Infrastructure/ansible
5
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions
32276 commits 9 branches 0 tags 110 MiB
Commit graph

194 commits

Author SHA1 Message Date
Adam Williamson
aeacadcaa2 Drop another use of white/blacklist 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-06-12 09:22:33 -07:00
Stephen Smoogen
8a39dbdad7 move the standard workers down to 256 2020-04-30 09:57:58 +00:00
Stephen Smoogen
f10f66ef82 httpd: download servers fix to 408's 
The Fedora download servers are experiencing a large number of 408's
every day. This is causing timeouts and breaks on yum update. I talked
with the CentOS admins and they pointed me to
https://github.com/CentOS/ansible-role-httpd/ which I shameless borrowed
some code for just the dl. box.
 2020-04-30 09:57:16 +00:00
Stephen Smoogen
47d848fd64 we are no longer frozen 2020-04-29 15:22:51 +00:00
Mohan Boddu
3615460204 F32 is GA 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:29 +02:00
Kevin Fenzi
5e197078d3 we are now in f32 final freeze 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:28 +02:00
Mohan Boddu
2d7534b990 Fedora RelEng F32 Final Freeze 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:28 +02:00
Kevin Fenzi
70a35e3a65 Update variables. We are now post beta and unfrozen. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:27 +02:00
Mohan Boddu
f6506ddc41 F32 Beta is GO 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:26 +02:00
Miroslav Suchý
e75435f0b3 RHEL8 cloud image does not have iptables-services installed 
addressing:
TASK [base : iptables service enabled] **********************************************************************************
Thursday 05 March 2020  14:48:13 +0000 (0:00:02.733)       0:00:56.244 ********
fatal: [retrace-stg.aws.fedoraproject.org]: FAILED! => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "changed": false, "msg": "Could not find the requested service iptables: host"}
 2020-04-24 21:34:26 +02:00
Miroslav Suchý
d58a72afd7 RHEL8 cloud image does not have iptables installed 
addressing:
TASK [base : iptables] **************************************************************************************************
Thursday 05 March 2020  14:25:09 +0000 (0:00:00.042)       0:01:25.059 ********
failed: [retrace-stg.aws.fedoraproject.org] (item=/srv/web/infra/ansible/roles/base/templates/iptables/iptables) => {"ansible_facts": {"discovered_interpreter_python": "/usr/libexec/platform-python"}, "ansible_loop_var": "item", "changed": false, "checksum": "6190805022717c6e21759a272fb0c09573a4a605", "cmd": "/sbin/iptables-restore --test /tmp/ansible-tmp-1583418309.6-194074700864320/source", "item": "/srv/web/infra/ansible/roles/base/templates/iptables/iptables", "msg": "[Errno 2] No such file or directory: b'/sbin/iptables-restore': b'/sbin/iptables-restore'", "rc": 2}
 2020-04-24 21:34:26 +02:00
Kevin Fenzi
00af04a024 openstack cloud: decomission 
Finally take fed-cloud* out and all playbooks associated with the old (and attempts to make a new one).
This cloud was a pain at times, but it did serve long and well, we salute it!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:26 +02:00
Kevin Fenzi
1720158720 we are frozen for f32 beta 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:25 +02:00
Mohan Boddu
d6d9304df3 F32 Beta Freeze And Bodhi Activation 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:25 +02:00
Pavel Raiskup
4acf4e78e0 Fedora.yml: drop logrotate.service from enabled services 
The service can not be enabled at least on Fedora 30, only the
corresponding timer.  This caused always "changed" task, which always
seemed like a non-idempotent playbook run.
 2020-04-24 21:34:24 +02:00
Mohan Boddu
fdf52dca0a Branching F32 from rawhide 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:22 +02:00
Stephen Smoogen
688a2cf7ce and get its timer also. 2020-04-24 21:34:20 +02:00
Stephen Smoogen
70c9a1816d this should turn on logrotate for fedora hosts 2020-04-24 21:34:20 +02:00
Kevin Fenzi
228700fa05 rawhide-test: move to new f31 based image, add f31 image name to vars 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:16 +02:00
Rick Elrod
142017e95a try another hack 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Rick Elrod
cdb85e6bf1 try it here for grins 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:15 +02:00
Kevin Fenzi
bc5b8dca57 base packages to install: remove ntpdate. It's not in rhel8 and we don't use ntp anymore anyhow. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:14 +02:00
Mohan Boddu
100d01f10a F31 is GO 
Updating the vars and releng cron jobs

Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
ed8fbb1daa global: remove libselinux-python from install packages. We don't want it on f31+ and it's installed by basessh on any other host that needs it. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:13 +02:00
Kevin Fenzi
5fef36d394 FROZEN! 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:12 +02:00
Mohan Boddu
3407fa8626 F31 Final Freeze 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:12 +02:00
Kevin Fenzi
dc6757e92b maintainer-test / ppc64le: Respin with f30. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
a7b4945559 vars: Update variables for no freeze and postbeta 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Mohan Boddu
a4de837e70 F31 Beta releng unfreeze 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
ed6a53f4e9 vars: fix case typo in FedoraBranchedBodhi 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Clement Verna
fe42cebb00 We are in F31 Beta Freeze 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:09 +02:00
Mohan Boddu
be83800071 F31 Bodhi Activation 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:09 +02:00
Mohan Boddu
fec2d57539 Branching F31 from rawhide 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:08 +02:00
Kevin Fenzi
1eb44bcd2b Fedora vars: drop PackageKit* here as it doesn't work right with dnf module 2019-07-01 18:05:49 +00:00
Jakub Kadlcik
d8dad58a7b Upgrading copr-dist-git-dev to F30 2019-06-30 02:27:50 +02:00
Kevin Fenzi
553b89e668 Vars: Fedora 28 is eol, so we have no previousprevious version now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-19 21:48:42 +00:00
Kevin Fenzi
339a2c36dc Release variables: Adjust for f30 release. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-01 15:26:26 +00:00
Mohan Boddu
d66de7a089 F30 is now current release and enable automated bodhi pushes 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-04-27 19:54:07 +00:00
Kevin Fenzi
3658dc79c8 Freeze: Fedora 30 final freeze in effect. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-16 21:27:54 +00:00
Mohan Boddu
1c5313a94e Disable automated bodhi pushes for F30 Final Freeze 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-04-16 13:31:44 +00:00
Patrick Uiterwijk
b99a18cf04 Re-enable TLSv1.2 and TLSv1.3 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-13 17:07:05 +02:00
Patrick Uiterwijk
47781778ff Temporarily allow TLSv1.0 and v1.1 to see if that fixes Zanata 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-13 16:41:21 +02:00
Clement Verna
0a6a20e986 The beta freeze is over 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-04-11 14:00:43 +02:00
Patrick Uiterwijk
a253310670 Disable tlsv1.3 for now until I can check there's no curl bug 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-10 20:15:04 +02:00
Stephen Smoogen
7c3fa7c396 Make it so our http configs for repoSpanner do not wander off from each other due to too many cooks and too few pots. Change all repospanner related 8443 to use jinja variable repoSpanner_{{region}}_http 2019-04-09 13:50:01 +00:00
Patrick Uiterwijk
a8d8783c9e Add comment on why blacklist rather than whitelist 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-08 22:01:29 +02:00
Patrick Uiterwijk
0c8c6b085e Also disable TLSv1.1 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-08 21:56:59 +02:00
Patrick Uiterwijk
e007dad000 Enable TLSv1.3 and corresponding ciphers 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-08 21:35:27 +02:00
Kevin Fenzi
796967c5e6 maintainer-test: add a f30-test in old cloud and 2 aarch64-test01/02 in new virthosts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-03-31 17:48:02 +00:00
Mohan Boddu
59d324f8d2 Unfreeze RelEng since F30 Beta is GOLD 
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
 2019-03-29 19:00:51 +00:00