infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
42831 commits 9 branches 0 tags 110 MiB
Commit graph

42831 commits

This branch
This branch
All branches
Author SHA1 Message Date
Aurélien Bompard
4df684038d
Minor fixup 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-03-13 17:13:55 +01:00
Aurélien Bompard
a32457a7aa
Add a playbook to sync the Badges DB to staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-03-13 17:12:34 +01:00
Greg Sutcliffe
2ccdc83dce Add lint prefix to template_fullpath to match openshift/object 2025-03-13 15:45:07 +00:00
Aurélien Bompard
6687bfb589
MirrorManager: add the secrets mount to all deploymentconfigs 
The crawlers need it when they import the Flask app, or we get:
```
FileNotFoundError: [Errno 2] No such file or directory: '/etc/mirrormanager-secrets/client_secrets.json'
```

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-03-13 09:22:18 +01:00
Pragyan Poudyal
a6177a5e52 Add pragyan-poudyal to appowners 2025-03-13 04:58:36 +00:00
Kevin Fenzi
b50b776cb5 varnish / s390x cache: move to memory based instead of disk 
This was done last week to help out with builds that were failing
due to s390x cache issues. Moving to memory based seems to have
helped this stop happening, possibly along with other changes.

I'm pushing it now because it reflects the current state
after outages last week.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-12 14:21:43 -07:00
Kevin Fenzi
17c8094c2f log01 / rsyslog / splunk: adjust ip again as the previous one was not desired 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-12 14:20:27 -07:00
Francois Andrieu
5555679100
fedora-web: fix include_vars option 2025-03-12 11:21:43 +01:00
Andrew Heath
d616fa6c6c Update Splunk syslog address 
Update Splunk syslog address per Red Hat's Monitoring and Loging team.
The old address will be decomed in about a week per their
communications.
 2025-03-11 18:30:47 +00:00
James Antill
8e8fc651fa Turn on nftables for a few more staging groups. 
Signed-off-by: James Antill <james@and.org>
 2025-03-10 16:40:08 -04:00
Ryan Lerch
5c07d5b8c6 forgejo: update admin groups values from Fedora Accounts 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-03-10 15:54:47 +10:00
Greg Sutcliffe
a69b10a128 resultsdb-ci-listener: deploy app via s2i 2025-03-07 13:06:46 +00:00
Jakub Kadlcik
eec596d979 copr-dev: try using bootc builder image, pt.2 2025-03-07 12:18:18 +01:00
Jakub Kadlcik
0f902b6e9b copr-dev: try using bootc builder image 
See https://github.com/fedora-copr/copr-image-builder
 2025-03-06 23:57:10 +01:00
David Kirwan
184c67583f
forgejo: correct oauth configuration to map sysadmin-main to admin 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-03-06 15:10:18 +00:00
David Kirwan
5558de59de
forgejo: enable route 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-03-05 13:20:21 +00:00
David Kirwan
d7c54cb063
forgejo: testing ansible helm module 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-03-05 12:55:57 +00:00
David Kirwan
77cd46fcf9
forgejo: updating flags passed to helm 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-03-05 12:38:56 +00:00
David Kirwan
a7b5254c8d
forgejo: update task to read in values passed to helm 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-03-05 10:23:15 +00:00
James Antill
69911c5d72 Enable IPv6 nftables. 
Signed-off-by: James Antill <james@and.org>
 2025-03-04 14:31:54 -05:00
James Antill
e83b42b572 Remove iptables cron and stop/disable services, when using nftables. 
Signed-off-by: James Antill <james@and.org>
 2025-03-04 14:14:37 -05:00
David Kirwan
200c9eb70d
forgejo: change to point at the fedora forked forgejo helm chart 
Add values template that is passed to helm at deploy

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2025-03-04 15:48:57 +00:00
James Antill
ca18224faa Change osbuildapi set table to the ip filter table. 
Signed-off-by: James Antill <james@and.org>
 2025-03-03 17:08:20 -05:00
James Antill
224d98cbb0 Remove typo from kojibuilder nftables template. 
Signed-off-by: James Antill <james@and.org>
 2025-03-03 16:52:02 -05:00
James Antill
172cfc9efa Move staging builders to nftables. 
Signed-off-by: James Antill <james@and.org>
 2025-03-03 21:20:30 +00:00
James Antill
1c6c65844d Add new osbuildapi-update-nft.cron entries, and get it installed when nftables. 
Signed-off-by: James Antill <james@and.org>
 2025-03-03 21:20:30 +00:00
James Antill
4fac049b6a Actually install the nftable template file. 
Signed-off-by: James Antill <james@and.org>
 2025-03-03 21:20:30 +00:00
James Antill
b322316be5 Don't flush old osbuildapi entries in nftables land either. 
Signed-off-by: James Antill <james@and.org>
 2025-03-03 21:20:30 +00:00
James Antill
31d65aa439 Actually move to nftables for any host with nftables: true (nothing atm). 
Signed-off-by: James Antill <jantill@redhat.com>
 2025-03-03 21:20:30 +00:00
Aurélien Bompard
c9b9086535
Add missing j2 suffixes 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-03-03 10:18:14 +01:00
Anton Livaja
fd97971442 fix name to change anitya 2025-03-03 08:47:21 +00:00
Anton Livaja
6abd0b78b2 add base url for mapping stagex packages 2025-03-03 08:47:21 +00:00
Miroslav Suchý
c381c5a773 max concurent starting of ARM builders to 20 2025-03-03 09:44:19 +01:00
Miroslav Suchý
75df00270e bump numbers of reserved builders 2025-03-03 09:42:05 +01:00
Jakub Kadlcik
60f990bdb7 copr-fe: use mod_wsgi role 
Fix https://github.com/fedora-copr/copr/issues/3623
 2025-02-27 10:48:12 +01:00
Jakub Kadlcik
b168e806d8 copr-fe-dev: use mod_wsgi role 2025-02-26 10:58:51 +01:00
Carl George
42b0fcb33c koji_hub: add EPEL 9 and 10 to the prune policy 
Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-02-26 01:49:27 +00:00
Carl George
092622b6bc bodhi2/backend: don't change epel-release-latest symlink if destination filename is the same 
https://pagure.io/epel/issue/318

Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-02-26 00:33:27 +00:00
Aurélien Bompard
d11b793965
tabs to spaces 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-25 09:19:44 +01:00
Aurélien Bompard
938471e9f1
The clean packagers groups toddler needs a different keytab 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-25 09:18:51 +01:00
Aurélien Bompard
097b8f9214
Give the clean packagers groups toddler access to the corresponding service's keytab 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-25 08:54:06 +01:00
Jiri Kyjovsky
1e8c7dcba9 copr: we now use dnf5 on copr, theres no need of dnf-plugins-core then 2025-02-24 13:56:45 +01:00
Jiri Kyjovsky
bb9dd04964 frontend: provide stg url for oidc metadata 2025-02-24 11:18:47 +01:00
Jiri Kyjovsky
da9a451e34 copr: feed oidc env variables to frontend 2025-02-24 00:48:29 +01:00
Adam Williamson
6102284c0d Reapply fixed "Don't hardcode the branched number in Bodhi compose repo config" 
This reverts commit 6d4c6b0be1, but
fixes the problem.
 2025-02-23 19:19:15 +00:00
Patrik Polakovič
d63afb09d8 Remove all mentions of monitor-gating 
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
 2025-02-20 11:07:20 +01:00
Kevin Fenzi
6d4c6b0be1 Revert "Don't hardcode the branched number in Bodhi compose repo config" 
This reverts commit 13a95660e4.

Templating is wonky here.
 2025-02-19 10:24:10 -08:00
Adam Williamson
13a95660e4 Don't hardcode the branched number in Bodhi compose repo config 
There's no need for this to be hardcoded and manually updated,
we can template it. Add some clarifying notes on what happens
when Branched doesn't exist, and why it doesn't matter that we
don't set a correct config for the Rawhide release.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-02-19 18:10:53 +00:00
Aurélien Bompard
a508708744
IPA: do the toddlers user setup before destroying the admin ticket 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-19 12:20:08 +01:00
Aurélien Bompard
b3c7a683e2
IPA: setup a toddlers service to remove users from groups 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-19 12:16:05 +01:00