Infrastructure/ansible
5
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions
42877 commits 9 branches 0 tags 110 MiB
Commit graph

42877 commits

This branch
This branch
All branches
Author SHA1 Message Date
Aurélien Bompard
292c7f6c6e
Deploy journal-to-fedora-messaging on IPA (staging for now) 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-03-28 12:37:56 +01:00
Aurélien Bompard
9c5d4f0768
Repair logging in rabbitmq 
We had set the wrong file context for log files.
This changes is followed by these commands:

- `ansible -m command rabbitmq\* -a 'semanage fcontext -d -t var_log_t "/var/log/rabbitmq(/.*)?"'`
- `ansible -m command rabbitmq\* -a 'restorecon -v -R /var/log/rabbitmq'`

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-03-28 12:10:47 +01:00
Lukas Holecek
2a49ea6cea resultsdb: Make logs more verbose and include user-agents 2025-03-28 07:14:56 +00:00
Kevin Fenzi
33415d8399 proxies: riscv reverse proxies are not on ocp4 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-27 15:39:00 -07:00
Kevin Fenzi
5505dff89c bvmhost-p09-04/05: no nbde here 
I had reinstalled these both with no encryption in an attempt to see if
I could get more performance from them. Since we moved to iscsi this is
moot, and we should probibly reinstall them like the others again, but
for now just disable nbde so everything works with the playbook.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-27 15:11:49 -07:00
Kevin Fenzi
1cc761ac9b compose-eln01: this is using primary koji 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-27 13:39:49 -07:00
Kevin Fenzi
b462a186ee batcave / ansible_server: pin 2 collections that we want specifc versions of. 
We want to pin to these versions as the ones that get pulled in by other
collections are too new and don't support our ansible-core version.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-27 12:30:54 -07:00
Michal Konecny
c3dac79544 [mailman3] Another missed variable rename 
Fixing failing CI is not easy
 2025-03-27 13:56:08 +00:00
Greg Sutcliffe
e2f51bea3b resultsdb: Another bump to MPM Worker config to improve stability 2025-03-27 13:42:46 +00:00
Michal Konecny
3eec83ec9a [mailman3] Fix the incorrect variable names 2025-03-27 13:50:25 +01:00
Michal Konecny
a807fb3d4f [mailman3] Create gunicorn configuration file 
To make changing the gunicorn configuration more easily let's move
configuration values from systemd service to separate configuration
file.

The file will live in /etc/mailman3/gunicorn.conf.py.
 2025-03-27 13:01:13 +01:00
Kevin Fenzi
f256adda6e bvmhost-p09: also enable nbde here 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-26 17:48:52 -07:00
Kevin Fenzi
1f2bba4489 bvmhost-a64 / buildhw-a64: enable nbde role here as well 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-26 16:17:37 -07:00
Kevin Fenzi
de320e8298 bvmhost-a64-04: try and enable the nbde handling 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-26 16:05:28 -07:00
Greg Sutcliffe
9f431805ec nagios: Update authorized user lists 2025-03-26 21:16:13 +00:00
Kevin Fenzi
82f85d89ad compose / staging: these are primary koji instances 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-26 10:30:51 -07:00
Michal Konecny
1459e74b5a [pagure] Tweak the performance of httpd server 
Today the pagure started to be unresponsive. After few hours of
debugging we narrowed the issue to worker limit. We tweaked the value to
something that should be more responsive and it helped.

Here is the PR to make the change permanent.

Thanks @gwmngilfen and @nphillip for help with that.
 2025-03-26 14:03:34 +00:00
Pavel Raiskup
33e01feafc copr-frontend: upgrade using dnf command 
The Ansible dnf module still fails to update packages to the latest
versions, for an unknown reason.
 2025-03-26 08:06:49 +01:00
Pavel Raiskup
d2873f81f7 copr-frontend: try to expire all caches 
Ansible still doesn't update the packages :-(
 2025-03-26 08:03:40 +01:00
Pavel Raiskup
0f07d5c9d0 copr-frontend: update dnf caches when updating packages 2025-03-26 08:00:09 +01:00
Ryan Lerch
8778ac0afd forgejo: disable non-admin users being able to make orgs 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-03-26 15:28:10 +10:00
James Antill
f74cd17a23 Add regexp to drop spaces from hostnames in prompts, for add_host. 
Signed-off-by: James Antill <james@and.org>
 2025-03-25 20:36:02 -04:00
James Antill
aa5691d1b5 Add regexp to drop spaces from hostnames in prompts. 
Signed-off-by: James Antill <james@and.org>
 2025-03-25 20:00:53 -04:00
Jakub Kadlcik
6d9ff9b5f2 backend: add trailing slash if needed 
Otherwise we can redirect to something like this:

https://console.redhat.com/api/pulp-content/public-copr-stage@copr/TEST1742912352410340284-storage-pulp/fedora-41-x86_64/
 2025-03-25 19:44:25 +01:00
Kevin Fenzi
4ab30bdc37 backup: also add nbde role to backup server 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-25 11:33:11 -07:00
Kevin Fenzi
f54142e770 backup: add serial console config here 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-25 11:29:59 -07:00
Jakub Kadlcik
a6b86224fb copr: rename STG pulp domain 2025-03-25 15:01:07 +01:00
Jakub Kadlcik
5f7d5bda78 copr-fe-dev: fix pulp content URL 2025-03-25 14:22:35 +01:00
Jakub Kadlcik
22b6e9e2fe copr-be: use production pulp instance but stg domain 2025-03-25 14:09:11 +01:00
Jakub Kadlcik
9cfa240dd8 logdetective01, logdetective02: add sgallagh and mmassari as admins 2025-03-25 13:30:21 +01:00
Ryan Lerch
d20ff483b9 forgejo: try max_repo_limit 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-03-25 20:14:25 +10:00
Michal Konecny
daeaceaae5 [poddlers] Enable the FAS group sync on production 
Till now the automatic group sync was only working on staging. This
should enable it on production as well.
 2025-03-25 09:47:46 +00:00
Jakub Kadlcik
0fac971004 copr-be: start using Pulp certs also for STG 
We still need to fix the base_url
 2025-03-25 10:42:27 +01:00
Jakub Kadlcik
661ddacb55 copr-be: install pulp certificates also on STG 2025-03-25 10:17:23 +01:00
Kevin Fenzi
a4985b880b proxies / riscv-kojipkgs: try and get it to use the right template 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-24 16:44:12 -07:00
Kevin Fenzi
3c4d4250c0 proxies / riscv-kojipkgs: also need to set proxyurl 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-24 16:34:02 -07:00
Kevin Fenzi
81ca9bd8a1 proxies: add a riscv-kojipkgs virthost/proxy 
We are actually just pointing these to the hub for now, but we have them
seperated in case we want to make a seperate kojipkgs for this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-24 16:23:11 -07:00
Josef Skladanka
1219776da7 Add lbrabec as appowner to FQA apps 2025-03-24 22:30:11 +01:00
James Antill
7f429f3d13 Clean nftables var. for specific staging groups. 
Signed-off-by: James Antill <james@and.org>
 2025-03-24 16:18:48 -04:00
James Antill
3d695e58b3 Turn on nftables for all of staging. 
Signed-off-by: James Antill <james@and.org>
 2025-03-24 15:13:35 -04:00
Josef Skladanka
a8672eac88 Testdays - add kparal to appowners 2025-03-24 20:03:50 +01:00
Timothée Ravier
c4710ce336 roles/bodhi2/new-updates-sync: No sync for PPC64LE Atomic Desktops 
See: https://fedoraproject.org/wiki/Changes/AtomicDesktopsNoPpc64le
 2025-03-24 16:18:17 +00:00
Jeremy Cline
7a64016377
fedora-image-uploader: Enable GCP image uploads in production 
Configure uploading images to Google Cloud.

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
 2025-03-24 11:23:14 -04:00
Greg Sutcliffe
a982fa3f44 resultsdb-ci-listener: Return to using correct git repo for app source 2025-03-24 11:16:03 +00:00
Kevin Fenzi
c2e61b09ab robosignatory: add f42 cosmic-atomic to signing 
We added this atomic desktop, we need to sign it now. :)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-23 08:51:51 -07:00
David Kirwan
809c90e5da
IPA: add user zabbix to fedora-nss-ignore.conf 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-03-21 16:25:30 +00:00
Greg Sutcliffe
3f91cfe8cb resultsdb: Bump MPM Worker config to avoid healthcheck crashes 2025-03-21 16:01:30 +00:00
Jakub Kadlcik
4a8fca23ef logdetective: create /etc/profile.d/models.sh if it doesn't exist 2025-03-21 13:33:44 +01:00
Kevin Fenzi
58bbbca299 ipa: make sure a bunch of calls do not log sensitive data 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-20 14:48:12 -07:00
Kevin Fenzi
1251149241 ansible-server: fix requirements to list collections under collections 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-20 14:00:57 -07:00