Commit graph

42831 commits

Author SHA1 Message Date
Aurélien Bompard
d884a0f8ba
Use the combined RabbitMQ CA cert in the clients
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00
Pavel Raiskup
9d6f7c0f6f copr-fe: tag the pagure-events config task 2025-04-11 10:32:23 +02:00
Pavel Raiskup
9dff1d373e copr-fe: log date-time in the pagure-events.log 2025-04-11 10:30:25 +02:00
Kevin Fenzi
feb1bf9a97 koji_builder: syntax tweak
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-04-10 17:53:26 -07:00
James Antill
6af1918415 Conditionalize osbuild*.cron based on osbuild in group_names.
Signed-off-by: James Antill <james@and.org>
2025-04-11 00:33:11 +00:00
James Antill
50d04f6e95 Remove nftables cron and disable service, when using iptables (for backout).
Signed-off-by: James Antill <james@and.org>
2025-04-11 00:33:11 +00:00
James Antill
af90bbb6c5 Nice error for osbuildapi-update-nft.sh and comment explaining issues.
Signed-off-by: James Antill <james@and.org>
2025-04-11 00:29:23 +00:00
Aurélien Bompard
b9553f3378
Use the manually combined RabbitMQ CA, it's much easier
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-10 12:25:52 +02:00
Aurélien Bompard
475838940a
Use lookup instead of assemble for the RabbitMQ CA
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-10 12:16:51 +02:00
Aurélien Bompard
4c52d4603b
Deploy the new RabbitMQ CA in staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-10 11:44:50 +02:00
Lukas Holecek
648bba0dfb resultsdb-frontend: Make logs more verbose and include user-agents
This is the same change as for resultsdb before.
2025-04-10 08:20:22 +02:00
Lukas Holecek
b7c82cbb47 resultsdb: Update probes
Adds startupProbe and longer probing intervals for backend and frontend.
2025-04-09 10:13:41 +00:00
Joel Capitao
3322ae0888 fedora-coreos-pipeline: add Joel Capitao (jcapiitao) 2025-04-08 17:09:05 +00:00
Tiago Bueno
a0bdc9b9ab Add new team member to fcos-pipeline
Signed-off-by: Tiago Bueno <49003339+tlbueno@users.noreply.github.com>
2025-04-08 17:07:28 +00:00
Adam Piasecki
5f0fcd4a79 playbooks/fedora-ostree-pruner.yml: Add apiaseck to appowners
As I'm working on moving fedora-ostree-pruner to k8s deployment
I'm blocked by Zuul due to lack of permissions.

See: https://pagure.io/fedora-infra/ansible/pull-request/2331
2025-04-08 16:58:36 +01:00
Gregory Bartholomew
524a4c901e websites: add multilingual support to the error document handling
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2025-04-07 22:03:34 +00:00
Josef Skladanka
9f04ee6386 Testdays - mount secret volume 2025-04-07 12:12:21 +02:00
Josef Skladanka
2351b7a46f Testdays - mount secret volume 2025-04-07 12:07:19 +02:00
Josef Skladanka
d42c254ee4 Testdays - envvars 2025-04-07 12:00:08 +02:00
Josef Skladanka
b6a6aa5821 Testdays - try OIDC 2025-04-07 11:52:26 +02:00
Greg Sutcliffe
f5475063e6 Zabbix-stg: disable user-management until we can upgrade to 3.3.0 2025-04-04 16:31:47 +01:00
Lenka Segura
a39db46926 poddlers: Add IPA config changes
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2025-04-04 14:46:52 +02:00
Greg Sutcliffe
655f2dc58f Zabbix-stg: minor fixes to API config 2025-04-04 12:25:57 +00:00
Carl George
9e8f4dcf6a mirrormanager: use epel-z prefixes for minor version EPEL repos
https://pagure.io/epel/issue/324

Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-04-03 14:29:31 -05:00
Carl George
a15e378443 bodhi_backend: publish EPEL 10.1 to 10.1 paths
https://pagure.io/epel/issue/324

Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-04-03 14:29:31 -05:00
654260ceff [pagure stg] disable new projects from being created
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-04-03 18:50:47 +10:00
Miroslav Suchý
26666dbf8f bump up number of reserved instances 2025-04-03 10:19:06 +02:00
Greg Sutcliffe
7f60fdf690 Zabbix-stg: More base server config
This adds:
- Matrix media type
- User for a Matrix bot
- Trigger using Matrix & the bot
- PSK configuration, using the PSK file already deployed
- 2 base templates
  - a general one suitable even for Koji
  - a dependant one for all other hosts
- Autoregistration config to use the new base template

This is all scoped to staging via a new include in main.yml
2025-04-02 17:30:59 +01:00
David Kirwan
01a5c40b69
Forgejo: disable postgresql ha chart, add variable for crunchydata operator
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-04-02 14:35:28 +01:00
David Kirwan
71d3f4079f
forgejo: Create postgresql operator config and secret
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-04-02 07:58:27 +01:00
Kevin Fenzi
8bb7198a25 F42 Final Freeze now in effect
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-04-01 14:00:43 -07:00
Kevin Fenzi
5a44707cf4 koji_builder: install linux-firmware, not kernel-firmware
kernel-firmware is the old provide and it's no longer provided by newer
versions of linux-firmware. This is causing our builders to downgrade to
an older linux-firmware, then dnf-automatic just updates it the next
time to the newer one (because it's a security update).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-04-01 13:54:51 -07:00
Samyak Jain
4caaa7c181 F42 final freeze is under process!
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-04-01 16:07:22 +00:00
Kevin Fenzi
ee5d2b3a57 poddlers: add jnsamyak for releng work in poddlers
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-04-01 08:43:01 -07:00
Aurélien Bompard
358e1d2b5d
Let the jobs-summary script take multiple projects as arguments
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-01 15:27:46 +02:00
Aurélien Bompard
46a8152c61
Deploy journal2fedmsg to prod
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-01 12:05:17 +02:00
Aurélien Bompard
394b92cb19
simplify the config file using a variable
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-01 11:47:42 +02:00
Pavel Raiskup
5a85ca9211 copr: pulp_content_url needs to be slash-terminated 2025-04-01 07:49:20 +02:00
Adam Williamson
a23c9df05a Make ipsilon static config file public (staging), clean it up
The only secrets in this file, AFAIK, are the client secrets.
Most of those are already defined as secret variables for the
plays in this repo that deploy the services to use.

So instead of duplicating most of the secrets, and keeping this
file in the private repo where we can't do PRs and editing it is
awkward, let's just make all the client secrets be variables,
and make this file public.

For all the cases where a secret wasn't already defined as a
variable, I've added it, so this should work as-is.

Note that the use of `flask_oidc_dev_stg_oidc_client_secret`
twice is not an error in this PR; that secret was reused for
the staging community blog client config. I have reported this
at https://pagure.io/fedora-infrastructure/issue/12161#comment-963303 .

This also removes the client configurations for several services
which no longer exist.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-03-31 23:07:01 +00:00
Kevin Fenzi
8d65c9687c global: swap out atop for btop
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-31 10:45:06 -07:00
Michal Konecny
80adc4e729 [ipa/server] Don't ask for user input
As the pause module is only executed on first machine in the group I
decided to rather remove it completely.

This means that the replica will only be reinstalled, if the machine
isn't master node and the /var/log/ipainstall.log doesn't exist.

If somebody wants to re-install the replica they just need to remove
/var/log/ipainstall.log and the playbook will do the rest.
2025-03-31 15:44:16 +02:00
Michal Konecny
40136bda42 [ipa/server] Don't ask for reinstall in some cases
Don't ask for reinstall when this is master node or the install log is
already created.
2025-03-31 15:17:48 +02:00
David Kirwan
f8adba6df3
forgejo: add postgresql operator config, secret
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-31 10:55:46 +01:00
Jakub Kadlcik
42853033ba logdetective: allow http and https in the firewall 2025-03-28 23:37:33 +01:00
Jakub Kadlcik
abee7a2c5f logdetective: install certbot package 2025-03-28 23:37:33 +01:00
Adam Williamson
7b84f30429 openqa/server: switch prod to OAuth2
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-03-28 14:37:00 -07:00
Adam Williamson
5da2faac67 openqa/server: allow OAuth2 authentication, enable on lab
OpenID support in FAS is going away. openQA has OAuth2 support.
I've tested this config to work with manual edits on lab, now
ansiblizing it (for lab only to start with).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-03-28 13:40:57 -07:00
Adam Williamson
721ffe0df4 proxies: drop caiapi
this isn't a thing any more.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-03-28 18:11:11 +00:00
Adam Williamson
4cd3765cd0 ipsilon: drop obsolete config for beaker and dead bugzillas
We haven't had a beaker since 2018 or so, and none of these
various staging/test/dev bugzilla instances exist any more.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-03-28 18:04:30 +00:00
Kevin Fenzi
b1363750ce waiverdb: also delete the playbook play referring to the template that was just removed
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-28 11:00:34 -07:00