Commit graph

42679 commits

Author SHA1 Message Date
Kevin Fenzi
58bbbca299 ipa: make sure a bunch of calls do not log sensitive data
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-20 14:48:12 -07:00
Kevin Fenzi
1251149241 ansible-server: fix requirements to list collections under collections
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-20 14:00:57 -07:00
Jeremy Cline
5dabb7c3b5 fedora-image-uploader: Fix Google Cloud credential path
I used the wrong name for the file being mounted in the volume. This
will fix the image uploader boot-looping in staging.

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-03-20 17:02:34 +00:00
Jakub Kadlcik
b42bdf2ec4 logdetective: use models directory on our secondary drive 2025-03-20 17:49:20 +01:00
Jakub Kadlcik
072a814252 logdetective: add TODO for podman data 2025-03-20 17:46:40 +01:00
Jakub Kadlcik
6b74655f3a logdetective: we use cuda-12.8 now 2025-03-20 17:44:24 +01:00
Jakub Kadlcik
3d58de5bcb logdetective: specify protocol 2025-03-20 17:25:44 +01:00
Jakub Kadlcik
e921a46626 logdetective: revert back to firewalld 2025-03-20 17:21:56 +01:00
Jakub Kadlcik
3ed2d8e61a logdetective: firewalld isn't installed, use iptables directly 2025-03-20 16:57:18 +01:00
Jakub Kadlcik
26496b9ae0 logdetective: allow 8080 from the outside 2025-03-20 16:43:15 +01:00
Lenka Segura
729e827795 poddlers: scale pod for cleaning-packager-groups to zero
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2025-03-20 16:20:59 +01:00
Lenka Segura
347fda288f poddlers: add cleaning-packager-groups
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2025-03-20 12:29:27 +01:00
Kevin Fenzi
cf2032cac9 bodhi-backend / updates-sync: fix missing ,s
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 21:34:55 -07:00
Jakub Kadlcik
fde534382c logdetective: the value needs to be in quotes 2025-03-20 01:04:19 +01:00
Jakub Kadlcik
346d95c034 logdetective: the drop-in for storage doesn't work 2025-03-20 01:03:34 +01:00
Jakub Kadlcik
c6f268440e logdetective: podman cache on a secondary drive 2025-03-20 00:24:20 +01:00
Jakub Kadlcik
895ee22f34 logdetective: configure podman to use iptables 2025-03-20 00:24:12 +01:00
Jakub Kadlcik
a9494929ef logdetective01: drop birthday 2025-03-19 22:47:55 +01:00
Kevin Fenzi
a04451450d batcave / ansible-server: specifcy any local ansible collections
We want to specify the exact collections we install and the version so
that we know whats installed and what version it is.
Ideally we would install all the collections via rpms.
When thats not possible, we should install them via ansible
so they are tracked and known, and we can update them as needed.

Any other collections locally installed that I couldn't find a caller
for have been removed. We can easily add them here if there's more we
want to install.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 14:45:01 -07:00
Jakub Kadlcik
65cc13ca28 logdetective01: set birthday 2025-03-19 22:38:07 +01:00
a02fffedb3 Update roles/ansible-server/files/requirements.yml - added community.zabbix 3.0.0
Added community.zabbix version 3.0.0
Fixes Zabbix breaking releng compose playbooks.
2025-03-19 21:26:43 +00:00
Samyak Jain
b4e6f57a4a playbooks/groups/secondary.yml: Install isomd5sum package on secondary servers
Added `isomd5sum` to the list of installed packages in `playbooks/groups/secondary.yml`
to support checksum verification tests on `secondary01.fedoraproject.org`.

This ensures that `isomd5sum` is available for testing workflows, particularly for
QA tasks related to Fedora media checksums.

Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-03-19 21:19:58 +00:00
Kevin Fenzi
5bfa8f4802 cloud-image-uploader: this role assumes /files/ in the path already
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 14:19:21 -07:00
c906396525 websites: redirect kde to the edition page 2025-03-19 21:14:27 +00:00
Jeremy Cline
3c6ab8afd8 fedora-image-uploader: add Google Compute Engine support for staging
This enables support for uploading images to Google Cloud in staging.

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
2025-03-19 21:10:14 +00:00
75fdb66594 Update playbooks/include/proxies-redirects.yml - Updated join.fp.o redirect 2025-03-19 20:58:02 +00:00
Kevin Fenzi
22bc02930f koji_hub / koji-gc: add f42/f43 to koji-gc
We want to add these releases as they happen so that koji-gc can
properly clean up builds signed by those keys.
I filed https://pagure.io/infra-docs-fpo/pull-request/367 to also update
the branching sop to do this.

This commit adds f42/43 here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 20:55:04 +00:00
Kevin Fenzi
af2cadbda9 wiki: 404 a list of bots
Bots are hitting the wiki pretty hard and we don't particularly
care about indexing it anymore, as most real docs should have moved
to docs.fedoraproject.org. Also, many of these bots ignore robots.txt
or do other things we don't want.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 20:53:05 +00:00
Kevin Fenzi
e987aa7267 s390kojipkgs: increase timeout
This was done in trying to get caching more stable for s390x builds.
Pushing it now to match the deployed state.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 13:47:07 -07:00
Kevin Fenzi
b9eb773848 ipsilon: change crypto policy back to default
Since https://pagure.io/fedora-infrastructure/issue/12321
is fixed on the bugzilla side, we should be able to move back
to using DEFAULT.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 20:39:56 +00:00
Ryan Brue
2fd441aef6 Add Cosmic-Atomic
We have been building unofficial images at fedora-ostree-desktops based on the workstation-ostree-config files for cosmic-atomic. It's time to get it officially built.

Signed-off-by: Ryan Brue <ryanbrue.dev@gmail.com>
2025-03-19 20:35:21 +00:00
Kevin Fenzi
2f67aade41 F42 beta freeze is lifted
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 09:43:30 -07:00
Josef Skladanka
4761b75c97 Add lbrabec to appowners for testdays 2025-03-19 13:10:03 +01:00
Mikolaj Izdebski
10789ceba2 Koschei: Move away from deprecated fedmsg_env variable 2025-03-18 19:37:38 +01:00
Mikolaj Izdebski
fe0aa52569 Koschei stg: limit number of running builds to 2 2025-03-18 19:23:15 +01:00
Kevin Fenzi
22681acd07 releng_compose: set koji_instance: "primary"
This was missed when I was adding the riscv secondary koji before
freeze. We need it fixed because it breaks the playbooks on the
primary releng compose machines and we have a freeze break to deploy.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-17 10:59:10 -07:00
Karolina Surma
cc7f54ecfe Switch the weekly FTBFS reminders to F42 2025-03-17 17:36:21 +00:00
Jakub Kadlcik
f10301013c copr-dev: try using bootc builder image, pt.3 2025-03-16 17:59:09 +01:00
Kevin Fenzi
d7c1fdf01c pagure.io: double cpus to try and help scraper issues
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-14 12:54:31 -07:00
Patrik Polakovič
d347cf1f20 Update Ansible vars for F42 Beta release
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
2025-03-14 19:19:32 +01:00
2e078cde1c Update roles/zabbix/zabbix_server/tasks/install.yml - Updating Zabbix prod to 7.0LTS
Signed-off-by: Mark Rosenbaum markrosenbaum@fedoraproject.org
2025-03-14 16:18:35 +00:00
01f5e19cf6 Update roles/zabbix/zabbix_server/tasks/install.yml - Seperated Prod and Stg
Prod gets the same version it already has(6.0 LTS) and Stg now gets 7.0 LTS
2025-03-14 14:29:14 +00:00
81ee6adbe2 Update roles/zabbix/zabbix_server/tasks/install.yml - rpm install 6.0LTS to rpm install 7.0LTS 2025-03-14 14:29:14 +00:00
bf2aa3ebbe
forgejo: updated values template with fedora forgejo image
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-14 13:11:16 +00:00
Aurélien Bompard
d68dbcba37
Mirrormanager: remove the disabled cronjob, commenting it out does not work
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-14 13:40:26 +01:00
Aurélien Bompard
d9e0180d83
MirrorManager: don't suspend jobs, only the crawlers on staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-14 12:19:02 +01:00
Kevin Fenzi
a235e2f53c robosignatory: add cosmic-atomic to f43/rawhide signing
We added this in pungi-fedora, so its sitting there trying over and over
to sign it. We need to either merge and deploy this, or revert
the pungi-fedora changes, kill rawhide compose and re-run.

Seems easier to just push this. ;)

+1s?

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-13 10:07:24 -07:00
Aurélien Bompard
90e0325597
D'uh
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-13 17:15:06 +01:00
Aurélien Bompard
4df684038d
Minor fixup
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-13 17:13:55 +01:00
Aurélien Bompard
a32457a7aa
Add a playbook to sync the Badges DB to staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-13 17:12:34 +01:00