Commit graph

716 commits

Author SHA1 Message Date
23e03511ae fixing typo in virthost template 2017-01-06 19:03:14 +00:00
92bfa23050 trying to fix up VH defs for qa stg,prod so non-phab stuff works 2017-01-06 19:01:24 +00:00
Patrick Uiterwijk
0ee67fcdec Let's be even more obnoxious
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-14 19:01:23 +00:00
Patrick Uiterwijk
01292bba60 Allow OSBS to contact krb
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-14 18:37:50 +00:00
Adam Miller
49655eec73 switch infrastructure.repo to infra-tags.repo for OSBS buildroot
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-12-08 19:59:54 +00:00
Stephen Smoogen
a4312e1b2b to make creme-de-methe take equal parts bourbon and mint flavor maalox 2016-12-07 23:20:10 +00:00
Adam Miller
d43abdd70f OSBS buildroot set ot f24 for now as that's what's been tested/validated
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-12-07 22:45:54 +00:00
Adam Miller
2d3951e5b0 Switch OSBS Prod to osbs-cluster
- remove osbs-master and osbs-node playbooks
    - add osbs production hosts to osbs-cluster playbook
    - migrate osbs production buildroot Dockerfile to j2 template
      (like we have in staging)
    - add infrastructure repo to buildroot dir and Dockerfile

Signed-off-by: Adam Miller <admiller@redhat.com>
2016-12-07 14:22:06 +00:00
Adam Miller
debd16df22 Clean up OSBS items
- Remove osbs-client from koji-hub, no longer needed
    - Set site-specific OSBS plugins config
    - Remove atomic-reactor.tar.gz hardlinking for docker, no longer
      needed
    - Update osbs/atomic-reactor buildroot to user RPM version of
      atomic-reactor and not source shipped with RPM (fixed issue
      so this works now)

Signed-off-by: Adam Miller <admiller@redhat.com>
2016-12-02 23:19:04 +00:00
Adam Miller
b546f0f888 fix ccache entry for osbs buildroot to includ uid in path
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-11-29 22:29:41 +00:00
Adam Miller
2dcfe0f2b9 set default krb5.conf ccache for OSBS buildroot container
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-11-29 20:24:06 +00:00
Kevin Fenzi
a1ecb9decb fix for bash arrays from upstream. fixes multiple mod updates at once 2016-11-26 19:31:41 +00:00
Adam Miller
ef18805470 enable maxamillion's atomic-reactor copr for STG osbs buildroot for testing
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-11-23 21:37:00 +00:00
Adam Miller
090c85d868 set osbs to use krb5 for koji auth instead of ssl certs
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-11-23 21:36:59 +00:00
Adam Williamson
b99a4a6381 create-filelist: also skip the imagelist when making others
add the imagelist's name to skip_files as we do for the other
two files. tibbs is committing the same change to upstream.
2016-11-23 09:29:24 -08:00
Adam Williamson
2e09ca2d00 turn 'filterlist' into 'imagelist', using productmd
This adopts https://pagure.io/quick-fedora-mirror/pull-request/27
and adapts to it, so we get `imagelist` files rather than
`filterlist` files (see recent commits for this). The rationale
is more fully explained in that PR (and in PR #26 also) - on
further inspection it turns out that we have to filter out an
awful lot of extensions to create small filterlists for all
three modules, and I'm worried that other file extensions may
appear in the future and cause the filterlists to suddenly get
bigger again. Instead, we have create-filelist use the productmd
constant that defines valid image formats, and only include files
that match those formats in the list. The downside of this
approach is we have to ensure productmd on all the systems that
run `create-filelist` is kept up to date if the list of valid
image formats changes.
2016-11-23 09:21:45 -08:00
Adam Williamson
3d9840d867 create-filelist: add '.' to png and jpg
Brown paper bag fix for previous commit. Sigh.
2016-11-19 15:53:42 -08:00
Adam Williamson
6fa8dbfcf2 create-filelist: filter png and jpg too (acked by nirik)
This is a tiny change to the previous commit to just filter
png and jpg files too, as alt has tons of pngs. Will send a
PR for upstream create-filelist.
2016-11-19 15:49:37 -08:00
Adam Williamson
45d8ea3f89 Generate filtered file lists for fedfind to use
This adds `filterlist` files alongside the `fullfilelist` and
`fullfiletimelist` files. These are much, much shorter lists
which skip the entries for packages, ARM device tree boot files
and directories. They are intended for consumption by fedfind,
so it can stop using rync scraping to discover the image files
it looks for. To enable this, we update to a newer version of
`create-filelist` from upstream `quick-fedora-mirror` and make
`update-fullfiletimelist` create the filterlist files as well.

We also delete a couple of old copies of `create-filelist`;
nirik made the two roles that use it share a common copy a few
months back, but missed deleting the copy each role had in its
`files` directory.
2016-11-19 15:15:53 -08:00
Adam Miller
059337652b apply fixes from Patrick for OSBS node dnsmasq and proxy iptables
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-11-08 23:38:25 +00:00
Patrick Uiterwijk
f92c085a90 Allow osbs.stg:443
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-11-08 21:00:20 +00:00
Adam Miller
f2de734e20 apply Patricks magic osbs cluster iptables rules to new cluster
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-11-08 20:12:16 +00:00
Adam Miller
74ca7978a4 switch iptables for osbs cluster docker bridge interface lbr0
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-11-08 15:07:52 +00:00
Adam Miller
e916d0bb46 openshift builds aren't in the cluster overlay network, fix iptables rules
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-11-07 23:04:54 +00:00
Adam Miller
fbe0181672 docker bridge interface firewall rules for osbs overlay cluster network
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-11-07 20:39:03 +00:00
Adam Miller
066000e23b add osbs old build cleanup for openshift cluster
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-11-07 20:26:17 +00:00
Adam Miller
2a2019ff3a fix osbs/cleanup-docker-storage cron entry
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-11-02 15:43:20 +00:00
Adam Miller
81119f08db move cleanup-docker-storage in the right path in files/osbs/
Signed-off-by: Adam Miller <admiller@redhat.com>
2016-10-21 15:05:42 +00:00
81a732c05f osbs: cron job to clean up docker storage nightly
Signed-off-by: Adam Miller <maxamillion@fedoraproject.org>
2016-10-21 14:41:50 +00:00
Patrick Uiterwijk
f67c7518af Correct th URL for the key
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-25 17:39:54 +00:00
Patrick Uiterwijk
57b53ffa93 This key is different from the main infra one
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-25 17:17:22 +00:00
Patrick Uiterwijk
3f8062e776 Add infra tag repos
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-25 17:08:41 +00:00
fb9a0aea9d fixing invalid syntax 2016-09-22 21:16:42 +00:00
2319b5d428 changing default index for docs on qa stg to be index.html 2016-09-22 21:15:25 +00:00
d99fe2eb4a add the new public infra gpg key that is in sigul
Signed-off-by: Dennis Gilmore <ausil@fedoraproject.org>
2016-09-15 14:12:50 +00:00
Patrick Uiterwijk
d35bbdb03c Add RHEL7AH repo
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-13 16:41:58 +00:00
Patrick Uiterwijk
08b2be4a61 Make roles out of sigul, and update configs
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-12 23:18:17 +00:00
8875a7635b Revert the fedimg hotfixes 2016-09-12 12:33:24 +00:00
Patrick Uiterwijk
f1dd7a7432 Unify all ssl cipher suite configurations
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-31 19:28:26 +00:00
Michael Scherer
07f04462c3 Move mod_wsgi to a role rather than a included tasks 2016-08-08 16:34:12 +00:00
Kevin Fenzi
03a8923c04 Update create-filelist and wrapper from upstream quick mirror.
Merge all the various copies of the wrapper into one copy.
Setup arguments as needed for each call.
2016-07-15 20:05:53 +00:00
b6c3ff1ca0 Revert "Original autocloud_job.py and consumer file for hotfix"
This reverts commit f36696a1fd.
2016-07-15 15:48:40 +00:00
0cd772f697 Revert "Hotfix for autocloud"
This reverts commit 12cace8cda.
2016-07-15 15:47:23 +00:00
Patrick Uiterwijk
9e62167807 Install rhel7 rhev for power repo
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-07-15 12:52:41 +00:00
Patrick Uiterwijk
de2c96c0fa Deploy the no-password: prompt fix to prod
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-07-05 16:20:41 +00:00
Patrick Uiterwijk
e21a25c220 If we are templating, we need template:
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-07-05 06:32:23 +00:00
Patrick Uiterwijk
ffdb64f327 Disable the password: fallback on token failure
There is nothing in system-auth that we don't have in the pam module,
so this should allow us to remove pam_unix just fine.
Currently only for stg.

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-07-05 06:27:21 +00:00
Sayan Chowdhury
12cace8cda Hotfix for autocloud 2016-06-28 16:48:01 +00:00
Sayan Chowdhury
f36696a1fd Original autocloud_job.py and consumer file for hotfix 2016-06-28 16:48:01 +00:00
Sayan Chowdhury
8e1fdc82e4 Revert "Original autocloud_job.py and consumer file for hotfix"
This reverts commit aa97849271.
2016-06-28 16:41:02 +00:00