Infrastructure/ansible
5
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions
41686 commits 9 branches 0 tags 110 MiB
Commit graph

96 commits

Author SHA1 Message Date
Kevin Fenzi
e3e2cb1d93 odcs: retire service ( infra 12192 ) 
Time to retire ODCS. ELN is moved off and that was the last thing using
it. Thanks for all the service ODCS!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-09-24 18:21:51 +00:00
Kevin Fenzi
d366194a22 module-build-service (mbs): retire service 
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.

Note that toddlers needs to be adjusted still, that will happen after
this.

Thanks for all the modules!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-05-22 13:38:53 -07:00
Kevin Fenzi
9c125b16ea Add aws-pyai group for ticket 11882 
Note that this needs the group created in ipa first and the aws iam
policy setup.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-18 21:23:57 +00:00
Kevin Fenzi
a60ca7159f nuancier: retire and remove from ansible 
See https://pagure.io/fedora-infrastructure/issue/11371
This service is retired.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 10:44:00 -08:00
Kevin Fenzi
21a3a4f6ff ipsilon: add SAML2 mapping for aws-openscanhub group 
This adds a mapping for a aws-openscanhub group.
See https://pagure.io/fedora-infrastructure/issue/11384 for more info.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-08 22:16:53 +00:00
Aurélien Bompard
360e184862
FMN: move the old to -old and redirect to the new 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-04-26 10:55:25 +02:00
Nick Bebout
6987b8bc1e Add aws-fpl group to ipsilon per mattdm's request 2023-01-10 20:12:27 -06:00
Kevin Fenzi
f183f5262b pagure-stg01 / ipsilon*.stg: split db passwords from stg and prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-09-19 13:53:15 -07:00
Mark O Brien
fd0dbee572 add new aws role for readonly access to fcos bucket 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-08-03 12:27:30 +01:00
Aurélien Bompard
293cf34e8d
Adapt to Ipsilon 3.0.3 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-07-05 17:36:03 +02:00
Aurélien Bompard
b6390112af
amend last commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-25 11:22:57 +02:00
Aurélien Bompard
286bde8098
Ipsilon: use the pam auth module on staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-10-27 10:12:59 +02:00
Clement Verna
ea2354658f Remove fpdc playbooks and config. 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2021-08-10 20:37:12 +00:00
Aurélien Bompard
94b32cee08
Use our custom info plugin 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-25 18:56:08 +01:00
Aurélien Bompard
be8535cf05
Fix ipsilon config 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 17:03:58 +01:00
Aurélien Bompard
7b2c578983
Ipsilon in prod is now on a VM like in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-03-24 13:49:33 +01:00
Patrick Uiterwijk
a07e65afdc Fix saml2 file locations in Ipsilon 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2020-12-01 10:16:08 +01:00
Aurélien Bompard
fadcf80cfd
Get the website in ipsilon 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-21 17:41:51 +02:00
Aurélien Bompard
a2f74a447e
Ipsilon: fix attribute mapping for GPG & SSH 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-21 11:59:43 +02:00
Aurélien Bompard
e0918f5c96
Ipsilon: set the attribute mapping for openid too 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-15 19:05:08 +02:00
Aurélien Bompard
f4684a1f07
Ipsilon: fix config files 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-08 10:11:36 +02:00
Aurélien Bompard
1a1f7d79e4
Ipsilon: fix files location 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-07 14:53:45 +02:00
Aurélien Bompard
d1edc6db3d
Prepare ipsilon for a VM deployment in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-10-05 17:24:56 +02:00
Aurélien Bompard
9b4832feee
Ipsilon: Fix the attribute mapping 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-17 17:03:55 +02:00
Aurélien Bompard
2baa486616
Fix case in configuration 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-17 11:44:32 +02:00
Aurélien Bompard
482c0f799c
Don't get user info from LDAP, use FASJSON 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 15:44:15 +02:00
Aurélien Bompard
ea064cbdc6
Ipsilon: don't use ldaps 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 14:57:16 +02:00
Aurélien Bompard
3ba34383b3
Ipsilon: configure the LDAP auth plugin 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 14:41:33 +02:00
Aurélien Bompard
07f4977aac
Ipsilon: remove FAS auth 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-16 13:20:45 +02:00
Aurélien Bompard
70f71744fb
Ipsilon: prepare config changes for staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2020-09-11 15:22:15 +02:00
Rick Elrod
ea96618bd4 Get rid of modernpaste everywhere, redirect it to paste.centos.org everywhere 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:18 +02:00
Kevin Fenzi
e50fa5f3f2 freshmaker: remove everything 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:14 +02:00
Mikolaj Izdebski
91bcaf4b43 ipsilon: Update Koschei URL in openid trusted roots 2020-04-24 21:34:11 +02:00
Patrick Uiterwijk
7b02e3c689 Add kerneltest oidc in prod 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-20 19:41:23 +02:00
Patrick Uiterwijk
9766327633 Add kerneltest oidc extension 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-20 19:35:30 +02:00
Patrick Uiterwijk
433270afac ipsilon: move over definitely to openshift 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 16:02:46 +02:00
Patrick Uiterwijk
c2731b0ca0 ipsilon: move saml2 metadata to tempdir 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 15:58:28 +02:00
Patrick Uiterwijk
fa7c9891fa In openshift, always use oidc.key 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 14:07:52 +02:00
Patrick Uiterwijk
6fd848dbeb Persona is dead. Nuke it 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-09 13:45:28 +02:00
Clement Verna
8f8daf1847 IPSILON: enable fpdc oidc plugin in production and staging 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-11-26 09:37:29 +01:00
David Shier
c0f45892ff Removed all traces i could fild of the tagger and statscache (and stats_cache for databases) in ansible, proxy configs, and the nagios config. Pursuant to request in pagzre issue https://pagure.io/fedora-infrastructure/issue/7267 . - Odin2016 2018-10-03 17:50:38 +00:00
Mikolaj Izdebski
259ac6a466 Cleanup some Jenkins leftovers 2018-08-06 19:02:47 +00:00
Rick Elrod
4a60ddc875 Nuke pkgdb some more... and probably break everything. 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2018-07-19 20:40:14 +00:00
Ricky Elrod
5f12f40dfb ipsilon oidc scope for modernpaste 
Signed-off-by: Ricky Elrod <relrod@redhat.com>
 2018-04-04 19:37:08 +00:00
Patrick Uiterwijk
de9af8deda Add src.fp.o OIDC push OIDC scope 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-02-07 19:48:49 +01:00
Ralph Bean
193971bcf0 Enable freshmaker OIDC scopes in prod ipsilon. 2018-02-02 17:10:21 +00:00
Ralph Bean
3b21215d4d Add OIDC scope for freshmaker (staging). 2018-02-02 17:04:05 +00:00
Patrick Uiterwijk
efd711ad97 This should have gone to production a while ago... Lets do so now 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-01-03 20:29:48 +01:00
Patrick Uiterwijk
714d351fc9 Add src.fp.o to trusted roots and deploy wiki scope to prod 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-16 19:33:04 +00:00
Patrick Uiterwijk
bc0bd0df5b Define mediawiki scope 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-11-13 00:37:39 +00:00