Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
12756 commits 9 branches 0 tags 111 MiB
Commit graph

12756 commits

This branch
This branch
All branches
Author SHA1 Message Date
Patrick Uiterwijk
c259217e16 You would think I'd know by now that this is owner 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-22 21:34:51 +00:00
Patrick Uiterwijk
4b893b9f2b Also add authz for staging 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-22 21:32:37 +00:00
Patrick Uiterwijk
bac647a47e Commas are required 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-22 21:25:25 +00:00
Patrick Uiterwijk
e7593a12f1 Add ACL for basset frontend 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-22 21:21:38 +00:00
Patrick Uiterwijk
1d79f5e85a Open iptables on basset for wiki 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-22 21:21:38 +00:00
Patrick Uiterwijk
1cacb25fd4 Enable mediawiki basset plugin 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-22 21:21:38 +00:00
Kevin Fenzi
b3c934f349 Add collectd SOP to apps 2016-03-22 21:04:20 +00:00
Kevin Fenzi
a7823488c2 We don't need rkhunter here. 2016-03-21 23:25:54 +00:00
Luke Macken
5b252344ee bodhi: recursively set perms on /var/run/fedmsg on the backend 2016-03-21 23:20:59 +00:00
Tim Flink
6c556b9c79 re-adding empty vars to let templates finish for now 2016-03-21 22:43:05 +00:00
Luke Macken
afbfecbbd7 bodhi: Create /var/cache/fedmsg and have apache own it 2016-03-21 20:06:06 +00:00
Luke Macken
9889ac7446 bodhi: Have apache own /mnt/koji/mash/{atomic,updates} 2016-03-21 19:43:26 +00:00
Luke Macken
94608f070d bodhi: Configure the backend to run as apache instead of the masher user. 2016-03-21 19:43:07 +00:00
Stephen Smoogen
5bcdc2e565 and we have some fixes to the caching nameserver 2016-03-21 19:10:48 +00:00
Tim Flink
fcabcef11b forgot that qadevel was using the virtualhost template, reverting that part of cf503fe 2016-03-21 19:01:41 +00:00
Stephen Smoogen
5f121bd8a4 woops 2016-03-21 18:56:17 +00:00
Stephen Smoogen
b23599b0d5 and we have a bunch 2016-03-21 18:55:55 +00:00
Stephen Smoogen
e542e889e3 and we are now monday to push change 2016-03-21 18:41:12 +00:00
Stephen Smoogen
948c542da5 Merge branch 'master' of /git/ansible 2016-03-21 18:40:47 +00:00
Tim Flink
a4cd5dc179 fixing syntax error 2016-03-21 17:15:34 +00:00
Tim Flink
cf503fe4d2 fixing some ansible warnings and removing ssl from qa static sites - using proxies now 2016-03-21 17:14:16 +00:00
Patrick Uiterwijk
6e4e616d41 Remove archive.org from planet global config 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-21 17:01:23 +00:00
Adam Williamson
1182e950b2 hmm, jinja indents with nested ifs seem weird. try this? 2016-03-21 09:32:09 -07:00
Ralph Bean
549c7d655b Tags for this role. 2016-03-21 16:16:24 +00:00
Ralph Bean
9ffcd0a1ef Revert "Revert "Set git_basepath to not include rpms, so the namespacing version works."" 
This reverts commit c5143cfbab.

Revert war!
 2016-03-21 16:15:15 +00:00
Adam Williamson
605fc80786 openqa_dispatcher: enable fedmsg-based result wiki reporting 
...by extending the fedmsg consumer config file. Requires the
latest openqa_fedora_tools to work.
 2016-03-21 09:10:47 -07:00
Ralph Bean
b0ffcf5a67 selinux tags for this role. 2016-03-21 16:04:42 +00:00
Ralph Bean
3310672c58 Tell selinux to allow git-daemon to follow symlinks, please. 2016-03-21 16:03:12 +00:00
Kevin Fenzi
c5143cfbab Revert "Set git_basepath to not include rpms, so the namespacing version works." 
This reverts commit c5d30c4ee6.
 2016-03-21 15:29:50 +00:00
Kevin Fenzi
c5d30c4ee6 Set git_basepath to not include rpms, so the namespacing version works. 2016-03-21 14:29:54 +00:00
Pierre-Yves Chibon
00fd69148c Update the apps.yaml file to point to the nuancier SOP 2016-03-21 14:57:00 +01:00
Adam Williamson
69f592abbf using the right goddamn syntax usually helps, adam 2016-03-19 16:32:15 -07:00
Adam Williamson
f4133798f6 openqa/server: make geekotest static UID/GID optional 
I'm still kinda trying to make the openqa roles usable outside
of infra, so now I have a minute, let's do this: it makes the
static UID/GID for geekotest optional and configurable, instead
of hard coding it. For infra we set the value to 601, as we
are already using, in the openqa and openqa-stg group config.
 2016-03-19 16:28:09 -07:00
Adam Williamson
37d3559893 openqa: set asset size for prod too, since it seems to work 2016-03-19 16:18:21 -07:00
Adam Williamson
461aac031c openqa_server: tweak the asset size changed_when a bit 
just in case we wind up with multiple job groups, this should
be more correct.
 2016-03-19 16:14:03 -07:00
Adam Williamson
2bbac61464 whoops, add a missing quote 2016-03-19 16:10:14 -07:00
Adam Williamson
cb7bfcb614 openqa: allow specifying asset size limit 
this is a database value and there's no openQA API function to
set it, so we have to do it directly in the database...this
*should* work. I think. I should add equivalent functionality
for sqlite use as well, really...
 2016-03-19 16:09:20 -07:00
Kevin Fenzi
f1f716b4cf Need this to make sure we install 00releng-sudoers on compose machines. 2016-03-19 16:36:43 +00:00
Kevin Fenzi
864b4beeda Composers didn't have sudo role, so they had the old sudo and are unable to sync at the end of compose. 2016-03-19 16:32:56 +00:00
Stephen Smoogen
134036a9b0 And we have lots of iptables changes so we can block things when we want 2016-03-18 22:57:28 +00:00
Adam Williamson
eb44a82979 openqa/server: run createhdds with python3 
there seems to be a bug in python2-guestfs which causes the
disk image with an updates.img file to be broken (the updates
image is only 4096 bytes long and incomplete). When built with
Python 3 the image seems to be fine. So, run the script with
python3 (as its hashbang says) and ensure necessary packages
are installed.
 2016-03-18 15:37:21 -07:00
Stephen Smoogen
2392acc7ae hey you need a host_group sillly 2016-03-18 22:35:04 +00:00
Stephen Smoogen
6c7798ed0f Merge branch 'master' of /git/ansible 2016-03-18 22:28:07 +00:00
Patrick Uiterwijk
0662de958d This is needed by Basset to be able to enable accounts 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-18 21:38:23 +00:00
Stephen Smoogen
07623cfffa and put in items for the rules 2016-03-18 20:36:52 +00:00
Stephen Smoogen
1da4475134 make an iptables set for download-phx2 2016-03-18 20:31:07 +00:00
Kevin Fenzi
bfb071fabe Nuke old iptables task and files and drop it from blockerbugs-dev. Also kill old serverbeach templates. 2016-03-18 20:28:33 +00:00
Stephen Smoogen
857353ee27 Merge branch 'master' of /git/ansible 2016-03-18 20:12:34 +00:00
Patrick Uiterwijk
a54cf72e38 Fix username for basset frontend 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-18 20:03:17 +00:00
Patrick Uiterwijk
3792c64a5a Enable Basset in production 
This enables the FAS production hooks for Basset.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-03-18 19:48:27 +00:00