Commit graph

463 commits

Author SHA1 Message Date
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
Michal Konecny
7b58dfdce8 Remove fedmsg and github2fedmsg from staging
The messaging bridges openshift project and github2fedmsg VM were
already removed in staging. This is to clean the ansible playbooks.

I will create a separate one for production after this one is merged.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-04 09:13:40 +01:00
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:26:47 +10:00
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
691adee6ee Fix name[casing] ansible-lint issues
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
Kevin Fenzi
eafcece0cf batcave: redirect http to https
We hadn't done this in the past because virt-install couldn't do https
urls, but thats long since no longer the case.

So, move all the ks_url and ks_repo calls to use https and since they
are using https, they need to use the valid
infrastructure.fedoraproject.org name so they can verify the cert.

Set batcave to redirect http to https now since that was the thing
holding this back.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-06 09:45:25 -08:00
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
ef45d81b72
batcave: python3-requests-kerberos package
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-11-21 16:02:40 +00:00
Aurélien Bompard
41b9780f35
Batcave: /usr/sbin is not in cron's path
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-11-04 10:42:32 +01:00
Jiri Podivin
104ecb73b4 Removing unused formatter
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2024-09-18 19:57:30 +00:00
Jiri Podivin
f513e7cbcd Linting python scripts
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2024-09-18 19:57:29 +00:00
Aurélien Bompard
a0e17dc73f
GeoIP databases: set the selinux context
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-08 05:54:59 +02:00
Aurélien Bompard
096f4ed89c
The geoip script contains a secret
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-06 18:41:09 +02:00
Aurélien Bompard
2fad8816a6
Restore the GeoIP download script
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-06 18:19:57 +02:00
Carl George
fafd6f1adc batcave: delete excluded content in CentOS sync scripts 2024-07-15 21:30:51 -05:00
james02135
abbddf11db Change typo from isos to iso, exclude source
Signed-off-by: james02135 <james02135@hotmail.com>

Change typo from isos to iso, exclude source

Signed-off-by: james02135 <james02135@hotmail.com>

Fix typo in centos 9 sync script

Signed-off-by: james02135 <james02135@hotmail.com>

Include the appropriate exclusions in the CentOS 9 script

Signed-off-by: james02135 <james02135@hotmail.com>
2024-07-09 10:57:12 +00:00
Stephen Smoogen
432a3a497b Go through and remove entries for EL6 and EL7
Using `git grep el6` and `git grep el7` and variants like EL-7 or
el-7, I found various entries and files which were no longer needed
with the current ansible. I updated text or tests to later versions of
RHEL as needed.

found entries for the fedora ami's for the original cloud and removed
those entries also.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
2024-07-03 22:20:30 +00:00
Nils Philippsen
0d6c24558a batcave: Set git directories as safe
Or else users in sysadmin-main can’t access the repositories.

Signed-off-by: Nils Philippsen <nils@redhat.com>
2024-07-01 13:34:48 +00:00
Kevin Fenzi
1f75c26aa6 rhel7: no need to sync it anymore
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-29 18:41:52 -07:00
james02135
decfe3e771 Update centos-10-sync script to rsync
Signed-off-by: james02135 <james02135@hotmail.com>

Change DESTDIR to previously used directory, exlcude debug directory

Signed-off-by: james02135 <james02135@hotmail.com>
2024-06-24 17:33:24 +00:00
Aurélien Bompard
626a24d13a
Fix the selinux context of the copied files
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-06-24 09:02:24 +02:00
Kevin Fenzi
c884dc9d30 batcave: use RedirectMatch for batcave toplevel redirect
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-17 15:51:46 -07:00
Kevin Fenzi
73c4e62b57 batcave: redirect top infrastructure page to docs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-17 14:56:02 -07:00
Carl George
8350b55843 Stop syncing and grobisplitting CentOS Stream 8
CentOS Stream 8 is now EOL, so it is no longer necessary to sync and
grobisplit that content for EPEL 8 Next to build against.

https://pagure.io/releng/issue/12147
2024-06-05 13:14:16 +00:00
5e76da498f
rabbitmq: Change location of rabbitmq public cert export
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-05-31 13:42:07 +01:00
Aurélien Bompard
7133b7db35
Generate a list of expiration dates for the certs
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-05-23 12:09:55 +02:00
james02135
d7132e212c Modify script based on output from last run
Signed-off-by: james02135 <james02135@hotmail.com>
2024-05-22 20:58:19 +00:00
james02135
31fb825690 Write sync script for centos-10 using reposync
Signed-off-by: james02135 <james02135@hotmail.com>

Change variable names to basearch and repo as necessary, fix loop issues

Signed-off-by: james02135 <james02135@hotmail.com>

Fix syntax errors in nested for loop

Signed-off-by: james02135 <james02135@hotmail.com>

Modify script to include os filepath

Signed-off-by: james02135 <james02135@hotmail.com>
2024-05-22 00:15:38 +00:00
Aurélien Bompard
134f77da5b
Add a cron job to expose the rabbitmq certs
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-05-07 17:35:33 +02:00
Kevin Fenzi
38b254a579 batcave: enable centos-10-sync
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-02 16:42:02 -07:00
james02135
768b6b0075 Write sync script for centos-10 using reposync
Signed-off-by: james02135 <james02135@hotmail.com>

Change variable names to basearch and repo as necessary, fix loop issues

Signed-off-by: james02135 <james02135@hotmail.com>

Fix syntax errors in nested for loop

Signed-off-by: james02135 <james02135@hotmail.com>
2024-05-02 23:36:39 +00:00
Kevin Fenzi
4c113b98bf batcave01: we do not want the old rhel7 openshift repo
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-30 13:01:19 -07:00
Kevin Fenzi
c5f2475537 batcave: renew proxy letsencrypt certs weekly
We occasionally run into problems with certs that aren't renewed in time
or are close to expiring. Just running the proxies playbook will renew
them, but in freezes or the like sometimes there's a long time period
where we don't run that playbook.

So, lets just run weekly with the right tag. This should renew any cert
thats close to expiring.

The job shouldn't normally output anything, but if there's errors it
will email them to admin@

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-27 17:29:48 -07:00
Kevin Fenzi
c45521fcb5 batcave01: patch the uri module to work on fedora targets
The ansible-core-2.14.x in rhel9 (using python 3.9 now) can't handle
running uri module on fedora (python-3.12) without erroring.
There's a backported fix in 2.15, but until thats in rhel9, this will
keep hitting us.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-27 12:00:19 -07:00
Aurélien Bompard
64da337e67
Use fedora-messaging-git-hook on dist-git
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-12-04 17:58:49 +01:00
Aurélien Bompard
4442a309aa
Use the fedora-messaging-git-hook package on batcave
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-12-04 12:05:00 +01:00
Carl George
e9c1adca55 batcave: stop syncing EOL CentOS 8 2023-11-17 16:42:17 -06:00
Kevin Fenzi
3c06415a17 batcave01: install moreutils for dns hook
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-17 15:33:02 -07:00
Kevin Fenzi
3d5dde0970 batcave01: git repos moved from /git to /srv/git a long while back
We still were expecting them to be in /git.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 17:06:25 -07:00
Kevin Fenzi
da20307fcc batcave01: no python39-jmespath for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 16:34:47 -07:00
Kevin Fenzi
78422a3fd2 batcave01(NEW AND IMPROVED): adjust for rhle9 move
Fix the kickstart/repo for reinstall.
Add rhel-system-roles for linux-system-roles/networking
Drop some python2 items that aren't available in rhel9 anymore.
Collapse the batcave02 stuff into batcave01

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 16:21:24 -07:00
Kevin Fenzi
757c4f65c3 batcave01: only try and delete files here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 13:36:05 -07:00
Kevin Fenzi
a780dc21a1 db-datanommer01: retire this database server
We moved to timescaledb over on db-datanommer02 a while back, so this vm
it just sitting there doing nothing. ;)
So, lets drop it off and save some resources.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-26 10:16:11 -07:00
Kevin Fenzi
dc82b8da30 batcave: adjust packages for rhel9
This is for a test batcave02 for now, but will be used when we move
batcave01 over to rhel9

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-10 16:34:17 -07:00
Kevin Fenzi
feceb99528 batcave: install python39-jmespath for copr playbooks
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-18 18:28:00 -08:00
Frank Ch. Eigler
55bfa1af29 batcave vmdiff.sh: timeout this hourly cron job to 1h
Prevent these jobs from running so long that new jobs can get started
meanwhile.  batcave has been observed to run sometimes dozens of old
list-vms-per-host processes under unusual but not rare circumstances.
2022-10-24 23:33:03 +00:00
Frank Ch. Eigler
62fc6023fe ansible-playbook-check-diff.cron: impose a 24hour timeout on check-diff jobs 2022-09-14 18:18:40 +00:00