Normally we can just define the site once with it's prod name and use
that in stg with an alias. This works because we have a wildcard ssl
cert for *.fedoraproject.org. So, stg.fedoraproject.org and
fedoraproject.org both work fine. We can't do this for
release-monitoring tho as we use letsencrypt certs and don't have a
wildcard. We could expand out letsencrypt role to get altnames, but just
making these seperate sites should fix it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
The site is the prod name, with an alias for the stg host.
No need to try and install into a stg site when it doesn't exist.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
It was redirecting it to the old fedorainfracloud ip.
Then it wasn't proxying to openshift.
When moving to prod, the conditionals here should be removed.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
These certs are used for *.app.os.fedoraproject.org.
ie, things that don't also have/use a fedoraproject.org route.
THis includes the console and some apps that just never bothered to make
a fedoraproject route.
Fixes 9162
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
For the same reason as the last commit. We don't have staging back yet
and so we can't get certs for them.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We don't own fpaste.org, in the past the owners just pointed it to our
proxies and we got a cert for it. However, it's still pointing to the
old phx2 proxies right now. So, drop it until it's fixed to point to the
new ones, or given to us as a domain.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Doing this makes letsencrypt try and get a cert for it, but it's not
setup to do that correctly. Wait until stg is back.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Right now we don't have a working certgetter, so disable these for now
until we can get certgetter01 able to go out and get certs.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Turns out this also deploys all the bootstrap and fonts that things use,
not just the apps viewer thing. So, re-enable it for now so things work
again.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We had problems the last time we had this on, but that was a while back,
so lets try it again. If we notice weird build failures, we can revert
it back again.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
apps-fp-o no longer works in Fedora 32.
It needs PyYAML which was dropped, and has 2 python2
yaml scripts that no longer will work. We need to either
replace it or drop it or fix it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>