Commit graph

38957 commits

Author SHA1 Message Date
Lukas Holecek
a344eb1b5d resultsdb: Avoid sending taskotron-compatible messages
These are no longer needed and can no longer be published anyway.
2023-05-24 13:01:48 +00:00
Lukas Holecek
ff3609dd18 Remove inactive maintainers of gating services 2023-05-24 12:48:04 +00:00
Justin W. Flory (he/him)
f0c214489b badges(tahrir): Add admins (@riecatnor, @smeragoel, @sumantrom)
This commit adds three new admins to the Tahrir web app, AKA the front-
end for `badges.fp.o`. This satisfies a request from @sumantrom to get
more involved with the management of the Badges site. I also added
@riecatnor and @smeragoel proactively due to their role as Fedora Badges
designers and co-mentors with the two Outreachy interns coming on board.

Partially closes fedora-badges#877:

https://pagure.io/fedora-badges/issue/877

Signed-off-by: Justin W. Flory (he/him) <jwf@redhat.com>
2023-05-24 12:23:41 +00:00
Jakub Kadlcik
5d50343254 copr-backend: revert temporarily disabled tasks
See https://pagure.io/fedora-infrastructure/issue/11336

This reverts commit 3c00832230.
This reverts commit ccab97a1ca.
2023-05-24 13:06:34 +02:00
ee7d388632 [proxies] add redirect for silverblue
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2023-05-24 17:05:21 +10:00
3d32e12a1f [wiki] Remove old patched openIDConnect, and comment about new setup
We previously moved the FPCA check from a patched file held here in
ansible into the RPM itself when it was built for the Fedora infra
repos. While we no longer installed the patched file, it remained here
in the files dir of the wiki role, so we are deleting it.

Also, have added a comment to the play to say where we are holding this
patch now, so when i forget about it again, and come back to it in
another year or so, i can remember faster

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2023-05-24 16:45:41 +10:00
Pavel Raiskup
5adcfbbbd6 copr-be: decrease the nagios warning quota to 10%, attempt #2
10% is still ~2.4T of free space, ATM it looks like enough to not start
the panic mode.

Complements: 2ed4e90feb
Fixes: https://github.com/fedora-copr/copr/issues/2737
2023-05-24 07:53:01 +02:00
Jakub Kadlcik
3c00832230 copr-backend: temporarily don't copy copr-be.conf
See https://pagure.io/fedora-infrastructure/issue/11336
2023-05-23 22:38:54 +02:00
Jakub Kadlcik
ccab97a1ca copr-backend: temporarily comment max_workers tasks
See https://pagure.io/fedora-infrastructure/issue/11336

We need to temporarily comment the following few tasks. They fail
because the `python3-jmespath` on batcave is provided older python
version than we need.
2023-05-23 22:28:11 +02:00
Andrew Heath
9121258f52 reenable ansible nagios busgateway01 checks 2023-05-23 12:13:31 -04:00
Tomas Hrcka
ef818372a9 Move compose tracker containers to Fedora 38
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2023-05-23 15:24:53 +02:00
Aurélien Bompard
bf4f2c898a
Enable the fedora messaging callback plugin in ansible
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-05-23 10:28:49 +02:00
Aurélien Bompard
a83745764b
fedora messaging callback: fix severity level
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-05-23 10:24:57 +02:00
Aurélien Bompard
b3f77993c7
fedora messaging callback: fix buffering and message headers
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-05-23 10:20:35 +02:00
Aurélien Bompard
8c4b49cdcb
fedora messaging callback: don't open the temp file in binary mode
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-05-23 09:51:18 +02:00
Aurélien Bompard
9d89668ced
Adapt the fedora-messaging callback plugin to ansible's specific python
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-05-23 09:18:53 +02:00
Aurélien Bompard
bf24d014bd
Make the python3 fact module compatible with python2 for EL7 boxes
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-05-23 08:33:17 +02:00
Kevin Fenzi
ffbc4a001c base / smtp-auth: setup main.cf for smtp-auth host
This host needs to have it's own self signed certs and needs some more
config to allow the auth and allow authenticated users to relay.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-22 10:58:18 -07:00
Kevin Fenzi
30befc3ab9 inventory: no more ibms
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-22 10:29:27 -07:00
Kevin Fenzi
0111ccfe2d Retire old rdu2 space.
This space was in a networking cage thats going away and all the
machines there are old and out of warentee.
This space was intended for disaster recovery purposes.
For that now we have a internal vm that can access our mirrored netapp
storage, so we can sync anything off it we need to when iad2 is down.
I will be resetting up a batcave13 in another datacenter to allow us a
backup ansible/dns control host. bastion13/ns13/proxy13 will likely just
go away forever. download-rdu01 should be replaced by the new
download-cc-rdu01 once we have the new hardware in place for that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-22 10:09:34 -07:00
Kevin Fenzi
814fd550cd wiki / staging: some changes in config for the new wiki in staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-22 09:54:50 -07:00
Pavel Raiskup
2ed4e90feb copr-be: decrease the nagios warning quota to 10%
10% is still ~2.4T of free space, ATM it looks like enough to not start
the panic mode.

https://github.com/fedora-copr/copr/issues/2737
2023-05-22 15:35:40 +02:00
Michal Konečný
0f615454fc [coreos-cincinnati] service.yml is now a template
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-05-22 11:07:17 +02:00
Michal Konečný
77b1c76fa1 [coreos-cincinnati] config-stub is now a template
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-05-22 11:04:13 +02:00
Dusty Mabe
d0aac9493c openshift-apps: remove egress policy for coreos-cincinnati
This is effectively doing nothing since 3cd0849. Let's delete it for
now and add it back if we want it later.
2023-05-22 08:54:10 +00:00
Adam Williamson
b2f9aed70a Update greenwave gating policy for F36 EOL
Drop most fedora-36 entries, and don't require upgrade tests on
F37 any more as it is now the oldest stable.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-05-21 17:47:38 -07:00
Jakub Kadlcik
c6c7647c6b copr-frontend: add alias for showing the usage treemap 2023-05-21 23:34:33 +02:00
Kevin Fenzi
2ecf286302 osbs: move playbook to new ansible import syntax
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-20 08:46:24 -07:00
Seddik Alaoui Ismaili
6038999d66 fix proxy contitional reload typo 2023-05-19 23:24:18 +02:00
Dusty Mabe
8c729cc751
openshift-apps: add imagestream.yml for coreos-cincinnati
This was supposed to happen in 3ba43f2.
2023-05-19 16:27:56 -04:00
Dusty Mabe
3152c186a1 openshift-apps: fix yamllint on coreos/ostree files 2023-05-19 20:18:16 +00:00
Dusty Mabe
faede3940d openshift-apps: drop expired users from appowners for coreOS apps
Here are just a few that don't need access any longer.
2023-05-19 20:18:16 +00:00
Dusty Mabe
3ba43f2bd4 openshift-apps: overhaul coreos-cincinnati config
This commit makes the coreos-cincinnati setup look similar to the
other CoreOS/OSTree apps that we own. Notable changes:

- We are still building via commit, we only track a single commit
  and not a separate deploy/build one.
- We are now just outputting to a coreos-cincinnati-img:latest
  imagestream tag.
- We are now using a fedora:38 imagestream tag as the from: in our
  build and triggering new builds based on imagestream updates,
  which means we'll get security updates more regularly.
- A bunch of quoting (") in yaml files was removed as it clouded the
  diffs between this app and other apps.
- Some minor diffs between playbooks and other files were removed.
2023-05-19 20:18:16 +00:00
Dusty Mabe
fb4897d490 openshift-apps: move some coreos-cincinnati files around
As part of an effort to make coreos-cincinnati look like the rest
of the CoreOS Apps we'll move all files into the templates dir
(because even if they aren't templatized they still work there)
and rename `buildconfig-stub.yml` to `buildconfig.yml`.
2023-05-19 20:18:16 +00:00
Dusty Mabe
4546f35f28 openshift-apps: add comment to fedora-ostree-pruner playbook
We have this comment in our other coreos/ostree playbooks so
let's put it in here too.
2023-05-19 20:18:16 +00:00
Andrew Heath
9d3c107ef0 Disabling ansible check till we can troubleshoot 2023-05-19 20:07:41 +00:00
Andrew Heath
3600553301 removing nommer and fixing RPM sign 2023-05-19 20:07:41 +00:00
Justin W. Flory (he/him)
d9af67f81c fasjson: Enable flock-staff and flock-coc aliases again
With Flock around the corner, we need some email addresses for people to
reach the organizer team or for setting a reply-to alias for the new CFP
system we are introducing this year. All Flock aliases were disabled per
request of @mattdm in #10411 because of spam. It seems `flockinfo@` is
the problematic mail alias, so I took a conservative approach by only
enabling the `flock-staff@` and `flock-coc@` addresses.

I also added @shaunm to both aliases because he is also a part of the
core staff team for this year's Flock.

Signed-off-by: Justin W. Flory (he/him) <jwf@redhat.com>
2023-05-19 20:02:47 +00:00
Lukas Holecek
ebd579858d resultsdb: Fix logging setup
Newer ResultsDB releases use LOGGING dict to set up logging.

The old options were removed completely since these were defaults for a
long time anyway.
2023-05-19 19:58:35 +00:00
Dusty Mabe
c1d7d8df6c openshift-apps: awaken the pruner
Let's try this again now that the OSTree fixes for
https://github.com/ostreedev/ostree/pull/2808 are in.

This reverts commit 3354d0b821.
2023-05-19 17:53:25 +00:00
Dusty Mabe
43c8c8bc9b openshift-apps: trigger new builds on image stream change for coreos/ostree projects
That's the whole reason we have the ImageStream.
2023-05-19 17:53:25 +00:00
Dusty Mabe
d568c0f4f6 openshift/apps: switch coreos/ostree projects to use Fedora 38 2023-05-19 17:53:25 +00:00
Kevin Fenzi
3211ff358e vhost_reboot: update import_playbook calls to new syntax
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-19 09:53:27 -07:00
Lukas Holecek
90ce359a71 resultsdb: Auto-deploy when new image is available 2023-05-19 09:03:59 +00:00
Michal Konečný
fca44a415d [ODCS] Fix the syntax
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-05-19 10:16:06 +02:00
Lubomír Sedlář
5c2c077ba8 Set up logrotate for odcs-backend
The logrotate config file exists in the repository, but it doesn't get
installed. Let's fix it.
2023-05-19 08:06:27 +00:00
Kevin Fenzi
f5a2adf4db smtp-auth: use correct external ips
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-18 14:42:06 -07:00
Kevin Fenzi
ddfd50de03 smtp-auth-cc-rdu01: create new smtp auth relay
We need this to try and relay in emails.
It turns out to be bordering on impossible to do this sanely with our
current setup, so make a fedora vm that lets us use saslauthdb to have a
specific (small) list of users that can authenticate and relay emails
via bastion and out. We can't do this on rhel, because they don't build
the saslauthdb backend. We can't use any of the other backends because
they either don't work or would allow any fedora user to relay, which we
do not want.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-18 14:35:49 -07:00
Andrew Heath
dd5a282c7c adding hosts folder as well to the PR 2023-05-18 16:29:58 -04:00
Andrew Heath
a961a5ed7d updating playbooks to work with ansible 2.14 2023-05-18 15:28:34 -04:00