Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
33515 commits 9 branches 0 tags 111 MiB
Commit graph

33515 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pierre-Yves Chibon
50ad0a15ee selinux/module: try saying which module is being installed 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:30:13 +01:00
Pierre-Yves Chibon
cb2a947479 pagure: fix path to the selinux policy file 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:59:32 +01:00
Pierre-Yves Chibon
be1c8bcb45 distgit: keep working on the http_policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:56:37 +01:00
Pierre-Yves Chibon
033c798d6e pagure: make use of the new selinux/module role to install/compile selinux policies 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:55:10 +01:00
Pierre-Yves Chibon
f3a1c52522 distgit: ad missing instruction in the http_policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:53:18 +01:00
Pierre-Yves Chibon
f580d72f24 distgit: add the missing headers in the http_policy policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:49:30 +01:00
Pierre-Yves Chibon
1df7a7c0d3 distgit: add a selinux tag 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:38:09 +01:00
Pierre-Yves Chibon
1ef758c408 distgit: install another custom selinux policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:35:33 +01:00
Pierre-Yves Chibon
a6a5686038 Add a role to compile, build and install custom selinux policies 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:33:54 +01:00
Aurélien Bompard
d58d1bd208
IPA: don't add the mod_wsgi role, let the installed set the options it wants 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-11-10 12:07:49 +01:00
Aurélien Bompard
6185f038b6
IPA: don't start httpd with systemd 
The httpd service should not be started with systemd, the ipa service will
start it. If systemd starts it, it will run before IPA is available and
KdcProxy will be disabled because it can't reach LDAP.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-11-10 11:40:54 +01:00
Pavel Raiskup
e0378b95ad copr-be-dev: new (elastic) IP 2020-11-10 10:53:42 +01:00
Pierre-Yves Chibon
cb018f088b distgit/pagure: fix debug calls, msg is not for variables 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-09 16:22:24 +01:00
Mark O'Brien
05354e763c osbs: update kickstart for stage aarch64 to f33 2020-11-09 10:21:19 +00:00
Pierre-Yves Chibon
e63f2d99ad pagure: use staging ipsilon in staging pagure 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-09 10:30:32 +01:00
Kevin Fenzi
2cfb7fb450 compose-rawhide: reinstall with f32 for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-07 09:56:57 -08:00
Kevin Fenzi
e971b75843 Fix ip for vmhost-x86-cc-rdu05.rdu-cc.fedoraproject.org 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-06 16:33:28 -08:00
Stephen Smoogen
8d7d4f5389 when trying to find out why something is failing.. remove the /dev/null so that you can see why it is failing. Also add wwoods so he can delight in this. 2020-11-06 10:15:17 -05:00
Stephen Smoogen
1096f9b35f try to get the cron output to see why this is failing. 2020-11-06 10:07:15 -05:00
Adam Williamson
813bbc4d2a openqa/server: allow group to write to factory dirs 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 17:16:28 -08:00
Adam Williamson
61251d0b11 More syntax...sigh 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 16:24:27 -08:00
Adam Williamson
d61631fbe7 More syntax fixin (I hope) 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 16:18:08 -08:00
Adam Williamson
a03b707b02 Try and correct metagroup syntax 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 16:15:55 -08:00
Adam Williamson
95f062c07a openQA: allow all workers NFS write access, other tweaks 
The main goal of these changes is to allow all workers in each
deployment NFS write access to the factory share. This is because
I want to try using os-autoinst's at-job-run-time decompression
of disk images instead of openQA's at-asset-download-time
decompression; it avoids some awkwardness with the asset file
name, and should also actually allow us to drop the decompression
code from openQA I think.

I also rejigged various other things at the same time as they
kinda logically go together. It's mostly cleanups and tweaks to
group variables. I tried to handle more things explicitly with
variables, as it's better for use of these plays outside of
Fedora infra.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 16:10:32 -08:00
Adam Williamson
35c65637ce openqa: drop fedmsg-related vars 
All obsolete now.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-11-05 16:10:32 -08:00
Kevin Fenzi
b0a3761288 greenwave: re-add fedora-eln, but in the no requirements sections 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-05 14:19:00 -08:00
Kevin Fenzi
7966976622 greenwave: no gating tests for eln 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-05 13:53:47 -08:00
Pierre-Yves Chibon
3f03400dac distgit: drop pagure related selinux config since it's now handled in the pagure role 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:27:27 +01:00
Pierre-Yves Chibon
a7e2a97fad distgit: drop selinux config from the distgit role as it is now in pagure role 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:24:18 +01:00
Pierre-Yves Chibon
85bbe256df distgit/pagure: add names to the tasks 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:19:42 +01:00
Pierre-Yves Chibon
3babdf5ff9 distgit/pagure: indentation fix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:06:43 +01:00
Pierre-Yves Chibon
9e50494ac9 distgit/pagure: add some debugging to understand why it mis-behaves 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:05:48 +01:00
Kevin Fenzi
f3bdbf3da5 openshift_apps / docstranslation: try mode using quotes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-05 08:01:08 -08:00
Pierre-Yves Chibon
0b3a2cc4a8 distgit/pagure: use symlink instead of complicated paths 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 15:58:58 +01:00
Pierre-Yves Chibon
618cbde6cc distgit/pagure: make the selinux files available to the distgit/pagure role 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 15:55:14 +01:00
Pierre-Yves Chibon
8890fb10a9 distgit/pagure: add missing '/' 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 15:50:20 +01:00
Pierre-Yves Chibon
77096060f6 distgit/pagure: Configure selinux in distgit just like on pagure.io 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 15:48:41 +01:00
Pierre-Yves Chibon
414a063625 Proxy-websites: create the testdays.fic.o 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 14:50:56 +01:00
Pierre-Yves Chibon
b1b0365f95 proxies: fix typo 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 14:48:26 +01:00
Pierre-Yves Chibon
439844863e Proxies: add a redirect from testdays.fic.o to testdays.fp.o 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 14:47:18 +01:00
Pierre-Yves Chibon
1390d242ef proxies: get testdays to redirect to openshift in stg and prod 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 13:56:44 +01:00
Pierre-Yves Chibon
48531f4b5b testdays: drop the route for resultsdb 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 13:47:44 +01:00
Pierre-Yves Chibon
e6969d8113 testdays: Prepare deploying to prod 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 13:39:20 +01:00
František Zatloukal
1c2b2aab36 Testdays: Prepare for production 2020-11-05 09:37:47 +01:00
Kevin Fenzi
66c94678e1 ipa: try and fix the popup auth window that comes up on windows 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-04 16:31:42 -08:00
Kevin Fenzi
bfc5675848 basessh: it's pagure02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-04 15:19:52 -08:00
Kevin Fenzi
9fba0f7ff4 basessh: revert new ed25519 key on pagure.io as well 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-04 15:17:09 -08:00
Kevin Fenzi
694727083a buildvm / fedora 33 / staging: try and switch armv7 vm's over to f33/uefi 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-04 14:51:09 -08:00
Kevin Fenzi
a010a6e23e builders / a64 / staging: don't make a 03 anymore as we need the space for osbs 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-04 14:31:22 -08:00
Kevin Fenzi
717ebb3386 buildvm / aarch64 / staging: move to fedora 33 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-11-04 14:30:18 -08:00