infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
40785 commits 9 branches 0 tags 110 MiB
Commit graph

40785 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
519a1b5d54 sign-bridge01: move to rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-26 13:03:26 -07:00
Michal Konecny
76c5454fc4 [mailman3] Enable compression of static files 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 15:37:19 +02:00
Michal Konecny
16f8d40075 [mailman3] Process static files every time 
Waiting for static_root_dir change could skip files that were added to static
after the initial deployment. This should prevent that.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 15:33:50 +02:00
Michal Konecny
89c45beb9f [mailman3] Fix the remaining SELinux issues 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 15:27:53 +02:00
Michal Konecny
4e221cf347 [mailman3] Fix the ownership of log file 
Both become and become_user needs to be set to work. So the script was executed
as root which caused the hyperkitty log file to be created with root owner.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 14:04:31 +02:00
Michal Konecny
603633eb34 [mailman3] Enable mod_wsgi role again 
I'm not sure what it is used for, but the httpd service is failing when the
mod_wsgi isn't installed.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 13:01:20 +02:00
Michal Konecny
4b54cadbdc [mailman3] Use the correct handler 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 12:48:07 +02:00
Michal Konecny
29f574fdc5 [mailman3] Fix jinja syntax issue 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 12:19:15 +02:00
Michal Konecny
0adc5a0749 [mailman3] Remove mod_wsgi role from new deployment 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 12:08:41 +02:00
Michal Konecny
6416dd6249 [mod_wsgi] Install the mod_wsgi correctly on RHEL9 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 12:07:12 +02:00
Michal Konecny
8e19bddb1c [mailman3] Fix syntax issue 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 11:27:58 +02:00
Michal Konecny
88c28e2b09 [mailman3] Fix yamllint errors 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 11:02:47 +02:00
Michal Konecny
1c37ff096c [mailman3] Fix the OIDC server url 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 10:50:19 +02:00
Michal Konecny
ee55811b8b [mailman3] Remove the unused variables 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 10:43:52 +02:00
Michal Konecny
261ec360fa [mailman3] Remove the superuser creation 
We don't need the superuser if we knew how to add the permissions to any user.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 10:43:52 +02:00
Michal Konecny
9b1e4bca00 [mailman3] Enable Debug mode for staging 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 10:43:52 +02:00
Michal Konecny
a8cd5dfff3 [mailman3] Add migration script for Fedora auth provider 
This will add migration script for Fedora auth provider. This is only needed
when updating to Fedora auth provider using OpenID Connect.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 10:43:52 +02:00
Michal Konecny
9d3fb794e1 [mailman3] Add django fedora auth provider 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 10:43:52 +02:00
Michal Konecny
4c7885c89d [mailman3] Add django superuser creation task 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 10:43:52 +02:00
Michal Konecny
d4fba9fd55 [mailman3] Update host file 
* Increase the memory (to prevent swapping)
* Add sar variables

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 10:43:52 +02:00
Michal Konecny
6605685527 [mailman3] Add missing script and config file 
* Add mailman-sar script
* Add fedora-messaging config

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-04-26 10:43:52 +02:00
Kevin Fenzi
fd005e711a bvmhost-p09-04: fix network vars 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-25 17:46:08 -07:00
Dusty Mabe
5cf15304e0
aws/iam/policies: give fcos-upload permisions to describe tags 2024-04-25 15:30:05 -04:00
Aurélien Bompard
e17802d271
Disable the services on badges-backend 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-25 17:43:42 +02:00
Aurélien Bompard
3092b01893
Fix the syntax 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-25 17:15:11 +02:00
Aurélien Bompard
894ba795f8
Factor the hostname of the datanommer server in staging and prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-25 17:08:58 +02:00
Aurélien Bompard
4fc54a4d88
Give datagrepper its own DB user 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-25 17:00:12 +02:00
Aurélien Bompard
7d6bcdd87d
Badges: use a specific user to connect to the datanommer DB 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-25 15:11:37 +02:00
Aurélien Bompard
1a7c8b7f31
Badges: cache the datanommer queries longer 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-25 14:28:30 +02:00
David Kirwan
81ffe56f4a
zabbix: move https to http for proxies template 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2024-04-25 12:51:32 +01:00
David Kirwan
4cfba84485
zabbix: retag tasks in zabbix_templates role 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2024-04-25 12:17:52 +01:00
David Kirwan
0551f3f343
zabbix: add clearer ansible tags on zabbix_template role tasks 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2024-04-25 11:58:40 +01:00
David Kirwan
9d97299285
zabbix: template to handle external hosts 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2024-04-25 11:26:49 +01:00
Kevin Fenzi
1678a72e26 buildvm-ppc64le-05.stg: make this vm slightly smaller to fit 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-24 17:27:51 -07:00
Leo Puvilland
5e59e8c213 add current oncall and recent oncalls to nagios permissions CGI 
Signed-off-by: Leo Puvilland <leo@craftcat.dev>
 2024-04-25 00:17:29 +00:00
Kevin Fenzi
990bebe39f bvmhost-p09-01.stg: add correct dhcp entry 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-24 17:11:17 -07:00
Adam Williamson
8b9778777b iptables: correct invalid syntax in nat table 
This `[0:]` syntax doesn't seem to be correct. iptables 1.8.10
errors out on encountering it, saying:

invalid policy counters for chain 'PREROUTING'

this seems to be because the check was tightened between 1.8.9
and 1.8.10 to apply even when iptables is not actively restoring
the counters:
https://git.netfilter.org/iptables/commit/?id=4a2b2008fdf4df980433f99a6d8f2003f2005296

I think these are all meant to be 0:0, so let's make them that
and stop iptables choking.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2024-04-24 13:00:51 -07:00
Kevin Fenzi
e7d5a04cf0 bodhi / backend / staging: fix incorrect ostree staging volume name 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-24 11:51:50 -07:00
Kevin Fenzi
5f680d9d0b mailman / spamassasin: disable spamhaus queries 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-24 11:30:57 -07:00
Mattia Verga
8ae7d1610c bodhi: adjust config for staging instance 
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
 2024-04-24 16:38:05 +00:00
Lenka Segura
f137bbb0f1 Remove pagure-sync-bugzilla.py.js script 
The script is not referenced anywhere and the sync is now done by
distgit_bugzilla_sync toddler.

Signed-off-by: Lenka Segura <lsegura@redhat.com>
 2024-04-24 16:24:12 +00:00
Kevin Fenzi
4da77268dd openscanhub: proxy setup for both prod and stg 
Change the stg conditionals so both prod and stg are setup.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-24 16:22:34 +00:00
Kevin Fenzi
b7d6994507 F40 freeze is over now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-24 09:11:47 -07:00
Aurélien Bompard
91a57247f9
Badges: 2 consumers in prod should be enough for everyone 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-24 10:39:54 +02:00
Kevin Fenzi
18390f3189 pkgdb / gnome-software endpoint: Set f40 to active so it is offered to users 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-23 11:28:37 -07:00
Jiri Kyjovsky
363ed8d1a5 copr-hv02: add overlooked macs from hv2 2024-04-23 19:38:20 +02:00
Aurélien Bompard
b07b066f98
Badges: fixup ccf5dad 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-23 19:31:30 +02:00
Aurélien Bompard
ccf5dad24a
Badges: add the cache config for fedbadges 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-23 18:36:18 +02:00
Aurélien Bompard
b6f7f24d6c
Badges: run multiple consumers in prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-04-23 18:36:18 +02:00
Jiri Kyjovsky
48c6c44d27 copr-hv02: update ethernet mac address 2024-04-23 18:00:51 +02:00