infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
26498 commits 9 branches 0 tags 110 MiB
Commit graph

15478 commits

Author SHA1 Message Date
Kevin Fenzi
67971513c9 download-phx2: Also allow indexes for /mnt/koji/compose on phx2 download. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-03 20:00:15 +00:00
Kevin Fenzi
b023b19fe8 download-phx2: Also serve /compose 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-03 19:50:29 +00:00
Patrick Uiterwijk
3904614002 Import initial OpenShift Ipsilon bits 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-03 20:00:53 +02:00
Patrick Uiterwijk
cb8b0c935d Restrict Proxy server-status to localhost for now 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-03 20:00:53 +02:00
Kevin Fenzi
8138db0d4d openshift: bodhi-web: remove downgrade, as the base image hasn't yet updated to the broken version. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-03 17:42:08 +00:00
Kevin Fenzi
736ab6eebb openshift: bodhi-web: fix typo in url 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-03 17:14:07 +00:00
Kevin Fenzi
cb624d50fe openshift: bodhi-web: downgrade librepo to non broken version in image builds. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-03 17:01:40 +00:00
Mohan Boddu
2f714ba9dc Setting f30 primary arches 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-05-03 13:45:45 +00:00
Kevin Fenzi
c71a31b220 taiga: retire old taiga cloud instances, everything should be using teams.fedoraproject.org now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-02 22:03:09 +00:00
Mohan Boddu
34c9f35f2a Fix the key in tag2distrepo for coreos-pool 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-05-02 18:42:41 +00:00
Mohan Boddu
8be7195449 tag2distrepo: Regen coreos-pool repos 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-05-02 17:59:34 +00:00
Kevin Fenzi
80f5658820 base: Fix syntax on dnf command, it should just be the name in this case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-01 22:40:28 +00:00
Mohan Boddu
c9dcffc09b Autosigning setup for coreos-pool tag 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-05-01 18:21:59 +00:00
Mohan Boddu
6c4c5b5362 koji hub policy changes for coreos-pool and coreos-release tags 
https://pagure.io/releng/issue/8294

Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-05-01 18:21:59 +00:00
Kevin Fenzi
5f98bf1e03 robosignatory: Add f31-python tag to be signed. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-01 17:19:00 +00:00
Jakub Kadlčík
96de11a1bf Create manual playbooks for upgrading Copr instances 
There is a problem with our current playbooks, that they can be
executed automatically without us knowing about it. That is an issue
particularly during release process because we can prepare new
packages into infra-tags repo or bodhi and a nightly reprovision
can upgrade to them outside of an outage window or any of us being
prepared for it.

Therefore `groups/copr-*.yml` playbooks *should not* upgrade any
packages, but only ensure, that those packages are installed. For
upgrade, there should be separate `manual/copr/copr-*-upgrade.yml`
playbooks. Because they are located under `manual` directory, it
is secured, that they can't be run automatically.
 2019-05-01 18:39:27 +02:00
Patrick Uiterwijk
8fb5f0aca9 Add apache/headers tag 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-05-01 17:33:03 +02:00
Kevin Fenzi
7c89405d04 dns: Actually drop the limit on the group we defined in the last commit. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-30 20:40:43 +00:00
Kevin Fenzi
f29428cfa6 dns: add 2 rh nameservers that make a lot of legit queries against our dns. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-30 20:36:00 +00:00
Kevin Fenzi
266164af71 releases.json: update fedora 30 to active and no retirement 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-30 12:11:32 +00:00
Pierre-Yves Chibon
dc0ef80d46 elections: Adjust the APPLICATION_ROOT in stg vs prod 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 15:27:02 +02:00
Martin Kutlak
4d1bcd1802 Deploy f-messaging certs for faf 
Signed-off-by: Martin Kutlak <mkutlak@redhat.com>
 2019-04-29 13:50:52 +02:00
Pierre-Yves Chibon
f02f70029e elections: use the same url to connect to the DB in alembic as in the application's configuration file 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 13:36:35 +02:00
Pierre-Yves Chibon
e76e1a88eb elections: Rework again the secret.yml again 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 13:30:51 +02:00
Pierre-Yves Chibon
2dab570f7d elections: rework the indentation of secret.yml 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 13:22:19 +02:00
Pierre-Yves Chibon
7b6a86c1dd elections: add missing closing parenthesis 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 13:19:19 +02:00
Pierre-Yves Chibon
a7f2a6b08d elections: another trailing : that was messing up the file 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 12:47:38 +02:00
Pierre-Yves Chibon
833274e56d elections: remove trailing : that was messing the file 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 12:46:22 +02:00
Pierre-Yves Chibon
86a3572311 elections: rename the volume to see if that changes something 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 12:29:46 +02:00
Pierre-Yves Chibon
33a2a12afb elections: indentation fix 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 12:27:14 +02:00
Pierre-Yves Chibon
ded44bdb34 elections: mount the secret volume and point elections to it 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 12:24:19 +02:00
Pierre-Yves Chibon
2b16867d92 elections: fix the path to the alembic revisions 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 12:15:54 +02:00
Pierre-Yves Chibon
d71529606b elections: use upstream's alembic upgrade script 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 12:02:34 +02:00
Pierre-Yves Chibon
c5cde07727 elections: the path to the fedora-messaging config is specified by an environment variable in the container 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 11:58:25 +02:00
Pierre-Yves Chibon
48ac98d72d elections: Mount the fedora-messaging volumes and config files 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 11:40:11 +02:00
Pierre-Yves Chibon
91cd0ffc24 elections: Add a configuration file for fedora-messaging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 11:27:58 +02:00
Pierre-Yves Chibon
299fad9362 elections: add a secret containing the client_secrets for flask-oidc 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 11:27:38 +02:00
Pierre-Yves Chibon
30e5b8ba0e elections: point to id.stg in staging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 11:26:12 +02:00
Pierre-Yves Chibon
6c8749cf59 distgit/pagure: Fix the amqp_url for fedora-messaging on pagure 
The cert is now for rabbitmq.stg.fedoraproject.org and not:
rabbitmq01.stg.phx2.fedoraproject.org so having the wrong url in the config
leads to a CertificateError leading to pagure failing to send notifications
on fedora-messaging.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 11:14:38 +02:00
Mohan Boddu
c491708adb Disable branched compose and enable F30 Cloud and Container composes 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2019-04-27 19:38:48 +00:00
Kevin Fenzi
e081c43c74 cloud-noc01: setup dhcp for communishift storage nodes. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-27 18:24:25 +00:00
Pierre-Yves Chibon
4cbd103c18 Enable running alembic upgrade on create 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-26 10:31:12 +02:00
Pierre-Yves Chibon
3ca380a617 Install python2-koji on simple-koji-ci 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-26 10:31:12 +02:00
Mikolaj Izdebski
6fb16a4c69 proxies-redirects: Add another rewrite for cgit on src.fp.o (#7736) 2019-04-25 23:15:33 +02:00
Kevin Fenzi
1cf627f5bc noc01 dhcp for buildvmhost-aarch64-02: correct mac address. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-25 20:37:30 +00:00
Stephen Smoogen
c432675c74 [nagios] add checks for datanommer monitoring 2019-04-25 18:13:43 +00:00
Kevin Fenzi
6a6d410444 buildvmhost-aarch64-01/01: Add dhcp info for 2 thunderx2 aarch64 buildvmhosts. 
We need to add these in so pxe sees the right thing to boot them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-25 16:08:04 +00:00
Clement Verna
f4a1f3c1d5 mdapi: configure openshift cronjob housekeeping 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-04-25 13:55:47 +02:00
Clement Verna
659131c821 mdapi: fix the path of the script executed by the cronjob 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-04-25 11:55:22 +02:00
Clement Verna
16fd75efec mdapi: change the cronjob schedule 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2019-04-25 11:42:11 +02:00