45287 Commits

Author SHA1 Message Date
Greg Sutcliffe
263a84d3b5 Zabbix: forgot README update for new Zabbix scripts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-23 10:22:46 +00:00
Greg Sutcliffe
01ab35531a Zabbix: fixes infra/tickets#12992 - add IPA backup monitoring
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-23 10:22:29 +00:00
Kevin Fenzi
daf6c8871e download-ib01/iso01: drop old centos linux sync attempting
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 16:10:22 -08:00
Greg Sutcliffe
00e4eb6b3d Proxies: Fixes #13051 - remove old cert management for getfedora
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-22 22:39:24 +00:00
Gregory Bartholomew
7e69bf85e8 redirect torrent.fp.o to fp.o/torrents
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-22 22:31:24 +00:00
Adam Williamson
2a8f208ce6 Fix qa redirect (remove trailing slash)
The qa.fp.o redirect is to a wiki page, it should not have a
trailing slash.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-22 14:16:53 -08:00
Kevin Fenzi
f3406c7ee7 anubis-el: add missing check for port
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:50:15 -08:00
Kevin Fenzi
4e9729d938 anubis: fix ports for el vs non el versions
I mistakenly changed the port in the fedora/non el one, that was
correct.

Need to add the port in the el one for selinux to allow httpd to work.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:44:20 -08:00
Kevin Fenzi
896ab6360b download: block subnet thats using rclone against master mirrors
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:35:44 -08:00
Kevin Fenzi
07940d97ac download / anubis: fix typo of file vs copy module
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:26:24 -08:00
Kevin Fenzi
6ceb3ea68b download: enable/finish anubis for other download servers
Fixed up a few things missed and caught in testing on dl01:
* need to setup subuid/subgid files for podman
* need to allow the right port for httpd to listen in selinux
* need httpd network connect to allow it to connect to anubis
* adjust worker values, we were not using prefork for a long time
so the values were just default up them a bunch.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 10:16:22 -08:00
Kevin Fenzi
9717d920af anubis: rename anubis-el8 to anubis-el and see about enabling on download
Looks like the scrapers are hitting the download servers now.
So, look at setting up an anubis pod there like we did for pagure.
anubis package isn't available for epel9, so we just use the container.

Will test this with dl01 and tweak until it's working.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 08:50:34 -08:00
Michal Konecny
57db17afb3 [flatpak-indexer] Run the correct command
The flatpak-indexer-build needs to run only pytest as done in upstream.
Otherwise it fails on missing commands.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 13:51:42 +01:00
Michal Konecny
83b60d7c3c [flatpak-indexer] Use the correct ImageStreamTag
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 13:46:37 +01:00
Michal Konecny
71c56a448f [flatpak-indexer] Fix indentation
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 13:12:40 +01:00
Michal Konecny
bf4f2520ea [flatpak-indexer] Fix the git ref for branch
Upstream repo doesn't have staging and production branches. So let's
just go with main. In case of redis use the branch where the fix is introduced.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 12:30:44 +01:00
Michal Konecny
78235160d4 [flatpak-indexer] Fix deployment in openshift
The project has plenty of updates upstream. This commit reflects that
changes in deployment.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-22 11:19:25 +00:00
Adam Williamson
d76afa032b Move the qa-landingpage reverse proxy config removal
...we already have a better place to do this, it turns out.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 15:44:01 -08:00
Adam Williamson
521897ede9 sigh, tags
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 15:05:23 -08:00
Adam Williamson
b67fe0f32f Remove qa-landingpage proxypassreverse config
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:58:44 -08:00
Adam Williamson
a994e1031a Gah, drop the when as well
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:46:39 -08:00
Adam Williamson
c2f25426e8 Try and fix the qa redirect
ugh, it's hard to understand this stuff.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:46:16 -08:00
Adam Williamson
2a5465404f proxies-redirects: add a tag for the qa redirects
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:36:47 -08:00
Adam Williamson
382f947eff Drop qa-landingpage, clean up blockerbugs config a bit
Per https://pagure.io/fedora-qa/issue/859 we want to drop the QA
landing page at qa.fedoraproject.org. This should turn it back
into a redirect to the wiki page. We also drop the certificate
for qa.fp.o (since blockerbugs uses the wildcard certificate
anyway) and remove a duplicate reverseproxy entry for blockerbugs
(we had two otherwise-identical entries that were restricted to
prod and stg with `when` conditions).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:29:13 -08:00
Kevin Fenzi
d30bdfb3ed pagure / staging: add missing endif
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-21 13:40:38 -08:00
Anton Medvedev
82f9af8767 feat(roles/pagure): adding myself as pagure admin on stg
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-01-21 21:37:26 +00:00
Greg Sutcliffe
0e0b5f92c6 Zabbix: add shush/ok scripts and playbook
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-21 17:00:06 +00:00
Anton Medvedev
edf4cf6030 fix(poddlers): fix empty topic
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-01-21 11:37:34 +01:00
Anton Medvedev
e525e4011b feat(poddlers): reintroduce unretire plugin for poddlers
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-01-21 11:17:10 +01:00
Ryan Lerch
8ee3cdae56 [forge] fix json in group mapping
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-01-21 14:32:57 +10:00
Akashdeep Dhar
e59252d689 Map teams/groups for the design namespace
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2026-01-21 14:27:09 +10:00
Gregory Bartholomew
53cbfac4e6 dl.fedoraproject.org: make *-CHECKSUM files download
This is another attempt at 86696cf. Appearently the condition must be
set to "always" in order to for the header to be "persisted across
internal redirects".

Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-21 01:00:17 +00:00
Kevin Fenzi
a754144f19 Update infra pagure.io links to forge.fp.o (WIP)
This should update all the references we have to
https://pagure.io/fedora-infrastructure to the
new https://forge.fedoraproject.org/infra/tickets/ area.

Do not merge this before the migration on tuesday.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-20 14:39:40 -08:00
Jakub Kadlcik
7d56f15586 copr-be: upgrade production builders to F43
Fix https://github.com/fedora-copr/copr/issues/4001

I updated the `copr_builder_images.hypervisor.x86_64` even though the image is
not uploaded there yet because the HV is currently down.

Somebody needs to run this when it gets back online:

    STAMP=$(date -I) \
    ARCHES=x86_64 \
    TARGETS=libvirt \
    copr-upload-builder-images /var/lib/copr/public_html/images/2026-01-14/
2026-01-20 15:50:20 +01:00
Michal Konecny
867111750e [ipsilon] Add OIDC entry for GNOME Damned Lies
Add staging OIDC entry to ipsilon for GNOME Damned Lies. See more info
in https://pagure.io/fedora-infrastructure/issue/13017.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-20 15:16:48 +01:00
Greg Sutcliffe
babb906403 Zabbix: increase value cache size
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-20 13:51:43 +00:00
Michal Konecny
e7fb8978c8 [bodhi] Increase number of consumers
10 is not enough, the queue started growing again after few days on
staging. Let's set it to 15. This seems to hold.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-20 13:12:56 +01:00
Akashdeep Dhar
c060befdf9 Provide namespace/group mapping for translations
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2026-01-20 11:30:36 +00:00
Rolv Apneseth
c3af50bd49 Add user rapneset to playbooks/openshift-apps/fedora-coreos-pipeline.yml 2026-01-20 10:44:56 +00:00
Jakub Kadlcik
82245389e8 copr-be-dev: upgrade builder HV ppc64le images to F43 2026-01-20 11:32:44 +01:00
Jakub Kadlcik
7a7d7dac7d copr-be-dev: use image-builder for uploads to libvirt
There is a small bug in the `image-builder upload` code, causing it to always
use the "default" libvirt pool. I am proposing a fix here
https://github.com/osbuild/images/pull/2147
and I uploaded the current builder images with the patched version.
2026-01-20 11:24:12 +01:00
Justin Wheeler
0ba3182601 📧 roles(fasjson): Use flock-team FAS group membership for emails
This commit uses the `flock-team` FAS group to direct who receives
emails for the members and sponsors email of the FAS group. By default,
group sponsors will receive mail for Flock sponsorship, while all group
members will receive email for mail sent to the Flock staff mail alias.

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-01-20 10:17:49 +00:00
Ryan Lerch
31ac8f1ff1 [forge] notify admins on new user creation
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-01-20 18:07:59 +10:00
Ryan Lerch
fd7c38b8f8 [forge]: require additional emails to be verified
resolves: https://forge.fedoraproject.org/forge/forge/issues/352

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-01-20 18:00:27 +10:00
Ryan Lerch
aa5124ddc5 [forge] dont require email confirm for oauth2
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-01-20 09:43:36 +10:00
Ryan Lerch
4d84bce710 [forge] enable email confirm for staging
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-01-20 08:50:20 +10:00
x3mboy
f79959431b Updating the podcast team members 2026-01-19 22:34:44 +00:00
Gregory Bartholomew
86696cf807 dl.fedoraproject.org: make *-CHECKSUM files download
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-19 22:30:08 +00:00
Gregory Bartholomew
d0fe436ca2 proxies-redirects: fix extra trailing slash on getfedora.org redirect
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-19 22:28:30 +00:00
Kevin Fenzi
d00ef11307 Save pingou's email box
We should not flood his mailbox anymore.

I set it to go to admin@fedoraproject.org, but if it's too much for
everyone we could just set it to nobody, or adjust it so it doesn't send
so many, or something else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-19 22:25:57 +00:00