Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
28149 commits 9 branches 0 tags 111 MiB
Commit graph

28149 commits

This branch
This branch
All branches
Author SHA1 Message Date
Julen Landa Alustiza
f362dc6717 pagure: tune csp headers on stg 2020-04-24 21:34:07 +02:00
Aurélien Bompard
963ff9586b Add more RabbitMQ checks 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Aurélien Bompard
c5b01f6d30 Give the monitoring user access to the vhosts we use 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Aurélien Bompard
4f47672637 Create, build and load a custom SELinux module for NRPE & RabbitMQ 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Luca Bruno
2501d2524d coreos-cincinnati: add routes for raw-updates and statuses 
Signed-off-by: Luca Bruno <luca.bruno@coreos.com>
 2020-04-24 21:34:07 +02:00
Kevin Fenzi
186d8cb446 proxies / fas / totp: point proxies at os for provisioning in prod as well. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Adam Williamson
009179fec6 openqa: add necessary rabbitmq queue privileges (I hope) 
Using the mechanism I just invented...we need to be able to
publish to queues prefixed with 'openqa' and 'ci', on both prod
and stg.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-04-24 21:34:07 +02:00
Adam Williamson
359e69f519 rabbit/queue/tasks: allow specifying custom write_queues 
When creating a queue, the user is automatically created, but
there is no control over what queues the user can write to. A
user might need to write to queues other than ones prefixed with
their name (e.g. some users need to write to 'ci.*' queues).
This makes it possible to specify additional custom prefixes of
queues the user will be permitted to write to.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-04-24 21:34:07 +02:00
Kevin Fenzi
c8221b3377 os-hosts: change ip for registry.access.redhat.com. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Aurélien Bompard
0078df10eb Fix NRPE config for RabbitMQ 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Kevin Fenzi
1201377d2c fas / totpcgi: see if I can see why my builds are hanging in curl in prod. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Aurélien Bompard
0ce00beb99 Fix NRPE config file permissions 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Aurélien Bompard
7c2377748e NRPE does not accept arguments 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Kevin Fenzi
41ae017220 fas / totpcgi: move templates into configmap and same dir. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Kevin Fenzi
8427e824c5 fas / totp-provisioning: fix template names 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Kevin Fenzi
524278ee3f fas / totp-provision: we need the templates. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Kevin Fenzi
12cfb732eb totpcgi: try and get more info about the traceback. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Clement Verna
b231333161 totpcgi: add provisioning.cgi ins the correct path 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:07 +02:00
Clement Verna
5f821f8a4c totpcgi: use provisioning.cgi instead of index.cgi 
This commit also reverts the change made to index.cgi
in order to get the traceback

Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:07 +02:00
Mohan Boddu
6b82e6587a Fixing mis-spelled epel8-playground cron file name 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:07 +02:00
Clement Verna
7f61d52f50 totpcgi: get the traceback in the tmp folder 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2020-04-24 21:34:07 +02:00
Mohan Boddu
24fda1a51c Cron job for epel8-playground composes 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:07 +02:00
Aurélien Bompard
34a8869f9f Fix RabbitMQ service name 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Aurélien Bompard
29950dc158 Actually copy over the service file 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Aurélien Bompard
e7ab522de3 Add a RabbitMQ check on the cluster 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Kamil Páral
4b95bc7e33 taskotron: don't run rpmdeplint in Rawhide 
We've never run it, but it started being scheduled lately due to Rawhide
CI gating.
 2020-04-24 21:34:07 +02:00
Kevin Fenzi
61c30ca157 bodhi: set epel8 to query the Everything dir as we also will have modular for it. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Mohan Boddu
1d93a6275b epel8 mirrors sync 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:07 +02:00
Pierre-Yves Chibon
5617ad026c badges: attempt #1 at fixing the sar script 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:07 +02:00
Pierre-Yves Chibon
b873047365 pagure: fix the pagure_sar script for changes in pagure's internals 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:07 +02:00
Mohan Boddu
461080a3b6 Enabling epel8 in bodhi 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-04-24 21:34:07 +02:00
Kevin Fenzi
091592cf90 koji_hub: allow autopen to move secure-boot items from candidate tags for rawhide gating. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Rick Elrod
3f1d2cc9f7 s3-mirror: remove them here too 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:07 +02:00
Rick Elrod
59a4d25a1e s3-mirror: remove a few excludes on the "normal" sync so that we sync images too 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:07 +02:00
Aurélien Bompard
4f5de9eb37 Try to fix playbook failure 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Aurélien Bompard
ab31f6fcfe Create RabbitMQ user and queue (#7965) 
Attempt to fix: https://pagure.io/fedora-infrastructure/issue/7965

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-04-24 21:34:07 +02:00
Luca Bruno
9c2cfc100f coreos-cincinnati: deploy latest master (a16d73b) 2020-04-24 21:34:07 +02:00
Adam Williamson
ab4a46bf9e openQA: try and set up fedora-messaging publishing on staging 
Also tweak how we do the plugin config a bit, I don't like the
whole 'do special stuff if deployment_mode is set' thing any
more.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-04-24 21:34:07 +02:00
Kevin Fenzi
f9546b5258 robosign: out with f31-boost,, in with f31-ghc 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Kevin Fenzi
6120ec92de bodhi-backend01: move gdpr vars to backend01, since backend02 no longer exists. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:07 +02:00
Michael Scherer
5f0b2700b4 Migrate fedora community blog to WPengine 2020-04-24 21:34:07 +02:00
Pavel Raiskup
2b04825370 copr: frontend: correct use of letsencrypt var 2020-04-24 21:34:07 +02:00
Luca Bruno
2d214cfb95 coreos-cincinnati: build latest master (a16d73b) 2020-04-24 21:34:07 +02:00
Pierre-Yves Chibon
fa8ee19474 pagure: Adjust the pagure_sar script for the new structure of pagure code 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:07 +02:00
Chenxiong Qi
fa4b5f0670 message-tagging-service: add koji config 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:07 +02:00
Jakub Kadlcik
91bbb0e46d copr: make cron.d scripts copr-frontend-optional executable 
When running:

    [root@copr-fe-dev ~][STG]# run-parts --test /etc/cron.daily
    /etc/cron.daily/copr-frontend

There is no

    /etc/cron.daily/copr-frontend-optional

file visible and therefore it is not executed by crond. I am fixing
it by adding executable permissions.
 2020-04-24 21:34:07 +02:00
Chenxiong Qi
e4b3591d2d message-tagging-service: add missing config koji_cert 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:07 +02:00
Luca Bruno
1b1f5e2afa coreos-cincinnati: deploy latest master (24c2ba4) 2020-04-24 21:34:07 +02:00
Luca Bruno
a5c80d13c8 coreos-cincinnati: build latest master (24c2ba4) 2020-04-24 21:34:07 +02:00
Pavel Raiskup
c4469aaf43 copr: backend: install python3-copr-messaging 
TODO: drop once this is released:
https://pagure.io/copr/copr/pull-request/881
 2020-04-24 21:34:07 +02:00