Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
39738 commits 9 branches 0 tags 111 MiB
Commit graph

39738 commits

This branch
This branch
All branches
Author SHA1 Message Date
David Kirwan
6461430ae3
zabbix: remove conditions on zabbix configration 
Rename host zabbix/zabbix.stg to zabbix01

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-15 08:10:44 +00:00
Kevin Fenzi
aaf8fec811 zabbix_agent / rhel7: package seems to be just policycoreutils-python in rhel7 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-14 16:06:10 -08:00
Miro Hrončok
9d5c2b84a8 Switch the weekly FTBFS reminders to F39 
Signed-off-by: Miro Hrončok <miro@hroncok.cz>
 2023-11-14 23:32:18 +00:00
Kevin Fenzi
292db92153 koji_builder / buildhw-a64: try and get core dumps another way 
We tried to override the machine scope, but that didn't work in this
case, so instead lets tell mock to pass a new core limit to
systemd-nspawn and see if that gets us cores.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-14 10:53:53 -08:00
Aurélien Bompard
f76ff54b1f
bugzilla2fedmsg: use a more recent python builder image 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-11-14 09:16:25 +01:00
Kevin Fenzi
58183eb8ee proxies / staging: move stg proxies to f39 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 17:09:50 -08:00
Kevin Fenzi
24a237ad3d releng-compose: move a bunch of composers to f39 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 16:41:39 -08:00
Kevin Fenzi
f9eac86c72 batcave01: ansible-core now switches back to python-3.9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 14:15:25 -08:00
Kevin Fenzi
9b42cd8cbf haproxy: fix template typo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 13:53:56 -08:00
Kevin Fenzi
e56810a7dd proxies: drop free on later plays 
This just causes confusion and doesn't really help make the playbook any
faster.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-13 10:42:54 -08:00
Leo Puvilland
9f0cfc0502 redirect discussions.fedoraproject.org to discussion.fedoraproject.org, and add to proxy and LE cert 2023-11-13 18:33:39 +00:00
Pavel Raiskup
e80b1e1050 copr/hypervisor: typo in task name 2023-11-13 16:51:28 +01:00
Pavel Raiskup
8e6de8396e nagios: send notifications to copr-team@redhat.com 
Instead of separate members.  This is just to align with:
https://accounts.fedoraproject.org/group/copr-sig/
 2023-11-13 15:32:26 +01:00
Pavel Raiskup
87959ce5e6 copr: cleanup credentials: old openstack 
Complements: 1623f42fea
 2023-11-13 09:12:55 +01:00
Pavel Raiskup
1623f42fea copr: cleanup credentials: old openstack 
Complements 4792241cfe
 2023-11-13 09:04:30 +01:00
Kevin Fenzi
bf3a64f286 resultdb: add coreos user to submit results from coreos 
Just add another user here to be allowed to submit results for coreos
tests. Creds sent out of band.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-10 11:03:30 -08:00
Kevin Fenzi
766e2d39c7 bodhi / backend / koji_sync: f40-flatpak does not exist yet 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-10 10:34:20 -08:00
Pavel Raiskup
bb04ae62ad copr: credential cleanup: drop log for "static" SSL 
We are for quite some time using the roles/copr/certbot also for
backend production.
 2023-11-10 13:45:19 +01:00
Pavel Raiskup
8abbdbaea5 sopr: credential cleanup: drop an unused task file 2023-11-10 13:45:17 +01:00
Pavel Raiskup
4792241cfe copr: credential cleanup: drop unused openstack/passwords.yml 
Drop the use of credentials to (now) non-existing OpenStack.
 2023-11-10 13:35:17 +01:00
Pavel Raiskup
63e9812149 backend: explain the reason for generating ssh key on VM 2023-11-10 13:28:28 +01:00
Pavel Raiskup
47b91aae1f copr: credential cleanup: drop copr-sudoers use 
This never worked.  We have to add appropriate FAS integration.
 2023-11-10 11:20:56 +01:00
Pavel Raiskup
41af546c0d copr: credential cleanup: drop unused openstack/passwords.yml 2023-11-10 11:15:03 +01:00
Kevin Fenzi
deef8d3b35 bodhi-backend01.stg: was moved to f38 a while ago 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-09 13:09:19 -08:00
Nils Philippsen
aac912e4c9 Set nullglob for combining HTTP log files 
This can cause files named '*' in places where you wouldn’t expect it
otherwise.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2023-11-09 20:42:31 +00:00
Kalev Lember
0064e09bff kojipkgs: slightly relax openh264 blocking/redirect rules 
Allow access to gstreamer1-plugin-openh264 package and new noopenh264
stub package that don't contain non-distributable code, while keeping
openh264* and mozilla-openh264* blocked.

See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=2247274 for
"noopenh264" stub package review that makes it possible to build/ship
the gstreamer plugin in Fedora proper while keeping the
non-distributable openh264 package in Cisco repos.
 2023-11-09 21:28:13 +01:00
Kevin Fenzi
9314b70862 db-koji01: more tuning 
Tweak some of the knobs to try and get things more happy with the heavy
load it's under. Note that cpus change will need a reboot before it's
active. The other changes have all been applied and it seems to be doing
a little better with this. Perhaps with some more cpus we can get it
stable (but yet not swamping i/o).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-09 10:09:24 -08:00
David Kirwan
21b43ab931
zabbix: reworking apache config 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-09 15:15:48 +00:00
David Kirwan
8b0581bcad
zabbix: haproxy config reworking 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-09 14:52:30 +00:00
David Kirwan
ee3bac3470
zabbix: haproxy config zabbix production 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-09 14:04:13 +00:00
David Kirwan
9c3a24e79a
zabbix: Zabbix production configuration 2023-11-09 12:55:26 +00:00
Aurélien Bompard
94478cc88b Install IPA replicas with a larger nsslapd-maxsasliosize 
Related to https://pagure.io/fedora-infrastructure/issue/10358

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-11-09 09:33:15 +00:00
Aurélien Bompard
f6e6921655 Factor the replication tasks in a block 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-11-09 09:33:15 +00:00
Dan Fandrich
2afc689d5e [release-monitoring] Add links for more distros 2023-11-09 09:28:11 +00:00
Kevin Fenzi
fdf34aab57 nagios_server / noc02: set seboolean to allow certgetter to work 
noc02 needs to be able to proxy to certgetter for the acme challenge for
ssl certs. So, set this there to allow that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-08 15:40:23 -08:00
Andrew Heath
ea4a9bcbb6 Create redirect for fedoraproject/cloud 
Create a redirect for fedoraproject to point to new cloud image page
 2023-11-08 23:31:28 +00:00
Andrew Heath
7260701e59 Remove unessary settings for Spunk Setup 2023-11-08 23:28:57 +00:00
Kevin Fenzi
ed45352045 robosignatory: sign stable iot with f39 key 
Also drop 32bit arm signing info.

See https://pagure.io/releng/issue/11768

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-08 22:49:38 +00:00
Kevin Fenzi
21a3a4f6ff ipsilon: add SAML2 mapping for aws-openscanhub group 
This adds a mapping for a aws-openscanhub group.
See https://pagure.io/fedora-infrastructure/issue/11384 for more info.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-08 22:16:53 +00:00
Kevin Fenzi
cbc8c70e75 koji_hub / koji_gc: fix key ids 
The f36 key here was wrong and the f38 and 39 ones were swapped.
Also, fixed the cap in f40 key.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-08 14:13:34 -08:00
Kevin Fenzi
9e2b0cda9d openshift: validate when applying objects 
Right now if there's a yml thats indented incorrectly, but parts of it
are fine, oc apply will apply those parts that are valid and just ignore
the rest. So, lets add a --validate=strict to have it reject these
entirely, so we know they have something wrong in them and we can fix
it, rather than being confused that they didn't apply anything.

Signed-off-by: Kevin Fenzi kevin@scrye.com
 2023-11-08 14:11:02 -08:00
Kevin Fenzi
1f1624d5ac bodhi / backend / koji_sync: run on flatpak tags daily too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-08 13:22:25 -08:00
Kevin Fenzi
e859a68d95 bodhi / backend / koji sync: minor syntax fixes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-08 13:12:35 -08:00
Yaakov Selkowitz
d60d7a0e50 Append -flatpak suffix to koji package name for flatpaks 
At this point, all new flatpak requests should use the new flatpak
infrastructure, which still uses flatpaks/$NAME dist-git but
$NAME-flatpak koji "package".

Resolves: https://pagure.io/releng/issue/11626
Signed-off-by: Yaakov Selkowitz <yselkowi@redhat.com>
 2023-11-08 20:50:07 +00:00
Mattia Verga
eda3e9e39c toddlers: enable check-commit-rights on stg 
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
 2023-11-08 20:39:08 +00:00
Kevin Fenzi
2bcd7415d5 f39 is out, we are unfrozen 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-08 09:34:15 -08:00
Konrad Kleine
ab878dd91d copr-be: fix project regex for LLVM Snapshots high-performance builders 
LLVM Snapshots are built fresh in daily new incubator projects such as `@fedora-llvm-team/llvm-snapshots-incubator-20231107` and the regex wouldn't match them before.

Now the regex works good with grep in the following scenarios:

```
$ echo "@fedora-llvm-team/llvm-snapshots/fedora-rawhide-x86_64/llvm" | grep -ioP '@fedora-llvm-team/llvm-snapshots[^/]*/.*x86_64/(llvm|clang)'
$ echo "@fedora-llvm-team/llvm-snapshots-incubator-20231107/fedora-rawhide-x86_64/llvm" | grep -ioP '@fedora-llvm-team/llvm-snapshots[^/]*/.*x86_64/(llvm|clang)'
```
 2023-11-07 21:38:35 +00:00
Kevin Fenzi
1be44be6fd gnome-software: f39 is out, update gnome-software 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-07 06:18:39 -08:00
Kevin Fenzi
50c61979f0 Revert "zabbix: Add configuration for zabbix prod to haproxy" 
This reverts commit d7b20fa114.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-07 06:16:29 -08:00
David Kirwan
89485e5a43
zabbix: add zabbix production configugration to apache 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2023-11-07 08:50:20 +00:00