Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
39260 commits 9 branches 0 tags 111 MiB
Commit graph

39260 commits

This branch
This branch
All branches
Author SHA1 Message Date
Kevin Fenzi
e24a5929aa resultsdb-ci-listener: normalize staging username/certs 
Try and set all of these the same to avoid problems with usernames and
queue names and cert names and messaging names. ;)

Should only affect staging.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-30 14:57:03 -07:00
Lukas Holecek
48c34d97cb resultsdb-ci-listener: Avoid using the same crt/key as resultsdb 
Related to: https://pagure.io/fedora-infrastructure/issue/11339
 2023-06-30 21:28:31 +00:00
Michal Konečný
2854a511ee [notifs-backend] Fix ZMQ timeout nagios error 
When the topics are bytes encoded in configuration the json.dumps() fails. This
commit prevents the failure by decoding the strings before sending them in poll function.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2023-06-30 15:08:58 +02:00
David Kirwan
a9a14a4023 zabbix: modify db tasks zabbix_server role 
error handling
Update iptables to allow access to server/agent

Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2023-06-30 12:00:33 +01:00
Adrian Reber
a5e52a113e
Correct regex for codecs and epel 
Signed-off-by: Adrian Reber <adrian@lisas.de>
 2023-06-30 10:13:01 +02:00
Stephen Smoogen
19b500a5fd Remove chunking error messages in gateway systems 
RHEL turned off chunking in postfix for various reasons. This causes a
lot of logs from spam and other servers. Turning off logging this as
it is not supported.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2023-06-29 20:09:57 +00:00
Sandro
4cd0dea659 Add Akashdeep Dhar to tharir.admins 
We need to go through the current interface to determine what
needs to be carried over to the new badges API, t0xic0der and
others are working on.

Signed-off-by: Sandro <devel@penguinpee.nl>
 2023-06-29 20:03:53 +00:00
Ondřej Budai
a9f0785b5c
koji_builder: switch the koji-osbuild token URL to the unified SSO 
identity.api.openshift.com was shut down several hours ago. The plugin now
needs to use sso.redhat.com instead.

This commit adjusts the token URL and the script that pokes holes in the
firewall for selected domains.
 2023-06-28 15:58:11 +02:00
Mikolaj Izdebski
08405d960f Koschei: Add full update playbook 2023-06-28 14:51:32 +02:00
Mikolaj Izdebski
bdc999f4a9 Koschei: Add rolling update playbook 2023-06-28 14:26:43 +02:00
Mikolaj Izdebski
9688baed8d Koschei: sync staging memory limits with prod 2023-06-28 13:49:42 +02:00
Mikolaj Izdebski
c65a27997c Koschei: track all packages in staging 2023-06-28 13:38:33 +02:00
Mikolaj Izdebski
7b03bf0ffe koschei: run jobs with admin DB credentials 2023-06-28 13:14:22 +02:00
Mikolaj Izdebski
f1d497089e koschei: Update staging sync playbook 2023-06-28 12:59:16 +02:00
Lukas Holecek
a02810c7a9 resultsdb: Use healthcheck endpoint in probes 2023-06-27 17:37:16 +00:00
Aurélien Bompard
6ed2d3ab2d
Robosig: restart on config changes 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-27 18:23:40 +02:00
Aurélien Bompard
9784ace94c
Robosig: don't prefetch so that priorities can work their magic 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-27 18:17:40 +02:00
Kevin Fenzi
0fb53e0fba base: only compress logs on log01, not everything 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-27 08:31:31 -07:00
Aurélien Bompard
b24a2ecd41
FMN: update the database sync command 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-27 17:06:31 +02:00
Sandro
8592948038 Badges: Add Emma Kidney to tahrir.admins 
Emma needs to take a look at how the current backend works.
She's working on the new UI.
 2023-06-26 21:50:24 +00:00
Kevin Fenzi
e06db2465a base / iptables: fix last conditional 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 13:27:06 -07:00
Kevin Fenzi
f1eaa5d773 base / iptables: simplify logic 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 13:23:38 -07:00
Kevin Fenzi
03abad159d base / iptables: one more typo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 13:04:43 -07:00
Kevin Fenzi
c5773c8c45 base / iptables: fix some syntax issues 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 13:04:15 -07:00
Kevin Fenzi
765363e04d base / iptables: fix protocol, use creates for commands 
iptables -p is expecting all, not any.
And create a file to track when we have made the ipset.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 12:58:21 -07:00
Kevin Fenzi
fbe288a422 base / iptables: adjust conditional to not depend on datacenter for non iad2 hosts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 12:52:25 -07:00
Kevin Fenzi
679f7f6f16 iptables: clean up osbuild and add a external block set scaffolding 
Setup osbuild so it only needs to exist on the specific builders in the
osbuild channel, not all builders.
Also, setup things so we can add a blocklist that will block external
subnets/ip's if we need to do so. Currently it should just be an empty
set, but we can implement it as needed/desired starting with the ips we
already were blocking on just some hosts.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 12:41:07 -07:00
Kevin Fenzi
7c6fe8c5b8 koji_builder: setup a osbuild group for osbuild channel builders 
We need only these builders to have this ipset to talk to the osbuild
api. All the rest do not need it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-26 12:41:07 -07:00
Aurélien Bompard
0913c6c0ca
Fix the python3_fact module 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-26 13:41:47 +02:00
Aurélien Bompard
3bc4b2f664
Add the topic auth for gitlab-centos 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-06-26 12:46:30 +02:00
Kevin Fenzi
a47ce6a3e0 backups: re-enable people02 backups 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-23 10:50:07 -07:00
Jakub Kadlcik
53663c2d65 copr-frontend: make sure we have up-to-date tito on builders 2023-06-23 17:04:19 +02:00
Seddik Alaoui Ismaili
6b804b8b11 change archive format to xz for merged logs 2023-06-22 22:49:53 +00:00
Lukas Holecek
b513985390 resultsdb: Fix api pods running out of memory 2023-06-22 22:33:47 +00:00
Kevin Fenzi
8660a4d62f download-ib02: retire now that we have data moved 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-22 14:43:54 -07:00
Kevin Fenzi
25e06793ea download-ib01: move over to ibiblio02 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-22 14:41:18 -07:00
Adam Williamson
2657d642a4 D'oh, messed up one thing (relvalconsumer queue names) 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-22 23:32:33 +02:00
Adam Williamson
a5c322b4ee More cleanup on the openQA AMQP stuff 
nirik and I went around and around a bit today and ended up back
where we started, but with a clearer understanding of where that
this. This explains it a bit better, and makes what's actually
going on in various places clearer with the use of appropriate
shared variables. This should not actually *change* anything at
all when deployed.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-22 23:21:28 +02:00
Seddik Alaoui Ismaili
b79003cfda compress merged logs under /var/log/hosts 2023-06-22 20:50:46 +00:00
Kevin Fenzi
14eb1bc04e backups: disable people02 to fix the backup sync 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-22 13:09:53 -07:00
Joseph Marrero
dfbfed61e2 fedora-coreos-pipeline.yml: Add luyang 2023-06-22 15:39:19 -04:00
Kevin Fenzi
df8b56a408 notifs: add sysadmin-noc to sudo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-22 12:19:07 -07:00
Kevin Fenzi
b2a5d19443 directory.fedoraproject.org redirect: fix double slash 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-22 11:23:41 -07:00
Kevin Fenzi
d8580004c7 directory: redirect with url ( infra 11385 ) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-22 10:57:01 -07:00
František Zatloukal
15c8754bd2 Revert "Blockerbugs: switch stg to update_versioneer branch" 
This reverts commit bfb5745b4c.
 2023-06-22 15:29:52 +02:00
Adam Williamson
fc84286f93 greenwave: enable Rawhide gating on openQA update tests 
As per https://pagure.io/fesco/issue/3011 and
https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org/message/G2K2SMYN7ONOJEFQEMCDR7GK72MZQFYB/
this enables gating of Rawhide updates on the same set of tests
used to gate stable and Branched updates.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-22 11:36:54 +02:00
Kevin Fenzi
f20fef66c3 buildvm-ppc64le: rebalance ppc64le builders 
Move to only 8 builders per bvmhost and move them around to make the
numbers come out to 32. Drop 34-40.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-21 15:12:14 -07:00
Kevin Fenzi
0772307af5 Revert "buildvm-ppc64le: try reenabling this nested feature" 
This reverts commit 9938279f6b.

Turns out this isn't supported in virt-install, which is why I removed
it. ;)
 2023-06-21 11:45:06 -07:00
Kevin Fenzi
9938279f6b buildvm-ppc64le: try reenabling this nested feature 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-06-21 11:40:39 -07:00
Adam Williamson
5a7591a618 openqa AMQP: mark the users as not publish-only 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2023-06-21 13:33:54 +02:00