Commit Graph

481 Commits

Author SHA1 Message Date
Kevin Fenzi
b259bb5465 batcave01: add new vlan at ibiblio to allows
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-30 15:38:13 -07:00
Nils Philippsen
6c85fda0c9 Mass remove/replace iad2 -> rdu3, 10.3. -> 10.16.
Signed-off-by: Nils Philippsen <nils@redhat.com>
2025-07-03 20:05:02 +02:00
Aurélien Bompard
981f16ee8f Fixup ea5784a05e
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-03 08:05:46 +02:00
Aurélien Bompard
ea5784a05e Fix zodbot-announce-commits
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-02 13:04:38 +02:00
Kevin Fenzi
ccfd1dafa1 batcave: add python3-sqlalchemy for repo2json script
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-30 15:34:26 -07:00
Kevin Fenzi
da9483f583 batcave: setup facls for private repo
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-30 15:33:21 -07:00
Kevin Fenzi
4ad6508bac batcave: fix acls for dns repo
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-30 14:11:50 -07:00
Kevin Fenzi
da58790976 batcave01: drop srm, its not actually in epel9
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-28 15:57:44 -07:00
Kevin Fenzi
8366badfc5 batcave: trust ssh host certs signed by our CA for *rdu3
This should fix some weird connection issues we were seeing.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-22 15:41:42 -07:00
Kevin Fenzi
26ab61697b batcave: allow rdu3 external network on batcave01 in iad2
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-21 12:37:13 -07:00
Carl George
e9734b9cdf batcave: override basearch in rhel10.0 sync
In order to correctly sync each architecture's repos, we have to
override the basearch while running reposync.  Otherwise we are just
syncing the the host architecture (x86_64) multiple times under
misleading directory names.

Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-05-15 11:58:23 -05:00
Carl George
b565e59d32 batcave: set up rhel10.0 sync
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-05-14 16:12:51 +00:00
Aurélien Bompard
b79d8199c6 Batcave: also copy the rabbitmq ca cert
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-17 18:16:23 +02:00
Aurélien Bompard
d884a0f8ba Use the combined RabbitMQ CA cert in the clients
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00
Carl George
2e3eaabb1c Branch epel10.0 from epel10
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-02-18 16:26:40 +00:00
Michal Konecny
6b0a66cb37 [fedora-messaging] Adding topic_prefix back
Removing the topic_prefix from fedora messaging config files was a bit
premature. So let's put them back in place.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-14 12:40:12 +01:00
Carl George
7599608b9d batcave: duplicate CentOS 10 sync directory
https://pagure.io/fedora-infrastructure/issue/12394

Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-02-13 13:27:32 -06:00
Michal Konecny
6428f8f772 Sunset github2fedmsg and fedmsg
This commit is removing all the fedmsg related stuff from ansible
repository.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-13 10:08:51 +00:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
Michal Konecny
7b58dfdce8 Remove fedmsg and github2fedmsg from staging
The messaging bridges openshift project and github2fedmsg VM were
already removed in staging. This is to clean the ansible playbooks.

I will create a separate one for production after this one is merged.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-04 09:13:40 +01:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
Ryan Lerch
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
Ryan Lerch
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:26:47 +10:00
Ryan Lerch
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
Ryan Lerch
691adee6ee Fix name[casing] ansible-lint issues
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
Kevin Fenzi
eafcece0cf batcave: redirect http to https
We hadn't done this in the past because virt-install couldn't do https
urls, but thats long since no longer the case.

So, move all the ks_url and ks_repo calls to use https and since they
are using https, they need to use the valid
infrastructure.fedoraproject.org name so they can verify the cert.

Set batcave to redirect http to https now since that was the thing
holding this back.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-06 09:45:25 -08:00
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
David Kirwan
ef45d81b72 batcave: python3-requests-kerberos package
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-11-21 16:02:40 +00:00
Aurélien Bompard
41b9780f35 Batcave: /usr/sbin is not in cron's path
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-11-04 10:42:32 +01:00
Jiri Podivin
104ecb73b4 Removing unused formatter
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2024-09-18 19:57:30 +00:00
Jiri Podivin
f513e7cbcd Linting python scripts
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2024-09-18 19:57:29 +00:00
Aurélien Bompard
a0e17dc73f GeoIP databases: set the selinux context
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-08 05:54:59 +02:00
Aurélien Bompard
096f4ed89c The geoip script contains a secret
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-06 18:41:09 +02:00
Aurélien Bompard
2fad8816a6 Restore the GeoIP download script
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-06 18:19:57 +02:00
Carl George
fafd6f1adc batcave: delete excluded content in CentOS sync scripts 2024-07-15 21:30:51 -05:00
james02135
abbddf11db Change typo from isos to iso, exclude source
Signed-off-by: james02135 <james02135@hotmail.com>

Change typo from isos to iso, exclude source

Signed-off-by: james02135 <james02135@hotmail.com>

Fix typo in centos 9 sync script

Signed-off-by: james02135 <james02135@hotmail.com>

Include the appropriate exclusions in the CentOS 9 script

Signed-off-by: james02135 <james02135@hotmail.com>
2024-07-09 10:57:12 +00:00
Stephen Smoogen
432a3a497b Go through and remove entries for EL6 and EL7
Using `git grep el6` and `git grep el7` and variants like EL-7 or
el-7, I found various entries and files which were no longer needed
with the current ansible. I updated text or tests to later versions of
RHEL as needed.

found entries for the fedora ami's for the original cloud and removed
those entries also.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
2024-07-03 22:20:30 +00:00
Nils Philippsen
0d6c24558a batcave: Set git directories as safe
Or else users in sysadmin-main can’t access the repositories.

Signed-off-by: Nils Philippsen <nils@redhat.com>
2024-07-01 13:34:48 +00:00
Kevin Fenzi
1f75c26aa6 rhel7: no need to sync it anymore
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-29 18:41:52 -07:00
james02135
decfe3e771 Update centos-10-sync script to rsync
Signed-off-by: james02135 <james02135@hotmail.com>

Change DESTDIR to previously used directory, exlcude debug directory

Signed-off-by: james02135 <james02135@hotmail.com>
2024-06-24 17:33:24 +00:00
Aurélien Bompard
626a24d13a Fix the selinux context of the copied files
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-06-24 09:02:24 +02:00
Kevin Fenzi
c884dc9d30 batcave: use RedirectMatch for batcave toplevel redirect
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-17 15:51:46 -07:00
Kevin Fenzi
73c4e62b57 batcave: redirect top infrastructure page to docs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-17 14:56:02 -07:00
Carl George
8350b55843 Stop syncing and grobisplitting CentOS Stream 8
CentOS Stream 8 is now EOL, so it is no longer necessary to sync and
grobisplit that content for EPEL 8 Next to build against.

https://pagure.io/releng/issue/12147
2024-06-05 13:14:16 +00:00
David Kirwan
5e76da498f rabbitmq: Change location of rabbitmq public cert export
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-05-31 13:42:07 +01:00
Aurélien Bompard
7133b7db35 Generate a list of expiration dates for the certs
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-05-23 12:09:55 +02:00
james02135
d7132e212c Modify script based on output from last run
Signed-off-by: james02135 <james02135@hotmail.com>
2024-05-22 20:58:19 +00:00
james02135
31fb825690 Write sync script for centos-10 using reposync
Signed-off-by: james02135 <james02135@hotmail.com>

Change variable names to basearch and repo as necessary, fix loop issues

Signed-off-by: james02135 <james02135@hotmail.com>

Fix syntax errors in nested for loop

Signed-off-by: james02135 <james02135@hotmail.com>

Modify script to include os filepath

Signed-off-by: james02135 <james02135@hotmail.com>
2024-05-22 00:15:38 +00:00
Aurélien Bompard
134f77da5b Add a cron job to expose the rabbitmq certs
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-05-07 17:35:33 +02:00