Remove old/not needed guides
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
This commit is contained in:
parent
1d458e6d8a
commit
87dbf1c440
5 changed files with 1 additions and 72 deletions
|
@ -1,5 +0,0 @@
|
|||
= How to activate a FAS account that was marked as `spamcheck_awaiting`
|
||||
|
||||
For this you need to be in the `accounts` FAS group that will give you admin permission in FAS.
|
||||
Then log to https://admin.fedoraproject.org/accounts[https://admin.fedoraproject.org/accounts],
|
||||
search for the user profile and edit it to set the status to `active`.
|
|
@ -6,10 +6,9 @@ Under the correct section add **require ip** ***<server_ip>***
|
|||
. When this change is pushed run the batcave ansible playbook on the batcave.
|
||||
You will need sysadmin-main access for this
|
||||
|
||||
. Create openvpn and 2fa certificates for the new server.
|
||||
. Create openvpn certificates for the new server.
|
||||
This requires sysadmin main access
|
||||
|
||||
. <<generate_2fa_keys.adoc#>>
|
||||
. <<generate_openvpn_keys.adoc#>>
|
||||
|
||||
. In the dns repo on batcave edit the file master/168.192.in-addr.arpa
|
||||
|
|
|
@ -1,29 +0,0 @@
|
|||
= How to fix SAML login in bugzilla/AWS
|
||||
|
||||
Basically, we've observed that every now and then one of the ipsilon pod looses
|
||||
its config (or so it seems) which leads to make that pod unable to properly
|
||||
serve SAML requests.
|
||||
|
||||
Here are the steps to debug and fix this situation:
|
||||
|
||||
. Open all the web pod of Ipsilon in different tabs - open the logs tab for
|
||||
each
|
||||
. Open https://bugzilla.redhat.com in a tab using the private browser mode
|
||||
. Try logging into bugzilla using the Fedora contributor button in the drop-down
|
||||
. Check the recent logs of the pods and find the one saying something like:
|
||||
+
|
||||
----
|
||||
DEBUG(providers/saml2/auth.py:176 Redirect.saml2login()): saml2: 'NoneType' object has no attribute 'get_login_handler'
|
||||
----
|
||||
. Copy the name of that pod
|
||||
. Go to the openshift's main node
|
||||
. Delete the pod using:
|
||||
+
|
||||
----
|
||||
oc -n ipsilon delete pod <pod-name>`` (for example: ``oc -n ipsilon delete pod ipsilon-24-8ztdd``)
|
||||
----
|
||||
+
|
||||
Openshift will automatically spawn a new one
|
||||
|
||||
. Try login on bugzilla again - it should work (or maybe another pod is mis-behaving?)
|
||||
|
|
@ -1,33 +0,0 @@
|
|||
= How to generate 2 Factor Authentication key and certificate
|
||||
|
||||
Doing this requires membership in sysadmin-main FAS group.
|
||||
|
||||
All the following commands should be ran on one of batcave hosts.
|
||||
|
||||
Clone `ansible-private` repo:
|
||||
|
||||
----
|
||||
git clone /srv/git/ansible-private
|
||||
----
|
||||
|
||||
Change into `files/vpn` subdirectory in cloned repo:
|
||||
|
||||
----
|
||||
cd ansible-private/files/2fa-certs
|
||||
----
|
||||
|
||||
The process is described in the README but is basically:
|
||||
|
||||
----
|
||||
. ./vars; ./build-and-sign-key <hostname>
|
||||
----
|
||||
|
||||
Add generated files to git index, commit, push:
|
||||
|
||||
----
|
||||
git status
|
||||
git add .
|
||||
git commit -a -m "Add 2 FA key/cert for <hostname>"
|
||||
git show
|
||||
git push
|
||||
----
|
Loading…
Add table
Add a link
Reference in a new issue