Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
27050 commits 9 branches 0 tags 111 MiB
Commit graph

27050 commits

This branch
This branch
All branches
Author SHA1 Message Date
Randy Barlow
9cd4282981 bodhi: Build the base image. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-15 18:53:21 +00:00
Kevin Fenzi
fedfea462c push-docker: Switch to python3-docker from python-docker 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-15 18:49:21 +00:00
Randy Barlow
de5c73901c bodhi: Use a base container image to be more efficient. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-15 18:46:03 +00:00
Randy Barlow
cac31d7323 bodhi: Install the composer in the consumer image. 
The composer isn't actually used in OpenShift, but unfortunately
we forgot to make the import optional in Bodhi 4.0.0b1. This
results in a lot of unnecessary dependencies getting into the
container image, so I will make a future Bodhi release that makes
the composer import in the consumer optional. For now, let's just
make a bloated container.

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-15 18:35:11 +00:00
Kevin Fenzi
6f2872da16 nfs/client: nfs-lock no longer exists in fedora 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-15 18:28:38 +00:00
Randy Barlow
f5742d1a82 bodhi: Move OpenShift vars into the playbook so they are defined. 
Apparently the bodhi2-stg vars file is not used by the OpenShift
playbook, so let's just put the vars into the playbook.

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-15 18:23:44 +00:00
Kevin Fenzi
de3f964161 releng-compose: make ansible use python3 on these hosts. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-15 18:15:13 +00:00
Randy Barlow
1e3a33dc36 bodhi: Switch a comment from Jinja syntax to YAML syntax. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-15 18:14:39 +00:00
Randy Barlow
04afc85443 bodhi: Queue names must start with the username. 
The username that Bodhi uses in stg is bodhi.stg, and the queue
names must have the username at the beginning, so this commit
switches to use the env_suffix in the queue name.

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-15 17:59:05 +00:00
Kevin Fenzi
902102d2be composers: Move to fedora 30 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-15 17:43:05 +00:00
Randy Barlow
9887217b0a bodhi: Add a message consumer container pod. 
This commit attempts to move all message consuming except for
the compose.start topic to OpenShift. compose.start needs to
continue to be handled by a VM for now due to it needing the NFS
mount for Koji.

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-15 17:36:34 +00:00
Patrick Uiterwijk
4fb37d8f59 Allow stg os-nodes into basset 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-15 17:54:45 +02:00
Mohan Boddu
3dc41eb1b1 Adding glib-networking to multilib whitelist 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-05-15 13:41:54 +00:00
Stephen Smoogen
4e149374ea [fas/email] change flock aliases for ticket 7799 (fix flock also) 2019-05-15 12:44:16 +00:00
Stephen Smoogen
894a5b6247 [fas/email] change flock aliases for ticket 7799 2019-05-15 12:32:53 +00:00
Pavel Raiskup
d6b0349846 copr: backend: fix selinux context for letsencrypt 2019-05-15 12:03:49 +02:00
Patrick Uiterwijk
df159fcd0e Generate env-specific saml2 metadata 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-15 11:14:58 +02:00
Pavel Raiskup
49a2ca17a7 copr: stg-backend: fix lighttpd config for certbot 
- server.document-root is not needed /.well-known/
- alias.url needs mod_alias loaded
 2019-05-15 10:25:34 +02:00
Clement Verna
61b012de95 pagure: remove the git protocol config from the ansible vars 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-05-15 10:24:49 +02:00
mprahl
d46ba7fbbe Add a missing config option for scratch builds in MBS 2019-05-15 01:53:19 +00:00
mprahl
cabcaf9946 Allow scratch builds in MBS 2019-05-15 01:48:04 +00:00
mprahl
0104e3bf63 Upgrade the libmodulemd1 RPM instead of libmodulemd in the mbs role 2019-05-15 00:19:57 +00:00
Randy Barlow
0509e5ffc5 bodhi: Only backend01 should get the composer.start message. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 20:41:09 +00:00
Randy Barlow
104e857951 bodhi: Subscribe consumer to bodhi.update.edit. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 20:35:29 +00:00
Randy Barlow
126beeb717 bodhi: Don't use subPath on /etc/fedora-messaging. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 20:21:26 +00:00
Randy Barlow
85ca40276f bodhi: Move messaging TLS files to /etc/pki/fedora-messaging. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 20:07:29 +00:00
Randy Barlow
ed9a8e985e bodhi: Mount /etc/fedora-messaging as R/W so OS can mount TLS files. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 19:52:18 +00:00
Randy Barlow
44cc2190dc bodhi: Try a subPath for /etc/fedora-messaging configmap. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 19:38:01 +00:00
Randy Barlow
2f3a00687d bodhi: Raise staging log levels. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 19:21:21 +00:00
Randy Barlow
983664a4c1 bodhi: Add some comments for bodhi 4.0.0. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 19:17:15 +00:00
Kevin Fenzi
fb9cb18511 bodhi: also only apply rabbitmq roles in staging for now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-14 19:12:48 +00:00
Kevin Fenzi
352945f868 bodhi: conditionlize fedora-messaging certs copy to staging only for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-14 19:00:54 +00:00
Randy Barlow
9feb1b7715 bodhi: Set the console hander to debug in stg. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 18:58:11 +00:00
Owen W. Taylor
fc909bdf37 Adjust package ownership sync for separate flatpaks/ namespace 
When we sync package ownership to Koji, the f29-flatpaks tag (which has
the Flatpak containers) tag gets everything in the flatpaks/ namespace,
while the f29-modular tag gets everything in modules/ *and* flatpaks/,
since modules can be built from either.

Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
 2019-05-14 18:49:04 +00:00
Owen W. Taylor
6146da0aea bodhi: Change pagure_flatpak_namespace to flatpaks (production) 
Remove staging conditionalization - Bodhi should always look for
a Flaptak in flatpaks/* in pagure when looking up up ACLs.
 2019-05-14 18:48:06 +00:00
Owen W. Taylor
4e5928d055 Allow a separate flatpaks/ namespace in production 
Adjust the production distgit and MBS configuration to allow
having a separate flatpaks/ namespace and building from there.

Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
 2019-05-14 18:47:48 +00:00
Randy Barlow
ceba590393 bodhi: Add logging for Twisted. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 17:46:27 +00:00
Randy Barlow
254bba52cb bodhi: Use subPath to mount secrets. 2019-05-14 17:25:39 +00:00
Patrick Uiterwijk
0f1606ad25 Use tempoary, writable directory 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-14 19:22:48 +02:00
Patrick Uiterwijk
5138df2848 Fix filename 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-14 18:56:38 +02:00
Kevin Fenzi
d056090c7f websites: Disallow robots crawling fas. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-14 16:54:18 +00:00
Randy Barlow
7a4781f380 bodhi: Mount messaging secrets on /etc/fedora-messaging. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 16:50:17 +00:00
Randy Barlow
7d78e241f7 bodhi: Drop a stray file from the configmap. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2019-05-14 16:07:49 +00:00
Jeremy Cline
22b1a285ab bodhi: use passive declares in fedora-messaging 
AMQP clients don't have permission to create objects, so they can only
validate the objects exist with passive declarations.
 2019-05-14 14:09:47 +00:00
Clement Verna
36fc015c49 MDAPI: lets have 2 pods in OpenShift to run mdapi 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-05-14 14:38:44 +02:00
Pavel Raiskup
620ad35bbb copr: frontend: update cron tasks 
Most of the tasks is in non-%noreplace config nowadays.  The rest
goes to 'copr-frontend-optional' cron script.
 2019-05-14 11:29:03 +02:00
Mikolaj Izdebski
9e4f745cb3 Remove playbooks/manual/upgrade/copr.yml 2019-05-14 10:00:36 +02:00
Pavel Raiskup
acd01d8519 copr: builder: add infra repo only when preparing image 
This is because on aarch64 builders we handle this a little bit
differently, and it would result in having the repo enabled twice.
 2019-05-14 09:36:51 +02:00
Kevin Fenzi
65410b9d5d inventory: drop the constructed inventory for now until we are using it for something specific. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-14 00:19:40 +00:00
Kevin Fenzi
9fe6bbe4bb buildvm: Move buildvm-aarch64-02 to buildvmhost-02. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-13 23:51:47 +00:00