Commit graph

42837 commits

Author SHA1 Message Date
81ee6adbe2 Update roles/zabbix/zabbix_server/tasks/install.yml - rpm install 6.0LTS to rpm install 7.0LTS 2025-03-14 14:29:14 +00:00
bf2aa3ebbe
forgejo: updated values template with fedora forgejo image
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-14 13:11:16 +00:00
Aurélien Bompard
d68dbcba37
Mirrormanager: remove the disabled cronjob, commenting it out does not work
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-14 13:40:26 +01:00
Aurélien Bompard
d9e0180d83
MirrorManager: don't suspend jobs, only the crawlers on staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-14 12:19:02 +01:00
Kevin Fenzi
a235e2f53c robosignatory: add cosmic-atomic to f43/rawhide signing
We added this in pungi-fedora, so its sitting there trying over and over
to sign it. We need to either merge and deploy this, or revert
the pungi-fedora changes, kill rawhide compose and re-run.

Seems easier to just push this. ;)

+1s?

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-13 10:07:24 -07:00
Aurélien Bompard
90e0325597
D'uh
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-13 17:15:06 +01:00
Aurélien Bompard
4df684038d
Minor fixup
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-13 17:13:55 +01:00
Aurélien Bompard
a32457a7aa
Add a playbook to sync the Badges DB to staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-13 17:12:34 +01:00
Greg Sutcliffe
2ccdc83dce Add lint prefix to template_fullpath to match openshift/object 2025-03-13 15:45:07 +00:00
Aurélien Bompard
6687bfb589
MirrorManager: add the secrets mount to all deploymentconfigs
The crawlers need it when they import the Flask app, or we get:
```
FileNotFoundError: [Errno 2] No such file or directory: '/etc/mirrormanager-secrets/client_secrets.json'
```

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-13 09:22:18 +01:00
Pragyan Poudyal
a6177a5e52 Add pragyan-poudyal to appowners 2025-03-13 04:58:36 +00:00
Kevin Fenzi
b50b776cb5 varnish / s390x cache: move to memory based instead of disk
This was done last week to help out with builds that were failing
due to s390x cache issues. Moving to memory based seems to have
helped this stop happening, possibly along with other changes.

I'm pushing it now because it reflects the current state
after outages last week.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-12 14:21:43 -07:00
Kevin Fenzi
17c8094c2f log01 / rsyslog / splunk: adjust ip again as the previous one was not desired
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-12 14:20:27 -07:00
5555679100
fedora-web: fix include_vars option 2025-03-12 11:21:43 +01:00
Andrew Heath
d616fa6c6c Update Splunk syslog address
Update Splunk syslog address per Red Hat's Monitoring and Loging team.
The old address will be decomed in about a week per their
communications.
2025-03-11 18:30:47 +00:00
James Antill
8e8fc651fa Turn on nftables for a few more staging groups.
Signed-off-by: James Antill <james@and.org>
2025-03-10 16:40:08 -04:00
5c07d5b8c6 forgejo: update admin groups values from Fedora Accounts
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-03-10 15:54:47 +10:00
Greg Sutcliffe
a69b10a128 resultsdb-ci-listener: deploy app via s2i 2025-03-07 13:06:46 +00:00
Jakub Kadlcik
eec596d979 copr-dev: try using bootc builder image, pt.2 2025-03-07 12:18:18 +01:00
Jakub Kadlcik
0f902b6e9b copr-dev: try using bootc builder image
See https://github.com/fedora-copr/copr-image-builder
2025-03-06 23:57:10 +01:00
184c67583f
forgejo: correct oauth configuration to map sysadmin-main to admin
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-06 15:10:18 +00:00
5558de59de
forgejo: enable route
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-05 13:20:21 +00:00
d7c54cb063
forgejo: testing ansible helm module
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-05 12:55:57 +00:00
77cd46fcf9
forgejo: updating flags passed to helm
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-05 12:38:56 +00:00
a7b5254c8d
forgejo: update task to read in values passed to helm
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-05 10:23:15 +00:00
James Antill
69911c5d72 Enable IPv6 nftables.
Signed-off-by: James Antill <james@and.org>
2025-03-04 14:31:54 -05:00
James Antill
e83b42b572 Remove iptables cron and stop/disable services, when using nftables.
Signed-off-by: James Antill <james@and.org>
2025-03-04 14:14:37 -05:00
200c9eb70d
forgejo: change to point at the fedora forked forgejo helm chart
Add values template that is passed to helm at deploy

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-04 15:48:57 +00:00
James Antill
ca18224faa Change osbuildapi set table to the ip filter table.
Signed-off-by: James Antill <james@and.org>
2025-03-03 17:08:20 -05:00
James Antill
224d98cbb0 Remove typo from kojibuilder nftables template.
Signed-off-by: James Antill <james@and.org>
2025-03-03 16:52:02 -05:00
James Antill
172cfc9efa Move staging builders to nftables.
Signed-off-by: James Antill <james@and.org>
2025-03-03 21:20:30 +00:00
James Antill
1c6c65844d Add new osbuildapi-update-nft.cron entries, and get it installed when nftables.
Signed-off-by: James Antill <james@and.org>
2025-03-03 21:20:30 +00:00
James Antill
4fac049b6a Actually install the nftable template file.
Signed-off-by: James Antill <james@and.org>
2025-03-03 21:20:30 +00:00
James Antill
b322316be5 Don't flush old osbuildapi entries in nftables land either.
Signed-off-by: James Antill <james@and.org>
2025-03-03 21:20:30 +00:00
James Antill
31d65aa439 Actually move to nftables for any host with nftables: true (nothing atm).
Signed-off-by: James Antill <jantill@redhat.com>
2025-03-03 21:20:30 +00:00
Aurélien Bompard
c9b9086535
Add missing j2 suffixes
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-03 10:18:14 +01:00
Anton Livaja
fd97971442 fix name to change anitya 2025-03-03 08:47:21 +00:00
Anton Livaja
6abd0b78b2 add base url for mapping stagex packages 2025-03-03 08:47:21 +00:00
Miroslav Suchý
c381c5a773 max concurent starting of ARM builders to 20 2025-03-03 09:44:19 +01:00
Miroslav Suchý
75df00270e bump numbers of reserved builders 2025-03-03 09:42:05 +01:00
Jakub Kadlcik
60f990bdb7 copr-fe: use mod_wsgi role
Fix https://github.com/fedora-copr/copr/issues/3623
2025-02-27 10:48:12 +01:00
Jakub Kadlcik
b168e806d8 copr-fe-dev: use mod_wsgi role 2025-02-26 10:58:51 +01:00
Carl George
42b0fcb33c koji_hub: add EPEL 9 and 10 to the prune policy
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-02-26 01:49:27 +00:00
Carl George
092622b6bc bodhi2/backend: don't change epel-release-latest symlink if destination filename is the same
https://pagure.io/epel/issue/318

Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-02-26 00:33:27 +00:00
Aurélien Bompard
d11b793965
tabs to spaces
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-02-25 09:19:44 +01:00
Aurélien Bompard
938471e9f1
The clean packagers groups toddler needs a different keytab
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-02-25 09:18:51 +01:00
Aurélien Bompard
097b8f9214
Give the clean packagers groups toddler access to the corresponding service's keytab
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-02-25 08:54:06 +01:00
Jiri Kyjovsky
1e8c7dcba9 copr: we now use dnf5 on copr, theres no need of dnf-plugins-core then 2025-02-24 13:56:45 +01:00
Jiri Kyjovsky
bb9dd04964 frontend: provide stg url for oidc metadata 2025-02-24 11:18:47 +01:00
Jiri Kyjovsky
da9a451e34 copr: feed oidc env variables to frontend 2025-02-24 00:48:29 +01:00