the selinux policy a little more 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:48:30 +01:00
Pierre-Yves Chibon
1e27282806 selinux: Add some debugging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:37:16 +01:00
Pierre-Yves Chibon
50ad0a15ee selinux/module: try saying which module is being installed 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:30:13 +01:00
Pierre-Yves Chibon
cb2a947479 pagure: fix path to the selinux policy file 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:59:32 +01:00
Pierre-Yves Chibon
be1c8bcb45 distgit: keep working on the http_policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:56:37 +01:00
Pierre-Yves Chibon
033c798d6e pagure: make use of the new selinux/module role to install/compile selinux policies 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:55:10 +01:00
Pierre-Yves Chibon
f3a1c52522 distgit: ad missing instruction in the http_policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:53:18 +01:00
Pierre-Yves Chibon
f580d72f24 distgit: add the missing headers in the http_policy policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:49:30 +01:00
Pierre-Yves Chibon
1df7a7c0d3 distgit: add a selinux tag 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:38:09 +01:00
Pierre-Yves Chibon
1ef758c408 distgit: install another custom selinux policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:35:33 +01:00
Pierre-Yves Chibon
a6a5686038 Add a role to compile, build and install custom selinux policies 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:33:54 +01:00
Aurélien Bompard
d58d1bd208
IPA: don't add the mod_wsgi role, let the installed set the options it wants 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-11-10 12:07:49 +01:00
Aurélien Bompard
6185f038b6
IPA: don't start httpd with systemd 
The httpd service should not be started with systemd, the ipa service will
start it. If systemd starts it, it will run before IPA is available and
KdcProxy will be disabled because it can't reach LDAP.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-11-10 11:40:54 +01:00
Pavel Raiskup
e0378b95ad copr-be-dev: new (elastic) IP 2020-11-10 10:53:42 +01:00
Pierre-Yves Chibon
cb018f088b distgit/pagure: fix debug calls, msg is not for variables 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-09 16:22:24 +01:00
Mark O'Brien
05354e763c osbs: update kickstart for stage aarch64 to f33 2020-11-09 10:21:19 +00:00
Pierre-Yves Chibon
e63f2d99ad pagure: use staging ipsilon in staging pagure 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-09 10:30:32 +01:00
Kevin Fenzi
2cfb7fb450 compose-rawhide: reinstall with f32 for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-07 09:56:57 -08:00
Kevin Fenzi
e971b75843 Fix ip for vmhost-x86-cc-rdu05.rdu-cc.fedoraproject.org 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-06 16:33:28 -08:00
Stephen Smoogen
8d7d4f5389 when trying to find out why something is failing.. remove the /dev/null so that you can see why it is failing. Also add wwoods so he can delight in this. 2020-11-06 10:15:17 -05:00
Stephen Smoogen
1096f9b35f try to get the cron output to see why this is failing. 2020-11-06 10:07:15 -05:00
Adam Williamson
813bbc4d2a openqa/server: allow group to write to factory dirs 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 17:16:28 -08:00
Adam Williamson
61251d0b11 More syntax...sigh 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 16:24:27 -08:00
Adam Williamson
d61631fbe7 More syntax fixin (I hope) 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 16:18:08 -08:00
Adam Williamson
a03b707b02 Try and correct metagroup syntax 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 16:15:55 -08:00
Adam Williamson
95f062c07a openQA: allow all workers NFS write access, other tweaks 
The main goal of these changes is to allow all workers in each
deployment NFS write access to the factory share. This is because
I want to try using os-autoinst's at-job-run-time decompression
of disk images instead of openQA's at-asset-download-time
decompression; it avoids some awkwardness with the asset file
name, and should also actually allow us to drop the decompression
code from openQA I think.

I also rejigged various other things at the same time as they
kinda logically go together. It's mostly cleanups and tweaks to
group variables. I tried to handle more things explicitly with
variables, as it's better for use of these plays outside of
Fedora infra.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 16:10:32 -08:00
Adam Williamson
35c65637ce openqa: drop fedmsg-related vars 
All obsolete now.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 16:10:32 -08:00
Kevin Fenzi
b0a3761288 greenwave: re-add fedora-eln, but in the no requirements sections 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-05 14:19:00 -08:00
Kevin Fenzi
7966976622 greenwave: no gating tests for eln 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-05 13:53:47 -08:00
Pierre-Yves Chibon
3f03400dac distgit: drop pagure related selinux config since it's now handled in the pagure role 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:27:27 +01:00
Pierre-Yves Chibon
a7e2a97fad distgit: drop selinux config from the distgit role as it is now in pagure role 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:24:18 +01:00
Pierre-Yves Chibon
85bbe256df distgit/pagure: add names to the tasks 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:19:42 +01:00
Pierre-Yves Chibon
3babdf5ff9 distgit/pagure: indentation fix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:06:43 +01:00
Pierre-Yves Chibon
9e50494ac9 distgit/pagure: add some debugging to understand why it mis-behaves 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:05:48 +01:00
Kevin Fenzi
f3bdbf3da5 openshift_apps / docstranslation: try mode using quotes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-05 08:01:08 -08:00
Pierre-Yves Chibon
0b3a2cc4a8 distgit/pagure: use symlink instead of complicated paths 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 15:58:58 +01:00
Pierre-Yves Chibon
618cbde6cc distgit/pagure: make the selinux files available to the distgit/pagure role 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 15:55:14 +01:00