Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
42877 commits 9 branches 0 tags 111 MiB
Commit graph

42877 commits

This branch
This branch
All branches
Author SHA1 Message Date
James Antill
6af1918415 Conditionalize osbuild*.cron based on osbuild in group_names. 
Signed-off-by: James Antill <james@and.org>
 2025-04-11 00:33:11 +00:00
James Antill
50d04f6e95 Remove nftables cron and disable service, when using iptables (for backout). 
Signed-off-by: James Antill <james@and.org>
 2025-04-11 00:33:11 +00:00
James Antill
af90bbb6c5 Nice error for osbuildapi-update-nft.sh and comment explaining issues. 
Signed-off-by: James Antill <james@and.org>
 2025-04-11 00:29:23 +00:00
Aurélien Bompard
b9553f3378
Use the manually combined RabbitMQ CA, it's much easier 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-04-10 12:25:52 +02:00
Aurélien Bompard
475838940a
Use lookup instead of assemble for the RabbitMQ CA 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-04-10 12:16:51 +02:00
Aurélien Bompard
4c52d4603b
Deploy the new RabbitMQ CA in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-04-10 11:44:50 +02:00
Lukas Holecek
648bba0dfb resultsdb-frontend: Make logs more verbose and include user-agents 
This is the same change as for resultsdb before.
 2025-04-10 08:20:22 +02:00
Lukas Holecek
b7c82cbb47 resultsdb: Update probes 
Adds startupProbe and longer probing intervals for backend and frontend.
 2025-04-09 10:13:41 +00:00
Joel Capitao
3322ae0888 fedora-coreos-pipeline: add Joel Capitao (jcapiitao) 2025-04-08 17:09:05 +00:00
Tiago Bueno
a0bdc9b9ab Add new team member to fcos-pipeline 
Signed-off-by: Tiago Bueno <49003339+tlbueno@users.noreply.github.com>
 2025-04-08 17:07:28 +00:00
Adam Piasecki
5f0fcd4a79 playbooks/fedora-ostree-pruner.yml: Add apiaseck to appowners 
As I'm working on moving fedora-ostree-pruner to k8s deployment
I'm blocked by Zuul due to lack of permissions.

See: https://pagure.io/fedora-infra/ansible/pull-request/2331
 2025-04-08 16:58:36 +01:00
Gregory Bartholomew
524a4c901e websites: add multilingual support to the error document handling 
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
 2025-04-07 22:03:34 +00:00
Josef Skladanka
9f04ee6386 Testdays - mount secret volume 2025-04-07 12:12:21 +02:00
Josef Skladanka
2351b7a46f Testdays - mount secret volume 2025-04-07 12:07:19 +02:00
Josef Skladanka
d42c254ee4 Testdays - envvars 2025-04-07 12:00:08 +02:00
Josef Skladanka
b6a6aa5821 Testdays - try OIDC 2025-04-07 11:52:26 +02:00
Greg Sutcliffe
f5475063e6 Zabbix-stg: disable user-management until we can upgrade to 3.3.0 2025-04-04 16:31:47 +01:00
Lenka Segura
a39db46926 poddlers: Add IPA config changes 
Signed-off-by: Lenka Segura <lsegura@redhat.com>
 2025-04-04 14:46:52 +02:00
Greg Sutcliffe
655f2dc58f Zabbix-stg: minor fixes to API config 2025-04-04 12:25:57 +00:00
Carl George
9e8f4dcf6a mirrormanager: use epel-z prefixes for minor version EPEL repos 
https://pagure.io/epel/issue/324

Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-04-03 14:29:31 -05:00
Carl George
a15e378443 bodhi_backend: publish EPEL 10.1 to 10.1 paths 
https://pagure.io/epel/issue/324

Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-04-03 14:29:31 -05:00
Ryan Lerch
654260ceff [pagure stg] disable new projects from being created 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-04-03 18:50:47 +10:00
Miroslav Suchý
26666dbf8f bump up number of reserved instances 2025-04-03 10:19:06 +02:00
Greg Sutcliffe
7f60fdf690 Zabbix-stg: More base server config 
This adds:
- Matrix media type
- User for a Matrix bot
- Trigger using Matrix & the bot
- PSK configuration, using the PSK file already deployed
- 2 base templates
  - a general one suitable even for Koji
  - a dependant one for all other hosts
- Autoregistration config to use the new base template

This is all scoped to staging via a new include in main.yml
 2025-04-02 17:30:59 +01:00
David Kirwan
01a5c40b69
Forgejo: disable postgresql ha chart, add variable for crunchydata operator 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-04-02 14:35:28 +01:00
David Kirwan
71d3f4079f
forgejo: Create postgresql operator config and secret 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-04-02 07:58:27 +01:00
Kevin Fenzi
8bb7198a25 F42 Final Freeze now in effect 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-04-01 14:00:43 -07:00
Kevin Fenzi
5a44707cf4 koji_builder: install linux-firmware, not kernel-firmware 
kernel-firmware is the old provide and it's no longer provided by newer
versions of linux-firmware. This is causing our builders to downgrade to
an older linux-firmware, then dnf-automatic just updates it the next
time to the newer one (because it's a security update).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-04-01 13:54:51 -07:00
Samyak Jain
4caaa7c181 F42 final freeze is under process! 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-04-01 16:07:22 +00:00
Kevin Fenzi
ee5d2b3a57 poddlers: add jnsamyak for releng work in poddlers 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-04-01 08:43:01 -07:00
Aurélien Bompard
358e1d2b5d
Let the jobs-summary script take multiple projects as arguments 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-04-01 15:27:46 +02:00
Aurélien Bompard
46a8152c61
Deploy journal2fedmsg to prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-04-01 12:05:17 +02:00
Aurélien Bompard
394b92cb19
simplify the config file using a variable 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-04-01 11:47:42 +02:00
Pavel Raiskup
5a85ca9211 copr: pulp_content_url needs to be slash-terminated 2025-04-01 07:49:20 +02:00
Adam Williamson
a23c9df05a Make ipsilon static config file public (staging), clean it up 
The only secrets in this file, AFAIK, are the client secrets.
Most of those are already defined as secret variables for the
plays in this repo that deploy the services to use.

So instead of duplicating most of the secrets, and keeping this
file in the private repo where we can't do PRs and editing it is
awkward, let's just make all the client secrets be variables,
and make this file public.

For all the cases where a secret wasn't already defined as a
variable, I've added it, so this should work as-is.

Note that the use of `flask_oidc_dev_stg_oidc_client_secret`
twice is not an error in this PR; that secret was reused for
the staging community blog client config. I have reported this
at https://pagure.io/fedora-infrastructure/issue/12161#comment-963303 .

This also removes the client configurations for several services
which no longer exist.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-03-31 23:07:01 +00:00
Kevin Fenzi
8d65c9687c global: swap out atop for btop 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-31 10:45:06 -07:00
Michal Konecny
80adc4e729 [ipa/server] Don't ask for user input 
As the pause module is only executed on first machine in the group I
decided to rather remove it completely.

This means that the replica will only be reinstalled, if the machine
isn't master node and the /var/log/ipainstall.log doesn't exist.

If somebody wants to re-install the replica they just need to remove
/var/log/ipainstall.log and the playbook will do the rest.
 2025-03-31 15:44:16 +02:00
Michal Konecny
40136bda42 [ipa/server] Don't ask for reinstall in some cases 
Don't ask for reinstall when this is master node or the install log is
already created.
 2025-03-31 15:17:48 +02:00
David Kirwan
f8adba6df3
forgejo: add postgresql operator config, secret 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-03-31 10:55:46 +01:00
Jakub Kadlcik
42853033ba logdetective: allow http and https in the firewall 2025-03-28 23:37:33 +01:00
Jakub Kadlcik
abee7a2c5f logdetective: install certbot package 2025-03-28 23:37:33 +01:00
Adam Williamson
7b84f30429 openqa/server: switch prod to OAuth2 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-03-28 14:37:00 -07:00
Adam Williamson
5da2faac67 openqa/server: allow OAuth2 authentication, enable on lab 
OpenID support in FAS is going away. openQA has OAuth2 support.
I've tested this config to work with manual edits on lab, now
ansiblizing it (for lab only to start with).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-03-28 13:40:57 -07:00
Adam Williamson
721ffe0df4 proxies: drop caiapi 
this isn't a thing any more.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-03-28 18:11:11 +00:00
Adam Williamson
4cd3765cd0 ipsilon: drop obsolete config for beaker and dead bugzillas 
We haven't had a beaker since 2018 or so, and none of these
various staging/test/dev bugzilla instances exist any more.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-03-28 18:04:30 +00:00
Kevin Fenzi
b1363750ce waiverdb: also delete the playbook play referring to the template that was just removed 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-28 11:00:34 -07:00
Lukas Holecek
6426d72854 waiverdb: Remove unnecessary image build 2025-03-28 17:55:33 +00:00
Kevin Fenzi
1d882f1aee matrix clients: update well-known endpoints for new element call 
Per EMS support, updating these to allow clients to use
the new element call setup.

See:
https://matrix.org/blog/2025/03/21/this-week-in-matrix-2025-03-21/#dept-of-voip-call-me-hand
and
https://ems-docs.element.io/books/element-cloud-documentation/page/ems-server-with-custom-domain

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-28 10:02:32 -07:00
David Kirwan
df246f9ffc
forgejo: add the template for creating the PostgresCluster 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-03-28 14:10:33 +00:00
Aurélien Bompard
17cd3edbc7
Create missing dir 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-03-28 14:50:37 +01:00