Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
42530 commits 9 branches 0 tags 111 MiB
Commit graph

42530 commits

This branch
This branch
All branches
Author SHA1 Message Date
David Kirwan
f614850bb8
firmitas: change location of certlist.yml in myconfig.py 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-01-21 10:43:07 +00:00
David Kirwan
3a0ff8701c
firmitas: Removed refernces to certlist.yml 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-01-21 10:22:21 +00:00
Ryan Lerch
db3b389c66 Fix meta-incorrect linting issues 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-21 15:40:59 +10:00
Kevin Fenzi
7be10a8cc3 registry: adjust regex for registry html redirect 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-20 16:20:50 -08:00
Ryan Lerch
98c457adeb Comment out install_cloud_cert.yml 
This file appears to not be used anymore, and contained linting issues.
So just commenting out the whole file for now and leaving a note.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-21 09:37:36 +10:00
Mattia Verga
2b4de7b85d another try on registry redirection 
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
 2025-01-20 23:18:55 +00:00
Kevin Fenzi
9495fde3f4 sshd: drop old rhel6 stuff 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-20 14:17:21 -08:00
Kevin Fenzi
8140d863f0 koji_builder: no longer install koji-containerbuild packages 
These packages were used when we were building containers in OSBS, and
since we don't do that anymore, drop installing that anywhere.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-20 14:13:31 -08:00
Kevin Fenzi
0e815134b7 mariadb: use pxz with 2 threads for backups 
This has anoyingly been alerting of late, so lets try and
see if we can get the backup to finish faster and avoid the
alerts on it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-20 12:49:47 -08:00
Pavel Raiskup
b21ba1a873 copr-be: better document pools.yaml.expand.sh 2025-01-20 14:43:05 +01:00
Jiri Kyjovsky
5f10a45efb copr: add missing increased volume for normal_powerful pools 2025-01-20 14:29:45 +01:00
Pavel Raiskup
677203d962 copr-be: pools.yml has been removed to yml.j2 
Complements: 5bdfe4b1e5
 2025-01-20 14:29:45 +01:00
Peter Oliver
a3e04360f5 Add release-monitoring.org package URL mapping for F-Droid 2025-01-19 16:37:47 +00:00
Michal Konecny
a0720a8029 [proxies] Remove trailing / in redirects 
This was first found in epel.io redirect, but it could cause issues in
other redirects as well. It is better to remove them.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-01-18 00:51:47 +00:00
Kevin Fenzi
759ee55f18 bastion: fix delivering non contributors emails locally 
Should fix:
https://pagure.io/fedora-infrastructure/issue/12361

Basically postfix default is:
local_recipient_maps = proxy:unix:passwd.byname $alias_maps
so if the user is a local user or an alias, it's valid.
However, sssd and ipa show all users (even ones with no
access to that host). This means we were accepting and delivering
(locally) emails for anyuser@fedoraproject.org.

Setting this to just $alias_maps will just treat aliases as valid
and ignore all the local users. This should be fine as we use
aliases to send even to root or other system users.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-17 15:31:21 -08:00
Kevin Fenzi
96a5107afa registry: just test in staging for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-17 10:27:44 -08:00
Kevin Fenzi
719417e668 registry: handle stg redirect too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-17 10:18:24 -08:00
Mattia Verga
926b12b2a5 Move registry redirects rules to reverseproxy 2025-01-17 17:52:24 +00:00
Kevin Fenzi
351066d106 registry: add back sync for flatpak-indexes 
We had the flatpak indexes mixed in here with the registry page made by
reg. We need to keep this so we continue to sync flatpak deltas
correctly out.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-17 09:45:26 -08:00
Kevin Fenzi
51965498c1 proxies: drop registry sync cronjob 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-16 17:43:22 -08:00
Kevin Fenzi
b17c119bea btrfs: fix another handler case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-16 15:14:10 -08:00
Kevin Fenzi
d4523c609d koji_builder: fix another handler case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-16 15:06:57 -08:00
Kevin Fenzi
e196958322 base: fix another handler case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-16 14:52:49 -08:00
Kevin Fenzi
1e77199920 base: fix more handler renaming issues 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-16 14:44:00 -08:00
Timothée Ravier
1507d79814 bodhi2/pungi.rpm.conf: Don't build Atomic Desktops for PPC64LE (F42+) 
See: https://fedoraproject.org/wiki/Changes/AtomicDesktopsNoPpc64le
 2025-01-16 22:06:47 +00:00
Timothée Ravier
3f1c708217 bodhi2/pungi.rpm.conf: Simplify failable key to '*' 2025-01-16 22:06:47 +00:00
Timothée Ravier
a1802527a6 bodhi2/pungi.rpm.conf: Update now that F39 is EOL 
This condition is now always true.
 2025-01-16 22:06:47 +00:00
Mattia Verga
afaaf68b22 reg-server: stop serving outdated pages 
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
 2025-01-16 21:35:11 +00:00
James Antill
80aa4bbbc2 Initial version of iptables to nftables conversion. 2025-01-16 11:28:24 -05:00
Aurélien Bompard
f6b0cd0d48
Add collectd to the poddlers builder image 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-01-16 16:29:23 +01:00
Michal Konecny
809f6c45fd [release-monitoring] Narrow GitHub scopes 
We don't need anything else than e-mail and username to login user.
Let's narrow the scopes for GitHub to only user:email.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-01-16 14:33:00 +01:00
Michal Konecny
0716233b7a [proxies] Fix redirect for epel.io 
Fixes https://pagure.io/fedora-infrastructure/issue/12364

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-01-16 12:30:35 +01:00
Aurélien Bompard
bac0e1e18f
Poddlers: add liveness and readiness monitoring 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-01-16 09:43:51 +01:00
Kevin Fenzi
6c38d7b61a various: fix some more shell variables that were accidentally converted to builtin.shell 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 17:26:50 -08:00
Kevin Fenzi
1f8751a00c xinetd: no change in case on xinetd restart 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 17:17:08 -08:00
Kevin Fenzi
1145fa67a6 rsyncd: fix notifier case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 17:16:12 -08:00
Kevin Fenzi
d30b2ecfaa nagios_client: fix shell call to useradd 
This is a actual shell var, not a call to the ansible shell plugin.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 17:08:56 -08:00
Kevin Fenzi
13266214d2 ipa / handlers: Fix call to 'restart sssd' that is now 'Restart sssd' 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 16:36:11 -08:00
Justin W. Flory (he/him)
f5368a271c
🔧 proxies-redirects: Redirect parameter for docs.fp.o/dei/ redirect 
This commit enhances the redirect regex used for the docs.fp.o redirect
for the DEI Team documentation. I follow @kevin's example from the CPE
to CLE docs redirect, which uses a parameter and redirects a specific
page to the new address. Currently, the DEI Team docs redirect will take
the user to the main page of the team, regardless of what specific page
is visited.

I also added a `docs` tag to the CLE tags redirect, since it is a Fedora
Docs-specific redirect too.

Signed-off-by: Justin W. Flory (he/him) <jwf@redhat.com>
 2025-01-15 13:11:24 -05:00
Kevin Fenzi
b30121aee4 proxies / redirectmatch: redirect cpe to cle for docs ( https://pagure.io/cpe/docs/issue/35 ) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 09:29:10 -08:00
Pavel Raiskup
fda55f0dd9 copr-fe: fix the high-performance pattern for @secureblue 
https://github.com/fedora-copr/copr/issues/3331
 2025-01-15 12:52:05 +01:00
Ryan Lerch
a0cd459d47 Fix some references in tasks dropping .j2 
When fixing conflicts when merging the PR containing commit 47c68f4,
some of the .j2 suffuxes i added in tasks were erronounusly dropped.

this fixes those.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 19:44:59 +10:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template 
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 11:30:29 +10:00
Ryan Lerch
3c41882bb0 ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell 
Replaces references to shell: with ansible.builtin.shell

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 11:29:10 +10:00
Ryan Lerch
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package 
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 11:28:00 +10:00
Ryan Lerch
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command 
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 11:26:47 +10:00
Ryan Lerch
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy 
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file 
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 10:41:52 +10:00
Aurélien Bompard
f3517ab537
Escape jinja template chars when necessary 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-01-14 17:25:50 +01:00
Aurélien Bompard
4fe5bfd9e5
MirrorManager: add protoc to the builder image 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-01-14 17:03:47 +01:00