Commit graph

39829 commits

Author SHA1 Message Date
Kevin Fenzi
e56810a7dd proxies: drop free on later plays
This just causes confusion and doesn't really help make the playbook any
faster.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-13 10:42:54 -08:00
Leo Puvilland
9f0cfc0502 redirect discussions.fedoraproject.org to discussion.fedoraproject.org, and add to proxy and LE cert 2023-11-13 18:33:39 +00:00
Pavel Raiskup
e80b1e1050 copr/hypervisor: typo in task name 2023-11-13 16:51:28 +01:00
Pavel Raiskup
8e6de8396e nagios: send notifications to copr-team@redhat.com
Instead of separate members.  This is just to align with:
https://accounts.fedoraproject.org/group/copr-sig/
2023-11-13 15:32:26 +01:00
Pavel Raiskup
87959ce5e6 copr: cleanup credentials: old openstack
Complements: 1623f42fea
2023-11-13 09:12:55 +01:00
Pavel Raiskup
1623f42fea copr: cleanup credentials: old openstack
Complements 4792241cfe
2023-11-13 09:04:30 +01:00
Kevin Fenzi
bf3a64f286 resultdb: add coreos user to submit results from coreos
Just add another user here to be allowed to submit results for coreos
tests. Creds sent out of band.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-10 11:03:30 -08:00
Kevin Fenzi
766e2d39c7 bodhi / backend / koji_sync: f40-flatpak does not exist yet
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-10 10:34:20 -08:00
Pavel Raiskup
bb04ae62ad copr: credential cleanup: drop log for "static" SSL
We are for quite some time using the roles/copr/certbot also for
backend production.
2023-11-10 13:45:19 +01:00
Pavel Raiskup
8abbdbaea5 sopr: credential cleanup: drop an unused task file 2023-11-10 13:45:17 +01:00
Pavel Raiskup
4792241cfe copr: credential cleanup: drop unused openstack/passwords.yml
Drop the use of credentials to (now) non-existing OpenStack.
2023-11-10 13:35:17 +01:00
Pavel Raiskup
63e9812149 backend: explain the reason for generating ssh key on VM 2023-11-10 13:28:28 +01:00
Pavel Raiskup
47b91aae1f copr: credential cleanup: drop copr-sudoers use
This never worked.  We have to add appropriate FAS integration.
2023-11-10 11:20:56 +01:00
Pavel Raiskup
41af546c0d copr: credential cleanup: drop unused openstack/passwords.yml 2023-11-10 11:15:03 +01:00
Kevin Fenzi
deef8d3b35 bodhi-backend01.stg: was moved to f38 a while ago
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-09 13:09:19 -08:00
Nils Philippsen
aac912e4c9 Set nullglob for combining HTTP log files
This can cause files named '*' in places where you wouldn’t expect it
otherwise.

Signed-off-by: Nils Philippsen <nils@redhat.com>
2023-11-09 20:42:31 +00:00
Kalev Lember
0064e09bff kojipkgs: slightly relax openh264 blocking/redirect rules
Allow access to gstreamer1-plugin-openh264 package and new noopenh264
stub package that don't contain non-distributable code, while keeping
openh264* and mozilla-openh264* blocked.

See https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=2247274 for
"noopenh264" stub package review that makes it possible to build/ship
the gstreamer plugin in Fedora proper while keeping the
non-distributable openh264 package in Cisco repos.
2023-11-09 21:28:13 +01:00
Kevin Fenzi
9314b70862 db-koji01: more tuning
Tweak some of the knobs to try and get things more happy with the heavy
load it's under. Note that cpus change will need a reboot before it's
active. The other changes have all been applied and it seems to be doing
a little better with this. Perhaps with some more cpus we can get it
stable (but yet not swamping i/o).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-09 10:09:24 -08:00
David Kirwan
21b43ab931
zabbix: reworking apache config
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-09 15:15:48 +00:00
David Kirwan
8b0581bcad
zabbix: haproxy config reworking
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-09 14:52:30 +00:00
David Kirwan
ee3bac3470
zabbix: haproxy config zabbix production
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-09 14:04:13 +00:00
David Kirwan
9c3a24e79a
zabbix: Zabbix production configuration 2023-11-09 12:55:26 +00:00
Aurélien Bompard
94478cc88b Install IPA replicas with a larger nsslapd-maxsasliosize
Related to https://pagure.io/fedora-infrastructure/issue/10358

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-11-09 09:33:15 +00:00
Aurélien Bompard
f6e6921655 Factor the replication tasks in a block
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-11-09 09:33:15 +00:00
Dan Fandrich
2afc689d5e [release-monitoring] Add links for more distros 2023-11-09 09:28:11 +00:00
Kevin Fenzi
fdf34aab57 nagios_server / noc02: set seboolean to allow certgetter to work
noc02 needs to be able to proxy to certgetter for the acme challenge for
ssl certs. So, set this there to allow that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 15:40:23 -08:00
Andrew Heath
ea4a9bcbb6 Create redirect for fedoraproject/cloud
Create a redirect for fedoraproject to point to new cloud image page
2023-11-08 23:31:28 +00:00
Andrew Heath
7260701e59 Remove unessary settings for Spunk Setup 2023-11-08 23:28:57 +00:00
Kevin Fenzi
ed45352045 robosignatory: sign stable iot with f39 key
Also drop 32bit arm signing info.

See https://pagure.io/releng/issue/11768

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 22:49:38 +00:00
Kevin Fenzi
21a3a4f6ff ipsilon: add SAML2 mapping for aws-openscanhub group
This adds a mapping for a aws-openscanhub group.
See https://pagure.io/fedora-infrastructure/issue/11384 for more info.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 22:16:53 +00:00
Kevin Fenzi
cbc8c70e75 koji_hub / koji_gc: fix key ids
The f36 key here was wrong and the f38 and 39 ones were swapped.
Also, fixed the cap in f40 key.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 14:13:34 -08:00
Kevin Fenzi
9e2b0cda9d openshift: validate when applying objects
Right now if there's a yml thats indented incorrectly, but parts of it
are fine, oc apply will apply those parts that are valid and just ignore
the rest. So, lets add a --validate=strict to have it reject these
entirely, so we know they have something wrong in them and we can fix
it, rather than being confused that they didn't apply anything.

Signed-off-by: Kevin Fenzi kevin@scrye.com
2023-11-08 14:11:02 -08:00
Kevin Fenzi
1f1624d5ac bodhi / backend / koji_sync: run on flatpak tags daily too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 13:22:25 -08:00
Kevin Fenzi
e859a68d95 bodhi / backend / koji sync: minor syntax fixes
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 13:12:35 -08:00
Yaakov Selkowitz
d60d7a0e50 Append -flatpak suffix to koji package name for flatpaks
At this point, all new flatpak requests should use the new flatpak
infrastructure, which still uses flatpaks/$NAME dist-git but
$NAME-flatpak koji "package".

Resolves: https://pagure.io/releng/issue/11626
Signed-off-by: Yaakov Selkowitz <yselkowi@redhat.com>
2023-11-08 20:50:07 +00:00
Mattia Verga
eda3e9e39c toddlers: enable check-commit-rights on stg
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2023-11-08 20:39:08 +00:00
Kevin Fenzi
2bcd7415d5 f39 is out, we are unfrozen
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 09:34:15 -08:00
Konrad Kleine
ab878dd91d copr-be: fix project regex for LLVM Snapshots high-performance builders
LLVM Snapshots are built fresh in daily new incubator projects such as `@fedora-llvm-team/llvm-snapshots-incubator-20231107` and the regex wouldn't match them before.

Now the regex works good with grep in the following scenarios:

```
$ echo "@fedora-llvm-team/llvm-snapshots/fedora-rawhide-x86_64/llvm" | grep -ioP '@fedora-llvm-team/llvm-snapshots[^/]*/.*x86_64/(llvm|clang)'
$ echo "@fedora-llvm-team/llvm-snapshots-incubator-20231107/fedora-rawhide-x86_64/llvm" | grep -ioP '@fedora-llvm-team/llvm-snapshots[^/]*/.*x86_64/(llvm|clang)'
```
2023-11-07 21:38:35 +00:00
Kevin Fenzi
1be44be6fd gnome-software: f39 is out, update gnome-software
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-07 06:18:39 -08:00
Kevin Fenzi
50c61979f0 Revert "zabbix: Add configuration for zabbix prod to haproxy"
This reverts commit d7b20fa114.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-07 06:16:29 -08:00
David Kirwan
89485e5a43
zabbix: add zabbix production configugration to apache
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-07 08:50:20 +00:00
David Kirwan
2692078d80
zabbix: apache configuration for production zabbix
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-07 08:40:16 +00:00
David Kirwan
d7b20fa114
zabbix: Add configuration for zabbix prod to haproxy
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2023-11-07 07:49:31 +00:00
Kevin Fenzi
c455c1b635 bodhi-backend01: add note about not upgrading to f39+ until epel7 is gone
See https://pagure.io/releng/issue/11664 for more info.
Basically createrepo_c in f39+ will not work for making epel7 updates,
so we need to wait until it goes EOL before upgrading here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-06 11:54:41 -08:00
Kevin Fenzi
aeea2c1d06 proxies / koji.fedoraproject.org: disallow robots on koji.fedoraproject.org
Turns out back in 2015 (in 623be6ff73) I added a robots.txt on the koji
hubs to disallow crawling, but since it's behind the proxies, no one
ever saw that robots.txt. Instead they got the default one that just had
a 'crawl-delay 1' in it.

So, lets tell robots to go away for real now, as they are causing load
problems on the koji database and I don't think it's particularly useful
for koji to be indexed. It's a lot of dynamic content anyhow.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-06 15:48:09 +00:00
Pavel Raiskup
b0ddd09187 copr-be: allow starting powerful builders in parallel
This is OK with Resalloc 5.1+:
https://github.com/praiskup/resalloc/releases/tag/v5.1
2023-11-06 16:07:10 +01:00
Nikita Dubrovskii
83ead7c929 fedora-coreos-pipeline: add Nikita Dubrovskii to appowners 2023-11-06 15:34:35 +01:00
Pavel Raiskup
eb7fe4b5ba copr-be: use powerful builders for 3 projects
Per requests:
https://github.com/fedora-copr/copr/issues/2985
https://github.com/fedora-copr/copr/issues/2986
https://github.com/fedora-copr/copr/issues/2987
2023-11-06 15:08:19 +01:00
Miroslav Suchý
8028e00aaf copr: drop numbers for ondemand builders in aws because we increased reserved ones 2023-11-06 15:02:20 +01:00
Miroslav Suchý
593cf6fba7 copr: allow to build src.rpm on aarch64 in aws too 2023-11-06 09:26:35 +01:00