Commit graph

8066 commits

Author SHA1 Message Date
Kevin Fenzi
22dde8163b unbound: remove and retire unbound servers
These instances served long and well as fallback resolvers for
dnssec-trigger. This is no longer needed or used, so lets remove them.
See https://pagure.io/fedora-infrastructure/issue/11415

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-24 14:40:43 -07:00
Kevin Fenzi
06d4c39372 flocktofedora: add tag
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 08:02:59 -07:00
Kevin Fenzi
4c4723e928 start: add a tag to quickly re-run it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-20 20:27:43 -07:00
5e95d86756 retire spins.fedoraproject.org 2023-07-20 21:13:19 +00:00
a52d44e77b proxies: redirect spins to new website 2023-07-20 21:13:19 +00:00
Kevin Fenzi
609df42eff communishift: add openscanhub ( infra 11414 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 15:08:52 -07:00
Aurélien Bompard
4b18017d42
Sundries doesn't actually use fedmsg
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-17 12:05:00 +02:00
Aurélien Bompard
c34ecff0a7
Bodhi also publishes on the pungi topic
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-11 08:39:28 +02:00
fbc016ebaa Remove nuancier-openshift
Work had started on moving nuancier to openshift, but was never
deployed. This removes this. Nuancier is being shut down.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2023-07-10 19:14:16 +00:00
Aurélien Bompard
6bdf014ee6
Syntax error
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-10 17:31:34 +02:00
Aurélien Bompard
bd702b9535
Fix sent_topics format for mdapi
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-10 17:21:42 +02:00
Aurélien Bompard
6fb1791882
Duplicate the sent_topics line for now
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-10 16:57:42 +02:00
Aurélien Bompard
c363708ea9
Revert "Koji-sync-listener does not publish"
Oops, we're actually re-using the "bodhi" user here.

This reverts commit af83479c79.
2023-07-10 16:52:11 +02:00
Aurélien Bompard
af83479c79
Koji-sync-listener does not publish
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-10 16:49:22 +02:00
Aurélien Bompard
10e6a1d2e9
Re-add the greenwave user (but not the queue) after 310ddb9
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-10 16:30:09 +02:00
Aurélien Bompard
194cca2240
Mediawiki no longer uses fedmsg
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-07 11:11:32 +02:00
Timothée Ravier
a84d314696 playbooks/groups/sundries.yml: Fixes from yamllint 2023-07-05 23:56:38 +00:00
Timothée Ravier
3a79d45596 Remove standalone Kinoite website
Replaced by https://fedoraproject.org/kinoite/
Needs: https://pagure.io/fedora-infra/ansible/pull-request/1479
2023-07-05 23:56:38 +00:00
Aurélien Bompard
91719644db
Fix the rabbitmq username for mediawiki
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-03 17:14:06 +02:00
Kevin Fenzi
2a1934972e resultsdb-ci-listener: normalize on _ as we were already using that in more places
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-30 15:27:24 -07:00
Kevin Fenzi
a72457fdb5 Revert "resultsdb-ci-listener: just call these the same on both prod and stg"
This reverts commit 1492d0e4cc.

No, lets reconsider this.
2023-06-30 15:11:11 -07:00
Kevin Fenzi
1492d0e4cc resultsdb-ci-listener: just call these the same on both prod and stg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-30 15:10:28 -07:00
Kevin Fenzi
e24a5929aa resultsdb-ci-listener: normalize staging username/certs
Try and set all of these the same to avoid problems with usernames and
queue names and cert names and messaging names. ;)

Should only affect staging.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-30 14:57:03 -07:00
Lukas Holecek
48c34d97cb resultsdb-ci-listener: Avoid using the same crt/key as resultsdb
Related to: https://pagure.io/fedora-infrastructure/issue/11339
2023-06-30 21:28:31 +00:00
Mikolaj Izdebski
08405d960f Koschei: Add full update playbook 2023-06-28 14:51:32 +02:00
Mikolaj Izdebski
bdc999f4a9 Koschei: Add rolling update playbook 2023-06-28 14:26:43 +02:00
Mikolaj Izdebski
f1d497089e koschei: Update staging sync playbook 2023-06-28 12:59:16 +02:00
Adam Williamson
a5c322b4ee More cleanup on the openQA AMQP stuff
nirik and I went around and around a bit today and ended up back
where we started, but with a clearer understanding of where that
this. This explains it a bit better, and makes what's actually
going on in various places clearer with the use of appropriate
shared variables. This should not actually *change* anything at
all when deployed.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-22 23:21:28 +02:00
Joseph Marrero
dfbfed61e2 fedora-coreos-pipeline.yml: Add luyang 2023-06-22 15:39:19 -04:00
Kevin Fenzi
b2a5d19443 directory.fedoraproject.org redirect: fix double slash
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-22 11:23:41 -07:00
Kevin Fenzi
d8580004c7 directory: redirect with url ( infra 11385 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-22 10:57:01 -07:00
Adam Williamson
5a7591a618 openqa AMQP: mark the users as not publish-only
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 13:33:54 +02:00
Adam Williamson
b50fa6a477 openqa amqp: fix stg-on-prod queue names
so, this was working before somehow, but it was pretty clearly
wrong. We were using queues owned by openqa.stg on the prod
rabbitmq instance for the cases where the openQA "stg" consumers
need to listen to prod queues. This can only have been working
with an openqa.stg user on prod, which seems wrong. Instead,
these three consumers should do it the way the relval and
relvalami consumers do - use a queue owned by the "openqa" user,
but with a suffix so they have a different queue from the actual
prod queue. The upshot of this is that in the configs, we should
go from:

amqp_url = "amqps://openqa:@rabbitmq.fedoraproject.org/%2Fpubsub"
...
queue = "openqa.stg_scheduler"

- which is weird and I have no idea how it ever worked - to:

amqp_url = "amqps://openqa:@rabbitmq.fedoraproject.org/%2Fpubsub"
...
queue = "openqa_scheduler_stg"

- which seems much more sensible.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 13:15:38 +02:00
Adam Williamson
e3a4908ae0 ...so close...
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 12:27:03 +02:00
Adam Williamson
31f4668476 openqa: tweak rabbit user creation stuff...
ugh.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 12:25:21 +02:00
Adam Williamson
085e6e0828 unquote sent_topics
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 12:07:15 +02:00
Adam Williamson
9953afa06e openqa etc: fix up and improve AMQP messaging configuration
This is triggered by
https://pagure.io/fedora-infrastructure/issue/11375 , but the
changes are rather extensive. Unfortunately, some of the
relevant files got messed up by the alphabetical sort thing that
got run on several group variable files a while ago, so that
confuses the diff a bit - I had to unwind those changes to make
the files readable again in order to make these changes.

Ultimately the goal here is to make the config more consistent
and more functional - the variables used and their names should
be more consistently related to what they're actually *for*,
which I didn't entirely understand when setting this up. So
we have variables for the username being used in each case and
we use that variable where we're referring to the username, for
instance. This should also make the whole thing about the cases
where listeners on the openQA stg/lab instance need to listen
to prod messages clearer, too. It also makes the user creation
clearer by doing it explicitly, just once per user, instead of
haphazardly doing it implicitly through the queue definitions.

And finally it should also actually fix 11375, by giving the
appropriate write permissions to each user.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-06-21 12:04:55 +02:00
Pavel Raiskup
21be6fd294 copr: use smtp-auth-relay for all hosts 2023-06-19 11:08:23 +02:00
Pavel Raiskup
82205131b7 smtp_auth_relay: new role, use by copr-dist-git-dev for now 2023-06-19 10:10:43 +02:00
Timothée Ravier
9240690c3a openshift: Remove Silverblue website
The website is now available at https://fedoraproject.org/silverblue/
The repo for the previous website has been archived:
https://github.com/fedora-silverblue/silverblue-site
2023-06-16 16:50:07 +00:00
Kevin Fenzi
adef5b55fd proxies: fix duplicate cert here, only use the wildcard one.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-14 11:58:16 -07:00
Kevin Fenzi
b6d8e745d1 flatpak-indexer: add kalev to appowners
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-14 07:32:23 -07:00
Timothée Ravier
31ef29a34b Redirect kinoite.fp.org to the new website
Redirect the kinoite subdomain to the new Kinoite website at:
https://fedoraproject.org/kinoite/

See: https://pagure.io/fedora-kde/SIG/issue/362#comment-861293
2023-06-13 08:50:14 +00:00
David Kirwan
325c691693 zabbix: remove keytab roles from playbook
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-06-12 12:11:36 +01:00
David Kirwan
79ed7fdc45 zabbix: fix user/group file ownership for keytabs
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-06-12 12:08:11 +01:00
David Kirwan
99b51133f1 zabbix: restore original playbook layout
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-06-12 11:55:12 +01:00
David Kirwan
c5cad9e168 zabbix_server: readd handlers
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-06-12 11:23:06 +01:00
David Kirwan
88e544bf53 zabbix: readd base roles
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-06-12 11:11:30 +01:00
David Kirwan
a8263f98e9 zabbix: add zabbix_server role
WIP

Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-06-12 10:50:58 +01:00
Kevin Fenzi
34ea0dfcb3 autosign: add quotes
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-06 10:29:45 -07:00