Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
39176 commits 9 branches 0 tags 111 MiB
Commit graph

39176 commits

This branch
This branch
All branches
Author SHA1 Message Date
Francois Andrieu
d00aadc0d2 noggin: add contributor survey banner 2023-07-05 19:59:57 +00:00
Francois Andrieu
da7bf7382c hyperkitty: add contributor survey banner 2023-07-05 19:59:57 +00:00
Aurélien Bompard
840c898fec
Add tags 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-07-05 15:45:01 +02:00
Aurélien Bompard
6fbc69fdcf
Small fixup 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-07-05 15:44:09 +02:00
Aurélien Bompard
586733c645
Deploy the new fedora-messaging emitter for mediawiki to prod. Yolo. 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-07-05 15:32:29 +02:00
David Kirwan
286d31fb07 zabbix_server: Add extra configuration 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-07-04 08:08:07 +01:00
Aurélien Bompard
82e7d6ab4c
Install php dependencies 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-07-03 17:16:26 +02:00
Aurélien Bompard
91719644db
Fix the rabbitmq username for mediawiki 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-07-03 17:14:06 +02:00
Aurélien Bompard
b12d5b588e
Missing file 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-07-03 14:56:49 +02:00
Aurélien Bompard
5db080088e
Add missing dep 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-07-03 14:53:56 +02:00
Aurélien Bompard
9df13d4abb
Use the new fedora-messaging emitter in Mediawiki 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-07-03 14:52:33 +02:00
Kevin Fenzi
2a1934972e resultsdb-ci-listener: normalize on _ as we were already using that in more places 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-30 15:27:24 -07:00
Kevin Fenzi
ad87e20f9f resultsdb-ci-listener: you know a _ looks like a -, but it is not 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-30 15:21:59 -07:00
Kevin Fenzi
a44f995a57 resultdb-ci-listener: ok, these are the same due to the key name 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-30 15:13:09 -07:00
Kevin Fenzi
a72457fdb5 Revert "resultsdb-ci-listener: just call these the same on both prod and stg" 
This reverts commit 1492d0e4cc.

No, lets reconsider this.
 2023-06-30 15:11:11 -07:00
Kevin Fenzi
1492d0e4cc resultsdb-ci-listener: just call these the same on both prod and stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-30 15:10:28 -07:00
Kevin Fenzi
e24a5929aa resultsdb-ci-listener: normalize staging username/certs 
Try and set all of these the same to avoid problems with usernames and
queue names and cert names and messaging names. ;)

Should only affect staging.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-30 14:57:03 -07:00
Lukas Holecek
48c34d97cb resultsdb-ci-listener: Avoid using the same crt/key as resultsdb 
Related to: https://pagure.io/fedora-infrastructure/issue/11339
 2023-06-30 21:28:31 +00:00
Michal Konečný
2854a511ee [notifs-backend] Fix ZMQ timeout nagios error 
When the topics are bytes encoded in configuration the json.dumps() fails. This
commit prevents the failure by decoding the strings before sending them in poll function.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2023-06-30 15:08:58 +02:00
David Kirwan
a9a14a4023 zabbix: modify db tasks zabbix_server role 
error handling
Update iptables to allow access to server/agent

Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-30 12:00:33 +01:00
Adrian Reber
a5e52a113e
Correct regex for codecs and epel 
Signed-off-by: Adrian Reber <adrian@lisas.de>
 2023-06-30 10:13:01 +02:00
Stephen Smoogen
19b500a5fd Remove chunking error messages in gateway systems 
RHEL turned off chunking in postfix for various reasons. This causes a
lot of logs from spam and other servers. Turning off logging this as
it is not supported.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2023-06-29 20:09:57 +00:00
Sandro
4cd0dea659 Add Akashdeep Dhar to tharir.admins 
We need to go through the current interface to determine what
needs to be carried over to the new badges API, t0xic0der and
others are working on.

Signed-off-by: Sandro <devel@penguinpee.nl>
 2023-06-29 20:03:53 +00:00
Ondřej Budai
a9f0785b5c
koji_builder: switch the koji-osbuild token URL to the unified SSO 
identity.api.openshift.com was shut down several hours ago. The plugin now
needs to use sso.redhat.com instead.

This commit adjusts the token URL and the script that pokes holes in the
firewall for selected domains.
 2023-06-28 15:58:11 +02:00
Mikolaj Izdebski
08405d960f Koschei: Add full update playbook 2023-06-28 14:51:32 +02:00
Mikolaj Izdebski
bdc999f4a9 Koschei: Add rolling update playbook 2023-06-28 14:26:43 +02:00
Mikolaj Izdebski
9688baed8d Koschei: sync staging memory limits with prod 2023-06-28 13:49:42 +02:00
Mikolaj Izdebski
c65a27997c Koschei: track all packages in staging 2023-06-28 13:38:33 +02:00
Mikolaj Izdebski
7b03bf0ffe koschei: run jobs with admin DB credentials 2023-06-28 13:14:22 +02:00
Mikolaj Izdebski
f1d497089e koschei: Update staging sync playbook 2023-06-28 12:59:16 +02:00
Lukas Holecek
a02810c7a9 resultsdb: Use healthcheck endpoint in probes 2023-06-27 17:37:16 +00:00
Aurélien Bompard
6ed2d3ab2d
Robosig: restart on config changes 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-27 18:23:40 +02:00
Aurélien Bompard
9784ace94c
Robosig: don't prefetch so that priorities can work their magic 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-27 18:17:40 +02:00
Kevin Fenzi
0fb53e0fba base: only compress logs on log01, not everything 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-27 08:31:31 -07:00
Aurélien Bompard
b24a2ecd41
FMN: update the database sync command 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-27 17:06:31 +02:00
Sandro
8592948038 Badges: Add Emma Kidney to tahrir.admins 
Emma needs to take a look at how the current backend works.
She's working on the new UI.
 2023-06-26 21:50:24 +00:00
Kevin Fenzi
e06db2465a base / iptables: fix last conditional 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 13:27:06 -07:00
Kevin Fenzi
f1eaa5d773 base / iptables: simplify logic 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 13:23:38 -07:00
Kevin Fenzi
03abad159d base / iptables: one more typo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 13:04:43 -07:00
Kevin Fenzi
c5773c8c45 base / iptables: fix some syntax issues 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 13:04:15 -07:00
Kevin Fenzi
765363e04d base / iptables: fix protocol, use creates for commands 
iptables -p is expecting all, not any.
And create a file to track when we have made the ipset.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 12:58:21 -07:00
Kevin Fenzi
fbe288a422 base / iptables: adjust conditional to not depend on datacenter for non iad2 hosts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 12:52:25 -07:00
Kevin Fenzi
679f7f6f16 iptables: clean up osbuild and add a external block set scaffolding 
Setup osbuild so it only needs to exist on the specific builders in the
osbuild channel, not all builders.
Also, setup things so we can add a blocklist that will block external
subnets/ip's if we need to do so. Currently it should just be an empty
set, but we can implement it as needed/desired starting with the ips we
already were blocking on just some hosts.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 12:41:07 -07:00
Kevin Fenzi
7c6fe8c5b8 koji_builder: setup a osbuild group for osbuild channel builders 
We need only these builders to have this ipset to talk to the osbuild
api. All the rest do not need it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 12:41:07 -07:00
Aurélien Bompard
0913c6c0ca
Fix the python3_fact module 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-26 13:41:47 +02:00
Aurélien Bompard
3bc4b2f664
Add the topic auth for gitlab-centos 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-26 12:46:30 +02:00
Kevin Fenzi
a47ce6a3e0 backups: re-enable people02 backups 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-23 10:50:07 -07:00
Jakub Kadlcik
53663c2d65 copr-frontend: make sure we have up-to-date tito on builders 2023-06-23 17:04:19 +02:00
Seddik Alaoui Ismaili
6b804b8b11 change archive format to xz for merged logs 2023-06-22 22:49:53 +00:00
Lukas Holecek
b513985390 resultsdb: Fix api pods running out of memory 2023-06-22 22:33:47 +00:00