Commit graph

38529 commits

Author SHA1 Message Date
Mikolaj Izdebski
6534980cdc Koschei: increase memory limits for polling 2023-02-01 17:47:24 +01:00
Kalev Lember
a0a77f18b2 fedmsg / irc: add a bot for #fedora-flatpaks
Let's give it a try and see if it turns out to be useful or not.

Signed-off-by: Kalev Lember <klember@redhat.com>
2023-02-01 09:55:33 +00:00
Kevin Fenzi
503729f7cf f37-test: add missing host vars file
I made this the other day but forgot to push it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-31 14:04:30 -08:00
Kevin Fenzi
d456669e4b robosignatory: disable f38 resigning section
If this is there, robosignatory will see two 'from: f38's and error out.
We no longer need to resign f38, so drop this at least for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-31 13:54:19 -08:00
Kevin Fenzi
d4eeaa51b2 robosignatory: add f39 signing before branching
This is an attempt to allow us to sign f38 with the f39 key also in
addition to the f38 one. Using this we can make a ugly loop that signs
all the stuff in the f38 tag with the f39 key. (Hopefully)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-31 13:07:39 -08:00
Dusty Mabe
3354d0b821
openshift-apps: put fedora-ostree-pruner to sleep
The most recent run caused some data loss [1] so let's put it to
sleep while we wait for the fix [2] to land.

[1] https://github.com/fedora-silverblue/issue-tracker/issues/405
[2] https://github.com/ostreedev/ostree/pull/2808
2023-01-31 15:00:03 -05:00
Dusty Mabe
3d8f591533
openshift-apps: use dumb-init for the sleep for ostree pruner/importer
The uptream of these two was changed to use `dumb-init` to allow for
defunt processes to get reaped in the container [1] so let's change the
commented out sleep commands to do the same.

[1] 9d5618eace
2023-01-31 14:57:34 -05:00
Kevin Fenzi
d165df1790 robosignatory: add sericea ostree
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-31 09:16:20 -08:00
Kevin Fenzi
83b12eb4fd ns01.iad2.fedoraproject.org: move to rhel9
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-30 16:01:39 -08:00
Kevin Fenzi
c1e6e2fb02 ns13: define a local hosts file so we can get to the vpn to install
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-30 15:21:16 -08:00
Kevin Fenzi
32f3335f4b ns13.rdu2.fedoraproject.org: move to rhel9
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-30 14:27:32 -08:00
Kevin Fenzi
68f4ecd690 defaults: set network_allow_restart: yes
linux system roles does a fine job configuring networking on our
systems, but without this it just configures it but doesn't bring things
'live' until a 'nmcli c up eth0'. Just set this so it should allow it to
restart things and reflect the network as we want it right after the
playbook runs on it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-30 13:53:15 -08:00
Kevin Fenzi
a3259a6101 ns02.fedoraproject.org: use new style ip defines
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-30 13:34:21 -08:00
Kevin Fenzi
b55172ecf9 ns02.fedoraproject.org: move to rhel9
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-30 13:32:11 -08:00
Aurélien Bompard
35b35127e4
FMN: adjust the config file to the recent code changes, again
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-01-30 16:56:19 +01:00
Aurélien Bompard
690882f5e4
FMN: adjust the config file to the recent code changes
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-01-30 16:42:07 +01:00
Adrian Reber
64a4759e7f
Update scan-primary-mirror to 0.4.3
Signed-off-by: Adrian Reber <adrian@lisas.de>
2023-01-30 14:38:10 +01:00
Kevin Fenzi
d9c654539e update bodhi pungi with changes from pungi-fedora (httpd to httpd-core)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-29 11:21:16 -08:00
Kevin Fenzi
976917fa0f maintainer-test: out with f35 and in with f37
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-27 12:46:27 -08:00
Mikolaj Izdebski
db9dbe75f2 koschei: clean unapplied changes more often 2023-01-27 20:17:36 +01:00
Kevin Fenzi
b8bfba5f74 ipsilon: add collectd
No reason we shouldn't have collectd reporting here too.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-27 10:46:42 -08:00
Michal Konečný
1286cc4a32 [release-monitoring] Extend session lifetime to one week
This was previously set to one day, but according to
https://github.com/fedora-infra/anitya/issues/952 it's not enough. Let's extend
the session time to one week then.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-01-27 13:32:00 +01:00
Kevin Fenzi
da244a81df retrace: add quotes around username since it has a var in it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-26 18:27:42 -08:00
Kevin Fenzi
f0b98b904c Openshift apps: drop app owners that have left us
Before we enable any monitoring, we should clean up app owners some so
we do not spam people who arent around anymore and no longer care about
the app. ;)

If I removed anyone here who is still around and does care, we can
easily add you back in.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-26 17:19:33 -08:00
Kevin Fenzi
70f0f6a3c2 package owner alias: switch to once every 3 hours
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-26 16:54:03 -08:00
02cb912277 lint fix 2023-01-27 00:08:30 +00:00
96c64b7ee4 docsbuilding: add alerting 2023-01-27 00:08:30 +00:00
caa4f85ed2 ocp_monitoring: move rules to openshift/project role 2023-01-27 00:08:30 +00:00
Adam Williamson
842db118e8 Bodhi: switch to grouped critpath for prod too (whee!)
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-01-26 14:58:27 -08:00
Adam Williamson
4f78db48e7 greenwave: correct a test name in the recent policy addition
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-01-26 14:24:52 -08:00
Adam Williamson
3788e4c09e grouped critpath: pass --srpm to the script
Bodhi wants critpath components by SRPM name, not binary RPM name.
The script was already being called with `--srpm` when used to
update the PDC data, we just forgot to do the same here.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-01-26 13:59:01 -08:00
Adam Williamson
1bc076ae4b greenwave: add a critical-path-apps policy
This will ensure we gate firefox updates on relevant tests.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-01-26 13:54:28 -08:00
Adam Williamson
fea60aab95 Bodhi: try and do critical path data generation in openshift
The previous attempt to have staging Bodhi use grouped JSON
critical path data didn't work because we did it in the backend
(i.e. the composer), not the openshift pods where the web UI
and the consumers run.

We need at least the web UI and consumer pods to have the
critpath data, as both those pods may create updates (Bodhi
decides if the update is critical path at creation time). This
attempts to handle that by having a daily openshift cron job
that runs a simple container with the necessary packages in it,
checks out the script, and runs it. It's run on a persistent
storage volume which is also mounted by all the Bodhi pods in
the place where Bodhi will look for the data.

The cron job frequency is temporarily set to once an hour; this
is so it will run soon after initial deployment. Once it has
run once we can cut it back to once a day.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-01-26 11:52:28 -08:00
Adam Williamson
95e4480d4c Bodhi: revert broken backend critpath generation bits
This doesn't work - it puts the critical path data on the
'backend', which is not where we need it to be. We need that
data in the openshift pods, there's another commit alongside
this one which tries to do that.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-01-26 11:52:28 -08:00
Kevin Fenzi
863ff38481 email aliases: add ibmcloud group alias
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-26 11:43:44 -08:00
Michal Konečný
54465d7a43 [release-monitoring] Sync buildconfig between staging and prod
With release of Anitya 1.7.0 the special cases for production are no longer
needed. Let's remove them.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-01-26 13:26:37 +01:00
Kevin Fenzi
8c92cbe779 ocp prod/stg: bump control plane vms to 24gb from 16gm
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-25 15:34:48 -08:00
66726137ae websites: add alerts for pod/job/build errors 2023-01-25 22:41:39 +00:00
de196fd597 websites: remove unused i18n script 2023-01-25 22:41:39 +00:00
Kevin Fenzi
350a0d2393 add aarch64-test02 to cloud inventory too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-25 11:33:43 -08:00
Kevin Fenzi
3a7bf1bb80 add a aarch64-test02 maintainer test instance
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-25 11:30:25 -08:00
Kevin Fenzi
e301a402ee delete copy pasta spew from ncurses bug
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-25 10:11:37 -08:00
Kevin Fenzi
abf5e66531 letsencrypt: move the combined cert to a template
content is "undefined" if using variables and you can't put a newline in
it, so just move this to a simple template.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-25 10:01:18 -08:00
Kevin Fenzi
925760331c letsencrypt: Try and put the combined cert in the format stunnel likes
Right now it's adding the cert without a newline at the end, but it also
expects the cert to be at the top and the intermediate below it. So,
swap them around and try putting a newline in it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-25 09:56:31 -08:00
dd7cb18a31 Update Flock contacts
Justin Flory is the new Fedora Community Architect (formerly FCAIC)

Also, hopefully future-proof these aliases a bit by using the fcaic
alias instead naming the specific person. Fewer edits to make the next
time the role turns over.

Signed-off-by: Ben Cotton <bcotton@fedoraproject.org>
2023-01-25 09:31:32 -05:00
Kevin Fenzi
73c95d5331 base: add tag for basessh role
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-24 18:17:44 -08:00
Kevin Fenzi
36eaa708fa rsyncd: fix correctly this time (I hope)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-24 16:22:03 -08:00
Kevin Fenzi
14a7ec3046 rsyncd: fix conditional harder
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-24 16:16:11 -08:00
Kevin Fenzi
921add1320 dns: adjust conditionals for dns servers using rhel9
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-24 16:07:50 -08:00
Kevin Fenzi
6c540c184f inventory / host_vars: change infrastructure.fedoraproject.org url to iad2 instead of old phx2 ip
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-24 14:55:39 -08:00