Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
27626 commits 9 branches 0 tags 111 MiB
Commit graph

27626 commits

This branch
This branch
All branches
Author SHA1 Message Date
Clement Verna
607dcaf3f4 Bodhi: Enable rawhide in staging instance 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-06-24 10:29:08 +02:00
Kevin Fenzi
08bfe1d15e style: add initial style guide 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-21 20:53:30 +00:00
Mohan Boddu
162e717943 Bodhi variants change for epel8 stg testing 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-06-21 18:35:22 +00:00
Mohan Boddu
f8faf29c79 Bodhi pungi config changes for epel8 stg testing 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-06-21 18:14:29 +00:00
Aurélien Bompard
a344c67cbd Fix typo 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2019-06-21 14:28:36 +00:00
Aurélien Bompard
8644757f5d Restart the bodhi-consumer pods too when syncing bodhi 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2019-06-21 12:33:03 +00:00
Aurélien Bompard
ea33c67e67 Upgrade bodhi in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2019-06-21 12:24:54 +00:00
Luca Bruno
a0977162b3
coreos-cincinnati: allow crates.io in egress policy (cont) 
crates.io registry is organized in (and redirects to) separate
subdomains for cached static artifacts.
This continues crates.io white-listing effort, covering
static.crates.io too.

Follow-Up: https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/roles/openshift-apps/coreos-cincinnati/templates/egresspolicy.yml?id=48a9d409a4ad1e5637ef7453dbac767c28e08f04
 2019-06-21 09:45:04 +00:00
Luca Bruno
48a9d409a4
coreos-cincinnati: allow crates.io in egress policy 
This allows reaching crates.io, which is required at build-time
in order to reach the dependency registry.

Policy change has been acked by puiterwijk:
https://matrix.to/#/!bcjmqdemgMWRaJJeva:matrix.org/$15611030891834087ceIcE:matrix.org?via=matrix.org&via=disroot.org&via=lisas.de

Signed-off-by: Luca Bruno <luca.bruno@coreos.com>
 2019-06-21 07:58:02 +00:00
Stephen Smoogen
943c330844 relepel is not a kojibuilder 2019-06-20 18:35:07 +00:00
Stephen Smoogen
9902102221 I am so slow and stupid without 4 cups of coffee. Make sure all mentions of X are that vesus juyst hosts: 2019-06-20 18:15:45 +00:00
Stephen Smoogen
ade7bc10aa [relepel08] when cutting and pasting make sure the hostname you set is correct otherwise you will end up with the wrong ips 2019-06-20 18:11:35 +00:00
Stephen Smoogen
029217e4ba put in a host so we can test epel8 2019-06-20 18:05:50 +00:00
Luca Bruno
70fad76e2f
coreos-cincinnati: add back (tagged) rollout role 
Signed-off-by: Luca Bruno <luca.bruno@coreos.com>
 2019-06-20 16:53:26 +00:00
Kevin Fenzi
5a79337b8c rkhunter: Fix some over changed _s back to -s 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-20 16:20:04 +00:00
Luca Bruno
53dab4e4e8
coreos-cincinnati: update config-stub 
Signed-off-by: Luca Bruno <luca.bruno@coreos.com>
 2019-06-20 15:59:16 +00:00
Patrick Uiterwijk
ac4a6b4ddc Move the cincinnati stg suffix later 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-20 17:31:26 +02:00
Mohan Boddu
d56e45bf77 Adding coreos-pool to the prune-signed-copies-protected-tags 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-06-20 15:21:19 +00:00
Kevin Fenzi
ad9d2a06e3 koji_hub: fix to use the correct test. (== instead of is) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-20 15:07:47 +00:00
Kevin Fenzi
840e54faaf koji_hub: fix conditionals to check true vs exists. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-20 14:58:10 +00:00
Ryan Lerch
304bb44d7a taskotron: remove with_items 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2019-06-20 13:50:31 +00:00
Patrick Uiterwijk
1bb928da03 only deploy updates.coreos to stg for now 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-20 15:08:26 +02:00
Patrick Uiterwijk
70d1dd6605 letsencrypt: add quotes 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-20 13:59:54 +02:00
Patrick Uiterwijk
532faf5733 Add tags for updates.coreos 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-20 13:55:50 +02:00
Tim Flink
e2147f0ba3 Blockerbugs: adding chronic to cron sync to reduce cron emails 2019-06-20 11:41:15 +00:00
Patrick Uiterwijk
6ee5bfe5df no-certname 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-20 12:59:25 +02:00
Patrick Uiterwijk
df7acc417e Use certbot for updates.coreos 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-20 12:11:26 +02:00
Patrick Uiterwijk
8a82fb881b Add updates.coreos(.stg).fedoraproject.org to proxies 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-20 12:08:33 +02:00
Tim Flink
231fd1e4b8 silencing blockerbugs sync cron job 2019-06-20 09:52:11 +00:00
Patrick Uiterwijk
f458b2503f cincinnati: allow dl.phx2.fp.o 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-20 10:19:52 +02:00
Patrick Uiterwijk
f0dd07597e Add mirrors and dl and github for cincinnati, as they're used during builds 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-20 10:05:46 +02:00
Patrick Uiterwijk
24963d3673 Put in place Cincinatti egress policy 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-20 09:55:24 +02:00
Patrick Uiterwijk
43af7f9206 Fix up egresspolicy source vs dest 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-06-20 09:44:10 +02:00
Adam Williamson
8f771ecaa0 autocloudreporter: fix email error subject line 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2019-06-19 20:17:30 -07:00
Adam Williamson
1e0274e20a autocloudreporter: convert to fedora-messaging 
OK, now this is the *fourth* time I've done this, maybe I'll
screw it up a bit less this time? Maybe?

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2019-06-19 20:14:31 -07:00
Adam Williamson
d18aa2af4a check-compose: gah fix more settings 
why is copy/paste so hard I am terrible at software someone fire
me

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2019-06-19 16:24:07 -07:00
Kevin Fenzi
33bf682fd5 pagure: fix up some more letsencrypt paths 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-19 23:19:12 +00:00
Kevin Fenzi
2c6a49e268 pagure: Fix name of cert. Letsencrypt uses cert instead of crt. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-19 23:16:07 +00:00
Adam Williamson
5bad190a65 check-compose: gah fix config file key name 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2019-06-19 16:12:03 -07:00
Kevin Fenzi
4527c00b3e pagure: Fix missing VirtHost block end 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-19 23:10:03 +00:00
Kevin Fenzi
cccd70f805 pagure: Only get a pagure.org cert in prod, not in stg. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-19 23:03:04 +00:00
Adam Williamson
d004d57576 check-compose: REALLY fix the Python module name... 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2019-06-19 15:57:17 -07:00
Adam Williamson
ff2115653b check-compose: correct python module name in messaging config 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2019-06-19 15:53:21 -07:00
Kevin Fenzi
ba9c64722d pagure: move letsencrypt calls to the end so we have web config to proxy them to certgetter 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-19 22:50:40 +00:00
Adam Williamson
6f7de513e8 check_compose: fix queue name 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2019-06-19 15:49:46 -07:00
Adam Williamson
db1a4da495 check-compose: no dashes in group names apparently 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2019-06-19 15:47:02 -07:00
Adam Williamson
efddd0d5b1 check-compose: convert to fedora-messaging 
Following the patterns from openQA and relvalconsumer. Just one
to go after this!

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2019-06-19 15:45:20 -07:00
Kevin Fenzi
eeb020d7f1 pagure: Get and use a letsencrypt cert for pagure.org/stg.pagure.org 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-19 22:40:28 +00:00
Kevin Fenzi
f9508750d1 koji_hub / prunesigned: Since we keep more than latest in infra tags anymore, protect those from pruning the signed rpm copies 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-19 21:51:37 +00:00
Kevin Fenzi
553b89e668 Vars: Fedora 28 is eol, so we have no previousprevious version now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-06-19 21:48:42 +00:00