Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
26546 commits 9 branches 0 tags 111 MiB
Commit graph

26546 commits

This branch
This branch
All branches
Author SHA1 Message Date
Patrick Uiterwijk
da6e047cff Make clear that these are Fedora extending headers 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-11 18:22:31 +02:00
Patrick Uiterwijk
efa135e397 Actually make Proxies more clear in response headers 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-11 18:17:50 +02:00
Kevin Fenzi
b1d1e4a685 koji builder: we need to install the builder plugins package so we have runroot plugin. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-11 15:20:40 +00:00
Mikolaj Izdebski
3cedc1366b basessh: Fix libselinux-python installation on Fedora >= 31 2019-04-11 15:24:49 +02:00
Mikolaj Izdebski
6680b25ef8 basessh: Fix conditionals for installing libselinux-python 2019-04-11 15:18:39 +02:00
Mikolaj Izdebski
b67b68d1a3 maintainer-test: Include variables from vars/all/* 2019-04-11 15:13:23 +02:00
Mikolaj Izdebski
b37dd9e050 yumrepos: Fix fedora-modular baseurl for branched and rawhide 2019-04-11 15:07:48 +02:00
Patrick Uiterwijk
21781d80f6 Allow repoSpanner access to Pagure config 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-11 14:47:37 +02:00
Patrick Uiterwijk
a887438496 Allow admins to create repoSpanner repos and to migrate 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-11 14:05:41 +02:00
Clement Verna
0a6a20e986 The beta freeze is over 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-04-11 14:00:43 +02:00
Patrick Uiterwijk
535989676d Add Hook ID for repoSpanner 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-11 13:39:39 +02:00
Patrick Uiterwijk
bd83444819 Fix admin cert location 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-11 13:38:02 +02:00
Patrick Uiterwijk
792deadf51 Pagure: remove install of gitolite 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-11 13:32:36 +02:00
Patrick Uiterwijk
bbe8b0784b Set Pagure config for repoSpanner 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-11 13:30:21 +02:00
Patrick Uiterwijk
95c09a8b91 Sync out anssible-admin cert 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-11 13:29:18 +02:00
František Zatloukal
b6bd2113c5 Taskotron: Switch fetch_activity.py to use Python 3 2019-04-11 10:38:44 +02:00
Kevin Fenzi
b8d73fde1e proxies: allow another shm file that apache seems to make now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-11 04:36:10 +00:00
Kevin Fenzi
55b5ef7f2c koji-builders: instead the time before cleaning up failed buildroots to 24 hours. 
Sometimes we have odd failures it's hard to reproduce outside a compose.
We thus want to keep them around for 24 hours so we can look the next day.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-11 01:17:05 +00:00
Rick Elrod
d9412f85e5 fix copypaste error in task name, we cordon first, then uncordon 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-04-10 23:28:03 +00:00
Rick Elrod
f26f4a9f3d [vhost_reboot/os cordoning] take 2 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-04-10 23:18:57 +00:00
Rick Elrod
cda27a6d2f Let's see if we can get os cordon/uncordon working even for os-master01 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-04-10 22:57:56 +00:00
Kevin Fenzi
3af126e186 virthost_updates: fix logic to not apply all updates when there are excludes 
univrese_update: playbook to update all things in inventory.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-10 21:30:53 +00:00
Kevin Fenzi
0a0ebf61e9 badges-web01.stg: drop test for package excludes. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-10 21:19:32 +00:00
Kevin Fenzi
1ff28544c1 vhost_update: add in some basic excludes handling 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-10 21:18:52 +00:00
Kevin Fenzi
0614cbd83b badges-web01.stg: quick test for excludes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-10 20:56:02 +00:00
Patrick Uiterwijk
a253310670 Disable tlsv1.3 for now until I can check there's no curl bug 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-10 20:15:04 +02:00
Patrick Uiterwijk
70650f93d6 Use generic reload 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-10 20:12:59 +02:00
Patrick Uiterwijk
81d871fe3a Daemon-reload on new unit file 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-10 20:11:04 +02:00
Patrick Uiterwijk
d1e6ed3c26 repoSpanner/server: add [install] to unit file 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-10 20:08:40 +02:00
Patrick Uiterwijk
ac8246e33d These nodes are in batcave/pagure playbooks 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-10 20:03:11 +02:00
Patrick Uiterwijk
11592f9699 Re-enable repospanner deployments 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-10 20:00:01 +02:00
Mikolaj Izdebski
9cb1e5c248 koji/hub: Enable package_list policy in production 2019-04-10 19:49:32 +02:00
Patrick Uiterwijk
1668c1b41e Remove gitolite from pagure push process 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-10 19:03:25 +02:00
Patrick Uiterwijk
d95028ac9e Start migrating from gitolite to pagure auth on pagure.io 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-10 18:43:56 +02:00
Owen W. Taylor
28bd35410b bodhi: Change pagure_flatpak_namespace to flatpaks (staging) 
This makes Bodhi look for a Flaptak in flatpaks/* in pagure when looking
up ACLs, rather than the (compatibility) default 'modules/
 2019-04-10 16:16:18 +00:00
Owen W. Taylor
76197fc4d0 Prepare staging for a separate flatpaks/ namespace 
Change the distgit staging configuration to allow a flatpaks/ namespace,
and configure Koji and MBS to allow building from there.

Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
 2019-04-10 16:15:54 +00:00
Pierre-Yves Chibon
1319bc99f5 distgit/pagure: indicate to pagure that the git hook have a read-only access to the DB 
This way it'll try to interact with the DB using async processes
(the workers) rather than trying to do it where it does not have
the permissions and crash.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-10 13:16:39 +02:00
Pierre-Yves Chibon
0c6e803c60 simple-koji-ci: Move the hosts to F29 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-10 13:15:39 +02:00
Kevin Fenzi
9ed42f8ac2 buildvm-ppc64le: move 4 more ppc64le builders to ppc9-01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-09 23:02:58 +00:00
Stephen Smoogen
c1b2da2b03 remove el8beta since it is not running and is breaking vhost playbooks 2019-04-09 21:50:34 +00:00
Kevin Fenzi
9f7b58183d loopabull01.stg: increase memory to 4gb from 2gb. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-09 21:33:16 +00:00
František Zatloukal
05768fe5f5 taskotron: Update buildmaster_pubkey 2019-04-09 22:59:30 +02:00
Tim Flink
18b00a20e3 proxies: fixing hostname for taskotron/resultsdb 
When I changed taskotron-prod to new-style proxy declarations,
I used the wrong hostname for the balancers - fixing that to
move traffic over the vpn
 2019-04-09 20:47:11 +00:00
Tim Flink
efbbbc9de6 proxies: changing taskotron-prod to use new-style reverseproxy 
The old-style reverseproxy declarations don't have anything in them for websockets.
This changes the reverseproxy definitions so that we're using the new style ones
for taskotron-prod and get ws handling along with that
 2019-04-09 20:19:33 +00:00
Kevin Fenzi
26a7274e66 buildvm-ppc64le-03/04/05: Move to power9 hw. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-09 20:13:13 +00:00
Kevin Fenzi
a806829c4f vhost_update_reboot: when you want to just update and then reboot a vhost 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-09 19:50:36 +00:00
Kevin Fenzi
5be0661c51 vhost_update: switch to package to call the right backend and fix other issues. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-09 19:13:01 +00:00
Kevin Fenzi
3a5f3c7894 ansible-server: just switch to all scp 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-09 18:59:13 +00:00
Kevin Fenzi
678e78acab ansible-server: switch transport to use scp first, then piped, and only then sftp 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-09 18:54:09 +00:00
Kevin Fenzi
41c92c2e9c Revert "basessh: We need a sftp server for ansible, so switch to the internal one." 
This reverts commit 0be4815020.

Instead, we will just switch ansible to scp
 2019-04-09 18:42:28 +00:00