Commit graph

21427 commits

Author SHA1 Message Date
Patrick Uiterwijk
a4f04d53f9 -t nat not needed
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-02-08 15:32:55 +00:00
Patrick Uiterwijk
40fbf2d575 Do not remove all whitespace
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-02-08 15:31:24 +00:00
Patrick Uiterwijk
d5ce7a014e Add nat-rules
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-02-08 15:30:13 +00:00
František Zatloukal
ace5dbaa17 Taskotron: Properly fix imagefactory service
Workaround for https://github.com/redhat-imaging/imagefactory/issues/417
2018-02-08 16:23:50 +01:00
Patrick Uiterwijk
da39a96667 Temporarily override cpu model for virtinstall
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-02-08 15:22:04 +00:00
Patrick Uiterwijk
7a058ec0ba Fix up pagure-proxy01 gateway
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-02-08 15:00:55 +00:00
Patrick Uiterwijk
1af277590e Virt-install the correct box
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-02-08 14:54:37 +00:00
Patrick Uiterwijk
a5a51cadc5 Add playbook for pagure-proxy
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-02-08 14:53:09 +00:00
Patrick Uiterwijk
557f79da69 Add basis for pagure-proxy01
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-02-08 14:51:43 +00:00
František Zatloukal
c1ab76cef4 Taskotron: patch imagefactoryd service file so it can be enabled on boot 2018-02-08 13:57:19 +01:00
Mikolaj Izdebski
833d9e9bab Increase memory and disk size on Koschei web prod 2018-02-08 12:41:41 +00:00
Michael Simacek
9397a3579f Disable koschei logging mail handler 2018-02-08 13:22:52 +01:00
Mikolaj Izdebski
da2e9766d7 Make Koschei backend auth to Koji using GSSAPI 2018-02-08 12:01:09 +00:00
Mikolaj Izdebski
0eec23dcd8 Switch Koschei web auth to OpenIDC 2018-02-08 11:58:00 +00:00
Mikolaj Izdebski
d5db6392b4 Reinstall Koschei on Fedora 27 2018-02-08 11:57:38 +00:00
Mikolaj Izdebski
cc6ca2352a Switch SELinux on Koschei back to enforcing
Hopefully SELinux bug workaround shouldn't be needed any longer.
2018-02-08 11:56:42 +00:00
Patrick Uiterwijk
e4baec55e4 Blacklist username 'pagure'
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-02-08 00:34:02 +01:00
Stephen Smoogen
b2d8343b3f and the rhn files need to be added someday 2018-02-07 19:41:36 +00:00
Patrick Uiterwijk
b9b720043b Mark the username 'git' as blacklisted
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-02-07 20:12:22 +01:00
Patrick Uiterwijk
de9af8deda Add src.fp.o OIDC push OIDC scope
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-02-07 19:48:49 +01:00
3c27e5a250 GNOME Backups: live.g.o has been decomm and replaced by wiki.g.o 2018-02-07 14:31:49 +00:00
Miroslav Suchý
a554ac30fe retrace: update faf role 2018-02-07 14:31:53 +01:00
Miroslav Suchý
2a890f180b add retrace02.qa.fedoraproject.org host vars 2018-02-07 14:00:43 +01:00
Miroslav Suchý
138c94c891 do not sync f25 on retrace 2018-02-07 13:43:38 +01:00
Till Maas
8f7acb0dde Increase HSTS max age to one year
The HSTS preload list requires this now: https://hstspreload.org/
2018-02-07 12:42:36 +01:00
Qixiang Wan
7edc8430dc freshmaker: fix openidc userinfo uri in template 2018-02-07 12:52:25 +08:00
Qixiang Wan
808daa5377 freshmaker: create kerberos keytab on backend nodes 2018-02-07 12:14:28 +08:00
Kevin Fenzi
c8e5316fb7 adjust more 2018-02-07 01:32:17 +00:00
Kevin Fenzi
8a0c1f266f and setup check on mailman01 nrpe side 2018-02-07 01:24:52 +00:00
Kevin Fenzi
326c39d1b0 perhaps this? 2018-02-07 01:06:04 +00:00
Kevin Fenzi
dec23cd1bc try this 2018-02-07 00:31:15 +00:00
Kevin Fenzi
407efad1f7 and put it in the right place 2018-02-06 23:55:01 +00:00
Kevin Fenzi
68a56482fa need to add new file to the loop to actually install 2018-02-06 23:47:26 +00:00
Patrick Uiterwijk
4a6402394a Make releng-team able to use releng keytab
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-02-06 23:17:17 +00:00
Kevin Fenzi
3cea53b5b5 perhaps this needs quoted 2018-02-06 23:16:37 +00:00
Kevin Fenzi
1cb897a769 Clean up nagios client for old stuff that no longer matters.
Add a mailman api check. It gets a 401 now, but at least that tells us it's working.
2018-02-06 23:12:14 +00:00
Stephen Smoogen
4d411ec36d you must have a ; at the end of every line stupid 2018-02-06 19:30:26 +00:00
Stephen Smoogen
619dd465e4 and we try to make this work for the 10.5.129 2018-02-06 18:41:57 +00:00
Stephen Smoogen
ef09bafb79 oh did you remember the mac address? 2018-02-06 18:16:29 +00:00
Stephen Smoogen
81c5978890 try to make awstats file a bit more resilient 2018-02-06 16:42:36 +00:00
7adc884a8e running backups for prod resultsdb db would be a good thing 2018-02-06 13:37:05 +00:00
c5f1b83e49 GNOME Backups: puppet 2.0 has been decommissioned, new master FQDN is puppetmaster01.gnome.org 2018-02-06 10:17:22 +00:00
Patrick Uiterwijk
a9fe75e330 Instead of mailing, log to syslog
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-02-06 01:32:29 +01:00
Kevin Fenzi
d70b3eb3b4 move to f27 mirrorlist container, will roll out slowly 2018-02-05 19:25:20 +00:00
Patrick Uiterwijk
321ad82c19 Unblock pkgs and do redirect instead
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-02-05 13:17:54 +00:00
f220d38189 GNOME Backups: s/bugzilla-new/bugzilla/ 2018-02-05 11:06:30 +00:00
František Zatloukal
5de10318d3 Taskotron: Enable task python-versions on dev
Ansiblized version of python-versions is ready!
2018-02-05 10:35:47 +01:00
Stephen Smoogen
b93bd375fb ok let us try to cut down http access ot the server from whatever backdoor is letting it in 2018-02-02 23:21:46 +00:00
Ralph Bean
a907fb6d56 Use wsgi_procs and wsgi_threads for freshmaker apache config. 2018-02-02 17:18:57 +00:00
Ralph Bean
b2655e43b0 Freshmaker config should be owned by the fedmsg user. 2018-02-02 17:17:02 +00:00