Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
35007 commits 9 branches 0 tags 111 MiB
Commit graph

20757 commits

Author SHA1 Message Date
Kevin Fenzi
fafa47de96 bodhi / backend: add url for repomd sync checking for epel8-next and epel8-next-testing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-21 09:40:19 -07:00
Brendan Early
c9f5c11ba6
packages-static: correct port 2021-05-20 13:45:30 -05:00
Carl George
a2f14e982e bodhi2/backend: Add epel8-next to releases in new-updates-sync 
Signed-off-by: Carl George <carl@george.computer>
 2021-05-20 17:14:16 +00:00
Frank Ch. Eigler
7185d7774e debuginfod redirect+proxy: combine into handcrafted httpd conf file 2021-05-20 00:42:32 +00:00
Adam Williamson
c9ee450c6a greenwave: specify exact versions for openQA gating policy 
I was assuming Bodhi queried on "fedora-rawhide" for Rawhide
updates, but it seems it does not, it queries on "fedora-35" (or
whatever the release number is). We do not want to apply the
gating to Rawhide updates ATM, as openQA does not test them.
So unfortunately we'll need to hand-tend this list unless I can
think of a better approach.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2021-05-19 15:31:39 -07:00
Kevin Fenzi
535041fcdd robosignatory: add kinoite signing for rawhide 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-19 12:06:51 -07:00
Kevin Fenzi
d890a9fbf4 bugzilla2fedmsg: drop checks against vm as it has moved to openshift 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-19 12:00:49 -07:00
Adam Saleh
45cf6f92d1 Toddlers - add asaleh as owner and remove ref to staging, as it was never deployed there. 2021-05-19 18:21:59 +02:00
Aurélien Bompard
3381359876
Disable the VM version of bugzilla2fedmsg 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-05-19 17:35:28 +02:00
Pavel Raiskup
c95c641f1e copr-builder: run cleanup script after each builder release 
Under root, so we can clean-up everything needed:

Fixes: https://pagure.io/copr/copr/issue/1258
 2021-05-19 16:46:17 +02:00
Pavel Raiskup
0b6408df27 copr-be: implement livecheck for the hypervisor VMs, too 2021-05-19 16:40:50 +02:00
Pavel Raiskup
0295b35a21 copr-dev: configure spot instances 
And also add a configuration options for the s390x arch quota.
 2021-05-19 14:19:46 +02:00
Pavel Raiskup
ee0a88df33 copr-be: terminate spot instances on shutdown 
Per the following error:
fatal: [127.0.0.1]: FAILED! => {"changed": false, "msg": "instance_initiated_shutdown_behavior=stop is not supported for spot instances."}
 2021-05-19 13:59:41 +02:00
Pavel Raiskup
30b8e21945 copr-be: spot instance spawning, #1 2021-05-19 13:28:37 +02:00
Brendan Early
52e2a301cc
packages-static: update container port 2021-05-18 17:25:18 -05:00
Brendan Early
e9b1c3c53d packages-static: use unprivileged port on container 2021-05-18 21:54:39 +00:00
Brendan Early
8b203e5d85 packages-static: correct solr deploymentconfig 2021-05-18 21:54:39 +00:00
Kevin Fenzi
a6558b4b35 download: do not make a /mnt/koji/compose as it is handled by symlink later 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-18 13:56:54 -07:00
Brendan Early
decd358666 packages-static: have the init script mange solr config 
openshift does not allow subdirectories in configmap volumes.
 2021-05-18 20:54:16 +00:00
Brendan Early
9c1297a026 packages-static: make sure that solrconfig is applied properly 2021-05-18 20:28:52 +00:00
Kevin Fenzi
e0662c5f2d rsyncd / download: adjust odcs to allow package rsyncs 
odcs just links to the packages in a compose on the /mnt/koji volume
with relative symlinks. ie (
../../../../../../../../mnt/koji/packages/zip/3.0/28.eln109/data/signed/9867c58f/x86_64/zip-3.0-28.eln109.x86_64.rpm
)
Change odcs on download servers to mount on /mnt like koji and then tell
rsync to chroot at /mnt, so it can follow those links and copy the file
from koji volume.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 13:46:36 -07:00
Kevin Fenzi
f23fd1b7a1 totpcgi / 2fa: remove old totpci and files and roles. 
Note: there are still some calls here in old fas in openshift, but we
will remove those when we remove old fas (likely as soon as zodbot is
ported over to noggin).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 13:00:56 -07:00
Kevin Fenzi
b3d2dc7d90 batcave: clean up old tasks 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 10:42:18 -07:00
Kevin Fenzi
1ee14dc2f4 batcave: install postgresql12 psql for client querys to db-datanommer 
See ticket https://pagure.io/fedora-infrastructure/issue/9913

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 10:37:25 -07:00
Kevin Fenzi
1bbfd7f02f koji_hub: increase max_delete_processes from 4 to 20 
This is the threads that are doing deletes of repos. Since we have so
many repos, lets increase the delete threads as well so it can hopefully
keep up.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 10:17:43 -07:00
Kevin Fenzi
421fbeff12 koji_hub: add fwupd-efi to secure boot channel. 
See https://pagure.io/fedora-infrastructure/issue/9912

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 10:08:53 -07:00
Kevin Fenzi
3a26611841 haproxy: add ipa03 into the mix as a backup behind ipa02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 09:55:58 -07:00
Kevin Fenzi
368bfaef01 haproxy: adjust content length for new text in 503 message 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 09:43:45 -07:00
Kevin Fenzi
80079bec37 503: adjust wording on the service not available doc 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 16:40:25 +00:00
Kevin Fenzi
ec210427ec batcave: allow sysadmin to read rbac-playbook config 
This should allow folks in the sysadmin group to read (but not write)
the rbac-playbook config. This should allow folks to more easily tell
who is granted rights to run some playbook.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 09:31:27 -07:00
Kevin Fenzi
a9df677cf3 fasjson / aliases: aliases have to be local 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-17 09:20:42 -07:00
Pavel Raiskup
90ebfe5620 copr-be: promote tested builder images to production 
And turn on the builders on hypervisors.
 2021-05-17 10:54:59 +02:00
Pavel Raiskup
fa5db1e73d copr-be-dev: fix IPv6 pattern for devel stack 2021-05-17 10:13:13 +02:00
Pavel Raiskup
f47fe96f95 copr-be-dev: lower the amount of preallocated vms on HV 2021-05-17 09:59:36 +02:00
Pavel Raiskup
94e5f21bc1 copr-be: tag AWS resalloc instances with "aws" 2021-05-17 08:55:31 +02:00
Pavel Raiskup
0b8c690702 copr-be: resalloc VM prod/dev suffix, and hypervisor tags 2021-05-17 08:47:04 +02:00
Brendan Early
55250064d6
packages-static: move files back to new directory 
Zuul seems to be incorrect.
 2021-05-16 16:37:59 -05:00
Brendan Early
c50c0b1537
packages-static: quote ImageStream tag name 2021-05-16 16:33:31 -05:00
Brendan Early
9587670a36
packages-static: bring solr and packages-static into the same os project 
packages-static: add solr gid to supplementalGroups

packages-static: delete solr playbook

packages-static: change old solr configmap names

fedora-packages: move solr files to old folder

No idea why Ansible thinks it should be here

packages-static: move solr start
 2021-05-16 16:14:18 -05:00
Kevin Fenzi
3ad3dcab97 fasjson: add matrixadmin alias 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-16 11:04:53 -07:00
Brendan Early
19d2e4c67c
solr: use a route instead of joining pod networks 2021-05-15 13:35:39 -05:00
Kevin Fenzi
671a46c299 bodhi / backend: add missing dash in front of A 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-14 15:35:57 -07:00
Kevin Fenzi
2465791d08 Revert "bodhi-backend: disable updates-sync and auto pushes for now" 
This reverts commit d9d0b9d926.
 2021-05-14 08:48:23 -07:00
Kevin Fenzi
d9d0b9d926 bodhi-backend: disable updates-sync and auto pushes for now 
Disable these until we sort out the ostree repo issues in releng 10114.
Please check with me before re-enabling. :)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-13 15:29:34 -07:00
Tomas Hrcka
fb395d74a2 Update sssd config to filter users bodhi and ftpsync 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2021-05-13 20:59:17 +00:00
Kevin Fenzi
9bbef456ed bodhi / backend: adjust bodhi-celery service for new version 
The new celery version wants -A as a global option, then command, so
make it happy and re-arrange the service file.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-13 13:01:05 -07:00
Kevin Fenzi
18f4d49a9d rkhunter: fix bit of dyslexia 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-13 12:41:05 -07:00
Kevin Fenzi
e204d82994 rkhunter: add releng_compose_stg for podman use 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-05-13 12:39:42 -07:00
Adam Saleh
1cb04fe7b4 Celery beat changed the order of args in bodhi. 2021-05-13 17:34:28 +02:00
Adam Saleh
68982b36e0 Moved bodhi in prod to use rpm for building the image. 2021-05-13 17:20:43 +02:00