Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
37951 commits 9 branches 0 tags 111 MiB
Commit graph

37951 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
06b7dbd352 move stg hosts from old bvmhost-x86-02.stg to bvmhost-x86-05.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-09-09 12:06:41 -07:00
Kevin Fenzi
60f91468cb oraculum: define a imagestream/tag for the qa-landing build to output to 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-09-09 10:05:44 -07:00
David Kirwan
d37f87ec1a communishift: Fixing tags on the deploy operator task 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
 2022-09-08 11:55:06 +01:00
David Kirwan
78e58efee1 communishift: Create k8s secret for the communishiftauthorization 
operator

Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
 2022-09-08 11:47:43 +01:00
Tomáš Hrčka
2d90d4f673 Update roles/pkgdb-proxy/files/pkgdb-gnome-software-collections.json 
fixes: fedora-infrastructure#10879
 2022-09-07 18:24:39 +00:00
Kevin Fenzi
f02e9dd527 update eln signing. 
This should have changed at branching, but didn't. ;(

We also need to add in a entry for eln tagged builds to be signed and
put back/kept in the eln tag. This will allow robosignatory to resign
everything with the f38 keys. It can be removed after this.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-09-06 08:32:46 -07:00
Matěj Grabovský
a4040b0af2 retrace: Add Fedora 37 development repos 2022-09-06 16:44:29 +02:00
Matěj Grabovský
7623cdab62 retrace: Add Fedora 37 relase + EOL 34 2022-09-06 11:50:03 +02:00
Michal Konečný
7a56c80377 [toddlers] Fix the syntax errors in TOML 
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-09-05 14:13:19 +02:00
Michal Konečný
e22e3f962c [toddlers] Add missing SLA 
Add missing SLAs to scm_request_processor toddler configuration.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-09-05 13:59:08 +02:00
Pavel Raiskup
0faa024ad9 backend: less error-prone libvirt-list'ing 2022-09-05 10:41:07 +02:00
Kevin Fenzi
b6669bc5f6 bkernel: add config for nspawn bind mount 
We want to keep the old mock bind mount for non rawhide branches, but
rawhide is using nspawn, so we want to add a directive there to pass
'--bind' to it to correctly mount the pesign socket directory so kernels
can be signed for secure boot.

See https://github.com/rpm-software-management/mock/issues/140

Moving forward this could be fixed in mock, in which case we remove the
nspawn args. Or it could be fixed by pesign moving the socket directory,
in which case we remove nspawn args and adjust the old mock bind mount
to the new location. For now, this works around the current crop of
issues.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-09-01 12:58:18 -07:00
Michael Scherer
c6659c5a0f Remove whitespace at the end of the header 
This fail on HTTP/2 with newer libnghttp2, as reported by aminvakil on
irc. See https://github.com/nghttp2/nghttp2/issues/1786
 2022-09-01 18:58:14 +00:00
Stephen Smoogen
cb7aab797f Non-FBR: Update mailman01 definition to 8 cpus 
This is a non-Freeze Break request as it would only affect a new
rolled out system versus the existing one.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2022-09-01 14:16:58 -04:00
David Kirwan
27a514218c communishift: Minor formatting documentation in communishift efs custom module 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
 2022-09-01 16:41:50 +01:00
Kevin Fenzi
423eb61c14 zabbix / staging: change zabbix server to use sysadmin-noc and add client to wiki and proxies in staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-08-31 11:59:01 -07:00
Michal Konečný
88e9c37990 [release-monitoring] Fix typo 
Use == instead =.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-08-29 18:51:22 +02:00
Michal Konečný
11a1566b29 [release-monitoring] Install newer Flask-Login package 
The Flask-Login package currently available in F36 has issue with werkzeug
package. This commit will use newer version of Flask-Login from PyPI to
work around the issue.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-08-29 18:34:27 +02:00
Michal Konečný
465c428667 [release-monitoring] Specify the exact version of sphinx package 
With the sphinx 4.4.0 already installed in the container we need to specify
exact version of sphinx we want to install by pip.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-08-29 18:18:38 +02:00
Michal Konečný
626441f146 [release-monitoring] Use sphinx version from pip during build 
The current version of sphinx available in Fedora 36 doesn't work with the new
version of Anitya. Let's use the newest from pip.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-08-29 18:06:10 +02:00
David Kirwan
2b4b5fefd0 communishift: Create directory for operator keytab 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
 2022-08-29 11:31:33 +01:00
David Kirwan
ed3f658523 communishift: Update variable cluster hostname 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
 2022-08-29 11:09:10 +01:00
David Kirwan
d9fa6611ae communishift: Add task to create namespace for communishift authorization operator 
Create IPA keytab for communishift authorization operator

Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
 2022-08-29 10:50:50 +01:00
Jakub Kadlcik
a60f3caa8a copr: remove only volumes that are either available or failed 2022-08-26 04:17:07 +02:00
Jakub Kadlcik
c77da1641e copr: actually, the highest possible limit is 100 
ibm_cloud_sdk_core.api_exception.ApiException:
    Error: The `limit` parameter is invalid, it must be an integer
    between 1 and 100., Code: 400
 2022-08-26 03:58:09 +02:00
Jakub Kadlcik
a8ec3232b5 copr: change limit value so it is clear that we are using higher than default 2022-08-26 03:48:24 +02:00
Jakub Kadlcik
ea46351f09 copr: try to remove also volumes 2022-08-26 03:46:22 +02:00
Jakub Kadlcik
0562aa35e9 copr: list also IBM Cloud volumes 
Unused and forgotten volumes are starting to pile up in the IBM
Cloud. We need to list them in this script the same way we do it in
`libvirt-list'.
 2022-08-26 02:47:52 +02:00
Kevin Fenzi
81dcf5ac0a odcs: add kevin to list of users who can do private composes from tags ( to allow remaking broken h264 repo data ) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-08-25 12:47:16 -07:00
Jiri Kyjovsky
f3da725a8a copr-fe: add link to stg FAS when copr doesnt run in production 2022-08-25 12:32:17 +02:00
Ryan Lerch
7ac205846e people: escape one more username instance 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2022-08-25 17:48:45 +10:00
Ryan Lerch
d8b5937710 people: Escape usernames when generating the people index page 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2022-08-25 16:10:21 +10:00
Patrick Uiterwijk
3f79919102
Add distro.builders zone to zones.conf 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2022-08-24 11:58:00 +02:00
Tomáš Hrčka
27a248b397 Update roles/bodhi2/base/templates/production.ini.j2 2022-08-24 06:05:14 +00:00
Kevin Fenzi
8970cdb6d3 move some more vms to vmhost-x86-12.stg 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-08-23 15:45:41 -07:00
Kevin Fenzi
5aeb15694e move mm-crawler01.stg and centos-ipa-client01 from vmhost 09 to vmhost 11 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-08-23 14:40:27 -07:00
Tomas Hrcka
cad376a1fb Fix trailing whitespace 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2022-08-23 11:16:11 +02:00
Tomas Hrcka
1343f8979a Fedora 37 Bodhi enablement and Beta freeze 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2022-08-23 10:54:53 +02:00
David Kirwan
ae32caf150 communishift: Added task for creating Openshift ResourceQuota 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
 2022-08-23 09:06:20 +01:00
Kevin Fenzi
85de7fe8c0 greenwave: try switching stg back to latest image 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-08-22 09:39:14 -07:00
Dusty Mabe
6f3f08942b
fedora-coreos-pipeline: add marmijo to FCOS pipeline users 2022-08-22 12:18:48 -04:00
Dusty Mabe
b9c6fb8916
openshift-apps: add comments about how to deploy CoreOS projects 
All of these already had a comment about how to delete the projects.
Now we added a comment about how to deploy the project too, which
is nice for copy/pasting.

Also fixed up some of the other comments throughout.
 2022-08-22 12:15:47 -04:00
Dusty Mabe
dc00f428cb
bodhi-backend: pungi: fix F38 gpg key reference 
5323552a is for the F37 key. It looks like it should be eb10b464
for the F38 key.
 2022-08-22 10:38:52 -04:00
David Kirwan
ccafc89498 communishift: Added task for creating Openshift Role, RoleBindings 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
Signed-off-by: Lenka Segura <lsegura@redhat.com>
Signed-off-by: Patrik Polakovic <ppolakov@redhat.com>
 2022-08-22 12:06:36 +01:00
Mikolaj Izdebski
d66d362cb0 Koschei: Enable builds on aarch64 
This reverts commit bf7a36b2cb.
 2022-08-22 10:46:00 +02:00
Adam Williamson
23dcc9eeeb Greenwave: put F37 back on the full gating policy 
All tests are now passing (yay), so we don't need the temp
policy and we can include F37 in the upgrade policy.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-08-20 23:54:54 -04:00
Kevin Fenzi
0ee534e358 bodhi-backend: pungi: fix kinoite f36 build 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-08-19 10:00:06 -07:00
Francois Andrieu
afb1c012cf docs: repository has been moved to Gitlab 2022-08-18 18:27:55 +00:00
Kalev Lember
4dc9589c31 Add systemd-pam to bodhi multilib whitelist 
Move it to here instead of having systemd-devel fake require
systemd-pam.

This should help with flatpak runtime packaging so that we can avoid
having to ship systemd-pam in the flatpak container.
 2022-08-18 18:26:05 +00:00
Adam Williamson
94fbd1d58c openqa-workers group: drop broken, unnecessary condition 
This is syntactically wrong, and it's not necessary any more
anyhow because we got someone to disconnect the problematic
network interfaces from the hardware.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-08-18 14:08:15 -04:00