infrastructure/ansible
2
0
Fork 0
Code Pull requests 7 Activity Actions
24423 commits 9 branches 0 tags 110 MiB
Commit graph

24423 commits

This branch
This branch
All branches
Author SHA1 Message Date
Patrick Uiterwijk
6cdfe3dc19 I already hardcoded https:// 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 21:00:05 +02:00
Patrick Uiterwijk
89d4ffdf51 Fix config file path 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 20:59:14 +02:00
Kevin Fenzi
52a99301de do not overwrite this for now 2018-10-05 16:50:47 +00:00
Patrick Uiterwijk
176d302e3d Fix path to repobridge config 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 17:17:19 +02:00
Patrick Uiterwijk
45b6f4becb Not uppercase 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-10-05 15:15:33 +00:00
Patrick Uiterwijk
401c84ebe8 fix cert name 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-10-05 15:14:17 +00:00
Patrick Uiterwijk
47eb0802ed Close var 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 17:12:32 +02:00
Patrick Uiterwijk
81a7c77f7e Deploy repoBridge 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 17:10:33 +02:00
Aurélien Bompard
d99c8c916f Adjust permissions again 2018-10-05 14:42:08 +00:00
Aurélien Bompard
2faf2c68c7 Adjust permissions 2018-10-05 14:34:22 +00:00
Patrick Uiterwijk
107ffe30bf Allow anon gitolite cloning 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 16:30:01 +02:00
Aurélien Bompard
5b1b1103e8 Fix perm 2018-10-05 14:08:00 +00:00
Aurélien Bompard
d64778b44b vhost starts with a slash 2018-10-05 14:05:52 +00:00
Aurélien Bompard
90d1d6d977 Fix syntax error 2018-10-05 14:01:19 +00:00
Aurélien Bompard
9dc9e613a7 The user must be the cert's CN 2018-10-05 13:45:51 +00:00
Aurélien Bompard
3f924c0445 We don't need passwords, we use SSL certs 
But pika needs something in the field.
 2018-10-05 13:36:39 +00:00
Aurélien Bompard
f272524225 Wait until the ansible bug is fixed 2018-10-05 13:24:50 +00:00
Aurélien Bompard
2ef372c962 Ah, that's actually an Ansible bug (45109) 
https://github.com/ansible/ansible/pull/45109
 2018-10-05 13:22:14 +00:00
Aurélien Bompard
1be82dfac2 Try again again 2018-10-05 12:52:23 +00:00
Aurélien Bompard
9e932b442c Try again 2018-10-05 12:51:42 +00:00
Aurélien Bompard
a99b782cec Weird stuff happening, try to workaround 2018-10-05 12:50:46 +00:00
Aurélien Bompard
46c923780b Revert "Apparently the vhost argument fails with a starting /" 
This reverts commit b90905db07.
 2018-10-05 12:42:05 +00:00
Aurélien Bompard
b90905db07 Apparently the vhost argument fails with a starting / 
Ansible bug?
 2018-10-05 12:29:07 +00:00
Aurélien Bompard
f8228f97ea Fix RabbitMQ binding 2018-10-05 12:12:47 +00:00
Clement Verna
b81bce8dc0 OSBS: disable router in OSBS openshift cluster 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-10-05 13:30:05 +02:00
Aurélien Bompard
20c0cc5415 Allow the RabbitMQ user to login to the management UI 2018-10-05 09:57:46 +00:00
Aurélien Bompard
9a108064c7 Oh crap Erlang does not use # for comments 2018-10-05 09:50:40 +00:00
Aurélien Bompard
e90ec28ebe The RabbitMQ ansible modules can't use https yet. 
Disable SSL on the management api, and mitigate the security risk by
only listening on localhost.
 2018-10-05 09:42:04 +00:00
Patrick Uiterwijk
8dad9ed1de Allow sysadmin-messaging sudo on rabbitmq 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-10-05 09:02:56 +00:00
Patrick Uiterwijk
c001826b85 Let sysadmin-messaging into rabbitmq 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-10-05 08:57:53 +00:00
Aurélien Bompard
1e062faf8c Missing definitions 2018-10-05 08:41:27 +00:00
Aurélien Bompard
6088ebdd00 Only create the rabbitmq user on one member of the cluster 2018-10-05 08:39:35 +00:00
Aurélien Bompard
a3cac4de5b RabbitMQ: create admin user 2018-10-05 08:33:04 +00:00
Aurélien Bompard
b1ead55e6f Fix ansible module option 2018-10-05 07:39:23 +00:00
Clement Verna
795c75af21 FPDC: create prod openshift project 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-10-05 09:18:13 +02:00
Clement Verna
d18fb1841a ipsolon: remove release-type oidc scope for fpdc 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2018-10-05 09:16:14 +02:00
Patrick Uiterwijk
02ff6983fa Use the Pagure code for http cloning 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 07:28:38 +02:00
Kevin Fenzi
aa337313be Drop enabledrepos extra_repos for now. 2018-10-05 05:13:41 +00:00
Patrick Uiterwijk
f6121fc80c Switch pkgs over to aclchecker 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 06:57:12 +02:00
Patrick Uiterwijk
2944e3f2a3 Use the correct port 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 05:39:48 +02:00
Patrick Uiterwijk
692e419204 Make sure docs and tickets are correctly disabled 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 05:28:47 +02:00
Patrick Uiterwijk
f92899fe69 Pagure runs as 'pagure' here 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 05:08:43 +02:00
Patrick Uiterwijk
f68bb7e4aa Deploy initial repoSpanner config for stg dist-git 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 05:05:25 +02:00
Kevin Fenzi
d1683f98cd We don't want to only setup staging releng-compose to push to the staging 
registery, we want compose-x86-01 to also be able to push to it.
So drop the staging here and hard code the path name so it's always right.
 2018-10-05 00:56:32 +00:00
Kevin Fenzi
f6363a758e pagure.io zones are not signed 2018-10-04 22:07:52 +00:00
Kevin Fenzi
58174e21af Move pagure.io to a templated zone so we can point lists to proxies. 2018-10-04 21:10:23 +00:00
Randy Barlow
c53a7f5b25 Remove Gluster configuration for the registries. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-10-04 19:52:33 +00:00
Randy Barlow
da5f9ca2a3 Delete records of oci-registry02.stg. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-10-04 18:38:20 +00:00
Randy Barlow
d81eb87ac1 storage.filesystem.rootdirectory = /srv/registry for registries. 
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-10-04 18:07:09 +00:00
Randy Barlow
ee4e6af418 Give the staging registry a dir to use for local storage. 
We decided not to use NFS storage for the staging registry, so
I am adding a /srv/registry directory to simulate having the same
path that we would have on the production registry.

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
 2018-10-04 17:41:47 +00:00