Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
41578 commits 9 branches 0 tags 111 MiB
Commit graph

41578 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pavel Raiskup
35e64724bb copr: fix wrong EOL config path 2024-08-16 13:30:51 +02:00
Pavel Raiskup
57c40a0e9b copr: EPEL-7 config is EOL in mock-core-configs 2024-08-16 13:21:33 +02:00
Carl George
d792beef81 bodhi: Remove usage of version_int from pungi template 
EPEL 10 has minor versions, and bodhi's Release.version_int property
doesn't handle versions with a dot correctly (yet).  Almost all of our
usage is for constructing strings or for equality comparisons that can
be strings, so we can just use Release.version instead.  There is an
instance of a numerical greater than or equal to comparison, but it is
inside a condition for release.id_prefix == 'FEDORA', so it shouldn't
get evaluated for EPEL updates.

Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2024-08-16 11:04:58 +00:00
Pavel Raiskup
2528d84e4c copr: experimental epel-10 config files 
Per discussion in:
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/ENUOAYL7A4QLBB4PJDTNHVDHT4Z27YOY/
 2024-08-16 11:13:14 +02:00
Nils Philippsen
e46308a1a2 Switch to rpmautospec mock plugin in prod 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2024-08-16 09:49:40 +02:00
Adam Williamson
9822f15720 greenwave: enable gating normally for F41 and Rawhide, drop F38 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2024-08-16 01:00:46 -04:00
Kevin Fenzi
dcff393aba poddlers: disable clean-retired-packages poddler 
This poddler is tracebacking and spewing to logs:

-rw-r--r--. 1 root root 106G Aug 16 00:02 messages.log

Disabling it for now until someone can look at it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-15 17:01:39 -07:00
Kevin Fenzi
9860fa89b5 koji_hub: add epel10.0 sidetags allowed and drop epel8-next ones since it is gone now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-15 11:04:42 -07:00
Nils Philippsen
7ce68f8a4c koji: Fix typo 🫣 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2024-08-15 19:41:34 +02:00
Nils Philippsen
4ac0bfac91 koji: Remove rpmautospec_builder plugin in stg 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2024-08-15 19:32:34 +02:00
Nils Philippsen
44876b117d koji: Also remove python3-/rpmautospec pkgs 
These were only needed for the rpmautospec koji plugin.

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2024-08-15 19:06:01 +02:00
Nils Philippsen
fad81b48af Install bkernel site-defaults.cfg from template 
Otherwise, Jinja directives will be present verbatim. 😬

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2024-08-15 18:38:03 +02:00
Nils Philippsen
d566528276 koji: Switch to rpmautospec mock plugin in staging 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2024-08-15 18:15:51 +02:00
Jeremy Cline
8fe5517885 fedora-image-uploader: publish AWS messages when images are uploaded 
I had hoped to get some feedback on the message schema, but perhaps the
easiest way is to publish these and figure out if anything is missing or
wrong. We can always update the schema.
 2024-08-14 22:40:58 +00:00
Kevin Fenzi
8a0f0dae94 robosignatory: switch eln to fedora-42 key 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-14 14:30:32 -07:00
Carl George
25215d0761 bodhi: Exclude EPEL-10.0 from bugzillas 
This should be reverted when we disable automatic bodhi updates for
EPEL-10.0.

https://lists.fedoraproject.org/archives/list/epel-devel@lists.fedoraproject.org/message/CS3Z2LVATYVJNOT6HZXXWMWBWWHRPTJI/

Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2024-08-13 22:06:43 -05:00
Kevin Fenzi
39558ad3d3 branched-compose: need a f41 compose now for branched 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-13 17:31:43 -07:00
Kevin Fenzi
0dfa11a6eb fedimg: signing off... 
Thanks for all the uploads fedimg.
You go to a far far better place I'm sure.

There's no point in keeping it around now, as it's actually not working
and the replacement ( cloud-image-uploader) should work soon.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-13 16:40:01 -07:00
Jeremy Cline
eaba6a35e6 Enable AWS image uploads in production 
Now that AWS image uploads work in staging, enable them in production
via the config. A functional build is already deployed to OpenShift in
prod, but since there is no AWS config it won't do anything until we
merge and deploy this.
 2024-08-13 23:10:39 +00:00
Lenka Segura
6437323747 toddlers, poddlers: Add kerberos authentication for koji session 
Signed-off-by: Lenka Segura <lsegura@redhat.com>
 2024-08-13 22:52:06 +00:00
Kevin Fenzi
5a3851a187 krb5.conf template: also include from normal include dir 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-13 13:42:07 -07:00
Adam Williamson
f96ce1730b greenwave: temporarily stop gating on upgrade tests for f41 
they cannot work until the first branched compose is done and
mirrormanager is pointing somewhere for f41.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2024-08-13 16:05:27 -04:00
Samyak Jain
21bf0e3794 Enabling koji back to stage 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-08-14 00:53:16 +05:30
Samyak Jain
9465ff33a1 Enabling koji for internal machines 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-08-13 21:25:31 +05:30
Kevin Fenzi
0e4e647574 robosignatory: also allow resigning f42 tagged packages 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-13 08:04:33 -07:00
Samyak Jain
5096677f85 make robosignatory changes for f41 branching 
Remove resigning of 41 keys with 42; updated artificats to f41 and rawhide to f42;
updated infra-candidate/openh264 for new f42; f41 signing pending, buildsidetags etc

Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-08-13 14:13:43 +00:00
Samyak Jain
5f164c7347 Branch Fedora 41 from Rawhide 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-08-13 14:13:43 +00:00
Samyak Jain
b8b2f4b0e9 Add f41 config for toddlers 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-08-13 14:13:43 +00:00
Samyak Jain
19df3b058a Disable new builds during branching 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-08-13 19:35:14 +05:30
Aurélien Bompard
117adfb157
W2FM: fixup 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-13 11:21:14 +02:00
Aurélien Bompard
4bf1f408de
W2FM: indentation 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-13 11:13:06 +02:00
Aurélien Bompard
5bbdd6c420
W2FM: setup FASJSON access 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-13 11:11:48 +02:00
Aurélien Bompard
c6db9c2120
W2FM: fixup 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-13 11:07:23 +02:00
Aurélien Bompard
584f878fcf
W2FM: adapt to the switch to fastapi 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-13 11:00:33 +02:00
Michael Scherer
425277ffa4
Remove old playbooks not removed from last cleanup 2024-08-08 16:23:43 -04:00
František Zatloukal
5f991c601a Blockerbugs: use oraculum bz api key 2024-08-08 12:30:18 -04:00
Kevin Fenzi
d967d2ae46 robosignatory: fix f42 key signing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-08 07:13:47 -07:00
Kevin Fenzi
509e3fe2d2 Resign f41 builds with f42 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-08 06:20:32 -07:00
Aurélien Bompard
0ff7313120
Mirrormanager: have curl fail on HTTP errors 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-08 05:56:56 +02:00
Aurélien Bompard
a0e17dc73f
GeoIP databases: set the selinux context 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-08 05:54:59 +02:00
Aurélien Bompard
096f4ed89c
The geoip script contains a secret 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-06 18:41:09 +02:00
Aurélien Bompard
2fad8816a6
Restore the GeoIP download script 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-06 18:19:57 +02:00
Aurélien Bompard
e1e8e20e1f
MirrorManager: add a command to move a branched version to release 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-06 07:57:33 +02:00
Aurélien Bompard
15a3eb2658
MirrorManager: add a command to rebuild a repo 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-06 07:51:15 +02:00
Aurélien Bompard
5778e0d999
Create a role to run jobs in OpenShift 
Inspired by Koschei's `koschei/job` role.
Adapt the MirrorManager move-to-archive job to it.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-06 07:49:59 +02:00
Kevin Fenzi
be65fcee91 pdc: remove old reverseproxy too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-02 14:01:16 -07:00
Kevin Fenzi
c4024c4aa4 pdc: fare thee well! 
This commit retires pdc from ansible.
The website should get redirected to a wiki page about the retirement.
If for some reason we need to bring things back, the vm's will still
have their disks and xml saved off so we can bring it back.
Would need to revert this, run proxy playbooks and do a little cleanup
on the redirect, then bring the vm's back up.
Hopefully we don't have to.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-02 13:39:15 -07:00
Kevin Fenzi
71529842c6 main: adjust main playbook for new host 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-02 13:18:24 -07:00
Kevin Fenzi
88ebe715b5 vmhost-x86-cc02: fix up host vars, with the host vars file this time 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-02 13:14:19 -07:00
Kevin Fenzi
9860e06e58 vmhost-x86-cc02: fix up host vars 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-02 13:13:57 -07:00