infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
31525 commits 9 branches 0 tags 110 MiB
Commit graph

194 commits

Author SHA1 Message Date
Pierre-Yves Chibon
c05f210557 distgit/pagure: don't do fedmsg anymore 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-06 21:17:19 +02:00
Pierre-Yves Chibon
adce324050 distgit/pagure: Add the iad2 internal IP to the whitelist of IPs 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-06 21:03:53 +02:00
Pierre-Yves Chibon
64773f2049 distgit/pagure: iad2 has the same rules as staging, python 3.6 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-04 14:11:50 +02:00
Pierre-Yves Chibon
0f7a6efc2b pagure and distgit/pagure: Drop the db-pagure hostname and populate the db used in the inventor host file instead 
Basically, instead of relying on an obscure db-pagure variable that
then needs to be specified in the /etc/hosts file.
Just define the pagure_db_host variable in the host's inventory
file so it exists as a variable available in the playbook/role.
This makes things more explicit and easier to debug/tweak as needed.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-26 14:08:01 +02:00
Pierre-Yves Chibon
da660c1852 distgit/pagure: pagure in staging runs with python 3.6 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-23 20:02:39 +02:00
Pierre-Yves Chibon
3ed325d3b7 distgit/pagure: on rhel8 it is mandatory to have a WSGIProcessGroup for pagure to work 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-22 17:29:40 +02:00
Pierre-Yves Chibon
ed659f15ac distgit/pagure: drop the requirement on pygments 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 13:14:05 +02:00
Pierre-Yves Chibon
353ae17378 distgit/pagure: allow provenpackager to by-pass PR-only projects 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-11 11:48:06 +02:00
Pierre-Yves Chibon
48793d378d distgit/pagure: only show the ssh url to packager and don't allow moving git tags around 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-04 11:32:45 +02:00
Pierre-Yves Chibon
850d3dc4b6 distgit/pagure: Add the tag_project ACL 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:28 +02:00
Pierre-Yves Chibon
a232c72149 distgit/pagure: Allow the html to connect to apps.fp.o and mdapi.fp.o 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:22 +02:00
Mohan Boddu
028cdc638d relenggroup is used for massrebuild 
https://src.fedoraproject.org/group/relenggroup

Revert "dist-git/pagure: There is no relenggroup in Fedora, it's called cvsadmin"

This reverts commit 85a12a41dd708061c54eb842432dd619bed2d446.
 2020-04-24 21:34:21 +02:00
Stephen Smoogen
d05626d43c [pagure] put back changes into configs I whacked earlier 2020-04-24 21:34:20 +02:00
Stephen Smoogen
ccaa519dd3 [pkgs]: remove mentions of repospanner so that playbooks will set up things without it 2020-04-24 21:34:20 +02:00
Pierre-Yves Chibon
11c623613e distgit/pagure: move the hooks back to fedmsg 
Due to a permission issue with the fedora-messaging cert, we cannot
move src.fp.o fully to fedora-messaging at this time, so moving
back to fedmsg for the hook for now.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:20 +02:00
Pierre-Yves Chibon
cae73d9dd9 distgit/pagure: move some configuration key to the shared config 
- Use fedora-messaging everywhere instead of fedmsg
- Make setting: ALWAYS_FEDMSG_ON_COMMITS always true

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:20 +02:00
Pierre-Yves Chibon
8981c7dd49 dist-git/pagure: There is no relenggroup in Fedora, it's called cvsadmin 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:18 +02:00
Pierre-Yves Chibon
30a7d4a19d disgit/pagure: moving mdapi from connect-src to script-src 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:17 +02:00
Pierre-Yves Chibon
38843d8631 distgit/pagure: allow to do ajax request to mdapi 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:17 +02:00
Julen Landa Alustiza
29942b36b2 distgit content-security-policy: allow connect to pdc.fp.o 2020-04-24 21:34:17 +02:00
Pierre-Yves Chibon
71764d9360 dist-git/pagure: enable the pagure-dist-git 3rd party extension in prod 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:17 +02:00
Pierre-Yves Chibon
49f68f14d5 distgit/pagure: Allow the pull_request_flag ACL on cross-projects API tokens 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:17 +02:00
Pierre-Yves Chibon
43f084686d dist-git/pagure: Drop couple of variables not used and already defined 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:11 +02:00
Pierre-Yves Chibon
93074d7249 dist-git/pagure: Enable the issue tracker on the tests namespace 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:11 +02:00
Pierre-Yves Chibon
ebddc53593 distgit/pagure: allow cross-project API tokens to merge PRs 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:09 +02:00
Julen Landa Alustiza
2de580306b dist-git: Custom csp policy that allows connecting to apps.fp.o 2020-04-24 21:34:09 +02:00
Pierre-Yves Chibon
a924fac977 dist-git/pagure: Enable the pagure-dist-git 3rd party plugin in staging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-04-24 21:34:08 +02:00
Pierre-Yves Chibon
84eebb9615 dist-git/pagure: Allow the update_watch_status ACL 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-06-05 11:29:36 +02:00
Pierre-Yves Chibon
527bf3a995 pagure/dist-git: allow user to change their watch status via the API 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-06-05 11:28:09 +02:00
Owen W. Taylor
4e5928d055 Allow a separate flatpaks/ namespace in production 
Adjust the production distgit and MBS configuration to allow
having a separate flatpaks/ namespace and building from there.

Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
 2019-05-14 18:47:48 +00:00
Pierre-Yves Chibon
6c8749cf59 distgit/pagure: Fix the amqp_url for fedora-messaging on pagure 
The cert is now for rabbitmq.stg.fedoraproject.org and not:
rabbitmq01.stg.phx2.fedoraproject.org so having the wrong url in the config
leads to a CertificateError leading to pagure failing to send notifications
on fedora-messaging.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-29 11:14:38 +02:00
Stephen Smoogen
2549998aa9 [repospanner/pagure] when using variables.. check what you type twice before committing 2019-04-12 14:45:03 +00:00
Owen W. Taylor
76197fc4d0 Prepare staging for a separate flatpaks/ namespace 
Change the distgit staging configuration to allow a flatpaks/ namespace,
and configure Koji and MBS to allow building from there.

Signed-off-by: Owen W. Taylor <otaylor@fishsoup.net>
 2019-04-10 16:15:54 +00:00
Pierre-Yves Chibon
1319bc99f5 distgit/pagure: indicate to pagure that the git hook have a read-only access to the DB 
This way it'll try to interact with the DB using async processes
(the workers) rather than trying to do it where it does not have
the permissions and crash.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-10 13:16:39 +02:00
Stephen Smoogen
7c3fa7c396 Make it so our http configs for repoSpanner do not wander off from each other due to too many cooks and too few pots. Change all repospanner related 8443 to use jinja variable repoSpanner_{{region}}_http 2019-04-09 13:50:01 +00:00
Kevin Fenzi
9f4bf69eae pagure / src.fp.o: Drop fedora-altarch, as it's not used. Add cvsadmin as we want them to have access to everything. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-04-08 19:26:32 +00:00
Pierre-Yves Chibon
30f7f775b4 Have pagure log commits on all branches 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-08 12:24:27 +02:00
Pierre-Yves Chibon
2b37c83ae3 distgit/pagure: Increase the cross-project ACLs 
This just makes pagure accept to generate project-less API tokens
with these two ACLs.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-04-03 11:50:08 +02:00
Patrick Uiterwijk
85c09a8f50 Update repospanner hook id in stg 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-03-29 12:17:35 +01:00
Pierre-Yves Chibon
307eb2fdfc pagure: Turn off debug mode on pagure.io an src.fp.o 
This leads to some exception being raised instead of by-pass safely.
It was useful at some point because pagure would not log error to
its logs otherwise but Patrick has since fixed it and I believe it
may be triggering some errors now.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-03-08 16:52:13 +01:00
Stephen Smoogen
f11158639e [repospanner/hook] Update repospanner hookid 
Due to a missed commit, the repospanner hookid was not updated in
ansible which broke pushes later.
 2019-03-07 11:56:58 +00:00
Pierre-Yves Chibon
a790f2b884 Allow the cross-project ACLs pull_request_create pull_request_comment in staging 
Fixes https://pagure.io/fedora-infrastructure/issue/7623

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-03-06 16:19:49 +01:00
Pierre-Yves Chibon
55b6c9cb63 Start porting pagure at src.fp.o to fedora-messaging 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-03-04 14:26:43 +01:00
Julen Landa Alustiza
02a0635be4 set admin email config variable 2019-03-01 16:43:12 +01:00
Patrick Uiterwijk
4a7649d651 Modules.... 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-01-31 12:17:49 +01:00
Patrick Uiterwijk
6c68095f33 RCM can push to master 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-01-31 12:15:23 +01:00
Pierre-Yves Chibon
c055c82949 Allow user to view the pull_request_create ACL 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2018-12-09 21:18:48 +01:00
Pierre-Yves Chibon
ccc571a70a Allow the ACL to create PR for the API tokens 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2018-12-09 21:10:41 +01:00
Patrick Uiterwijk
1bec672ede Make external committers available to the hooks 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-21 17:48:50 +01:00
Patrick Uiterwijk
d876e90554 We have no need for gitolite 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-11-21 12:45:01 +01:00