Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions
38644 commits 9 branches 0 tags 111 MiB
Commit graph

23122 commits

Author SHA1 Message Date
Francois Andrieu
be32dcebb4 websites: new main website deployment on prod 2023-03-31 16:58:12 +00:00
Francois Andrieu
6b596e84e2 websites: use upstream dockerfile 2023-03-31 16:58:12 +00:00
Kalev Lember
6d8bd22987 fedmsg / irc: use templates for Branched version 
This avoids having to update it again next cycle. Thanks for suggesting
it, Adam Williamson!

Signed-off-by: Kalev Lember <klember@redhat.com>
 2023-03-31 18:23:36 +02:00
Kalev Lember
28b03dbed0 fedmsg / irc: update #fedora-releng filtering for current Branched version 
Update the filter so that we get messages about current Branched, which
is 38 right now.

Signed-off-by: Kalev Lember <klember@redhat.com>
 2023-03-31 15:30:22 +00:00
Lukas Holecek
730a03992b waiverdb: Fix getting username from OIDC token 2023-03-31 15:12:06 +00:00
Michal Konečný
ae6c2b6508 [postgresql_server] Grant datanommer_ro access to datanommer2 db 
The datanommer_ro user was created in the task, but never got privilege to read
from datanommer2 db. This commit is fixing that.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2023-03-31 08:25:58 +00:00
Lukas Holecek
c21081d0d5 waiverdb: Remove unused file 2023-03-30 20:27:33 +00:00
Pavel Raiskup
76cf843c9b copr-backend: fixing ssh_config, take #4 (ownership) 2023-03-30 10:57:55 +02:00
Pavel Raiskup
c82af101e0 copr-backend: fixes in ssh_config, take #3 2023-03-30 10:56:53 +02:00
Pavel Raiskup
4c22f7011b copr-backend: fix whitespace errors in ssh_config, take #2 2023-03-30 10:53:15 +02:00
Pavel Raiskup
044d0bab36 copr-backend: fix newline in ssh_config 2023-03-30 10:49:38 +02:00
Pavel Raiskup
1bbb69261d copr-backend: ssh_config is actually a template 2023-03-30 10:44:40 +02:00
Pavel Raiskup
96f1d5184a copr-backend: prefer ssh over ipv4 to copr_hypervisor 2023-03-30 10:38:28 +02:00
Kevin Fenzi
a9bb7f2254 batcave02: no ansible-collection-community-docker right now, so exclude it on rhel9 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-03-28 14:32:44 -07:00
Aurélien Bompard
ca5eda3e3a
FMN: keep using Sendria on staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-03-28 18:37:13 +02:00
Lukas Holecek
38a5336a2c waiverdb: Configure token issuer 
Fixes the following error (in stage):

    flask_oidc ERROR id_token issued by non-trusted issuer:
    https://id.stg.fedoraproject.org/openidc/
 2023-03-28 16:19:56 +00:00
Kevin Fenzi
c69fbc43f7 nagios: add monitoring for stg pagure ssl cert 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-03-28 09:13:54 -07:00
Tomas Hrcka
597f85aa21 Retire epel8-modular 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-03-28 15:09:06 +00:00
Jiri Kyjovsky
183fedafe1 copr-dist-git: specify default_branch option in dict-git.conf 
commit d9dfe63e34abd7d6fe3c9b6e4c70939f4932f250 in dist-git
introduces configuration of main branch name. Thus it should
be specified in dict-git.conf
 2023-03-28 15:01:39 +02:00
Dan Fandrich
078cde0378 [release-monitoring] Add more disto package links 
This time, drop Adélie Linux as it's the most likely reason that the
previous attempt failed.
 2023-03-28 12:36:58 +00:00
Aurélien Bompard
4dc57fbfa0
FMN: actually send emails 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-03-28 11:22:50 +02:00
Aurélien Bompard
911c260eca
FMN: add a cron job for the cache refresh 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-03-27 17:09:51 +02:00
Adam Saleh
fb4d21c23e Fixing dashboard deployment 2023-03-27 11:47:06 +02:00
Kevin Fenzi
8975a18d8c fasjson: try and bump base image to f37 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-03-25 15:01:24 -07:00
Kevin Fenzi
58a5e2dae3 fasjson: increase timeout from 30s to 90s 
Some queries are timing out, so lets just try increasing this timeout
for now until we can get to the bottom of the slowdowns.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-03-25 14:15:12 -07:00
Kevin Fenzi
b9c782cdc8 fasjson: try and get it to use dns to lookup kdc 
We have been hard coding the kdc into the config here, but if we drop
that it should just look up the kdc from dns. This should also allow it
to use ipa02 and ipa03 instead of just fixating on 01. Hopefully that
will spread some load around and prevent timeouts we have been seeing.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-03-25 14:00:33 -07:00
Adam Saleh
05388b37e1 Fix db settings monitor_gating dashboard 2023-03-24 19:00:37 +01:00
Adam Saleh
efe403c598 Fix db settings monitor_gating dashboard 2023-03-24 18:59:07 +01:00
Adam Saleh
784cf9bda6 Fix db settings monitor_gating dashboard 2023-03-24 18:52:24 +01:00
Adam Saleh
1a78b8b3b5 Fix volumes in monitor_gating dashboard 2023-03-24 18:30:42 +01:00
Adam Saleh
131c2beb8a Fix alignment in monitor_gating 2023-03-24 18:16:49 +01:00
Adam Saleh
22572a228f Fix alignment in monitor_gating 2023-03-24 18:14:25 +01:00
Adam Saleh
46af5b0b48 Added dashboard to monitor-gating 2023-03-24 17:57:38 +01:00
Adam Saleh
f913c55e33 Limit the dashboard project just to graphana 2023-03-24 11:46:36 +01:00
Michal Konečný
c20c3a1126 Revert "[release-monitoring] Add more disto package links" 
This reverts commit b0c126a31f.
 2023-03-24 09:38:42 +01:00
Dan Fandrich
b0c126a31f [release-monitoring] Add more disto package links 2023-03-24 08:22:55 +00:00
Aurélien Bompard
ba81e2030f
FMN: enable keepalive for Redis 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-03-23 16:16:01 +01:00
Stephen Smoogen
cae6400729 Fix external IAD2 ip address 
The address noc02 was monitoring, 209.132.185.254, was a switch behind
a firewall which might not be viewable for various reasons. Red Hat
NOC let us know that 209.132.185.206 was the floating IP address which
is a better source of uptime.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2023-03-22 09:06:45 -04:00
Pavel Raiskup
92cab5ca01 copr-distgit: disable cgit check from FE 
Relates: https://github.com/fedora-copr/copr/issues/2410
 2023-03-21 09:55:48 +01:00
Lukas Holecek
2cbc76cfbe waiverdb: Fix OIDC redirect URI (2) 2023-03-17 15:30:14 +00:00
Dan Fandrich
3947fc667b [release-monitoring] Add disto package links 
https://github.com/fedora-infra/anitya/issues/1555
 2023-03-17 08:31:34 +00:00
Kevin Fenzi
749d6f395a robosignatory: add sericea ostree signing for all arches and testing and updates repos 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-03-16 20:37:24 -07:00
Lukas Holecek
c5d9b837b2 waiverdb: Fix OIDC redirect URI 
The wrong redirect URL in OIDC requests is for some reason http://..

See: https://pagure.io/fedora-infrastructure/issue/11179
 2023-03-16 17:14:15 +00:00
Tomas Hrcka
4f4909a003 Remove pungi_general.conf 
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
 2023-03-16 17:45:10 +01:00
Tomas Hrcka
d8127b2799 Revert "Split the pungi_general.conf" 
This reverts commit cc5fd0cc3a.
 2023-03-16 17:37:04 +01:00
Tomas Hrcka
36c251017e Revert "[bodhi-backend] Add shared pungi config" 
This reverts commit be3ce8b179.
 2023-03-16 17:13:45 +01:00
Kevin Fenzi
261879c688 rsyncd: use systemd service on rhel9 as well as fedora 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-03-15 15:34:32 -07:00
Kevin Fenzi
b981ac9c8f nagios / server: check fedorapeople.org ssl cert expiry 
This is for https://pagure.io/fedora-infrastructure/issue/10928

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-03-15 13:15:18 -07:00
Kevin Fenzi
6e982da0d4 bugz.fedoraproject.org: urlescape redirect instead of \ 
In a recent apache update they fixed CVE-2023-25690 which now disallowes
redirects with spaces in them. So, just urlencode the space instead of
trying to escape it and it should redirect correctly.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-03-15 12:29:55 -07:00
Kevin Fenzi
6aa0ea662a ipa / server: enable sweeper on prod too now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-03-15 11:28:48 -07:00