Commit graph

20896 commits

Author SHA1 Message Date
Kamil Páral
493b871b49 taskotron: use production-override repo and enable mtf-containers
In production.
2017-11-27 14:36:03 +01:00
Patrick Uiterwijk
bc3bbcb5c0 Also return 421 from non-phx2 proxies for src.fp.o
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-26 21:13:33 +00:00
Patrick Uiterwijk
40de21728b Set the error message centrally
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-26 21:12:32 +00:00
Patrick Uiterwijk
34a655ee37 Send a 421 Misdirected error to koji from non-phx2 proxies
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-26 21:05:59 +00:00
Jakub Kadlcik
a4d4c044c8 Fix KeyError issue with relay_inbound and relay_outbound settings 2017-11-26 00:46:39 +00:00
Kevin Fenzi
a901cb2093 drop this since we just remove it later because we are using python3 2017-11-25 23:36:59 +00:00
Kevin Fenzi
fc484f796c drop some old openvpn stuff 2017-11-25 21:44:59 +00:00
Patrick Uiterwijk
44b5d262f7 We keep getting more constants. Instead just stop reporting these
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-25 18:43:49 +00:00
Patrick Uiterwijk
55081a1dff Add silly definitions to avoid using undefined things
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-25 18:39:20 +00:00
Patrick Uiterwijk
afc9870755 Make fpaste.org use certgetter
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-25 00:07:42 +00:00
Patrick Uiterwijk
ac055b3927 Deploy ticketkey as part of proxy role
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-25 00:02:26 +00:00
Patrick Uiterwijk
1225d45cfe Nuke these letsencrypt entries as well
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-24 23:36:41 +00:00
Patrick Uiterwijk
fbd3ed0d53 Proxies do not need to get certbot
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-24 23:31:34 +00:00
Patrick Uiterwijk
361fccdcc2 On vh21, we have vg_guests
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-24 23:12:29 +00:00
Patrick Uiterwijk
502b8ca509 Use standard wildcard cert for id.fp.o
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-24 22:56:58 +00:00
Patrick Uiterwijk
0f678956da Fix prod reverse proxies
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-24 22:53:44 +00:00
Patrick Uiterwijk
e1bb4e64a4 Do not includeSubDomains for id.fp.o STS
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-24 22:49:05 +00:00
Patrick Uiterwijk
cabbfe3015 Deploy split servers to prod
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-24 22:46:24 +00:00
Patrick Uiterwijk
bc95beb269 Split id.fp.o and username.id.fp.o for TLS/h2 reasons. Start with staging
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-24 22:20:25 +00:00
Patrick Uiterwijk
cc1795cec7 Also add koji stuff on other internal proxies
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-24 21:45:48 +00:00
Kevin Fenzi
37c7bf8b21 try increasing this to make src.fp.o more responsive 2017-11-24 19:51:35 +00:00
Kevin Fenzi
07cdaf24f4 weed out some debug and warn messages from openshift apps and fedmsg 2017-11-24 04:43:50 +00:00
Patrick Uiterwijk
a20b20b32a Try this
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 23:56:01 +00:00
Patrick Uiterwijk
e578d9be02 Fix this consistently
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 23:55:19 +00:00
Patrick Uiterwijk
a8aef4be9b Make sure that nrpe can monitor fedmsg-gateway on slave gateways
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 23:50:14 +00:00
Patrick Uiterwijk
012f59c57f PDC is too slow for bodhi, for a workaround let's use pkgdb
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 20:53:22 +00:00
Patrick Uiterwijk
5e40f1b33b Revert "Remove the mirrorlist container on removal"
This doesn't work with older docker

This reverts commit a408629158.
2017-11-23 20:49:38 +00:00
Kevin Fenzi
163569f068 if we do not have lvm installed at all we should ignore the failure here 2017-11-23 20:39:06 +00:00
Patrick Uiterwijk
a408629158 Remove the mirrorlist container on removal
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 20:29:52 +00:00
Kevin Fenzi
b38e329ced work around cancel button issue in WikiEditor, hopefully fixed next release 2017-11-23 19:00:52 +00:00
Patrick Uiterwijk
907ae0d6a9 Add tag
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 17:39:58 +00:00
Kevin Fenzi
36ac145a7e drop all twistd messages for now until notifs stops looping on a bad email 2017-11-23 17:37:29 +00:00
Kamil Páral
d053983613 taskotron-trigger: fix template/copy error 2017-11-23 16:46:07 +01:00
Kamil Páral
d6e02c0d27 taskotron-trigger: allow to use .env suffix for trigger_rules.yml.j2 2017-11-23 16:44:05 +01:00
Kamil Páral
1d13d60295 taskotron: enable task-mtf-containers on stg 2017-11-23 16:37:41 +01:00
Kamil Páral
2ea37aef64 taskotron-client: add taskotron-production-override repo to minion_repos
For stg only, to test it.
2017-11-23 16:22:49 +01:00
Patrick Uiterwijk
31e183670f Add proxy101/110 to the correct groups
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 14:24:00 +00:00
Patrick Uiterwijk
c3e5a23426 Add ccd files
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 14:19:11 +00:00
Kamil Páral
b402380168 taskotron: clone mtf-containers task everywhere 2017-11-23 14:58:13 +01:00
Patrick Uiterwijk
d42f2a8b3d Add proxy101/110 vars
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 13:53:05 +00:00
Kevin Fenzi
8e916e6388 enable WikiEditor. ticket 6521 2017-11-23 05:56:05 +00:00
Kevin Fenzi
547e12ddf8 we need this for openidc to work right 2017-11-23 05:37:11 +00:00
Kevin Fenzi
18433b198f more memory for unbound 2017-11-23 04:16:15 +00:00
Patrick Uiterwijk
dac95658c9 This is a full path
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 01:51:13 +00:00
Patrick Uiterwijk
cf97e949ad If mirrorlist2 is empty, populate
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 01:50:05 +00:00
Patrick Uiterwijk
6ca79cbfa3 Require CLA+1
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 01:31:34 +00:00
Patrick Uiterwijk
a52525b9e8 Stg and prod have the same role now
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 01:10:21 +00:00
Patrick Uiterwijk
0527d7d23e Request CLA and groups scopes
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 01:07:11 +00:00
Patrick Uiterwijk
70155259a7 This plugin is no longer there
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 00:52:13 +00:00
Patrick Uiterwijk
3a55c768bf Fix fedmsg-emit accessing private fields
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 00:50:45 +00:00