Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
36775 commits 9 branches 0 tags 111 MiB
Commit graph

36775 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pavel Raiskup
ff19cce762 copr-builders: (un)subscribe to access.redhat.com 2022-01-05 17:53:11 +01:00
Pavel Raiskup
1fdf2df492 copr-builder: setup the hostname to self-identify 2022-01-05 15:41:14 +01:00
Pavel Raiskup
408a990a24 base: try s/dnf/package/ module 
TASK [base : Ensure iptables is installed] ************************************
Wednesday 05 January 2022  10:49:01 +0000 (0:00:00.251)       0:01:17.816 *****
Wednesday 05 January 2022  10:49:01 +0000 (0:00:00.251)       0:01:17.815 *****
fatal: [noc02.fedoraproject.org]: FAILED! => {"changed": false, "cmd":
"dnf install -y python2-dnf", "msg": "[Errno 2] No such file or directory", "rc": 2}
 2022-01-05 13:03:37 +01:00
Silvie Chlupova
28779a0d0f copr: add missing shebang 2022-01-05 11:15:02 +01:00
Silvie Chlupova
94133e764f copr-fe: unblock copr-fe playbook, missing quotes 2022-01-05 10:56:31 +01:00
Pavel Raiskup
744523bee4 copr-fe: unblock copr-fe playbook 
We will have a new variable copr_uptimerobot_api_key_ro soon:
https://pagure.io/fedora-infrastructure/issue/10456
 2022-01-05 10:09:06 +01:00
Pavel Raiskup
1e5cc169b4 copr-builders: install subscription-manager 
We will need this to build epel-8+ chroots against RHEL + EPEL.
 2022-01-05 10:06:06 +01:00
Silvie Chlupova
20132910f3 copr: rename api key variable for getting info about Copr's CDN 2022-01-05 09:57:15 +01:00
Pavel Raiskup
0f860645e7 copr-builders: cleanup old work-around(s) 2022-01-04 17:32:45 +01:00
Silvie Chlupova
b9fa39f0c8 copr: nagios check for Copr's CDN 
Relates: https://pagure.io/fedora-infrastructure/issue/10456
 2022-01-04 15:28:24 +01:00
Mark O Brien
eb2dac57e1 proxies: use correct tag for staging certificate 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-12-22 13:03:14 +00:00
Mark O Brien
148f8307d7 base: ensure iptables is installed 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-12-21 17:06:32 +00:00
Mark O Brien
de2279d2cb yumrepos: don't add el9 infra-tags repo for now 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-12-21 16:51:41 +00:00
Mark O Brien
0230c3f85d yumrepos: skip epel9-infra for now 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-12-21 16:42:42 +00:00
Pavel Raiskup
e064459b1a copr-be: distribute epel-9* configs 
For now, this is centos-stream+epel-9 symlink, but once it is possible
we will move to rhel+epel-9.
 2021-12-21 12:04:43 +01:00
Pavel Raiskup
aa86ff63ae copr-be: arg, copy requires 'dest:', not 'path:' 2021-12-21 10:49:22 +01:00
Pavel Raiskup
3d32fa4519 copr-be: copr-ping: missing copy arguments 2021-12-21 10:47:45 +01:00
Pavel Raiskup
dcc3ffa07a copr-be: add missing copr_ping tag 2021-12-21 10:46:09 +01:00
Pavel Raiskup
589e889d88 copr-be: intialize copr-ping API token from private.git 
Relates: https://pagure.io/fedora-infrastructure/issue/10392
 2021-12-21 10:45:17 +01:00
Pavel Raiskup
29c586cf99 Use centos+epel-8 for epel-8 
We want to move to mock-core-configs-36.4 (pushing to infra 34 repos)
because the version contains multiple config fixes.

That version though dropped epel-8 configs as they go soon EOL.  We plan
to move to rhel+epel, but thad needs more work and testing - so for now
default to centos+epel again (CentOS 8 goes EOL in Jan 2022).
 2021-12-21 10:35:45 +01:00
Mark O Brien
d8173062ad update ip for el9-test 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-12-20 16:51:04 +00:00
Mark O Brien
5ff6922918 add centos username for el9-test 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-12-20 15:44:00 +00:00
Mark O Brien
03992f783d add el9-test to inventory 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-12-20 15:26:12 +00:00
Mark O Brien
95ab8656c0 add el9-test to inventory 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-12-20 15:26:03 +00:00
Mark O Brien
57fa4c40bc add vpn info for el9-test 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-12-20 15:23:05 +00:00
Mark O Brien
fc59db5059 allow el9-test ip for batcave 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2021-12-20 15:11:02 +00:00
Kevin Fenzi
70b94e3398 buildvm-s390x-07: make this z/vm host a cache 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-19 08:54:02 -08:00
Pavel Raiskup
4211300b3b copr-be: configure CentOS DistGit instance 
Temporarily, this should go to copr-distgit-client in the future:
https://pagure.io/copr/copr/issue/2015
 2021-12-17 13:04:38 +01:00
Mikolaj Izdebski
355d0ae743 Koschei: more aggressive DB cleanup in staging 2021-12-17 12:34:46 +01:00
Adam Williamson
3dec01a15a openqa/server: set httpd_can_network_connect boolean again :( 
Seems there's one more port that needs to be tagged before we
can finally unset this:
https://bugzilla.redhat.com/show_bug.cgi?id=1277312#c9

Keep the custom policy as well, though, so we just need to
update it when that port gets done.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-12-14 16:33:19 -08:00
Adam Williamson
2320eef5ee openqa/worker: create custom SELinux module directory first 
Whoops. Also order these things a bit better.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-12-14 15:54:38 -08:00
Adam Williamson
edc4caa833 openqa/server: use custom SELinux policy instead of boolean 
We've been using the httpd_can_network_connect boolean for years
to allow httpd to connect to the openQA server processes. This
is an unnecessarily large hammer when we only need it to be
able to connect to exactly the two openQA ports. This uses a
custom SELinux policy to allow connecting to those ports only,
and ensures the boolean is set back to off.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-12-14 15:48:34 -08:00
Adam Williamson
67eb9bb288 openqa/server: clean up and trim package requirements 
Several of these requirements are old ones that were only needed
for createhdds, when we ran createhdds on the servers. All of
those can go. Also make the list line-by-line for easier git
blame tracking in future (and add comments for the remaining
entries so we know why they're there).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-12-14 14:43:29 -08:00
Pavel Raiskup
ac3a331eeb copr-be: disable auto_packing 
https://docs.pagure.org/copr.copr/rpkg_util_2_vs_3.html
https://lists.fedoraproject.org/archives/list/copr-devel@lists.fedorahosted.org/thread/3JORYRKDWFMJSR35Z4LIKDEXH2T5263H/
 2021-12-14 16:16:26 +01:00
Michal Konečný
4b8e7671f5 [release-monitoring] Remove Yahoo authentication backend 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2021-12-14 13:44:09 +01:00
Michal Konečný
9f05832fa1 [release-monitoring] Fix static path on staging 
The current static path referenced python3.8 in path, which is no longer
true on newer Fedora, so we need to have special rule for staging till
the production will be updated.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2021-12-14 13:28:19 +01:00
Pavel Raiskup
53a79c70d1 copr-be-dev: experiment with optimal pipe reader 2021-12-12 12:49:27 +01:00
Kevin Fenzi
b3f80c5558 noggin: switch email to bastion02 to try and avoid large queue on bastion01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-11 16:58:40 -08:00
Kevin Fenzi
ea108af80d buildvm-x86: one too many 5s 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-11 11:58:19 -08:00
Kevin Fenzi
ba23745ab8 buildvm-x86: set eth0_ipv4_nm 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-11 11:41:59 -08:00
Kevin Fenzi
14f1896637 buildvm-x86: set eth0_ipv4_gw 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-11 11:40:22 -08:00
Kevin Fenzi
36b0cf4668 buildvm-x86: move to f35 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-11 11:37:00 -08:00
Kevin Fenzi
1c07264c84 buildvm-x86: adjust eth0_ip to eth0_ipv4 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-11 11:36:10 -08:00
Kevin Fenzi
8f999d60af noggin: add additional domain we do not want to allow accounts from 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-11 09:34:56 -08:00
Mohan Boddu
7ec9166e80 Sync CS9 shipped content rather than its buildroot content 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-12-10 20:51:51 +00:00
Kevin Fenzi
9136938987 proxies / certificates: also tag getfedora.org cert 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-10 11:43:15 -08:00
Kevin Fenzi
f3d4f5459a buildvm-s390x-01.stg: drop the kvm version of this, use the existing Z/VM one 
Turns out there was a z/vm and a kvm version of this host with both of
them using the same ip address. ;( Lets kill off the kvm one for now and
use just the z/vm one.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-10 11:39:54 -08:00
Kevin Fenzi
fe725ba603 proxies / websites: tag getfedora.org website 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-12-10 11:39:16 -08:00
Pavel Raiskup
8c2d55d72d copr-be: better task name for lighttpd config 2021-12-10 19:10:01 +01:00
Francois Andrieu
519c10809e websites: missing configmap for updatepot cronjob 2021-12-10 18:06:29 +00:00