infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
33005 commits 9 branches 0 tags 110 MiB
Commit graph

33005 commits

This branch
This branch
All branches
Author SHA1 Message Date
Pierre-Yves Chibon
ac5205d5de test commit - sorry for the noise - more selinux testing 2020-10-01 13:17:21 +02:00
Pierre-Yves Chibon
6d40805935 test commit - sorry for the noise - last one I swear! 2020-10-01 13:15:14 +02:00
Pierre-Yves Chibon
0357ac37ee test commit - sorry for the noise 2020-10-01 13:09:47 +02:00
Pierre-Yves Chibon
fe96a2258c test commit - sorry for the noise 2020-10-01 13:06:44 +02:00
Pierre-Yves Chibon
9c4c3e09fc test commit - sorry for the noise 2020-10-01 13:06:02 +02:00
Pierre-Yves Chibon
614d96a29d test commit - sorry for the noise 2020-10-01 12:56:11 +02:00
Pierre-Yves Chibon
ce56359d70 pagure: missed a type in the selinux policy... 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-01 12:53:54 +02:00
Pierre-Yves Chibon
9df0fc6b33 pagure: adjust the selinux policy some more 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-01 12:50:44 +02:00
Pierre-Yves Chibon
11c31a9fe1 pagure: fix typo in selinux boolean 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-01 12:44:33 +02:00
Pierre-Yves Chibon
317be2fa93 pagure: Add missing permission in the pagure policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-01 12:43:24 +02:00
Pierre-Yves Chibon
c4431d0a21 pagure: update the selinux configuration for pagure 
Split all the selinux tasks in a different file so it's easier to
read/find.
Adjust the custom policy based on our latest findings.
Build and compile the policy directly on the host.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-01 12:35:30 +02:00
Pierre-Yves Chibon
aaf335d680 pagure: enable the nis_enabled selinux boolean 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-01 11:45:59 +02:00
Pierre-Yves Chibon
20f901f337 pagure: enable the httpd_execmem selinux boolean 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-01 11:39:31 +02:00
Pierre-Yves Chibon
5383f87f30 pagure: adjust pagure's postfix configuration to rhel8 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-01 11:06:52 +02:00
Pierre-Yves Chibon
cf6faa43b4 Revert "pagure: close all ports but 22 from batcave so we're sure people don't push changes while we do the migration" 
This reverts commit 3e792633ec.
 2020-10-01 11:06:25 +02:00
Pierre-Yves Chibon
3e792633ec pagure: close all ports but 22 from batcave so we're sure people don't push changes while we do the migration 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-10-01 10:04:35 +02:00
Rick Elrod
08ef501c96 websites: add python-gnupg for building key bundle and sanity-checking static/keys 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-09-30 21:22:57 -05:00
Silvie Chlupova
6765c52d1e copr: set postfix_group variable 2020-09-30 23:54:17 +02:00
Stephen Smoogen
a7ddc8caaa This adds in the bvmhost-a64-01.stg to the builders file also 
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2020-09-30 17:38:58 -04:00
Stephen Smoogen
dfd3324df7 Add in the bvmhost-a64-01.stg server so stging can get built. 
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2020-09-30 17:27:18 -04:00
Kevin Fenzi
9298b82449 releng: install python3-bugzilla on releng machines 
This is needed for the ftbfs script/cron.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-30 11:41:14 -07:00
Kevin Fenzi
df8e13732d bodhi / backend: fesco wants to keep 3 days to stable until final 
See https://pagure.io/fesco/issue/2477

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-30 08:32:19 -07:00
Mark O'Brien
7763fc5b22 update ipv6 address for pagure02 2020-09-30 12:06:12 +01:00
Miroslav Suchý
4e247bc885 retrace: change point of contact for ssl cert 2020-09-30 10:57:34 +02:00
Miroslav Suchý
ca71e2eae2 retrace: allow abrt team members to get root on staging 2020-09-30 10:56:20 +02:00
Rick Elrod
54c4089a70 Disable prerelease redirects 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-09-29 06:59:21 -05:00
Stephen Smoogen
07961f51f0 Fix hidden tab which snuck into file. 
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2020-09-28 17:48:49 -04:00
Stephen Smoogen
7b0a70c949 Update the rsync variable to have the CERN ips in them. 
Also clean up the lists of ips in the file so they are in sort order.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2020-09-28 16:12:46 -04:00
Stephen Smoogen
101a54973f Move bvmhost-p08-04 to bvmhost-p08-01.stg 
Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2020-09-25 19:00:39 +00:00
Michael Scherer
0e4392e42f Add the repo URL used for badges 
Our ansible version is too old and do not support
reading directly from my mind what repo it should clone
when I do not specify it.
 2020-09-25 16:10:35 +00:00
Mohan Boddu
ba9baf621b RelEng is out of freeze for f33 beta 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-09-25 16:02:17 +00:00
Mark O'Brien
d62e9c6e05 nagios file exists in 2 places so updating second file 2020-09-25 16:24:49 +01:00
Mohan Boddu
82978267ab compose-partial-copy is used to stage the rc composes 
Since we sign the checksums and stage the compose in one go, we need to
run the script on bodhi-backend01, hence we need compose-utils package
which provides compose-partial-copy

https://pagure.io/releng/blob/master/f/scripts/stage-release.sh

Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2020-09-25 15:01:31 +00:00
Mark O'Brien
b2073703e5 [nagios] add back in strp accidentally removed 2020-09-25 14:11:10 +00:00
Mark O'Brien
95eb7c75d3 [nagios] port haproxy connections script to py3 2020-09-25 14:11:10 +00:00
Pierre-Yves Chibon
0bf1f7ed0d pagure: increase the apache timeout to 1 minute 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-25 15:37:00 +02:00
Pierre-Yves Chibon
200282de8d pagure: add a dedicated postfix configuration file for pagure02 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-25 12:10:31 +02:00
Pierre-Yves Chibon
32a778a584 pagure: ensure mod_wsgi is installed 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-25 11:50:14 +02:00
Pierre-Yves Chibon
f7de81d5e5 pagure: adjust the playbook so it support pagure02 which is rhel8/py3 based 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-25 11:27:51 +02:00
Kevin Fenzi
da89789606 ipsilon: need db host defined for ipslon role 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 15:18:09 -07:00
Kevin Fenzi
56489ef2c3 ipsilon: comment out for now all the old rhel7 python2 tasks 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 15:08:54 -07:00
Kevin Fenzi
7d9c26fe51 ipsilon: no libsemanage-python in f32 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 14:57:14 -07:00
Kevin Fenzi
98cba3c9d5 ipsilon / staging: no fas_client in staging 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 14:46:38 -07:00
Kevin Fenzi
2962acaa57 ipsilon01.stg: Add ks_repo: so the inventory vairables are valid 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 14:10:59 -07:00
Kevin Fenzi
ee97680d55 Correct group name all around. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 14:09:44 -07:00
Kevin Fenzi
4b9198fb5b Also use _ instead of - in group names. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 14:08:20 -07:00
Kevin Fenzi
8d699a416c ipsilon: turns out we don't have a cable long enough to reach phx2, so put these in iad2. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 14:07:14 -07:00
Kevin Fenzi
3aab140a66 ipsilon: create ipsilon01.stg vm 
Right now ipsilon is running in openshift, but sadly in order to work
with ipa instead of fas as it's backend it needs to use sssd and pam
stack. That does not work in a container, so move it back to a vm at
least for now until we sort out what we want to do.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-09-24 14:03:11 -07:00
Pierre-Yves Chibon
a081e5c0d2 pagure: turns out we have two pagure DB users 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-24 21:52:43 +02:00
Pierre-Yves Chibon
f75d677b56 pagure: remove an invalid closing bracket 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-09-24 21:49:14 +02:00