Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
40810 commits 9 branches 0 tags 111 MiB
Commit graph

40810 commits

This branch
This branch
All branches
Author SHA1 Message Date
Timothée Ravier
a39bb343fa bodhi2/backend/templates/pungi.rpm: Update comments 2024-03-27 22:07:29 +00:00
Kevin Fenzi
33513b358e flatpak-cache: disable certbot on this site for now 
Right now we are still trying to get this site working, and it's doing
passthough, so letsencrypt won't work. So, lets just disable it for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-03-27 14:54:09 -07:00
Kevin Fenzi
bc745fe824 website: try tagging the letsencrypt include_role 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-03-27 13:37:21 -07:00
Kevin Fenzi
df29534e6b ipsilon01: move to f39 also 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-03-27 13:30:52 -07:00
Kevin Fenzi
a2fec37413 ipsilon02: move to f39 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-03-27 12:46:05 -07:00
Kevin Fenzi
c45521fcb5 batcave01: patch the uri module to work on fedora targets 
The ansible-core-2.14.x in rhel9 (using python 3.9 now) can't handle
running uri module on fedora (python-3.12) without erroring.
There's a backported fix in 2.15, but until thats in rhel9, this will
keep hitting us.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-03-27 12:00:19 -07:00
Kevin Fenzi
dd47ce23b9 f37-test: remove from duplicated cloud inventory 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-03-27 11:41:41 -07:00
Kevin Fenzi
250067ff89 ipsilon01.stg: reinstall with f39 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-03-27 09:39:59 -07:00
Kevin Fenzi
c3acfd494d f37-test: retire as f37 is eol 
This maintainer test machine should be retired since f37 is eol.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-03-27 09:16:01 -07:00
Kevin Fenzi
a0b24547fe F40 Beta freeze over 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-03-27 09:13:22 -07:00
Michal Konecny
143243ef45 [mailman3] Fix the urls.py error 
This is fixing the error `django.core.exceptions.ImproperlyConfigured: Passing a 3-tuple to include() is not supported. Pass a 2-tuple containing the list of patterns and app_name, and provide the namespace argument to include() instead.`

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-27 16:36:16 +01:00
Michal Konecny
a47cab5804 [mailman3] Use the correct ansible module 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-27 16:20:28 +01:00
Michal Konecny
df0c21ed89 [mailman3] Remove SSL apache conf 
The SSL is handled by proxies we don't need to handle it on the machine itself.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-27 16:01:58 +01:00
Michal Konecny
f919603485 [mailman3] Add our own urls file 
The current deployment doesn't look to work correctly for redirects, this should
fix it.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-27 14:42:13 +01:00
Michal Konecny
3d52a247d8 [mailman3] Use httpd_can_network_relay as it's more secure 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-27 14:27:08 +01:00
Adam Williamson
826fd32330 openqa/worker: don't force createhdds off non-standard branch 
Using the same approach as we do for the tests and fedora_openqa.
I wish I'd done this *before* I ran the playbook on lab and it
wiped every...single...goddamn...disk image.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2024-03-26 15:35:33 -07:00
Adam Williamson
7cfe3d61e6 openqa/worker: block ffmpeg-free on aarch64 
Encoding with ffmpeg rather than os-autoinst's built-in encoder
gives us less broken videos, but on aarch64 it seems to cause
problems, especially on stg's old, busted worker hosts - I think
it's more CPU-intensive and they just can't handle the load. So,
let's block it.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2024-03-26 15:07:27 -07:00
Pedro Moura
39bc7aa4ce Planet: add hosts to deploy in prod 
Signed-off-by: Pedro Moura <pmoura@redhat.com>
 2024-03-26 19:16:33 +00:00
Siteshwar Vashisht
f0537397da openscanhub: increase number of workers to 128 
... in staging.

This is done for load testing purpose and should be reverted to a lower
value in the future.

Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-03-26 16:57:46 +01:00
Michal Konecny
ed6e67512e [mailman3] Add ssl configuration for apache 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-26 16:22:07 +01:00
Michal Konecny
35a2da98e7 [mailman3] Fix syntax error in handler parameters 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-26 15:28:39 +01:00
Michal Konecny
0a1fbd509f [mailman3] Use gunicorn instead of apache 
Use apache only as reverse proxy, but run mailman-web through gunicorn.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-26 15:18:58 +01:00
Michal Konecny
cd83c8377c [mailman3] Create the bin directory 
We need at least one script that is useful, let's add it somewhere.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-26 11:58:23 +01:00
Michal Konecny
301cb90d7e [mailman3] Add prod-to-stg script 
The script was missing in files, let's add it.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-26 11:16:45 +01:00
Michal Konecny
24f93a1f50 [mailman3] Fix the migration task 
DB migration task failed on settings.py and permissions. Let's fix that.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-26 10:53:13 +01:00
Aurélien Bompard
e66b73760b
Badges: add the FM certs in the cronjobs 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-03-26 10:33:14 +01:00
Michal Konecny
24b8b7a98e [mailman3] Disable django_fedora 
Let's see if this is really needed for us.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-25 18:00:15 +01:00
Aurélien Bompard
78d781b060
Typo 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-03-25 17:58:08 +01:00
Aurélien Bompard
98eb0f9088
Badges: update config file 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-03-25 17:57:26 +01:00
Aurélien Bompard
706d7257fc
Badges: set the fedora messaging conf path in the env 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-03-25 17:29:00 +01:00
Michal Konecny
1d7d2f2bb4 [mailman3] Remove non-existent variable from config 
I forgot to remove the variable that is not used anymore.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-25 16:28:45 +01:00
Siteshwar Vashisht
c868c197b2 openscanhub: add ssh user to settings 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-03-25 15:20:04 +00:00
Michal Konecny
e2375e1089 [mailman3] Use correct variable name 
Another one I missed :-(

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-25 16:16:34 +01:00
Michal Konecny
adf14b4782 [mailman3] Use correct variable in role 
Missed one in previous commit.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-25 15:58:53 +01:00
Michal Konecny
1dbb42ae89 [mailman3] Use the correct variable names 
There was an inconsistency between variable names in configuration file and how
the actual variable is defined.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-25 15:35:41 +01:00
Michal Konecny
dc978573c4 [mailman3] Use correct name of ansible module 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-25 14:22:07 +01:00
Michal Konecny
ebe911b700 [mailman3] Fix syntax issue 
Oops! Missed one.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-25 13:38:37 +01:00
Michal Konecny
6e85340e26 [mailman3] Fix the syntax error 
I'm surprised this wasn't caught by yamllint.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-25 13:24:04 +01:00
Siteshwar Vashisht
d1ae47c8a9 openscanhub: fix pvc config for redis 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-03-25 12:18:43 +00:00
Aurélien Bompard
2ccc99782b
MM: remove debug mode on the crawls 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-03-25 12:08:44 +01:00
Aurélien Bompard
edf788fab0
Mirrormanager: adjust timeout and schedule for some very long runs 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-03-25 12:08:44 +01:00
Siteshwar Vashisht
914de65fe9 openscanhub: add persistent storage for redis 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-03-25 10:09:12 +00:00
Michal Konecny
c2862e1e8b [mailman3] Create a new role mailman3 
It seems that the mailman update is more complicated than I originally thought. So I
decided to start with clean role and will slowly start adding new changes.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-03-25 10:02:23 +00:00
Siteshwar Vashisht
b148c77ff5 openscanhub: fix allowed hosts django setting 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-03-25 09:57:39 +00:00
Siteshwar Vashisht
b378e1bb4b openscanhub: fix configurations for production 
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
 2024-03-25 09:56:20 +00:00
Aurélien Bompard
046e562140
Badges: mark the dir as safe for git 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-03-23 13:56:18 +01:00
Aurélien Bompard
1da0edc94f
Badges: fix group id and cli option 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-03-23 13:54:06 +01:00
Aurélien Bompard
b12eec785f
Badges: set the correct group to update the rules 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-03-23 13:50:19 +01:00
Aurélien Bompard
5f8237e3fd
Badges: fix keytab volume name 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-03-23 13:48:11 +01:00
Kevin Fenzi
56b8d3640a bodhi: remove hotfix thats in the rpm now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-03-22 11:57:15 -07:00