Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
39222 commits 9 branches 0 tags 111 MiB
Commit graph

39222 commits

This branch
This branch
All branches
Author SHA1 Message Date
Seddik Alaoui Ismaili
b79003cfda compress merged logs under /var/log/hosts 2023-06-22 20:50:46 +00:00
Kevin Fenzi
14eb1bc04e backups: disable people02 to fix the backup sync 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-22 13:09:53 -07:00
Joseph Marrero
dfbfed61e2 fedora-coreos-pipeline.yml: Add luyang 2023-06-22 15:39:19 -04:00
Kevin Fenzi
df8b56a408 notifs: add sysadmin-noc to sudo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-22 12:19:07 -07:00
Kevin Fenzi
b2a5d19443 directory.fedoraproject.org redirect: fix double slash 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-22 11:23:41 -07:00
Kevin Fenzi
d8580004c7 directory: redirect with url ( infra 11385 ) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-22 10:57:01 -07:00
František Zatloukal
15c8754bd2 Revert "Blockerbugs: switch stg to update_versioneer branch" 
This reverts commit bfb5745b4c.
 2023-06-22 15:29:52 +02:00
Adam Williamson
fc84286f93 greenwave: enable Rawhide gating on openQA update tests 
As per https://pagure.io/fesco/issue/3011 and
https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org/message/G2K2SMYN7ONOJEFQEMCDR7GK72MZQFYB/
this enables gating of Rawhide updates on the same set of tests
used to gate stable and Branched updates.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-22 11:36:54 +02:00
Kevin Fenzi
f20fef66c3 buildvm-ppc64le: rebalance ppc64le builders 
Move to only 8 builders per bvmhost and move them around to make the
numbers come out to 32. Drop 34-40.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-21 15:12:14 -07:00
Kevin Fenzi
0772307af5 Revert "buildvm-ppc64le: try reenabling this nested feature" 
This reverts commit 9938279f6b.

Turns out this isn't supported in virt-install, which is why I removed
it. ;)
 2023-06-21 11:45:06 -07:00
Kevin Fenzi
9938279f6b buildvm-ppc64le: try reenabling this nested feature 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-21 11:40:39 -07:00
Adam Williamson
5a7591a618 openqa AMQP: mark the users as not publish-only 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 13:33:54 +02:00
Adam Williamson
be953e0be4 Dangit, went too far. Only the scheduler should be set that way 
Sigh. Sorry, this stuff is hard to keep straight in my head.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 13:26:16 +02:00
Adam Williamson
b50fa6a477 openqa amqp: fix stg-on-prod queue names 
so, this was working before somehow, but it was pretty clearly
wrong. We were using queues owned by openqa.stg on the prod
rabbitmq instance for the cases where the openQA "stg" consumers
need to listen to prod queues. This can only have been working
with an openqa.stg user on prod, which seems wrong. Instead,
these three consumers should do it the way the relval and
relvalami consumers do - use a queue owned by the "openqa" user,
but with a suffix so they have a different queue from the actual
prod queue. The upshot of this is that in the configs, we should
go from:

amqp_url = "amqps://openqa:@rabbitmq.fedoraproject.org/%2Fpubsub"
...
queue = "openqa.stg_scheduler"

- which is weird and I have no idea how it ever worked - to:

amqp_url = "amqps://openqa:@rabbitmq.fedoraproject.org/%2Fpubsub"
...
queue = "openqa_scheduler_stg"

- which seems much more sensible.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 13:15:38 +02:00
Adam Williamson
bedeaaa8f7 openqa messaging config - add back a missing leading slash 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 12:36:27 +02:00
Adam Williamson
e3a4908ae0 ...so close... 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 12:27:03 +02:00
Adam Williamson
31f4668476 openqa: tweak rabbit user creation stuff... 
ugh.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 12:25:21 +02:00
Adam Williamson
085e6e0828 unquote sent_topics 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 12:07:15 +02:00
Adam Williamson
9953afa06e openqa etc: fix up and improve AMQP messaging configuration 
This is triggered by
https://pagure.io/fedora-infrastructure/issue/11375 , but the
changes are rather extensive. Unfortunately, some of the
relevant files got messed up by the alphabetical sort thing that
got run on several group variable files a while ago, so that
confuses the diff a bit - I had to unwind those changes to make
the files readable again in order to make these changes.

Ultimately the goal here is to make the config more consistent
and more functional - the variables used and their names should
be more consistently related to what they're actually *for*,
which I didn't entirely understand when setting this up. So
we have variables for the username being used in each case and
we use that variable where we're referring to the username, for
instance. This should also make the whole thing about the cases
where listeners on the openQA stg/lab instance need to listen
to prod messages clearer, too. It also makes the user creation
clearer by doing it explicitly, just once per user, instead of
haphazardly doing it implicitly through the queue definitions.

And finally it should also actually fix 11375, by giving the
appropriate write permissions to each user.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 12:04:55 +02:00
František Zatloukal
bfb5745b4c Blockerbugs: switch stg to update_versioneer branch 2023-06-20 16:09:10 +02:00
František Zatloukal
f477927139 Revert "Revert "Blockerbugs: switch to ubi9"" 
This reverts commit d8c9093ca8.
 2023-06-20 14:44:56 +02:00
František Zatloukal
d8c9093ca8 Revert "Blockerbugs: switch to ubi9" 
This reverts commit 44b562c155.
 2023-06-20 14:36:56 +02:00
František Zatloukal
44b562c155 Blockerbugs: switch to ubi9 2023-06-20 14:21:52 +02:00
amedvede
175f4ed82a feat: moved the section with fas username that is used for comment on issues to be used for all toddlers 2023-06-20 09:43:30 +02:00
Adam Williamson
c40ecfef1d openqa: also listen for ODCS state change messages 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-19 18:12:56 +02:00
Pavel Raiskup
21be6fd294 copr: use smtp-auth-relay for all hosts 2023-06-19 11:08:23 +02:00
Pavel Raiskup
bee7b64fe5 main.cf files need to be moved before we claim they are templates 
Revert "postfix: install main.cf as template"

This reverts commit 57f75cbcab.
 2023-06-19 10:39:39 +02:00
Pavel Raiskup
57f75cbcab postfix: install main.cf as template 
There is no jinja in the current main.cf files, except for the Copr
main.cf that uses STARTTLS for SMTP relayhost.
 2023-06-19 10:33:33 +02:00
Pavel Raiskup
8d891f9b32 smtp-auth-relay: reset main.cf 
The postfix_group is used on multiple places.
 2023-06-19 10:26:46 +02:00
Pavel Raiskup
19bfd92e3b copr: fill smtp_auth_relay password correctly 2023-06-19 10:13:53 +02:00
Pavel Raiskup
82205131b7 smtp_auth_relay: new role, use by copr-dist-git-dev for now 2023-06-19 10:10:43 +02:00
Kevin Fenzi
2be84b22aa db-koji01: adjust to afffect current performance tuning 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-16 12:03:24 -07:00
Timothée Ravier
9240690c3a openshift: Remove Silverblue website 
The website is now available at https://fedoraproject.org/silverblue/
The repo for the previous website has been archived:
https://github.com/fedora-silverblue/silverblue-site
 2023-06-16 16:50:07 +00:00
Pavel Raiskup
be81e532c0 copr: revert back to the default Mageia configs 
The problems are fixed by:
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-4b79d42761
 2023-06-16 11:16:57 +02:00
Kevin Fenzi
3daedbd42f smtp-mm-osuosl01: add more memory here to see if that gets it to install 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-15 19:37:53 -07:00
Tomas Hrcka
05eedc3f44 Add new mapping for opnh264 epel9 repositories to mirromanager 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-06-15 21:14:44 +00:00
Tomas Hrcka
627b39112f Add signing for f39-perl sidetag 
Fix the key

Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-06-15 20:53:58 +00:00
Pavel Raiskup
047e6f3c6c copr: Mageia Cauldron Mock build is broken with --use-bootstrap-image 
So revert back to the mock-core-configs default configuration; and wait
till https://github.com/xsuchy/distribution-gpg-keys/pull/99 is
resolved.
 2023-06-15 20:25:59 +02:00
Pavel Raiskup
e36f5cc939 copr: use_bootstrap_image for Mageia chroots 
Solving similar problems with keys as with openSUSE
before in cd7df06b87
 2023-06-15 08:24:43 +02:00
Kevin Fenzi
2cc5d18042 smtp-mm-osuosl01: move to rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 16:38:00 -07:00
Kevin Fenzi
7d2247369f dns: more tweaking for ddos handling 
Increase the window so we keep track of more queries
Set the max number of nxdomains to try and drop those.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 15:28:46 -07:00
Kevin Fenzi
e6d08451ca dns: adjust named config for DDoS 
Increase a number of values, add some limits.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 15:20:44 -07:00
Kevin Fenzi
adef5b55fd proxies: fix duplicate cert here, only use the wildcard one. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 11:58:16 -07:00
Kevin Fenzi
1c187bf308 download: update mirror acls for tier2 mirror 
Received on the mirror-admin list.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 10:16:47 -07:00
Dusty Mabe
466f7f1fd7
coreos-cincinnati: deploy current git (086c9f1) 2023-06-14 11:09:58 -04:00
Kevin Fenzi
b6d8e745d1 flatpak-indexer: add kalev to appowners 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-14 07:32:23 -07:00
David Kirwan
859c212770 zabbix: rename php-fpm config files 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-14 12:47:17 +01:00
David Kirwan
dcbfc405eb zabbix: replace template task with copy 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-14 12:13:58 +01:00
David Kirwan
c881ad8d65 zabbix: add templates for php-fpm 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-14 11:57:34 +01:00
Pavel Raiskup
b9c69f5cac copr: move epel-6 to rhel+epel from centos+epel 
Relates to the certificate issues
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/KOR3HE2VHHIPDBLDLXTYRMON6JQXCHMW/

The problem was the centos-6 key, not EPEL-6 key.

Reverts: 7b1cf87845
Reverts: 0fc0655e47
 2023-06-14 10:58:47 +02:00