Commit graph

29109 commits

Author SHA1 Message Date
Kevin Fenzi
d7c387e0e5 group_vars / all: set auto_legacy for now, since we didn't want to just always use python3 on fedora.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:15 +02:00
Rick Elrod
5af3bddc8c add env_suffix here too
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:15 +02:00
Rick Elrod
8260eafc8b or make it a template when it is a template
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:15 +02:00
Rick Elrod
377dc46282 sanitarium: can you quote things correctly please
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:15 +02:00
Rick Elrod
2883a1a66c sanitarium: point at the right ipsilon
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Rick Elrod
0b6ea3c750 openshift-apps/sanitarium: change client id
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Rick Elrod
5d2dbff9e0 openshift-apps/sanitarium: fix secret path
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Kevin Fenzi
9b14a4aaf5 proxies: adjust rkhunter for new non root mirrorlist pods
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:14 +02:00
Rick Elrod
2f20b29c57 correct the correction so that the thing is correcterer
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Rick Elrod
710132946e but correctly
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Rick Elrod
4dceeb8c82 I think this needs to be prefixed
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Rick Elrod
8b97f3b454 use env_short
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Rick Elrod
3bf33234a8 openshift-apps/sanitarium: First go at openshift role for playing with an SSH CA in stg
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Mohan Boddu
f6606cc106 Remove pkgset_koji_tag and pkgset_koji_inherit for modules
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
2020-04-24 21:34:14 +02:00
Kevin Fenzi
7f4959768b aws policy: initial copies of json policy files.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:14 +02:00
Kevin Fenzi
f6c6852d5c ipsilon: add aws-centos group for SAML2.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:14 +02:00
Kevin Fenzi
615a66fc45 update-firmware: ansible-report says we should use variables here not bare.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:14 +02:00
Kevin Fenzi
dfdd06c3bc ansible-report: remove tabs as they should not be in variables
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:14 +02:00
Clement Verna
3a9dee36de OSBS: comment out aarch64 in stg for now
Signed-off-by: Clement Verna <cverna@tutanota.com>
2020-04-24 21:34:14 +02:00
c0e2e1dbe9 basessh: fix up check for libselinux python OS version chceks 2020-04-24 21:34:14 +02:00
ae937373f6 IoT: move iot compose to F-31 2020-04-24 21:34:14 +02:00
Pavel Raiskup
fdf98d6d47 copr: don't gather facts about openstack builders
The gathering facts tends to timeout the 1000s limit...  and we don't
need it because we know in advance the parameters.

The facts gathering was enabled as part of e5becd03b8, and that code is
not used anymore.
2020-04-24 21:34:14 +02:00
Clement Verna
c101327843 mdapi: give the liveness probe 15s before it times out
Signed-off-by: Clement Verna <cverna@tutanota.com>
2020-04-24 21:34:14 +02:00
Pierre-Yves Chibon
2b19775f4e resultsdb: tag the rabbit/queue roles
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:14 +02:00
Pierre-Yves Chibon
42a0bafb83 resultsdb: clean up and simplifications
- Simplify the topic that are listened to in staging, no need to repeat them
  when we can use * instead.
- Drop rdbsync since we're moving to fedora-messaging
- Adjust the playbook to install ci-resultsdb-listener

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:14 +02:00
Pierre-Yves Chibon
74dd4d96ac ci-resultsdb-listener: Simply the role
Now that we just install ci-resultsdb-listener and not rdbsync with
ssl certs and so on, most of the role can be simplified.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:14 +02:00
Kevin Fenzi
b0df3a4c5b fedmsg/base: fix task installing packages to not bomb out on rhel
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:14 +02:00
Kevin Fenzi
8ffaec6255 buildvmhost-aarch64-11 enters the ring!
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:14 +02:00
Kevin Fenzi
a8c8df48de bugyou: retire service and all it's parts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:14 +02:00
Rick Elrod
da7ccb50af This has annoyed me one time too many
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Stephen Smoogen
454c3e43c8 phx2 is needed for mirrorlist3 2020-04-24 21:34:14 +02:00
Stephen Smoogen
1abafb5307 mirrormanager: user directory must have ~/rundir/libpod owned by user 2020-04-24 21:34:14 +02:00
Kevin Fenzi
61e7e0debf os-proxy02: move to f31 and over to virthost-os03 as 02 is down.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:14 +02:00
Adam Williamson
f26edfa7e7 openqa/worker: always install network-scripts
No need to conditionalize this any more, F29 is about to go EOL.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2020-04-24 21:34:14 +02:00
Adam Williamson
b2ee62595c openqa: temporarily disactivate openqa-ppc64le-01.qa
See https://bugzilla.redhat.com/show_bug.cgi?id=1769445 - it
seems it can't run qemu without a workaround right now due to a
qemu vs. machine firmware issue. So I'm just taking it out of
commission until that's resolved. We'll make 02 the createhdds
and tap worker instead.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2020-04-24 21:34:14 +02:00
Stephen Smoogen
b5f53833a9 try to make the playbook not bomb 2020-04-24 21:34:14 +02:00
Stephen Smoogen
e06d960e83 tag it 2020-04-24 21:34:14 +02:00
Clement Verna
07fb359f88 Docsbuilding: add tags to deploy just appowners
Signed-off-by: Clement Verna <cverna@tutanota.com>
2020-04-24 21:34:14 +02:00
Clement Verna
4281526db8 Docsbuilding: Adding jibecfed to the appowners
Signed-off-by: Clement Verna <cverna@tutanota.com>
2020-04-24 21:34:14 +02:00
Stephen Smoogen
fd33a5ba22 try to get permissions and directories for rootless podman 2020-04-24 21:34:14 +02:00
Rick Elrod
d6844d19b5 nagios_client: sigul-bridge01 isn't a thing, but sign-bridge01 is
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Pierre-Yves Chibon
1be1f97290 elections: add a tag to the role
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:14 +02:00
Pierre-Yves Chibon
e6b0d186cd elections: make bcotton an admin on openshift
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:14 +02:00
Rick Elrod
cdd8a99a92 nagios_server: s/repospanner-temp/repospanner_temp/
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Rick Elrod
d07b5a512c base/os: same here
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Rick Elrod
e3fd43fa80 base/os-stg: point registry.redhat.io to new ip
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Rick Elrod
534fa31934 nagios: check sigul bridge proc
Signed-off-by: Rick Elrod <relrod@redhat.com>
2020-04-24 21:34:14 +02:00
Aurélien Bompard
f552176f95 Update bodhi in staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:14 +02:00
Adrian Reber
defc3abf08 mirrorlist: switch all proxies to the new container
This switches all proxies to the rust based mirrorlist server which is
running as a rootless container.

Signed-off-by: Adrian Reber <adrian@lisas.de>
2020-04-24 21:34:14 +02:00
Clement Verna
34b9935c8e Nagios: add a check for rpm.sign message (warning : 1h, alert: 1h30)
Signed-off-by: Clement Verna <cverna@tutanota.com>
2020-04-24 21:34:14 +02:00