Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
42988 commits 9 branches 0 tags 111 MiB
Commit graph

42988 commits

This branch
This branch
All branches
Author SHA1 Message Date
Neal Gompa
c6d2371874 roles/bodhi2: Turn SQLite metadata back on for EPEL 
This is still needed for MDAPI.

Signed-off-by: Neal Gompa <ngompa@fedoraproject.org>
 2025-05-14 23:26:28 +00:00
Neal Gompa
1ce3e36f76 roles/bodhi2: Set EPEL to use zstd repodata and disable unusable features 
Zstd repodata support was introduced in DNF quite some time ago, and
is quite a bit faster and less resource intensive.

Additionally, there is no point in producing sqlmd or DeltaRPMs when
support for both has been removed from RHEL for a fair bit of time.

Regardless, we should leave things mostly as-is for EPEL 9, and thus
we retain older xz compression settings for that.

Signed-off-by: Neal Gompa <ngompa@fedoraproject.org>
 2025-05-14 23:26:28 +00:00
Kevin Fenzi
5d1e014ccd dns / iad2: add mgmt.rdu3 to iad view 
We want to be able to ping/resolve the rdu3 mgmt hosts from iad2.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-14 15:17:42 -07:00
Kevin Fenzi
0835a63791 dns / rdu3: add in rdu3 zones to dns 
This should setup the rdu3 vlans with initial dns, which is just a copy
of our iad2 networks with 10.3 changing to 10.16.

Once rdu3 machines have network we should be able to use these to let
rdu3 hosts query the regular dns servers for things.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-14 15:09:01 -07:00
Jakub Kadlcik
278dabfd01 copr-be-dev: update testing bootc builder image 2025-05-14 23:24:02 +02:00
Jakub Kadlcik
0287b6b91a copr-be-dev: update testing bootc builder image 2025-05-14 22:24:32 +02:00
Jakub Kadlcik
09cb34b7cd copr-be-dev: update testing bootc builder image 2025-05-14 21:42:29 +02:00
Jakub Kadlcik
de4d24f34a copr-be-dev: update testing bootc builder image 2025-05-14 21:09:15 +02:00
Adam Williamson
3c11437658 openqa nftables: correct tap worker custom rule (per james) 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-05-14 11:14:45 -07:00
Adam Williamson
177c2b3f2f Enable nftables on all lab workers (but not prod yet) 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-05-14 10:54:47 -07:00
James Antill
a8f984464e Add nft_nat_rules for openqa 
Signed-off-by: James Antill <james@and.org>
 2025-05-14 17:29:13 +00:00
Carl George
b565e59d32 batcave: set up rhel10.0 sync 
Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-05-14 16:12:51 +00:00
Adam Piasecki
8dde62031e fedora-ostree-pruner: Revert changes related to pvc 
It turns out the ostree volumes are special in that they are NFS shares
mapped to the NetApp Volumes for OSTree repo storage. They have
specific names and require no storage class to be set. This reverts the
changes made yesterday.
 2025-05-14 15:34:23 +01:00
Kevin Fenzi
8a9adc58ec riscv: add another 20 keytabs 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-13 14:21:41 -07:00
Kevin Fenzi
658b447e65 dhcp: fix typo in rdu3 hostname 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-13 14:20:23 -07:00
James Antill
246167dded Move wiki.stg from F40 to F42. 
Signed-off-by: James Antill <james@and.org>
 2025-05-13 15:24:32 -04:00
Kevin Fenzi
91e9a5627d httpd / botblocking: fix syntax on bot rewrite 
These have to be in "s in order to do a string comparison, since
they were not, they were never matching anything. ;(

Fix them all up, and also block a few more repos on pagure that are
getting heavily crawled.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-13 11:39:25 -07:00
Kevin Fenzi
2db0be9ae8 pagure: reject a bunch more heavy hitter networks 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-13 11:07:57 -07:00
Kevin Fenzi
91c9c3d693 inventory: more machines that were moved to f41 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-13 10:21:23 -07:00
Kevin Fenzi
4d6228af14 proxies: all these proxies moved to f41 a while back. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-13 10:14:55 -07:00
Adam Piasecki
3b05608d85 fedora-ostree-pruner: fix indentation in pvc.yml 
Trying to fix error
'converting YAML to JSON: yaml: line 15: did not find expected key"'
 2025-05-13 16:28:57 +00:00
Kevin Fenzi
40bc0f3c98 proxies: ostree summary sync, use -f to mv 
In f42 in some cases mv will prompt here to overwrite the old file.
We always want to replace it, so add a -f here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-13 09:25:10 -07:00
Adam Piasecki
5bbb4f6550 fedora-ostree-pruner: fix jinja2 conditional for content-volume 
Fix issue with yaml to json conversion.
 2025-05-13 16:49:19 +01:00
Samyak Jain
f8d06a6812 F40 is now EOL 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-05-13 14:58:24 +00:00
Adam Piasecki
9179b26777 fedora-ostree-pruner: add storageClassName to pvc template 
Since there is no PV fedora-ostree-content-volume-2 on stg
the volumeName: "fedora-ostree-content-volume-1" was added.
We use ocs-storagecluster-cephfs to keep the ReadWriteMany
functionality. If the RBD volume is required,
then use storageClassName: ocs-storagecluster-ceph-rbd.
ODF will provision a new volume automatically.
ReadWriteMany cannot be used in a Filesystem mode with RBD.
 2025-05-13 14:53:32 +00:00
Aurélien Bompard
8483147eb9
Fix a variable prefix 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-05-13 11:37:03 +02:00
Aurélien Bompard
ba7712dd43
Update manual playbooks that expect unsuffixed job.yml template 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-05-13 11:30:36 +02:00
Jakub Kadlcik
b8105d5c0d copr-be-dev: update testing bootc builder image 2025-05-12 21:55:11 +02:00
Kevin Fenzi
88ea123d7d main: remove copr-pulp playbook that is no longer in existance 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-12 10:55:11 -07:00
Kevin Fenzi
c065fd0e70 db01: add testdays dbs to backups 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-12 10:37:09 -07:00
Michal Konecny
3abba00b2a [distgit] Enable commit ACLs for admin tokens 
To enable retirement of rawhide branch for EPEL only packages (see
https://pagure.io/fedora-infra/toddlers/issue/151 for more info) I need
to enable `commit` ACL on dist-git (see
https://docs.pagure.org/pagure/usage/http_push.html for more info).
 2025-05-12 12:29:02 +00:00
Michal Srb
8aa224bba2 retrace03: Add f42 repos 
Signed-off-by: Michal Srb <michal@redhat.com>
 2025-05-12 12:25:28 +00:00
Roshan-R
78e221bc12 add Roshan-R to appowners in fedora-coreos-pipeline 2025-05-12 17:17:49 +05:30
Adam Piasecki
a2a5bb85a2 fedora-ostree-pruner: add strategy type to deployment 
Specifically strategy type: Recreate
 2025-05-12 12:31:04 +01:00
Bipin B Narayan
52a6054f35 Add bipinbn(Bipin) to appowners in fedora coreos pipeline 2025-05-12 10:52:00 +00:00
Adam Piasecki
f9c501d733 fedora-ostree-pruner: Add a specific image to deployment 
Add a specific (latest) image to fedora-ostree-runer deployment
 2025-05-12 11:32:17 +01:00
Adam Piasecki
a4d7facede fedora-ostree-pruner: remove spec.strategy in deployment 
Ansible playbook returns an error due to incorrect implementation
of deployment. Removing "spec.strategy.resources"
 2025-05-12 10:12:00 +00:00
Jeremy Cline
15b054fc8a
fedora-image-uploader: fix deployment trigger on image changes 
I broke the trigger when I switched from one container to multiple
containers in the pod. Syntax-wise, I found this multi-line variant in
the CoreOS Cincinnati deployment config, and it seems like there's not a
way to say "all container images in the spec". Or there might be, but I
couldn't find an example or documentation.

Signed-off-by: Jeremy Cline <jeremycline@linux.microsoft.com>
 2025-05-09 11:37:35 -04:00
Jiri Kyjovsky
aacfa2b00e copr: add powerful builders for centoshyperscale/asahi/kernel 2025-05-09 11:51:17 +02:00
Kevin Fenzi
ac80f732ff noc01 / dhcp: add aarch64 servers mgmt interfaces in rdu3 to dhcp 
These are various aarch64 servers mgmt interfaces in rdu3.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-08 11:27:36 -07:00
David Kirwan
646a938dbe
forgejo: update storageclass for valkey 
updating valkey configuration/deploy

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-05-08 15:30:37 +01:00
Siteshwar Vashisht
0b774e7106 openscanhub: decrease verbosity of httpd logs 
The service is stable, so avoid generating logs on the console.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2025-05-07 21:38:33 +00:00
Adam Williamson
5561372a5f openqa/worker: drop edk2-arm package install 
It no longer exists and we're no longer doing 32-bit ARM tests.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-05-07 10:39:33 -07:00
Aashish Radhakrishnan
6367cb3704 playbooks/fedora-ostree-pruner.yml: Add aaradhak to appowners 
Add aaradhak to appowners
 2025-05-07 10:50:49 -04:00
Lukas Brabec
cea9e81e74 Blockerbugs - OIDC client secrets template 2025-05-07 16:05:47 +02:00
David Kirwan
362c853a47
forgejo: update valkey task tags 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-05-07 13:57:38 +01:00
Michal Konecny
9a04135442 [ipsilon] Add blockerbugs OIDC entry 
https://pagure.io/fedora-infrastructure/issue/12516
 2025-05-07 14:47:34 +02:00
Aurélien Bompard
8a0cf448c2
Allow webhook2fedmsg to send FM on the forgejo topic 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-05-07 10:12:40 +02:00
David Kirwan
5acba2400c
forgejo: add tags to valkey tasks 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-05-06 18:48:28 +01:00
Kevin Fenzi
e97801b128 proxy01/10: double memory to avoid oom issues 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-05-06 09:16:38 -07:00