Commit graph

41731 commits

Author SHA1 Message Date
Kevin Fenzi
ace9d37537 proxies: fix odcs redirect and add bugs redirect
For ticket 12030 we want to add a 'bugs.fedoraproject.org' redirect to
the page on how to file bugs. This does that and also cleans up an
ordering issue to finish off odcs redirects.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-02 14:00:38 -07:00
Kevin Fenzi
b9ec7574ad nfs/client: fix copypasta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-02 12:02:16 -07:00
Kevin Fenzi
592f0c8f3c nfs/client: add a nmcli c up eth0 for buildvms / clean old stuff
buildvm's when reinstalled have systemd-resolved with no info in it,
doing a nmcli c up eth0 will cause NM to refresh systemd-resolved.
We need this for mounting nfs volumes so it can resolve the netapp.

Also, drop phx2 route stuff thats no longer needed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-02 11:49:34 -07:00
Kevin Fenzi
6524d745d2 virt_instance_create: drop python3 handling
We don't have any python2 using virthosts left (except one)
so lets try dropping this special handling here and just let ansible
sort out that it should use python3.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-02 10:50:20 -07:00
Kevin Fenzi
f5ceec7303 inventory / all vars: try adding a 'state: up' to default network-connections
On builders currently, they install and everything is up, but
NetworkManager doesn't tell systemd-resolved the new information
(nameservers, search domains, etc). Hopefully adding this will allow it
to actually tell systemd-resolved about it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-02 09:03:09 -07:00
Michal Konecny
b4fdeeefd8 Revert "Fix ansible_python variable missing"
This reverts commit 60a02a8c7e.
2024-10-02 13:55:04 +02:00
Michal Konecny
60a02a8c7e Fix ansible_python variable missing
This should fix the `'ansible.vars.hostvars.HostVarsVars object' has no
attribute 'ansible_python'` error when trying to run buildvm.yml playbook with
ppc64le builder.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-10-02 12:46:15 +02:00
Lenka Segura
43a8132ec2 distgit: Add group_modify ACL to distgit token
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2024-10-02 11:20:15 +02:00
Kevin Fenzi
04a661b60d kojipkgs: move to f40
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-01 15:59:58 -07:00
Kevin Fenzi
86fa3d87f5 proxies: move to f40
We still want to probibly do reinstalls on these, but move them to f40
via upgrade for now.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-01 14:41:59 -07:00
Kevin Fenzi
0028d383e0 inventory: drop copr_db_stg and group since it no longer seems defined
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-01 14:24:27 -07:00
James Antill
4680f6089b Wait for host to come back, for ipa/rabbitmq restarts.
Signed-off-by: James Antill <james@and.org>
2024-10-01 18:58:11 +00:00
Kevin Fenzi
a3a40cddf1 rabbitmq / staging: no need for eln-distrosync queue in staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-10-01 11:08:28 -07:00
Miroslav Suchý
a300e295bf update numbers of reserved instances for builders
additionally slightly bump up priority of aarch64 builders so they are likely used for src.rpm building
2024-10-01 10:44:25 +02:00
Kevin Fenzi
2ce17f4745 koji / staging: more memory for koji01.stg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-30 17:55:05 -07:00
Kevin Fenzi
654979219b vhost_reboot: clean up some old ocp stuff
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-30 10:41:51 -07:00
Kevin Fenzi
a6b405d31e vhost_reboot: what a lovely delegation
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-30 10:39:29 -07:00
Kevin Fenzi
6667a00f28 vhost_reboot: delegate to correct host
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-30 10:14:46 -07:00
Kevin Fenzi
7fd4ed4c67 vhost_update: allow prompt to set targets for update / reboot
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-30 10:01:06 -07:00
David Kirwan
81b2f70ba6
firmitas: move configuration mount point
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-09-30 14:13:35 +01:00
David Kirwan
17aeb2c7a8
firmitas: add PVC volume mounts for cronjob and deployment
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-09-30 14:03:25 +01:00
Jiri Kyjovsky
612e4276f4 copr: dynamically specify builder volume size
See https://github.com/fedora-copr/copr/issues/3268
2024-09-30 11:06:29 +00:00
Michal Konecny
ffcc5d8195 [mailman] Another try with command module
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-09-27 15:09:03 +02:00
Michal Konecny
2c31607cf1 [mailman] Use command instead script module
Script module is for executing local scripts rather use command.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-09-27 10:47:30 +02:00
Michal Konecny
a5ed1c6a2a [mailman] Add script to enable DMARC mitigation
This script is added to implement
https://pagure.io/fedora-infrastructure/issue/11427

The script was already executed on staging environment and finished without
issue. It could be executed multiple times and only affects list that don't have
the settings set yet. I will document this as another step to take when creating
a new list.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-09-27 08:35:11 +00:00
Michal Konecny
4d5243ee7f [mailman] Increase the LVM size for staging
The size of fulltext index for staging is roughly around 200 GB, which causes
nagios to alert about disk space. Let's increase the default space for future deployment.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-09-27 09:41:59 +02:00
Aurélien Bompard
e57c80b0dd
Poddlers: update config from the Toddlers changes
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-09-27 09:04:20 +02:00
Kevin Fenzi
dd33557f68 update security.txt expiry
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-26 12:16:07 -07:00
Kevin Fenzi
2979a245d7 koji / upgrade: fix staging groups
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-26 11:24:26 -07:00
Kevin Fenzi
d47e33fe61 koji / staging: prep for koji 1.35 in staging
Only staging for now, will need to remove the if statements when we move
to prod. Drop some no longer used kojira config and add some that moved
to the hub.

See https://docs.pagure.org/koji/migrations/migrating_to_1.35/

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-26 11:16:42 -07:00
Miro Hrončok
8f958b859b Switch the weekly FTBFS reminders to F41 2024-09-26 00:38:29 +00:00
Kevin Fenzi
f2fe6956ff openvpn / people01: fix vpn endpoint on people01
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-25 17:04:28 -07:00
Kevin Fenzi
071fe0a065 sundries: mount codecs volume rw
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-25 12:22:17 -07:00
Kevin Fenzi
6356a6be83 bastion / iptables: fix network
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-25 07:34:08 -07:00
Kevin Fenzi
79f3af4e58 bastion: allow s390x builders/virthost smtp access
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-25 07:29:02 -07:00
Kevin Fenzi
e6abd8cf5e odcs: disable top level redirect
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 18:17:16 -07:00
Kevin Fenzi
d132a63203 odcs: redirectmatch: one more try
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 17:50:13 -07:00
Kevin Fenzi
e099f312a5 odcs: redirectmatch: try again to make mod_alias happy
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 17:26:18 -07:00
Kevin Fenzi
4557148208 odcs: fix syntax
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 17:03:27 -07:00
Kevin Fenzi
1880d23324 odcs: put in a redirectmatch for old mock baseurls
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 16:40:37 -07:00
Kevin Fenzi
7f2b98cb6e basset: retire no longer deployed service
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 11:43:47 -07:00
Kevin Fenzi
8a18b535f8 gluster: remove old gluster role
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 11:40:42 -07:00
Kevin Fenzi
5c2d61d9f8 epylog: remove/retire
We haven't used epylog in a long time, it's unmaintained upstream and
never was ported to python3 that I know of.

So, lets stop pretending that it is something we should keep here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 11:37:07 -07:00
Seddik Alaoui Ismaili
b29b23f3e9 selinux allow rabbitmq logs in logrotate 2024-09-24 18:27:30 +00:00
Jeremy Cline
637e92fe11 fedora-image-uploader: Drop unused config options for AWS images
The AMI description setting wasn't actually being used.

More importantly, however, is the AMI volume size is now also unused.
The reason for this is that when we import the image, the default is to
use the snapshot's size as the volume size, but you can optionally set
it to something else. AWS pre-allocates volumes of a couple different
sizes (currently 1G, 5G, 8G, and 10G).

Folks building the image set the size to be 5G, but this setting
(carried over from fedimg) overrode it. Dropping it lets them control
the AMI size by adjusting how big the images are. Probably not optimal
for upload speed, but less confusing since there are fewer configuration
layers people might not be aware of.
2024-09-24 18:25:08 +00:00
Kevin Fenzi
e3e2cb1d93 odcs: retire service ( infra 12192 )
Time to retire ODCS. ELN is moved off and that was the last thing using
it. Thanks for all the service ODCS!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 18:21:51 +00:00
Kevin Fenzi
f72ff64029 bastion / iptables: Add internal RH mxes and drop global allow
We want to allow internal mx'es to send us email still.
We want to drop the global allow for port 25 now that we hopefully have
all the legit senders listed.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 10:55:20 -07:00
Kevin Fenzi
06a28bf516 bastion: iptables: fix copypasta
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 10:48:32 -07:00
Kevin Fenzi
42cae5591f bastion: adjust smtp firewall rules for mimecast
Setup things so we accept smtp connections from all the places we
currently do, but also from mimecast as incoming emails may come via
that. We don't want to globally allow everyone to inject emails here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 10:36:47 -07:00
Mikolaj Izdebski
607dd47d35 Revert "Koschei: Temporarily scale up frontend Deployment"
This reverts commit a52be17987.
2024-09-24 13:55:13 +02:00