Turns out we want to keep reg and it's output.
So, we just copy flatpak-indexers fedora/deltas/icons dirs under the reg
renerated top level on the proxies.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Add changes required for flatpak-indexer, conditionalized for staging:
* Reverse which of "index with labels" or "index with annotations" is the
default (make labels the default, since annotations are only used by
old versions of Flatpak)
* Add the deltas/ directory which holds deltas between Flatpak versions.
Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
Under the old setup, we ran 'reg' on sundries and then synced that
content (in 3 rsyncs) to proxies.
With this new setup, flatpak-indexer runs in openshift. It has a nfs
volume where it writes it's output too. We rsync just that entire output
directory to the proxies. This includes things like deltas.
This commit should only affect staging, we will roll to production
later.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
The `fas_client` role installed a version of nsswitch.conf which doesn't
delegate to sss. For some reason, ipa-client-install doesn't ensure this
is brought back. This prepends `sss` to lines where it would be missing
otherwise. Also, run the cleanup tasks before the enrollment task.
Signed-off-by: Nils Philippsen <nils@redhat.com>
We really want to save the output of branched jobs so we can easier
track down issues and fix them.
Normally this would be a freeze break, but I can't imagine how it would
cause any issues and it's one character, so I am just doing it. :)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Reinstalling the IPA server in staging made the enrollments of IPA
clients against the old instance stale. This playbook detects this,
cleans things up and enrolls hosts again.
Signed-off-by: Nils Philippsen <nils@redhat.com>
Pull in redis/docker-entrypoint.sh: listen on all interfaces
b239f79e58
This should make redis accessible on the redis service and not just
locally in the redis container.
When we setup things we didn't setup fedmsg in iad2 staging.
Now we are using it, so we should configure it until we get rid of it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
I think the only reason this worked in phx2 was because we also had a
firewall rule that was blocking the staging subnet on all prod machines.
Instead of doing that here, lets just make fedmsg only deal with the
staging hosts in staging. The only thing this might break is things that
aren't in staging_friendly that should be.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Match the environment variable in the deploymentconfig to that used
in the configmap (REDIS_PASSWORD)
Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
The 'containerNames' parameter was incorrectly cut-and-pasted from
the flatpak-indexer-differ deployment config.
Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
