infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
42230 commits 9 branches 0 tags 110 MiB
Commit graph

42230 commits

This branch
This branch
All branches
Author SHA1 Message Date
Reon Beon
6eba928748 Update roles/openshift-apps/release-monitoring/templates/anitya.toml adds guix 
Adds guix
 2024-12-11 12:00:04 +00:00
Aurélien Bompard
183f4ff7a4
Distgit: missing dependency 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-11 11:51:03 +01:00
Aurélien Bompard
311f9c009a
Use OIDC in Dist-Git 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-11 11:33:38 +01:00
Aurélien Bompard
6a5f359a91
Fix syntax 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-11 10:51:46 +01:00
Aurélien Bompard
810f660711
Poddlers: only setup a queue when the toddler isn't disabled 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-11 10:47:46 +01:00
Aurélien Bompard
e7e2671ebb
Unbind the toddlers queue 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-11 10:35:48 +01:00
Michael Armijo
8f423f4bad fedora-ostree-pruner: update to fedora:41 
xref: https://github.com/coreos/fedora-coreos-releng-automation/pull/191
see: https://github.com/coreos/fedora-coreos-tracker/issues/1695
 2024-12-11 02:36:56 +00:00
Michael Armijo
b296338620 coreos-ostree-importer: update to fedora:41 
xref: https://github.com/coreos/fedora-coreos-releng-automation/pull/191
see: https://github.com/coreos/fedora-coreos-tracker/issues/1695
 2024-12-11 02:36:56 +00:00
Michael Armijo
1ff5665977 coreos-koji-tagger: update to fedora:41 
xref: https://github.com/coreos/fedora-coreos-releng-automation/pull/191
see: https://github.com/coreos/fedora-coreos-tracker/issues/1695
 2024-12-11 02:36:56 +00:00
Michael Armijo
f95b6402f9 coreos-cincinnati: update to fedora:41 
xref: https://github.com/coreos/fedora-coreos-cincinnati/pull/102
see: https://github.com/coreos/fedora-coreos-tracker/issues/1695
 2024-12-11 02:36:56 +00:00
Kevin Fenzi
ce1f5b02e6 ipa_client: on f40 there is no sssd user, so files are owned by root 
On rhel and f41+ there is a sssd user, so we should use that.
If we don't, sssd will change the ownership on restart, meaning we flip
it back and forth each time we run the playbook.

remember to remove this when fedora 40 is all gone from infra

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-10 14:43:47 -08:00
Kevin Fenzi
df36530d00 ipa_client: add tag for nss ignore file to allow globally updating it. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-10 14:01:54 -08:00
Michael Armijo
bd7aa185ca openshift-apps/fedora-ostree-pruner: add marmijo to project owners 
update the project appowners list to include marmijo
 2024-12-10 13:58:32 -07:00
Kevin Fenzi
ce619b259d buildvm_s390x: add missing hosts to inventory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-10 10:53:33 -08:00
Kevin Fenzi
82a8e8dbc9 buildvm_s390x: cleanup and add 7 new builders. 
We no longer need to keep any config around from boston, so nuke that.
All the buildvm's are now kvm, so we don't need a seperate group/config
for that, so remove it.

Consolidate the variables down to buildvm_s390x group and only have ip
address for host vars.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-10 10:50:25 -08:00
Aurélien Bompard
e547715fce
Poddlers/SCM Requests Processor: fix the subscriptions 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-10 17:29:36 +01:00
Michal Konecny
c851192805 [mailman3] Fix for DMARC mitigation task 
The task checked wrong variable for output. Let's fix that.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-12-10 14:20:25 +01:00
Aurélien Bompard
8d6026a6aa
Replace toddlers with poddlers in prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-10 10:03:52 +01:00
Aurélien Bompard
fe1c5c0e62
Change the loop variable name to avoid conficts in nested loops 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-10 09:42:54 +01:00
Aurélien Bompard
64734c21e9
Set a default for keytab_host 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-10 09:42:36 +01:00
Aurélien Bompard
ffd14b9538
Pass the variables from openshift/keytab down to keytab/service 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-10 09:34:52 +01:00
Aurélien Bompard
d18ec8b7f6
Enable poddlers for prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-10 09:17:30 +01:00
Aurélien Bompard
0d5a2a1a6d
Poddlers: disable distgit-commit-processor 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-10 09:13:51 +01:00
Aurélien Bompard
266a942b49
Update poddlers with the latest changes in toddlers 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-10 09:08:34 +01:00
Kevin Fenzi
3bb1fbe254 serial-console: switch to shell since we are using wildcards 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 18:14:17 -08:00
Kevin Fenzi
687314e1c1 login-registry: Try and make command idempotent 
Right now we just always run this login command no matter what.
Instead lets not run it if the credentials file is already present.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 17:59:50 -08:00
Kevin Fenzi
aaa29839fa ipa_client: the fedora-sss-ignore.conf file should be owned by sssd user/group 
We change this to root/root and then restart sssd and it changes it
back. So, lets do this right and let it be sssd/sssd.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 17:54:13 -08:00
Kevin Fenzi
73cfa04822 serial-console: grub2-editenv list doesn't get us boot args 
grub2-editenv list  doesn't get us the boot args, so instead just grep
for them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 17:50:23 -08:00
Kevin Fenzi
ccb3e81b62 koji_builder: don't try and run rngd on aarch64 either 
It tries to start on aarch64, but fails.
So, only run rngd on x86_64

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 17:42:27 -08:00
Kevin Fenzi
28a290f2bf db-riscv-koji01: use newer postgres here 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 16:27:29 -08:00
Kevin Fenzi
3daf2de1c8 bvmhost-x86-riscv01: fix mac address for bridge network 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 16:00:21 -08:00
Kevin Fenzi
d1b68667fa db-riscv-koji01: set dns server for install 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 15:47:00 -08:00
Kevin Fenzi
f4855a530b db-riscv-koji101: switch ks repo/url 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 15:40:39 -08:00
Kevin Fenzi
9a2b8bd1f3 add riscv koji db server 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 15:20:12 -08:00
Diego Herrera
805f7ff0a8 Force to use x86_64 epel release package abs path 
Signed-off-by: Diego Herrera <dherrera@redhat.com>
 2024-12-09 19:18:13 -03:00
Kevin Fenzi
0091730a63 koji_hub: fix syntax failure 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 09:57:44 -08:00
Kevin Fenzi
ad7df8587e koji_hub: add a ci channel for ci jobs 
ci jobs have been clogging up limited s390x builders, and we also don't
want them running on our ppc64le heavybuilder.

So, there is now a ci channel with all the builders except only 2 s390x
builders and not the ppc64le heavy builder one.

Will see how this helps and adjust it.
Only 2 s390x builders may unduly constrain ci, so we may need to
increase things there, but we can see if this works first.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-09 09:36:47 -08:00
Aurélien Bompard
58932984ff
Don't start fedmsg in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-09 17:36:39 +01:00
Jiri Kyjovsky
aa1e8f0ca4 copr: performance builders for kernel-vanilla group 2024-12-09 11:54:05 +01:00
Aurélien Bompard
8f7036d05f
Add documentation for the poddlers openshift app 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-12-09 10:30:09 +01:00
Kevin Fenzi
55056c677e haproxy: remove a bunch of services that moved to openshift or went away 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-08 12:36:13 -08:00
Kevin Fenzi
659c9c719a openshift / haproxy: add service ca to trusted bundle 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-08 09:28:46 -08:00
Francois Andrieu
89a8e33677
haproxy: add the openshift-service CA cert to the CA bundle 2024-12-08 00:34:27 +01:00
Kevin Fenzi
e99cbe90c5 people: bump quota more for dmalcolm 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-06 17:41:36 -08:00
Kevin Fenzi
aa828e6a5d bodhi: something is broken, try moving back to f40 base image 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-06 12:58:33 -08:00
Kevin Fenzi
33da0d2c48 people: increase quota for dmalcolm ( issue 12325 ) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-06 12:39:43 -08:00
Mattia Verga
5a9fffb0f4 bodhi: update to 8.3.0 and F41 base image 
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
 2024-12-06 20:01:50 +00:00
Kevin Fenzi
07764302ca compose-x86-01: move to f41 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-05 14:13:06 -08:00
Kevin Fenzi
e26f6acacf releng: drop clean-ami's job 
This job was used to cleanup old ami's from fedimg.
It then reported to a pagure project about what it did.
However, it's token has been expired and it no longer needs to exist.
Garbage collection of ami's should take place in the new
cloud-image-uploader (well, it marks when things are eol).
So, lets just remove this old and nolonger needed cron.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-05 14:05:47 -08:00
Adam Piasecki
0eeb127306 coreos-cincinnati: Add Jean-Baptiste Trystram to owners 
reason:  monitoring and development
 2024-12-05 15:55:34 +00:00