Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
38908 commits 9 branches 0 tags 111 MiB
Commit graph

38908 commits

This branch
This branch
All branches
Author SHA1 Message Date
Aurélien Bompard
b12bd43e1c
Fix file location 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-04 19:25:13 +02:00
Aurélien Bompard
de71ca0ba9
Be reasonable 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-04 19:22:30 +02:00
Aurélien Bompard
84812de473
Add the Easyfix rewrite for testing in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-04 19:21:03 +02:00
Adam Williamson
8231a4d4f9 greenwave: update Rawhide policy for 'universal' changes 
We're moving most tests out of universal and into Server-dvd-iso.
See os-autoinst-distri-fedora and fedora_openqa commits for more
details on this.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-05-04 09:54:48 -07:00
Michal Konečný
a341822174 Revert all the bodhi shared pungi config commits 
It seems that there are still some problems, although the composes are finished,
the sanity checks are failing. For more info see https://pagure.io/fedora-infrastructure/issue/10779

This reverts commit 73cd22d012.
This reverts commit be634e0ec3.
This reverts commit 2b01f82163.
 2023-05-04 18:17:51 +02:00
Michal Konečný
73cd22d012 [bodhi-backend] Move pungi general conf back to files 
It seems that the change in Bodhi we did (see
https://github.com/fedora-infra/bodhi/pull/5154) can't work with templates.
Let's move the template parts back to corresponding configuration files.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2023-05-04 15:33:58 +02:00
Michal Konečný
be634e0ec3 [bodhi-backend] Import the correct pungi general configuration 
I forgot to update imports when I renamed the file during migration to
templates. This caused the non-template file to be imported instead, which was
the reason of the error.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2023-05-04 09:35:14 +00:00
Michal Konečný
2b01f82163 Revert "bodhi-backend: revert all the template stuff again" 
This reverts commit fdcceefacb.
 2023-05-04 09:35:14 +00:00
Patrik Polakovič
8dc4de4df7 SIG policy cron job 
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
 2023-05-04 09:18:32 +00:00
Seddik Alaoui Ismaili
a1e6a14e17 log forward to splunk 2023-05-04 09:03:57 +00:00
Kevin Fenzi
fdcceefacb bodhi-backend: revert all the template stuff again 
Still not working. ;(

So, next time we think we have this, we should push it out and make sure
to push one updates-testing or something to actually make sure it works!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-03 18:46:26 -07:00
Major Hayden
2b65f34972 fedimg: Use gp3 for volume type on EC2 
* Remove standard volume type per FESCo #2985
* Switch gp2 to the new gp3 volume type per FESCo #2974

https://pagure.io/fesco/issue/2985
https://pagure.io/fesco/issue/2974

Signed-off-by: Major Hayden <major@redhat.com>
 2023-05-03 23:33:24 +00:00
Kevin Fenzi
65bf3bb3ec certgetter01: move to f38 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-03 15:08:31 -07:00
Kevin Fenzi
c9939c28da koji/builders / staging: move to f38 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-03 14:59:50 -07:00
Patrik Polakovič
7714377692 Add cron job to enact FESCo SIG Policy 
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
 2023-05-03 13:11:27 +00:00
Frank Ch. Eigler
76c3a5d8c1 debuginfod: add ansible notify/handler to restart if needed 
Respond to config file changes.

Signed-off-by: Frank Ch. Eigler <fche@redhat.com>
 2023-05-03 13:03:51 +00:00
Francois Andrieu
87f66a8ef6 websites: cleaning getfedora.org deployment files 2023-05-03 13:00:52 +00:00
Michal Konečný
5050530f94 [bodhi-backend] Fix typo in the name of template 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2023-05-03 14:28:29 +02:00
Michal Konečný
947f6df4b2 [bodhi-backend] Move pungi_general.conf to templates 
There are some values that need to be filled in the pungi_general.conf. Let's move it
to templates, so it could be processed as every other template.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2023-05-03 12:17:48 +00:00
Michal Konečný
cc817e6c59 Revert "Revert "[bodhi-backend] Add shared pungi config"" 
This reverts commit 0776114dc6.
 2023-05-03 12:17:48 +00:00
Ryan Lerch
e3969b828e [transtats] move USE_X_FORWARDED_HOST envvar to deployconfig 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2023-05-03 20:36:02 +10:00
Ryan Lerch
7a871eddd8 [transtats] set proper apiVersion in deployment config 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2023-05-03 20:29:16 +10:00
Ryan Lerch
030384eb71 [transtats] fix api version in deployment config 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2023-05-03 20:27:20 +10:00
Ryan Lerch
cd1b9149b9 [transtats] try setting SECURE_PROXY_SSL_HEADER as an env 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2023-05-03 20:25:10 +10:00
Ryan Lerch
02fbf0ae50 update transtats buildconfig 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2023-05-03 18:57:06 +10:00
Ryan Lerch
a539bf9229 make transtats openshift use os_control not os_master 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2023-05-03 18:17:00 +10:00
Aurélien Bompard
b57f90327c
Set the max priority for the robosig queue 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-03 09:26:40 +02:00
Ryan Lerch
f6b49b93b0 [transtats] Add USE_X_FORWARDED_HOST == true 
https://pagure.io/fedora-infrastructure/issue/11207

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2023-05-03 14:00:13 +10:00
Ryan Lerch
2c2362f4ae Try to fix the fedora.gpg redirect 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2023-05-03 12:30:02 +10:00
Kevin Fenzi
99bc906ec1 debuginfod: match up os versions with current deployments 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-02 16:32:51 -07:00
Kevin Fenzi
76f76aed9d debuginfod: increase disk size +500G 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-02 16:31:08 -07:00
Kevin Fenzi
ed517546c8 ipsilon: move prod instances to f38 also 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-02 16:15:34 -07:00
Kevin Fenzi
fc4cf7c5f3 compose-iot: move to f38 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-02 15:06:18 -07:00
Adam Williamson
e526ab4120 Use 2023-04 update builds on openqa prod and stg 
The update isn't in u-t yet (waiting for push) so I'm using the
builds, but this has been in testing on stg for a week and it
seems fine.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-05-02 11:13:00 -07:00
Ryan Lerch
f20d4d1668 Add redirect for fedora.gpg 
add redirect from https://getfedora.org/static/fedora.gpg to https://fedoraproject.org/fedora.gpg

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2023-05-02 16:25:14 +10:00
Frank Ch. Eigler
ec30610816 debuginfod: n00b ansible yaml structure fixes 2023-05-01 21:42:30 -04:00
Frank Ch. Eigler
358f8efece debuginfod: yamllint compliance 2023-05-01 21:13:27 -04:00
Frank Ch. Eigler
3b73ff3ac4 debuginfod: add tags to our tasks for focused ansible runs 2023-05-01 20:56:54 -04:00
Frank Ch. Eigler
152c7f3d99 debuginfod: drop f33 & f34 from index, prepare for f40+ 
Tweak the -I/-X regex.
 2023-05-02 00:20:27 +00:00
Kevin Fenzi
08a4169fbf move some stg machines from f36->f38 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-01 17:09:49 -07:00
Kevin Fenzi
88b2bfcacc registry-index: just disable reg runs for now. 
reg runs and gathers information from the container registry to make a
'pretty' web page at https://registry.fedoraproject.org. However, this
page is pretty useless and really only needs to update after branching
(if then). We may look at redirecting this to a static websites page
that has information on our containers at some point.

In the mean time reg sometimes creates a empty file that syncs out and
causes alerts. So, lets just completely disable it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-01 09:11:45 -07:00
Kevin Fenzi
820284cff8 pkgs / git-hooks: try and use the batcave certs for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-01 08:44:35 -07:00
Kevin Fenzi
b4e9ddf989 pkgs: install correct git-hook certs 
Install the 'git-hooks' cert for use with git commits and package
uploads on pkgs. Before this we were... just not installing those
anymore and they had expired.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-05-01 08:23:37 -07:00
Kevin Fenzi
a4188fc00e download-ib01: fix networking variable names 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-04-30 11:19:56 -07:00
Kevin Fenzi
10155c377d download-ib01: repave with rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-04-30 11:17:14 -07:00
Kevin Fenzi
0776114dc6 Revert "Revert "Revert "[bodhi-backend] Add shared pungi config""" 
This reverts commit bf345042d2.

This is breaking all updates composes.
pungi.compose.status.change -- pungi-koji compose of [[ release.id_prefix.title() ]]-7-updates-20230429.0 started https://kojipkgs.fedoraproject.org/compose/updates/[[ release.id_prefix.title() ]]-7-updates-20230429.0

somehow it's not expanding right so reverting it.
 2023-04-28 18:13:12 -07:00
Kevin Fenzi
f5ca8fcfbf koji: add scm plugin 
Add a scm plugin and some policy for it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-04-28 10:24:20 -07:00
Kevin Fenzi
9a664eadb5 robosignatory: fix key for f38-infra 
This should be the infra key, not the normal f38 one.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-04-28 09:29:38 -07:00
Michal Konečný
333cf52dbe [bodhi-backend] Update pungi_multilib.conf 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2023-04-28 07:23:48 +00:00
Michal Konečný
bf345042d2 Revert "Revert "[bodhi-backend] Add shared pungi config"" 
This reverts commit 36c251017e.
 2023-04-28 07:23:48 +00:00