Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
28149 commits 9 branches 0 tags 111 MiB
Commit graph

28149 commits

This branch
This branch
All branches
Author SHA1 Message Date
Julen Landa Alustiza
6e9c664a18 Pagure: proper X-Frame-Options header in staging 2019-07-22 15:19:30 +02:00
Pierre-Yves Chibon
10a6ffa7e1 waiverdb: add pingou to the access list 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-07-22 14:37:15 +02:00
Clement Verna
56582d200c greenwave: switch production to fedora-messaging 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-07-22 14:32:18 +02:00
Pierre-Yves Chibon
dd9acb4f14 waiverdb: Enable sending notification on the bus in prod 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-07-22 14:31:01 +02:00
Kevin Fenzi
1051c7d297 repospanner: fix new ip for repospanner-ibiblio01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-22 01:05:04 +00:00
Kevin Fenzi
02e93ac86f repospanner: Move repospanner-osuosl01 to repospanner-ibiblio01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-22 01:03:31 +00:00
Kevin Fenzi
6d54f56f5d happroxy: switch that and try uri balancing. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-21 18:43:08 +00:00
Kevin Fenzi
7d70382af9 haproxy: try and balance kojipkgs by source ip instead of appheader (which isn't even set here)? 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-21 18:28:38 +00:00
Kevin Fenzi
4817865c8d kojihub: Enable seperate source for rawhide buildroot repos. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-20 21:29:26 +00:00
Kevin Fenzi
57cdfad881 maintainer-test: drop f28-test host. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-20 16:22:57 +00:00
Luca Bruno
3d122af391
coreos-cincinnati: deploy latest master (bd954e2) 2019-07-20 16:03:41 +00:00
Luca Bruno
c7de25baf5
coreos-cincinnati: tweak build configuration 
This adjusts build-configuration, so that builds can run in parallel
and self-timeout after 30mins. Workaround temporarily in place for
https://pagure.io/fedora-infrastructure/issue/8005.

Signed-off-by: Luca Bruno <luca.bruno@coreos.com>
 2019-07-20 09:41:00 +00:00
Luca Bruno
102eabff89
coreos-cincinnati: build latest master (bd954e2) 2019-07-20 09:04:35 +00:00
Luca Bruno
af0a5c01c1
coreos-cincinnati: build latest master (5ced7ac) 2019-07-20 08:46:39 +00:00
Mohan Boddu
7e732a2381 Adding robosig for epel8-infra 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-07-19 20:22:36 +00:00
Mohan Boddu
87d0c3d875 Adding robosig config for epel8 and epel8-playground 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-07-19 20:18:00 +00:00
Kevin Fenzi
36da7714c4 pagure: add apache-status so we can gather info in collectd and see why connections sometimes are refused. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-19 16:46:17 +00:00
Pavel Raiskup
6f35839b9e roles/copr/certbot: the trailing comma in webroot path isn't needed 2019-07-19 13:12:22 +02:00
Pavel Raiskup
af27dcf05e copr: fe-dev: fix coprs.conf indent 2019-07-19 12:04:01 +02:00
Pavel Raiskup
19245cecf6 copr: letsencrypt: move config from copr -> copr_front 2019-07-19 11:36:25 +02:00
Pavel Raiskup
3cc27430b6 copr: rework letsencrypt 
We need two-phase configuration for Let's Encrypt:

1. initialize; the letsencrypt automation, this is happening only
   once per VM (when it is spawned)
2. periodic; using certbot-renew.timer.

Both those phases are now wrapped into copr/certbot role.

Phase 1. needs to be done before the web-server is started (so
include the role on appropriate place in the playbook), so we can
do 'certbot --standalone' (bounds to port 80).
Phase 2. is accomplished using the running web-server, using
'certbot renew --webroot'.

If (and only if) the certificate is renewed, web server needs to
be restarted (and lighttpd needs to have post-processed
certificate format).  So we also need the deploy hook script in
hand (two actually, lighttpd/httpd) so 'certbot renew'
automatically does what we expect it to do.
 2019-07-19 11:20:00 +02:00
Rick Elrod
cc15118a29 add raid check to two more hosts 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-07-18 20:36:32 +00:00
Stephen Smoogen
2562803244 add in error checking 2019-07-18 19:34:41 +00:00
Stephen Smoogen
89f24a6413 [proxy/mirrorlist] put in changes to make mirrorlist cycling a little slower. 2019-07-18 19:34:41 +00:00
Rick Elrod
c31829a561 nagios: Try a new way of doing the raid check, so we can check extra hosts like autocloud-backend-libvirt2 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2019-07-18 19:31:04 +00:00
Jeremy Cline
46985dbb66 openshift-apps: kerneltest: Add an OpenShift configmap 2019-07-18 18:30:25 +00:00
Pierre-Yves Chibon
fdcb35f94c pagure.io: Allow cross-projects API token with PR creation ACL 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-07-18 19:28:51 +02:00
Kevin Fenzi
b42e53c912 Revert "kojipkgs / proxy-websites: switch kojipkgs to not use h2 for now." 
This reverts commit 73e51deb3c.

There is a new curl in rawhide that has some h2 fixes, so we want to
see if it fixes the issues we were having or not.
 2019-07-18 16:06:30 +00:00
Pavel Raiskup
ab78c47a51 copr: letsencrypt: don't force renewal daily 
The `renew` command will automatically renew the certificate once
the validity is smaller tan 30 days:
https://certbot.eff.org/docs/using.html?highlight=renew#renewing-certificates
 2019-07-18 14:28:46 +02:00
Pavel Raiskup
20bb405325 copr: builders: temporarily trust dist-git's self-signed certificate 
We'll remove this right after we'll get letsencript cert again.
 2019-07-18 11:36:33 +02:00
Pavel Raiskup
8ecfe20ae3 copr: production: keygen <-> backend IP connection 2019-07-18 10:57:34 +02:00
Jakub Kadlcik
0b7edd9ae6 Run copr/backend role first, so we have all users and groups 2019-07-18 10:19:24 +02:00
Jakub Kadlcik
ecb2785d3d copr: install coprs_ssl.conf even for production instance 2019-07-18 08:40:37 +02:00
Pavel Raiskup
f0a14e327c copr: dist-git-prod: fix the main data volume ID 2019-07-18 08:29:05 +02:00
Jakub Kadlcik
9f168949af Upgrade copr-fe and copr-be to F30 2019-07-18 07:43:44 +02:00
Pavel Raiskup
edf3c2c23f copr: move production keygen/dist-git to f30 2019-07-18 07:00:31 +02:00
Kevin Fenzi
a32700a219 pagure /staging: Fix up some redirects/proxies for letsencrypt 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-18 00:17:21 +00:00
Kevin Fenzi
eeef43f271 pagure / staging: try and use letsencrypt for docs.stg.pagure.org 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-18 00:05:02 +00:00
Kevin Fenzi
923d60f9e6 download / tier1: add download-cc-rdu01's ipv6 address too. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-07-17 23:26:00 +00:00
Mohan Boddu
898d67394c Adding epel8-playground to add to koji tags and create pdc entries 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-07-17 18:25:56 +00:00
Mohan Boddu
752ba3de32 Adding epel8 to add to koji tags and create pdc entries 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-07-17 18:15:14 +00:00
Michal Konečný
01a364551e Bodhi: Update to new beta 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2019-07-17 18:54:36 +02:00
Stephen Smoogen
e4ec7e52f6 remove secondarykoji from nagios 2019-07-17 15:58:54 +00:00
Michal Konečný
d94094e366 Bodhi: Update to new beta 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2019-07-17 17:36:17 +02:00
Pierre-Yves Chibon
212b7bb7b0 bodhi: Run the approve-testing cron job every 3 minutes 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-07-17 15:17:30 +02:00
Pierre-Yves Chibon
f574851d77 robosignatory: Drop the second pass of robosign on f31 on staging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-07-17 15:09:55 +02:00
Michal Konečný
cf5a512002 Bodhi: Update to new beta 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2019-07-17 12:51:36 +02:00
Pierre-Yves Chibon
dc8d987a63 robosignatory: Adjust the tag workflow in staging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-07-17 10:22:08 +02:00
Pavel Raiskup
2b238c9c88 copr: dist-git: install nfs-utils package 
This is needed since we are going to move to NFS storage soon.
 2019-07-17 10:16:59 +02:00
Pierre-Yves Chibon
905ca2c0ad koji: create the rabbitmq user in prod 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-07-16 22:49:04 +02:00