Commit graph

40282 commits

Author SHA1 Message Date
Jakub Kadlcik
7a06900c2a copr: upgrade production builders to F39 2024-02-14 10:11:25 +01:00
Frank Ch. Eigler
d67817bd88 debuginfod: enlarge rpm-extraction fdcache
Thanks to the recently shrunken database schema (~150GB for all of
fedora 35+) and generous storage on the VM servers (~1TB available),
we can dramatically increase the cache size.  Along with debuginfod
upstream improvements (brought in via a copr build), this should
drastically improve the responsiveness of the debuginfod service.
2024-02-14 03:23:00 +00:00
Kevin Fenzi
1e83225c37 db01: adjust postgres a bit, was saturating i/o
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 16:39:43 -08:00
Kevin Fenzi
0f082fd3bc robosignatory: switch eln over to fedora-41 signing
eln tracks rawhide, so switch it over to fedora-41 key as well.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 15:24:53 -08:00
Kevin Fenzi
a537aefc31 robosignatory: clean up old releases, drop old comments, reformat to be more readable add more comments
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 15:21:25 -08:00
Kevin Fenzi
de072aac57 robosignatory: disable signing of f40 updates until we have a branched compose
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 10:52:35 -08:00
Kevin Fenzi
f95712d8a0 nagios / koji: drop ssl cert check
This check was from long ago when koji used a self signed cert/ca
It still amusingly has that configured, so this check is telling us that
that self signed cert that we dont use anymore is expiring. :)
So, just drop this, koji is being proxies now and uses our main wildcard
cert.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 10:13:48 -08:00
Samyak Jain
a3332ea7af Enabling koji after branching
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-02-13 16:26:53 +00:00
Pavel Raiskup
1a0e17f586 copr-hypervisors: retry IPA with 'vpn: true' 2024-02-13 17:09:10 +01:00
Pavel Raiskup
02186b57fa copr-hypervisor: disable ipa/client for now
It seems that the rdu-cc boxes do not have access to ipa servers.
2024-02-13 16:47:41 +01:00
0416ac22d5
zabbix: enable zabbix_templates role on releng_compose_stg only
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-13 14:49:55 +00:00
5302ad27df
zabbix: add template variables to staging groupvars
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-13 14:47:02 +00:00
1300428243
zabbix: disable zabbix_templates role releng_compose
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-13 14:16:39 +00:00
Samyak Jain
c9049a56db Add f40 config for toddlers
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-02-13 13:12:33 +00:00
Samyak Jain
8fa8129e80 make robosignatory changes for branching
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-02-13 13:12:33 +00:00
Samyak Jain
2a240052b1 Branch Fedora 40 from Rawhide
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-02-13 13:12:33 +00:00
2f566d3c9a
zabbix: add hosts to hostgroup prior to template creation
move linking to template to separate task

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-13 13:05:40 +00:00
f340a11c88
zabbix: configure hostgroup creation to run_once
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-13 12:57:15 +00:00
Samyak Jain
60dd511113 comment in serveroffline as true
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-02-13 18:10:41 +05:30
Samyak Jain
8b6e321712 Disable new builds during branching
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-02-13 12:09:17 +00:00
3c0a3f68e8
zabbix: reorder zabbix tasks, create hostgroup before templates
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-13 12:07:16 +00:00
1be7d658ab
zabbix: rename the template for releng compose cronjobs
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-13 11:57:43 +00:00
8ac96eb595
zabbix: move zabbix templates to role's base files directory
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-13 11:53:02 +00:00
0191fd7574
zabbix: add task to add hosts to zabbix hostgroup
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-13 11:42:49 +00:00
Aurélien Bompard
4accba8e8f
Add X-Forwarded-Proto in addition to X-Forwarded-Scheme
The convention is more on `-Proto` than `-Scheme`:
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-02-13 12:34:28 +01:00
77c39f7d04
zabbix: Import hostgroup task correctly in main.yml
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-13 09:32:57 +00:00
bf5dcd8edb
zabbix: set releng_compose_stg zabbix_templates to empty list
add zabbix hostgroup create task

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-13 09:29:56 +00:00
Pavel Raiskup
1c2b21cfb6 copr/hypervisor: add missing variable for ipa/client to work 2024-02-13 06:45:13 +01:00
Kevin Fenzi
bc314685ba bodhi: fix typos
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-12 17:32:56 -08:00
Kevin Fenzi
721d30875a bodhi: change liveness probes to hopefully avoid restarting pods
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-12 17:30:20 -08:00
Pavel Raiskup
23275c26ea Revert "copr-hypervisor/ipa-client: debug variable"
This reverts commit 9daef0d257.
2024-02-13 00:04:20 +01:00
Pavel Raiskup
9fc7f71ea3 copr-hypervisor: provide the missing ipa/client vars 2024-02-13 00:00:48 +01:00
Pavel Raiskup
9daef0d257 copr-hypervisor/ipa-client: debug variable 2024-02-12 23:55:16 +01:00
Pavel Raiskup
c5b8752b26 copr-hypervisor: give the copr team members sudo access 2024-02-12 23:44:07 +01:00
d0e43de656
zabbix: add zabbix_templates to releng compose stg
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-12 13:51:19 +00:00
617b766423
zabbix: fix syntax error in file lookup
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-12 13:47:37 +00:00
ec7bdacff2
zabbix: add zabbix_templates role
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-12 13:45:03 +00:00
Kevin Fenzi
ff6fb2bc6c koji: add fedora_koji_archive06 volume
We need a new archive volume, so add 06 to all the same places 01-05
are.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-10 09:57:33 -08:00
Kevin Fenzi
ac84ce36d7 koji_hub: add fedora-41 key/sig to koji-gc policy
Since we are signing things with fedora-41 key we should add it to the
koji-gc policy.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-09 12:45:13 -08:00
Adam Williamson
e87cfca492 openQA: whoops, need to change routing keys here too
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-02-09 12:33:54 -08:00
Adam Williamson
da391c4ba2 openQA: trim default routing keys for scheduler consumer
With Bodhi 8 we no longer need to listen to request.testing or
update.edit messages. Yay.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-02-09 12:25:55 -08:00
Kevin Fenzi
1e6851edb8 koji_hub: switch back to prefork for now
So, turns out the move volume problems I have been running into may well
be related to threading. So, move back to prefork to see if I can get
some moves done. Upstream koji is working on fixes, so we may be able to
switch back once those land.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-09 10:10:38 -08:00
Mattia Verga
b986f402cb bodhi: fix config for override inheritance
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2024-02-09 17:53:10 +00:00
Pedro Moura
84fadbad64 Planet: fix servicename
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2024-02-09 16:41:07 +00:00
7d63531b82
zabbix: ensure zabbix can communicate with releng machines
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-09 13:04:46 +00:00
216ac2359a
zabbix: ensure /var/run/zabbix directory exists
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-02-09 11:28:00 +00:00
Adam Williamson
a62b48fff7 openqa: don't use updates-testing on prod again
forgot to do this before, we don't want it now as I'm about to
push an untested build there for stg to try out.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-02-08 18:17:10 -08:00
Kevin Fenzi
ebd01fab62 robosignatory: small fixes
Fix the fedora-41 key, had too many characters there.
Also, the add-key script needs to be readable by the robosignatory user,
so it can't be mode 711.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-08 15:35:31 -08:00
Kevin Fenzi
100c9b484d robosignatory: resign f40 tagged packages with f41 key
This is to prep for branching next week.
We want to set this so we can tell robosgnatory to resign all the f40
tagged packages with f41. Also, newly tagged packages will also be
signed, so by the time we branch everything should be signed for both
branched (f40) and new rawhide (f41).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-08 15:18:44 -08:00
Kevin Fenzi
ae91b69f62 koji-hub: only specify draft policy in staging until we upgrade prod
koji 1.34 added draft builds and I added policy to deny tagging them,
but we didn't update prod yet, so that policy breaks the hubs.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-08 10:23:11 -08:00