Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
37971 commits 9 branches 0 tags 111 MiB
Commit graph

37971 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
8398aec029 basessh: enable internal sftp server globally. 
In the past we only enabled sftp on servers where we needed it.
(ones using sshfs, ones that users might need to sftp to, etc).
However, now days the openssh scp client uses sftp, so we might as well
just enable it globally so people don't need to use 'scp -O' (which
has it use the old scp protocol, which will be removed someday).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-29 14:17:13 -07:00
Pedro Moura
725704c511 add swag-info email alias 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
 2022-06-29 17:26:36 -03:00
Michal Konečný
4282f99936 [toddlers] Fix the url for MBS 
The env_suffix is `.stg` which caused the URL to be mbs..stg. This URL can't be
parsed and this caused error. Let's fix the behavior.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-29 14:24:15 +02:00
Kevin Fenzi
2838e39d17 buildvm-a32 staging: move a32 to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-28 19:50:50 -07:00
Kevin Fenzi
eb91baeb29 vist-install: fix gw 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-28 18:35:29 -07:00
Kevin Fenzi
a9c5fa224f kojibuilder / staging: add in rules for staging builders to talk to ipa and nfs on koji01.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-28 16:44:49 -07:00
Kevin Fenzi
d654199744 koji01.stg: fedora 36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-28 16:30:25 -07:00
Kevin Fenzi
d2d8e6591a buildvm: staging: move to f36 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-28 12:52:10 -07:00
Pedro Moura
f1f1088fb8 monthly cron job to clean up old koji trees 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
 2022-06-28 19:30:38 +00:00
Kevin Fenzi
e771b8156a mbs: f34 is eol 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-28 12:24:39 -07:00
Kevin Fenzi
da4c14967e robosignatory: enable ima signing for f37 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-28 10:20:34 -07:00
Kevin Fenzi
452726e175 monitor-gating: staging: just point it to production for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-28 09:54:39 -07:00
Michal Konečný
8d1b44b8bf [FMN] Fix the url for staging 
The domain already contain .stg, no need to have it twice.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-28 10:24:24 +02:00
Mikolaj Izdebski
80842c9d28 koschei: Cleanup vars files 2022-06-28 07:22:43 +02:00
Francois Andrieu
e5d110a67f websites: cleanup yamllint issues 2022-06-27 22:51:27 +00:00
Francois Andrieu
68d61b87c5 websites: clean old build configuration on sundries 2022-06-27 22:51:27 +00:00
Kevin Fenzi
771d72e12d resultsdb01: clean up last entries 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-27 15:14:12 -07:00
Kevin Fenzi
07f4531367 mote: adjust pv name 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-27 14:32:40 -07:00
Francois Andrieu
cf21ffb8ed mote_v2: change volumeName and fix path for prod 2022-06-27 23:09:25 +02:00
Francois Andrieu
3749d306a2 mote_v2: deploy to prod 2022-06-27 20:48:27 +00:00
Francois Andrieu
d4a57b0404 languages: fix limits on build-website cron 2022-06-27 20:43:54 +00:00
Francois Andrieu
6da87e8900 websites: move fedora-websites build to openshift 2022-06-27 20:37:53 +00:00
Kevin Fenzi
50b3afc7e2 monitor-gating: try renaming the keytab-file in stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-27 13:17:10 -07:00
Kevin Fenzi
56f26f0ec8 mediawiki: try and adjust the throttling by default to avoid proxies hitting limits 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-27 12:07:40 -07:00
Kevin Fenzi
aa24d0b85b koschei: revert back to the old append forwarded headers to fix auth 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-27 10:13:51 -07:00
Kevin Fenzi
f42d0b6507 zezere: set append on ingress to fix login 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-27 09:22:58 -07:00
Kevin Fenzi
c4face1cbd monitor-gating: try just changing the principal 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-27 08:20:47 -07:00
Kevin Fenzi
8a5d80067b monitor_gating: deploy in ocp4 in prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-27 08:08:54 -07:00
Aurélien Bompard
1a6d5d2676
Hmm we actually want to do this on prod only 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-27 11:25:06 +02:00
Aurélien Bompard
264616c766
Fix ansible syntax error 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-27 11:11:55 +02:00
Aurélien Bompard
c0d80427b9
Also upgrade Bodhi in openshift in the Bodhi manual upgrade playbook 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-27 11:06:09 +02:00
Mikolaj Izdebski
940e193cfd koschei: Update staging sync playbook 2022-06-27 06:54:36 +02:00
Kevin Fenzi
c1ebf71488 toddlers: fix staging conditionals 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-25 10:41:13 -07:00
Kevin Fenzi
5a0d7a6316 fedocal: make sure to deploy in ocp4 on prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-24 17:44:45 -07:00
Kevin Fenzi
50fb64dcae openshift-apps: switch to batch/v1 for apiversion of cronjob 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-24 17:40:37 -07:00
Kevin Fenzi
04c4ccd82b noggin: set haproxy.router.openshift.io/set-forwarded-headers to append 
We changed the default cluster ingress to 'none' which made auth work on
elections and fedocal. It seems to have broken noggin tho. So, set
noggin back to append (the default). We should probibly fix noggin and
drop this at some point.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-24 17:27:17 -07:00
Adam Williamson
084315f334 openqa: don't use updates-testing on prod 
The build prod is on has hit stable, I want to send a new build
to testing for lab to test out, don't want it on prod yet.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-06-24 14:40:16 -07:00
Kevin Fenzi
b1abc7c540 Default to ocp4, clean up some last few apps 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-24 14:15:55 -07:00
Kevin Fenzi
a284a3c8b7 fedocal: move to ocp4 in prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-24 12:00:21 -07:00
Francois Andrieu
c8f9feb792 elections: set GUNICORN_CMD_ARGS env var 
Make gunicorn listen to all interfaces on port 8000 instead of
localhost only
 2022-06-24 16:42:48 +00:00
Mattia Verga
d6cfdd4028 review-stats: fix image pull 
Signed-off-by: Mattia Verga <mattia.verga@proton.me>
 2022-06-24 16:33:43 +00:00
Francois Andrieu
a2af2c47f5 elections: default http port change to 8000 2022-06-24 16:13:29 +00:00
Mikolaj Izdebski
89f28097ce nagios_server: Update koschei internal website check for ocp4 2022-06-24 17:55:10 +02:00
Kamil Páral
a06545f5d2 bodhi multilib: note that people should update it in two places 
Related: https://pagure.io/pungi-fedora/pull-request/1108

Signed-off-by: Kamil Páral <kparal@redhat.com>
 2022-06-24 15:37:26 +00:00
Michal Konečný
f027f65e9e [toddlers] Deploy staging instance directly to OCP4 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-24 12:14:58 +02:00
Michal Konečný
182cc17a4f [toddlers] Remove the token seed for staging 
The token isn't really needed and it's replaced by "" when not available. So for
staging we don't need really it.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-24 10:07:33 +00:00
Michal Konečný
bb8a7285de [toddlers] Small fix for yamllint 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-24 10:07:33 +00:00
Michal Konečný
d8ede543b9 [toddlers] Prepare for staging environment 
Add staging exception when needed and add scm_request_processor configuration.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-06-24 10:07:33 +00:00
Aurélien Bompard
a3f9082a07
Ansible issues a warning when there's append but no groups 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-24 10:55:16 +02:00
Aurélien Bompard
07412ae2fe
Update Bodhi 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-24 10:49:46 +02:00