Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
21644 commits 9 branches 0 tags 111 MiB
Commit graph

21644 commits

This branch
This branch
All branches
Author SHA1 Message Date
Michael Simacek
05ad37b3f8 Set httpd_execmem sebool on koschei-web 2018-02-09 12:42:38 +01:00
Michael Simacek
ef6f884a0a Disable koschei pagure plugin until I figure out why it segfaults 2018-02-09 10:59:20 +01:00
Qixiang Wan
22930dead9 freshmaker: enable debug log level on stage 2018-02-09 17:49:07 +08:00
Qixiang Wan
f97e5bc371 freshmaker: enable git parser and module build handlers on stage 2018-02-09 15:52:49 +08:00
Qixiang Wan
a2a2d89718 freshmaker: add vars for mbs auth token 2018-02-09 14:54:12 +08:00
Patrick Uiterwijk
31fe8d6bcb Open ports 80 and 443 to everyone 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 23:01:22 +00:00
Patrick Uiterwijk
4aa1c5bcc3 Block all but internal from pkgs.fp.o and set up robots.txt files 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 22:44:06 +00:00
Kevin Fenzi
cd65be2774 fix conditional 2018-02-08 21:47:19 +00:00
Kevin Fenzi
595a2c40ad changes to get a working bodhi config. Cannot list mounts that the frontend doesnt have and also need to specify the dogpile cache file as it is different than default 2018-02-08 21:33:56 +00:00
Kevin Fenzi
56e9dd9dee fix conditionals 2018-02-08 20:36:36 +00:00
Kevin Fenzi
f75c4dfc55 Merge bodhi production.ini and staging.ini with the shipped version from the upstream rpm. 2018-02-08 20:25:32 +00:00
Adam Williamson
78a7f59ae0 Bump openQA asset size limits for staging 
This is due to an upstream change in how the asset reduction
logic works: it now includes 'fixed' assets in the total size
calculation, so we should include the size of those assets
(which is currently ~110GB) in our limits. This is only on stg
for now as only stg has been updated to the new upstream code.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2018-02-08 10:41:29 -08:00
František Zatloukal
4936b644e9 Taskotron: correct location of imagefactoryd.service 2018-02-08 17:01:00 +01:00
Patrick Uiterwijk
da7f7f89eb Commit to our changes 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 15:39:49 +00:00
Patrick Uiterwijk
ce78bf8497 Nat table has different entries 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 15:38:58 +00:00
Patrick Uiterwijk
0bfb2a2d1f nat_rules go into the nat table 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 15:37:20 +00:00
Patrick Uiterwijk
645654e584 Add empty nat rules 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 15:35:49 +00:00
Patrick Uiterwijk
a4f04d53f9 -t nat not needed 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 15:32:55 +00:00
Patrick Uiterwijk
40fbf2d575 Do not remove all whitespace 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 15:31:24 +00:00
Patrick Uiterwijk
d5ce7a014e Add nat-rules 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 15:30:13 +00:00
František Zatloukal
ace5dbaa17 Taskotron: Properly fix imagefactory service 
Workaround for https://github.com/redhat-imaging/imagefactory/issues/417
 2018-02-08 16:23:50 +01:00
Patrick Uiterwijk
da39a96667 Temporarily override cpu model for virtinstall 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 15:22:04 +00:00
Patrick Uiterwijk
7a058ec0ba Fix up pagure-proxy01 gateway 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 15:00:55 +00:00
Patrick Uiterwijk
1af277590e Virt-install the correct box 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 14:54:37 +00:00
Patrick Uiterwijk
a5a51cadc5 Add playbook for pagure-proxy 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 14:53:09 +00:00
Patrick Uiterwijk
557f79da69 Add basis for pagure-proxy01 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-02-08 14:51:43 +00:00
František Zatloukal
c1ab76cef4 Taskotron: patch imagefactoryd service file so it can be enabled on boot 2018-02-08 13:57:19 +01:00
Mikolaj Izdebski
833d9e9bab Increase memory and disk size on Koschei web prod 2018-02-08 12:41:41 +00:00
Michael Simacek
9397a3579f Disable koschei logging mail handler 2018-02-08 13:22:52 +01:00
Mikolaj Izdebski
da2e9766d7 Make Koschei backend auth to Koji using GSSAPI 2018-02-08 12:01:09 +00:00
Mikolaj Izdebski
0eec23dcd8 Switch Koschei web auth to OpenIDC 2018-02-08 11:58:00 +00:00
Mikolaj Izdebski
d5db6392b4 Reinstall Koschei on Fedora 27 2018-02-08 11:57:38 +00:00
Mikolaj Izdebski
cc6ca2352a Switch SELinux on Koschei back to enforcing 
Hopefully SELinux bug workaround shouldn't be needed any longer.
 2018-02-08 11:56:42 +00:00
Patrick Uiterwijk
e4baec55e4 Blacklist username 'pagure' 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-02-08 00:34:02 +01:00
Stephen Smoogen
b2d8343b3f and the rhn files need to be added someday 2018-02-07 19:41:36 +00:00
Patrick Uiterwijk
b9b720043b Mark the username 'git' as blacklisted 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-02-07 20:12:22 +01:00
Patrick Uiterwijk
de9af8deda Add src.fp.o OIDC push OIDC scope 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-02-07 19:48:49 +01:00
Andrea Veri
3c27e5a250 GNOME Backups: live.g.o has been decomm and replaced by wiki.g.o 2018-02-07 14:31:49 +00:00
Miroslav Suchý
a554ac30fe retrace: update faf role 2018-02-07 14:31:53 +01:00
Miroslav Suchý
2a890f180b add retrace02.qa.fedoraproject.org host vars 2018-02-07 14:00:43 +01:00
Miroslav Suchý
138c94c891 do not sync f25 on retrace 2018-02-07 13:43:38 +01:00
Till Maas
8f7acb0dde Increase HSTS max age to one year 
The HSTS preload list requires this now: https://hstspreload.org/
 2018-02-07 12:42:36 +01:00
Qixiang Wan
7edc8430dc freshmaker: fix openidc userinfo uri in template 2018-02-07 12:52:25 +08:00
Qixiang Wan
808daa5377 freshmaker: create kerberos keytab on backend nodes 2018-02-07 12:14:28 +08:00
Kevin Fenzi
c8e5316fb7 adjust more 2018-02-07 01:32:17 +00:00
Kevin Fenzi
8a0c1f266f and setup check on mailman01 nrpe side 2018-02-07 01:24:52 +00:00
Kevin Fenzi
326c39d1b0 perhaps this? 2018-02-07 01:06:04 +00:00
Kevin Fenzi
dec23cd1bc try this 2018-02-07 00:31:15 +00:00
Kevin Fenzi
407efad1f7 and put it in the right place 2018-02-06 23:55:01 +00:00
Kevin Fenzi
68a56482fa need to add new file to the loop to actually install 2018-02-06 23:47:26 +00:00