Commit graph

40810 commits

Author SHA1 Message Date
Siteshwar Vashisht
ec8f80baf3 Revert "openscanhub: remove selector from fedora-osh-hub"
This reverts commit f875443d8d.
2024-04-03 13:12:06 +02:00
Siteshwar Vashisht
f875443d8d openscanhub: remove selector from fedora-osh-hub
... deployment.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-03 12:57:32 +02:00
Siteshwar Vashisht
f5e2efe319 openscanhub: clean up fedora-osh-hub deployment
... configurations.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-03 12:51:31 +02:00
Siteshwar Vashisht
8682f36057 openscanhub: remove openscanhub prefix from hub
... configurations, as it looks unnecesaary.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-03 08:06:01 +00:00
Siteshwar Vashisht
c21c0aaae8 openscanhub: remove -6-c9s from redis
... configurations, as it looks unnecessary.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-03 08:00:55 +00:00
Adam Williamson
07daaed934 greenwave: update gating policy for openQA UEFI switchover
We're landing a big change to make openQA tests UEFI-by-default,
with BIOS as an occasional variant (exact opposite to the current
setup). This adjusts the gating policies appropriately. We have
to temporarily disable gating for a few tests, due to the fact
that there will be 'in-flight' updates which do not have a result
for the 'bios' scenario (they have results for 'uefi' and '64bit',
with '64bit' being a BIOS result; post-switchover, updates will
have a result for '64bit' and 'bios', with '64bit' being a UEFI
result). I will re-enable this in about a month and clean up any
stragglers somehow.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2024-04-02 12:46:50 -07:00
Kevin Fenzi
f47be46671 f40 final freeze starts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-02 11:29:56 -07:00
Kevin Fenzi
7d7f8c51ad pagure: roll out pull request acl update to prod
See: https://pagure.io/fedora-infra/ansible/pull-request/1825

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-02 11:15:07 -07:00
Kevin Fenzi
a462e96836 rkhunter: adjust ipa rules a bit more
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-02 10:52:08 -07:00
Samyak Jain
0bac0319f9 Fedora 40 is in final freeze
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-04-02 14:25:49 +00:00
Pavel Raiskup
482371aa13 copr-be: decrease the number of VMs
There's just one CPU for now:
https://pagure.io/fedora-infrastructure/issue/11755
2024-04-02 13:40:11 +02:00
Pavel Raiskup
3327264e55 Revert "copr-backend: don't start machines on hv02 x86"
This reverts commit 21d01db0a6.
2024-04-02 12:55:22 +02:00
Miroslav Suchý
7fc71b11ab copr: add configuration for grouping statistics 2024-04-02 10:35:49 +02:00
Miroslav Suchý
fe8b6dca4f copr: cleanup copr.conf 2024-04-02 10:29:14 +02:00
Siteshwar Vashisht
2274dadb07 openscanhub: use ServerName instead of ServerAlias
... in the httpd configurations.

The httpd container requires it to reliably determine server's fully
qualified domain name.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
2024-04-02 01:02:46 +00:00
Leo Puvilland
be00c5f65e Create communishift namespace for lrossett
Signed-off-by: Leo Puvilland <leo@craftcat.dev>
2024-04-02 00:59:14 +00:00
Kevin Fenzi
ec87251934 kerneltest: remove stray group
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-01 17:42:15 -07:00
Kevin Fenzi
e037bf02f7 kerneltest: moved to OpenShift
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-01 17:41:06 -07:00
Kevin Fenzi
1b189b7270 kojipkgs01: move to f39
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-01 14:54:13 -07:00
Kevin Fenzi
361e161dc1 kojipkgs02: move to f39
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-01 13:56:49 -07:00
Kevin Fenzi
d06b9e1c17 koji: hubs are fedora 39 now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-01 12:23:08 -07:00
Kevin Fenzi
8feca5885b Revert "Reapply "Don't send a fedora-messaging message from the Pagure git hook""
This reverts commit 26358b62a2.

So, this broke the toddler that handles package retirements. ;(

It seems it was commited on feb 20th, but not actually pushed out until
March 4th. At that point, retirements stop. ;(

I think it's getting the new git pagure messages, but they don't
contain the information it expects so it just drops them.

We will need to adjust toddlers before we can re-drop this.
2024-04-01 11:19:00 -07:00
Kevin Fenzi
41764dcee3 bodhi / staging: drop db patch for now because fedora 39 does not use the same python
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-01 09:39:26 -07:00
Kevin Fenzi
998959d683 rkhunter: adjust some paramters to avoid false positives
zabbix_agent uses shm (and a fair bit of it), so bump that check up all
around.
Change the ipa whitelist, as it's changed files in new ipa.
There's no longer a system subdir involved.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-01 09:28:54 -07:00
Kevin Fenzi
1c7f6efea0 dns: fix syntax
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-30 14:36:42 -07:00
Kevin Fenzi
5b578f0aed dns: remove obsolete dnssec directive
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-30 14:20:12 -07:00
Kevin Fenzi
4c113b98bf batcave01: we do not want the old rhel7 openshift repo
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-30 13:01:19 -07:00
Kevin Fenzi
55eb782582 koji_hub: also show kiwi jobs in search dropdown
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-29 10:37:24 -07:00
Kevin Fenzi
7aa571d30a ipa: 50G disks by default
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-29 10:35:01 -07:00
Aurélien Bompard
3e413fbee4
Badges: set the KRB env vars for cronjobs
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-03-29 15:51:52 +01:00
Aurélien Bompard
4b4d2ef5dd
MM: check propagation every 4 hours like currently
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-03-29 12:14:11 +01:00
Kevin Fenzi
fb96a8b840 os-control: this is not an external machine
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-28 18:14:03 -07:00
Kevin Fenzi
ff530d4995 os-control01: move prod to rhel9 too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-28 18:05:59 -07:00
Kevin Fenzi
632de6325e os-control: fix the virt-install
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-28 17:15:28 -07:00
Kevin Fenzi
28bca8208d os-control: re-add a playbook and move to rhel9 in staging
We accidentally dropped the os-control playbook, since it was part of
the openshift 3.11 cluster playbooks. So, re-add that here, and move
staging over to rhel9.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-28 17:12:37 -07:00
Aurélien Bompard
e613cb8510
Badges: fedbadges actually sends messages
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-03-28 23:12:14 +01:00
Kevin Fenzi
c84b99223c osbs: raise a glass for it's service
This removes osbs and allmost all it's associated playbooks and files.

It served long and well, but we no longer need it.
flatpaks are building with a koji-flatpak plugin.
base/minimal/toolbox containers are building with kiwi.
We aren't building any other containers right now, and we did they could
be added to kiwi.

This is the end of an era... I look with nostolga on
ansible-ansible-openshift-ansible (a role to setup ansible on a control
host and run it from our ansible).

Good bye osbs!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-28 12:52:07 -07:00
Pedro Moura
8fb54fb26e Planet: Add PVC in playbook
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2024-03-28 17:57:57 +00:00
Michal Konecny
ee58290fdb [mailman3] Redirect to hyperkitty if nothing is specified
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-03-28 16:25:40 +01:00
Michal Konecny
0079d06eea [mailman3] Add missing SELinux policies
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-03-28 16:23:19 +01:00
Michal Konecny
19fe021877 [mailman3] Fix the http request header
Apache was adding host name to X-Forwarded-Host, but this was already filled by
Fedora proxy and it caused to duplicate the domain. Disabling proxy headers in
apache solves the situation.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-03-28 16:15:34 +01:00
Michal Konecny
96b5e73a99 [mailman3] Add compress step
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-03-28 16:09:44 +01:00
Aurélien Bompard
5c88ef738b
Adjust for Python 3.12 and distutils being removed
Fixes: https://pagure.io/fedora-infrastructure/issue/11850

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-03-28 11:34:21 +01:00
Kevin Fenzi
b8eb3ae2bd bvmhost-p09: increase max_procs for nagios a lot
These machines on recent kernels often have a LOT of processes.
They are ok, they just spawn a lot of threads for things like storage
and virtual guests. There's no point in alerting on this, it happens all
the time and the machines are fine.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-27 18:17:13 -07:00
Kevin Fenzi
c5f2475537 batcave: renew proxy letsencrypt certs weekly
We occasionally run into problems with certs that aren't renewed in time
or are close to expiring. Just running the proxies playbook will renew
them, but in freezes or the like sometimes there's a long time period
where we don't run that playbook.

So, lets just run weekly with the right tag. This should renew any cert
thats close to expiring.

The job shouldn't normally output anything, but if there's errors it
will email them to admin@

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-27 17:29:48 -07:00
Nils Philippsen
5310a60518 [toddlers] Fix typo in routing key
Signed-off-by: Nils Philippsen <nils@redhat.com>
2024-03-27 22:59:43 +00:00
Mattia Verga
5a08866473 bodhi: use f39 in staging base images
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2024-03-27 22:57:31 +00:00
Patrik Polakovič
0d507b06ca Add EPEL9 to robosignatory config
Signed-off-by: Patrik Polakovič <ppolakov@redhat.com>
2024-03-27 22:46:17 +00:00
Kevin Fenzi
b7294036cc pagure / dist-git: add staging conditional for testing
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-27 15:33:46 -07:00
Maja Massarini
5e046c04a6 pagure: add descriptions for new available pull_request acls
Related with commit 1efcf8a90b
We need to update the acls table with their descriptions.

pagure/cli/admin.py update-acls

The above command can update the table and it looks for descriptions in the ACLS config variable.
2024-03-27 22:12:32 +00:00