Patrick Uiterwijk
df7acc417e
Use certbot for updates.coreos
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-06-20 12:11:26 +02:00
Patrick Uiterwijk
8a82fb881b
Add updates.coreos(.stg).fedoraproject.org to proxies
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-06-20 12:08:33 +02:00
Tim Flink
231fd1e4b8
silencing blockerbugs sync cron job
2019-06-20 09:52:11 +00:00
Patrick Uiterwijk
f458b2503f
cincinnati: allow dl.phx2.fp.o
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-06-20 10:19:52 +02:00
Patrick Uiterwijk
f0dd07597e
Add mirrors and dl and github for cincinnati, as they're used during builds
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-06-20 10:05:46 +02:00
Patrick Uiterwijk
24963d3673
Put in place Cincinatti egress policy
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-06-20 09:55:24 +02:00
Patrick Uiterwijk
43af7f9206
Fix up egresspolicy source vs dest
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-06-20 09:44:10 +02:00
Adam Williamson
8f771ecaa0
autocloudreporter: fix email error subject line
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-19 20:17:30 -07:00
Adam Williamson
1e0274e20a
autocloudreporter: convert to fedora-messaging
...
OK, now this is the *fourth* time I've done this, maybe I'll
screw it up a bit less this time? Maybe?
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-19 20:14:31 -07:00
Adam Williamson
d18aa2af4a
check-compose: gah fix more settings
...
why is copy/paste so hard I am terrible at software someone fire
me
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-19 16:24:07 -07:00
Kevin Fenzi
33bf682fd5
pagure: fix up some more letsencrypt paths
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-19 23:19:12 +00:00
Kevin Fenzi
2c6a49e268
pagure: Fix name of cert. Letsencrypt uses cert instead of crt.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-19 23:16:07 +00:00
Adam Williamson
5bad190a65
check-compose: gah fix config file key name
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-19 16:12:03 -07:00
Kevin Fenzi
4527c00b3e
pagure: Fix missing VirtHost block end
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-19 23:10:03 +00:00
Kevin Fenzi
cccd70f805
pagure: Only get a pagure.org cert in prod, not in stg.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-19 23:03:04 +00:00
Adam Williamson
d004d57576
check-compose: REALLY fix the Python module name...
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-19 15:57:17 -07:00
Adam Williamson
ff2115653b
check-compose: correct python module name in messaging config
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-19 15:53:21 -07:00
Kevin Fenzi
ba9c64722d
pagure: move letsencrypt calls to the end so we have web config to proxy them to certgetter
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-19 22:50:40 +00:00
Adam Williamson
6f7de513e8
check_compose: fix queue name
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-19 15:49:46 -07:00
Adam Williamson
db1a4da495
check-compose: no dashes in group names apparently
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-19 15:47:02 -07:00
Adam Williamson
efddd0d5b1
check-compose: convert to fedora-messaging
...
Following the patterns from openQA and relvalconsumer. Just one
to go after this!
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-19 15:45:20 -07:00
Kevin Fenzi
eeb020d7f1
pagure: Get and use a letsencrypt cert for pagure.org/stg.pagure.org
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-19 22:40:28 +00:00
Kevin Fenzi
f9508750d1
koji_hub / prunesigned: Since we keep more than latest in infra tags anymore, protect those from pruning the signed rpm copies
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-19 21:51:37 +00:00
Kevin Fenzi
553b89e668
Vars: Fedora 28 is eol, so we have no previousprevious version now.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-19 21:48:42 +00:00
Kevin Fenzi
8d9e9ba16d
mediawiki: some more settings cleanup, fix ConfirmEdit loading.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-19 21:30:32 +00:00
Kevin Fenzi
eb31a3ae0a
mediawiki: Fix up mediawiki for new version
...
Move IP setting to apache
Load modules the new one for ones that support it.
Undefine db prefix that was confusing mysql
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-19 19:45:48 +00:00
Kevin Fenzi
3a60f8c94a
koji_hub: set dist repos to expire only after 6 months
...
This is to prevent kojira from removing less active dist repos under us.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-19 16:41:29 +00:00
Adam Williamson
5f29a944f2
relvalconsumer: fix the fedora-messaging routing keys
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-19 09:21:57 -07:00
Jeremy Cline
78128ae0ff
rabbitmq_cluster: limit queue size to 1GB and remove stale queues
...
When a user creates a queue and then never consumes from it (such at the
current Greenwave queue) it grows and grows forever. This isn't a
problem in the short term as messages are very small and 100K messages
is in the range of 10MB (depending on the payload size, obviously), but
eventually it will lead to trouble.
This policy will delete any queue that has had no subscribers in 31
days, and as a safety measure also limits all queues to 1GB of storage,
which is probably excessive.
Signed-off-by: Jeremy Cline <jeremy@jcline.org >
2019-06-19 14:06:50 +00:00
Pavel Raiskup
edac7114e8
copr: aarch64 hypervisor documentation fix
2019-06-19 07:51:08 +02:00
Adam Williamson
a3bae57b0e
relvalconsumer: fix email error message subject
...
boy, Lukas is sure gonna have a nasty surprise in his inbox in
the morning.
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-18 17:45:20 -07:00
Adam Williamson
a0a6facdb2
openqa playbook: fix relvalconsumer queue name
...
d'oh.
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-18 17:32:18 -07:00
Adam Williamson
0793e2d049
relvalconsumer: fix stupid python vs. toml boolean syntax...
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-18 17:26:15 -07:00
Adam Williamson
31e2e85d8c
openqa playbook: rearrange, drop queue 'when' conditionals
...
This was kinda...a mess. I had just dumped the queue creation
in the staging NFS client play for some reason, and it still
had 'when' conditionals from when I only wanted the messaging
stuff to happen on staging. This cleans all that up and creates
separate plays for the queue creation and NFS client stuff.
The plays should also be in the right *order* now, so we get
the NFS mounts created and the AMQP queues set up *before* we
run the roles.
2019-06-18 17:22:10 -07:00
Adam Williamson
8c41cdf9ac
relvalconsumer: fudge queue name to work with openqa auth
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-18 16:48:32 -07:00
Adam Williamson
0ab1d6a8b5
relvalconsumer: fix handler text
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-18 16:48:01 -07:00
Adam Williamson
a6158e229a
relvalconsumer: Whoops, forgot the restart handler
...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-18 16:46:32 -07:00
Adam Williamson
aba005a548
Convert relvalconsumer to fedora-messaging
...
Following the basic scheme I set up for fedora_openqa, hope it's
all right...
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2019-06-18 16:40:42 -07:00
Kevin Fenzi
db8c71dee4
wiki: drop serialized dir as it's not there anymore in new versions.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-18 23:40:03 +00:00
Stephen Smoogen
804c4b70d5
[dhcp] make sure all the 25s are 30
2019-06-18 22:48:16 +00:00
Stephen Smoogen
12a4696f61
[tftpboot] kernel and initrd need to match for kickstarts to work
2019-06-18 22:23:59 +00:00
Kevin Fenzi
0e80ba0ebc
wiki: drop basset plugin for now.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-18 21:49:30 +00:00
Stephen Smoogen
19205a29e9
clean up the noc boot so it works with f30 and remove eol fedora releases
2019-06-18 21:15:55 +00:00
Kevin Fenzi
8a018427a7
apache: f30+ has no /etc/init.d/ anymore.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-18 21:12:49 +00:00
Kevin Fenzi
f910e78813
wiki01.stg: Switch stg wiki to python3
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-18 21:03:01 +00:00
Kevin Fenzi
ee99c31e72
wiki: move staging wiki box to fedora 30
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-06-18 20:31:53 +00:00
Luca Bruno
f58075d5e9
coreos-cincinnati: update deployment to latest version
...
Signed-off-by: Luca Bruno <luca.bruno@coreos.com >
2019-06-18 13:30:31 +00:00
Luca Bruno
7ea616ce98
coreos-cincinnati: do not rollout on each run
...
Signed-off-by: Luca Bruno <luca.bruno@coreos.com >
2019-06-18 13:29:12 +00:00
Luca Bruno
d34b3b8ffa
coreos-cincinnati: undo some playbook breakage
...
Conditional build/deploy does not work with current role-based split
(vars cannot be registered after them). Let's undo this for now.
Signed-off-by: Luca Bruno <luca.bruno@coreos.com >
2019-06-18 13:11:01 +00:00
Luca Bruno
8b60731bb2
coreos-cincinnati: typo fix, invalid variable name
...
Signed-off-by: Luca Bruno <luca.bruno@coreos.com >
2019-06-18 11:49:30 +00:00