Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
20973 commits 9 branches 0 tags 111 MiB
Commit graph

20973 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
c924b3d04e update inventory too 2017-11-28 23:31:49 +00:00
Kevin Fenzi
dd0744fc2c change db-koji02.stg to be a normal postgresql server running f27 2017-11-28 23:28:15 +00:00
Patrick Uiterwijk
76da2fe5ed This is on SSL, and let's also use fs.o 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-28 22:24:39 +00:00
Stephen Smoogen
47ba642bc8 and make the name right 2017-11-28 20:42:53 +00:00
Stephen Smoogen
09746514b8 put in bastion13 and start building 2017-11-28 20:41:28 +00:00
Kevin Fenzi
4cc1a5deb5 add policy to allow mbs to untag module builds in the secure-boot channel 2017-11-28 18:47:35 +00:00
Patrick Uiterwijk
99e5baf76e Send HTTP/421 on kojipkgs on non-phx2 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-28 15:39:37 +00:00
Pierre-Yves Chibon
8f6855eea6 Fedora-Badges renamed to fedora-badges 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2017-11-28 11:55:37 +01:00
Jan Kaluža
ec87815def Generate keytab for ODCS and use it in Koji profile. 2017-11-28 08:20:17 +00:00
Patrick Uiterwijk
7e908361d4 Also set cert secret correct for scratch 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-28 00:36:39 +00:00
Patrick Uiterwijk
8a08126441 Add tags to osbs-client role 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-28 00:33:30 +00:00
Patrick Uiterwijk
4c463059db Do not set koji_certs_secret = False. That leads to unstarted builds 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-28 00:32:54 +00:00
Kevin Fenzi
1819b09d89 commops is f27 after upgrading 2017-11-27 22:25:16 +00:00
Dennis Gilmore
c09b4d3d5f send emaisl to Mohan and not Dennis on failures 
Mohan is dealing with the day to day things in fedora relng so he is
better suited to recieve the emails

Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
 2017-11-27 22:24:35 +00:00
Kevin Fenzi
6467a7f5bf we need to protect the infra-stg tags as well from gc 2017-11-27 22:22:28 +00:00
Kevin Fenzi
b1118af2df This is going to be a Fedora machine now. 2017-11-27 21:33:57 +00:00
Patrick Uiterwijk
e1121167e8 We have trees for ppc64le, not ppc64 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-27 20:55:48 +00:00
Stephen Smoogen
3c631c8075 add some items for fedorapeople.org 2017-11-27 20:20:26 +00:00
Patrick Uiterwijk
cd32d50d8c Get rid of special casing 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-27 19:44:52 +00:00
Patrick Uiterwijk
065a99364e Fix two silly oversights 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-27 19:30:46 +00:00
Patrick Uiterwijk
2ce6013160 Add multiple arches and multiple trees for ostree per release 
Based on a patch by Dusty Mabe <dusty@dustymabe.com>

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-27 19:25:34 +00:00
Kevin Fenzi
e4eedd47fc move packages in stg over to f27 2017-11-27 19:13:19 +00:00
Patrick Uiterwijk
71f2d85920 mattdm likes Fedora Project Wiki 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-27 19:09:07 +00:00
Sayan Chowdhury
fe1d1adbf8 Don't delete the amis on failure 2017-11-27 18:36:20 +00:00
Kevin Fenzi
38fa2e710c apply additioanl extracmdline for atomic. ticket 6494 2017-11-27 18:32:52 +00:00
Kevin Fenzi
32fc8a626a fix totpcgi role to put templates in the right place 2017-11-27 17:25:01 +00:00
Kevin Fenzi
b9b2b34af1 only set 421 error doc on proxies not everything using apache role 2017-11-27 16:21:17 +00:00
Kamil Páral
493b871b49 taskotron: use production-override repo and enable mtf-containers 
In production.
 2017-11-27 14:36:03 +01:00
Patrick Uiterwijk
bc3bbcb5c0 Also return 421 from non-phx2 proxies for src.fp.o 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-26 21:13:33 +00:00
Patrick Uiterwijk
40de21728b Set the error message centrally 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-26 21:12:32 +00:00
Patrick Uiterwijk
34a655ee37 Send a 421 Misdirected error to koji from non-phx2 proxies 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-26 21:05:59 +00:00
Jakub Kadlcik
a4d4c044c8 Fix KeyError issue with relay_inbound and relay_outbound settings 2017-11-26 00:46:39 +00:00
Kevin Fenzi
a901cb2093 drop this since we just remove it later because we are using python3 2017-11-25 23:36:59 +00:00
Kevin Fenzi
fc484f796c drop some old openvpn stuff 2017-11-25 21:44:59 +00:00
Patrick Uiterwijk
44b5d262f7 We keep getting more constants. Instead just stop reporting these 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-25 18:43:49 +00:00
Patrick Uiterwijk
55081a1dff Add silly definitions to avoid using undefined things 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-25 18:39:20 +00:00
Patrick Uiterwijk
afc9870755 Make fpaste.org use certgetter 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-25 00:07:42 +00:00
Patrick Uiterwijk
ac055b3927 Deploy ticketkey as part of proxy role 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-25 00:02:26 +00:00
Patrick Uiterwijk
1225d45cfe Nuke these letsencrypt entries as well 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-24 23:36:41 +00:00
Patrick Uiterwijk
fbd3ed0d53 Proxies do not need to get certbot 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-24 23:31:34 +00:00
Patrick Uiterwijk
361fccdcc2 On vh21, we have vg_guests 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-24 23:12:29 +00:00
Patrick Uiterwijk
502b8ca509 Use standard wildcard cert for id.fp.o 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-24 22:56:58 +00:00
Patrick Uiterwijk
0f678956da Fix prod reverse proxies 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-24 22:53:44 +00:00
Patrick Uiterwijk
e1bb4e64a4 Do not includeSubDomains for id.fp.o STS 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-24 22:49:05 +00:00
Patrick Uiterwijk
cabbfe3015 Deploy split servers to prod 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-24 22:46:24 +00:00
Patrick Uiterwijk
bc95beb269 Split id.fp.o and username.id.fp.o for TLS/h2 reasons. Start with staging 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-24 22:20:25 +00:00
Patrick Uiterwijk
cc1795cec7 Also add koji stuff on other internal proxies 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-24 21:45:48 +00:00
Kevin Fenzi
37c7bf8b21 try increasing this to make src.fp.o more responsive 2017-11-24 19:51:35 +00:00
Kevin Fenzi
07cdaf24f4 weed out some debug and warn messages from openshift apps and fedmsg 2017-11-24 04:43:50 +00:00
Patrick Uiterwijk
a20b20b32a Try this 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-23 23:56:01 +00:00