This host needs to have it's own self signed certs and needs some more
config to allow the auth and allow authenticated users to relay.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This space was in a networking cage thats going away and all the
machines there are old and out of warentee.
This space was intended for disaster recovery purposes.
For that now we have a internal vm that can access our mirrored netapp
storage, so we can sync anything off it we need to when iad2 is down.
I will be resetting up a batcave13 in another datacenter to allow us a
backup ansible/dns control host. bastion13/ns13/proxy13 will likely just
go away forever. download-rdu01 should be replaced by the new
download-cc-rdu01 once we have the new hardware in place for that.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Drop most fedora-36 entries, and don't require upgrade tests on
F37 any more as it is now the oldest stable.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
This commit makes the coreos-cincinnati setup look similar to the
other CoreOS/OSTree apps that we own. Notable changes:
- We are still building via commit, we only track a single commit
and not a separate deploy/build one.
- We are now just outputting to a coreos-cincinnati-img:latest
imagestream tag.
- We are now using a fedora:38 imagestream tag as the from: in our
build and triggering new builds based on imagestream updates,
which means we'll get security updates more regularly.
- A bunch of quoting (") in yaml files was removed as it clouded the
diffs between this app and other apps.
- Some minor diffs between playbooks and other files were removed.
As part of an effort to make coreos-cincinnati look like the rest
of the CoreOS Apps we'll move all files into the templates dir
(because even if they aren't templatized they still work there)
and rename `buildconfig-stub.yml` to `buildconfig.yml`.
With Flock around the corner, we need some email addresses for people to
reach the organizer team or for setting a reply-to alias for the new CFP
system we are introducing this year. All Flock aliases were disabled per
request of @mattdm in #10411 because of spam. It seems `flockinfo@` is
the problematic mail alias, so I took a conservative approach by only
enabling the `flock-staff@` and `flock-coc@` addresses.
I also added @shaunm to both aliases because he is also a part of the
core staff team for this year's Flock.
Signed-off-by: Justin W. Flory (he/him) <jwf@redhat.com>
We need this to try and relay in emails.
It turns out to be bordering on impossible to do this sanely with our
current setup, so make a fedora vm that lets us use saslauthdb to have a
specific (small) list of users that can authenticate and relay emails
via bastion and out. We can't do this on rhel, because they don't build
the saslauthdb backend. We can't use any of the other backends because
they either don't work or would allow any fedora user to relay, which we
do not want.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
