Commit graph

42500 commits

Author SHA1 Message Date
Pavel Raiskup
185c7d61aa copr-be: decrease the s390x consumption in us-east
Per report from IBM, we need to ASAP decrease the capacity in
Washington, the load from ZCommunity3 account affects other customers.
2024-12-18 08:33:26 +01:00
Kevin Fenzi
0ca7bf3622 people: adjust correct quota for dmalcolm
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-17 13:21:25 -08:00
Kevin Fenzi
eb3616b48e openqa: aarch64 workers do not have a hw rng device
This may have been true at some point in the past, but currently none of
the aarch64 workers have hwrng. So, disable it here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-17 10:33:45 -08:00
Aurélien Bompard
f4439d42c1
Add caching in toddlers
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-17 16:39:39 +01:00
Kevin Fenzi
82a3175c48 serial-console: only start gettys on x86_64
power and also now all our aarch64 bvmhosts shouldn't start serial
getty. Only the x86_64 ones have this, so just match on them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-15 10:43:27 -08:00
Kevin Fenzi
6743920113 crypto-policies: fix copypasta for ipsilon servers
Looks like this conditional was copied and I failed to update the name.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-15 10:28:34 -08:00
iamyaash
cc2f3f1986 updated broken links in README.md 2024-12-13 19:00:34 +00:00
Kevin Fenzi
c11d415d86 crypto-policies / ipsilon: set policy to FEDORA40 on ipsilon servers
We need this policy to get bugzilla SAML2 auth working (for now)
See https://pagure.io/fedora-infrastructure/issue/12321

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-13 10:29:42 -08:00
Kevin Fenzi
97a87b6f86 buildvm-s390x-01.stg: move var to the right place
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-12 16:54:12 -08:00
Kevin Fenzi
7b42c56a98 buildvm-s390x-01.stg: fix varnish group
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-12 16:42:04 -08:00
Kevin Fenzi
ba054c55f3 buildvm-s390x-14: fix dropped variables for s390x varnish cache
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-12 16:36:40 -08:00
Kevin Fenzi
95560f3064 koji_hub: add kiwiBuild to Tasks
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-12 14:04:02 -08:00
Aashish Radhakrishnan
ba1fac3504 coreos-ci: add aaradhak to appowners 2024-12-12 13:22:25 -05:00
Michael Armijo
e381a7aadb coreos-ci: add marmijo to appowners 2024-12-12 15:14:02 +00:00
12b4478bd5 Add precommit config
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-12-12 12:44:12 +10:00
Kevin Fenzi
84fff86aaa elections: fix typo
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-11 17:00:11 -08:00
Kevin Fenzi
cd4cf0596c elections: try and adjust for new flask-oidc
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-11 16:54:51 -08:00
Seddik Alaoui Ismaili
24aaee6429 move apps to memcached02 2024-12-11 23:22:28 +00:00
Kevin Fenzi
37425b8f9c rabbitmq_cluster: add missing _
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-11 12:43:15 -08:00
Michael Armijo
b0bef64a9e coreos-applications: add marmijo to appowners
Add marmijo to the list of project_appowners for CoreOS related tools
2024-12-11 11:36:40 -07:00
Reon Beon
6eba928748 Update roles/openshift-apps/release-monitoring/templates/anitya.toml adds guix
Adds guix
2024-12-11 12:00:04 +00:00
Aurélien Bompard
183f4ff7a4
Distgit: missing dependency
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-11 11:51:03 +01:00
Aurélien Bompard
311f9c009a
Use OIDC in Dist-Git
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-11 11:33:38 +01:00
Aurélien Bompard
6a5f359a91
Fix syntax
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-11 10:51:46 +01:00
Aurélien Bompard
810f660711
Poddlers: only setup a queue when the toddler isn't disabled
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-11 10:47:46 +01:00
Aurélien Bompard
e7e2671ebb
Unbind the toddlers queue
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-11 10:35:48 +01:00
Michael Armijo
8f423f4bad fedora-ostree-pruner: update to fedora:41
xref: https://github.com/coreos/fedora-coreos-releng-automation/pull/191
see: https://github.com/coreos/fedora-coreos-tracker/issues/1695
2024-12-11 02:36:56 +00:00
Michael Armijo
b296338620 coreos-ostree-importer: update to fedora:41
xref: https://github.com/coreos/fedora-coreos-releng-automation/pull/191
see: https://github.com/coreos/fedora-coreos-tracker/issues/1695
2024-12-11 02:36:56 +00:00
Michael Armijo
1ff5665977 coreos-koji-tagger: update to fedora:41
xref: https://github.com/coreos/fedora-coreos-releng-automation/pull/191
see: https://github.com/coreos/fedora-coreos-tracker/issues/1695
2024-12-11 02:36:56 +00:00
Michael Armijo
f95b6402f9 coreos-cincinnati: update to fedora:41
xref: https://github.com/coreos/fedora-coreos-cincinnati/pull/102
see: https://github.com/coreos/fedora-coreos-tracker/issues/1695
2024-12-11 02:36:56 +00:00
Kevin Fenzi
ce1f5b02e6 ipa_client: on f40 there is no sssd user, so files are owned by root
On rhel and f41+ there is a sssd user, so we should use that.
If we don't, sssd will change the ownership on restart, meaning we flip
it back and forth each time we run the playbook.

remember to remove this when fedora 40 is all gone from infra

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-10 14:43:47 -08:00
Kevin Fenzi
df36530d00 ipa_client: add tag for nss ignore file to allow globally updating it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-10 14:01:54 -08:00
Michael Armijo
bd7aa185ca openshift-apps/fedora-ostree-pruner: add marmijo to project owners
update the project appowners list to include marmijo
2024-12-10 13:58:32 -07:00
Kevin Fenzi
ce619b259d buildvm_s390x: add missing hosts to inventory
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-10 10:53:33 -08:00
Kevin Fenzi
82a8e8dbc9 buildvm_s390x: cleanup and add 7 new builders.
We no longer need to keep any config around from boston, so nuke that.
All the buildvm's are now kvm, so we don't need a seperate group/config
for that, so remove it.

Consolidate the variables down to buildvm_s390x group and only have ip
address for host vars.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-10 10:50:25 -08:00
Aurélien Bompard
e547715fce
Poddlers/SCM Requests Processor: fix the subscriptions
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-10 17:29:36 +01:00
Michal Konecny
c851192805 [mailman3] Fix for DMARC mitigation task
The task checked wrong variable for output. Let's fix that.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-12-10 14:20:25 +01:00
Aurélien Bompard
8d6026a6aa
Replace toddlers with poddlers in prod
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-10 10:03:52 +01:00
Aurélien Bompard
fe1c5c0e62
Change the loop variable name to avoid conficts in nested loops
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-10 09:42:54 +01:00
Aurélien Bompard
64734c21e9
Set a default for keytab_host
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-10 09:42:36 +01:00
Aurélien Bompard
ffd14b9538
Pass the variables from openshift/keytab down to keytab/service
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-10 09:34:52 +01:00
Aurélien Bompard
d18ec8b7f6
Enable poddlers for prod
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-10 09:17:30 +01:00
Aurélien Bompard
0d5a2a1a6d
Poddlers: disable distgit-commit-processor
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-10 09:13:51 +01:00
Aurélien Bompard
266a942b49
Update poddlers with the latest changes in toddlers
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-10 09:08:34 +01:00
Kevin Fenzi
3bb1fbe254 serial-console: switch to shell since we are using wildcards
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-09 18:14:17 -08:00
Kevin Fenzi
687314e1c1 login-registry: Try and make command idempotent
Right now we just always run this login command no matter what.
Instead lets not run it if the credentials file is already present.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-09 17:59:50 -08:00
Kevin Fenzi
aaa29839fa ipa_client: the fedora-sss-ignore.conf file should be owned by sssd user/group
We change this to root/root and then restart sssd and it changes it
back. So, lets do this right and let it be sssd/sssd.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-09 17:54:13 -08:00
Kevin Fenzi
73cfa04822 serial-console: grub2-editenv list doesn't get us boot args
grub2-editenv list  doesn't get us the boot args, so instead just grep
for them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-09 17:50:23 -08:00
Kevin Fenzi
ccb3e81b62 koji_builder: don't try and run rngd on aarch64 either
It tries to start on aarch64, but fails.
So, only run rngd on x86_64

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-09 17:42:27 -08:00
Kevin Fenzi
28a290f2bf db-riscv-koji01: use newer postgres here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-09 16:27:29 -08:00