Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
16134 commits 9 branches 0 tags 111 MiB
Commit graph

16134 commits

This branch
This branch
All branches
Author SHA1 Message Date
Tim Flink
7118de296d adding f25-taskotron to pxe server on noc01 2016-12-15 16:16:13 +00:00
Martin Krizek
743fa4cc93 taskotron-stg: make nfs rw 2016-12-15 16:14:10 +00:00
Martin Krizek
226c86a2bf taskotron: fix roles order 2016-12-15 16:03:14 +00:00
Patrick Uiterwijk
fe306871b6 Fix pkgdb to koji sync 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 15:40:11 +00:00
Martin Krizek
eff53cce0e taskotron-stg: use nfs for artifacts and buildmaster files 2016-12-15 15:17:46 +00:00
Pierre-Yves Chibon
52e6eeef32 Drop the redirect to https for now on releases.pagure.org 2016-12-15 15:00:51 +00:00
Patrick Uiterwijk
5f6642373f Web UI also needs https 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 14:39:00 +00:00
Adam Miller
1e80910934 set version v2 for tag_and_push osbs plugin override input json 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-12-15 14:26:57 +00:00
Adam Miller
8a3f9ed982 override osbs default input.json to ensure secure comms everywhere 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-12-15 14:25:13 +00:00
Martin Krizek
bb8b90aba4 taskotron-stg: set the selinux fcontext type for the buildmaster_home 2016-12-15 14:01:43 +00:00
Patrick Uiterwijk
5c98294ee5 Kojira also needs CA 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 13:09:44 +00:00
Patrick Uiterwijk
fff0e0503e Server URL is also env depending 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 13:07:23 +00:00
Patrick Uiterwijk
6a9098d59f All koji hubs have their own principal 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 01:34:04 +00:00
Patrick Uiterwijk
d9f002c064 Kojid will not accept an empty serverca, and default to /etc/kojid/ca.cert, which does not exist 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 01:27:55 +00:00
Patrick Uiterwijk
ad5b8337f7 Kill this too 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 01:22:56 +00:00
Patrick Uiterwijk
4ac18d2200 If a host has no specific hosts file in ansible, make it an empty one 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 01:21:26 +00:00
Patrick Uiterwijk
24c15796b9 Kill it with fire 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 01:18:09 +00:00
Patrick Uiterwijk
dff4dee4ec Remove secondary hosts custom hosts file 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 01:17:27 +00:00
Patrick Uiterwijk
fae80881df Removed too much 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 01:10:10 +00:00
Patrick Uiterwijk
b08e18404b Move all builders and compose to https 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 01:06:23 +00:00
Kevin Fenzi
b333899945 Revert "lets try with some graphics" 
This reverts commit e747d58c0e.

Boy did that not work. :)
 2016-12-15 01:04:30 +00:00
Kevin Fenzi
e747d58c0e lets try with some graphics 2016-12-15 01:02:49 +00:00
Patrick Uiterwijk
80d0dca5e3 All builders are now krb_builder's 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 00:51:08 +00:00
Kevin Fenzi
c158f3412d ok, lets try this 2016-12-15 00:42:07 +00:00
Patrick Uiterwijk
4e6ce4fed3 Secondary kojis need to use correct intermediates 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 00:39:38 +00:00
Kevin Fenzi
401f3fc9f7 perhaps the lie has become truth 2016-12-15 00:36:03 +00:00
Patrick Uiterwijk
36e8d87821 Select keytab based on koji instance 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 00:29:50 +00:00
Kevin Fenzi
e4b48dcb64 fix version here as well 2016-12-15 00:28:33 +00:00
Patrick Uiterwijk
ae6f6ee942 Proxy secondary proxies 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 00:11:41 +00:00
Patrick Uiterwijk
fc9c169878 Add secondary kojis to haproxy 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 00:08:07 +00:00
Patrick Uiterwijk
d36913fe80 cert/crt 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-15 00:02:13 +00:00
Patrick Uiterwijk
2c1a774459 Define secondary kojis 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-14 23:58:06 +00:00
Adam Miller
db026247dc Revert "override osbs default input.json to ensure secure comms everywhere" 
This breaks OSBS, will debug and re-apply later when fixed.

This reverts commit 52d5e432fa.
 2016-12-14 23:41:28 +00:00
Kevin Fenzi
5deea2c323 Revert "looks like we might not need this on ppc64 hosts" 
We do need it. Just due to compose issue we need to manually install it for now.

This reverts commit 87cf148af4.
 2016-12-14 23:40:34 +00:00
Kevin Fenzi
87cf148af4 looks like we might not need this on ppc64 hosts 2016-12-14 23:28:36 +00:00
Adam Miller
52d5e432fa override osbs default input.json to ensure secure comms everywhere 
Signed-off-by: Adam Miller <admiller@redhat.com>
 2016-12-14 23:24:41 +00:00
Kevin Fenzi
682e60d66c switch buildvm-ppc64 to 25 2016-12-14 22:54:26 +00:00
Kevin Fenzi
4e1bf65651 change koji hub perms so that autosign can move builds in secure-boot channel as needed to sign them 2016-12-14 22:21:55 +00:00
Kevin Fenzi
ef6d4e72e4 Revert "make paste ssl only" 
Stupidly it's hard coded to use http:// for the api. Need to fix the client.

This reverts commit fe0ec68983.
 2016-12-14 22:20:07 +00:00
Kevin Fenzi
fbaafe1896 ipv6 for osuosl hosts that want it 2016-12-14 21:29:09 +00:00
Patrick Uiterwijk
9bd69da6ac Run named-checkconf 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-14 21:07:33 +00:00
Stephen Smoogen
6f1bb2e025 ok built not build 2016-12-14 20:58:39 +00:00
Stephen Smoogen
6ed1417900 the files dont exist 2016-12-14 20:49:44 +00:00
Martin Krizek
3b113c0273 taskotron staging: prepare for rebuild to F24 2016-12-14 20:40:03 +00:00
Adam Williamson
ea4ed40076 openqa/scheduler: add a cron job to schedule live-respins 
There are no fedmsg notifications for the live respin composes,
so we just try scheduling them every hour; when we've already
tested the current compose this will not create any new jobs,
and when a new compose shows up, this will test it.
 2016-12-14 12:32:48 -08:00
Stephen Smoogen
97d1eb6821 and we have some new zones 2016-12-14 20:24:17 +00:00
Patrick Uiterwijk
0ee67fcdec Let's be even more obnoxious 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-14 19:01:23 +00:00
Patrick Uiterwijk
01292bba60 Allow OSBS to contact krb 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-12-14 18:37:50 +00:00
Kevin Fenzi
19d85c27e9 up transient memory to 150GB 2016-12-14 18:29:53 +00:00
Pierre-Yves Chibon
1ff38f09b7 Bump the upload limit for pagure to 60MB 
Fixes https://pagure.io/fedora-infrastructure/issue/5631
 2016-12-14 18:44:38 +01:00