Commit Graph

534 Commits

Author SHA1 Message Date
Mikolaj Izdebski
b4e77e3a71 koji: Drop legacy mash.conf for httpd 2025-07-04 19:04:25 +02:00
Mikolaj Izdebski
1c82e912d1 koji: Install GSSAPI keytab also in staging 2025-07-04 18:24:59 +02:00
Nils Philippsen
6c85fda0c9 Mass remove/replace iad2 -> rdu3, 10.3. -> 10.16.
Signed-off-by: Nils Philippsen <nils@redhat.com>
2025-07-03 20:05:02 +02:00
Kevin Fenzi
ac8b3ec86f koji-hub: fix proxy principals
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-03 06:01:57 -07:00
Kevin Fenzi
0f27d8c100 riscv-koji: adjust sources
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-21 13:10:35 -07:00
Kevin Fenzi
1205bda981 riscv-koji: allow the overlay for now until it can be completely removed
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-20 22:29:23 -07:00
Kevin Fenzi
f2a5e7b6a4 koji: revert riscv channel config partly
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-13 11:30:26 -07:00
Kevin Fenzi
9f6b5bd7a7 riscv-koji: setup a generic channel for things that can go to x86 buildvm's
On riscv we don't want to do generic tasks that can be done on any arch
on riscv builders. We want those to go to the x86_64 builders that are
much faster.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-11 16:42:36 -07:00
Kevin Fenzi
79c78784ac koji-hub: only use seperate kojipkgs on primary not riscv
The riscv koji isn't using a seperate kojipkgs, so it's like staging and
should just serve repos/etc by itself.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-11 16:37:37 -07:00
Kevin Fenzi
6ba48207ba riscv-koji: allow normal tagging here for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-09 13:16:25 -07:00
Kevin Fenzi
e968d706e7 riscv-koji: drop secure-boot policies as they are not needed in the secondary koji
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-06-09 12:30:43 -07:00
Patrik Polakovič
d7ffb33621 Add tag policy for OpenH264
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
2025-05-19 22:08:33 +00:00
Samyak Jain
f8d06a6812 F40 is now EOL
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-05-13 14:58:24 +00:00
Simon de Vlieger
1e777285e6 koji: image-builder for production
Enables the `image-builder` plugin from `koji-image-builder` in the
production environment for both the koji hub, and the koji builder
(kojid).

This is based on the earlier enablement in staging where I've
succesfully tested some builds and it didn't seem to bring down all of
the staging instance.

Signed-off-by: Simon de Vlieger <supakeen@redhat.com>
2025-04-28 18:58:22 +00:00
Simon de Vlieger
9f15884401 koji: image-builder for staging
Enables the `image-builder` plugin from `koji-image-builder` in the
staging environment for both the koji hub, and the koji builder (kojid).

Signed-off-by: Simon de Vlieger <supakeen@redhat.com>
2025-04-23 23:53:51 +00:00
Kevin Fenzi
8c17500541 koji_hub: bump kojiweb limits to handle large events better
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-04-16 10:26:20 -07:00
Aurélien Bompard
d884a0f8ba Use the combined RabbitMQ CA cert in the clients
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00
Kevin Fenzi
22bc02930f koji_hub / koji-gc: add f42/f43 to koji-gc
We want to add these releases as they happen so that koji-gc can
properly clean up builds signed by those keys.
I filed https://pagure.io/infra-docs-fpo/pull-request/367 to also update
the branching sop to do this.

This commit adds f42/43 here.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 20:55:04 +00:00
Carl George
42b0fcb33c koji_hub: add EPEL 9 and 10 to the prune policy
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-02-26 01:49:27 +00:00
Adam Williamson
88b6f9b6f3 Clarify the Frozen variable
Per https://pagure.io/infra-docs-fpo/pull-request/361 there seems
to be substantial confusion about what the "Frozen" variable
means: does it refer to the infrastructure freeze, or a freeze
for the pending release? It seems like @kevin thought about it
as referring to the former, but the only practical use of it in
this repo treats it as the latter.

Let's make this clear with explicitly-named variables.
InfraFrozen tracks the infrastructure freeze, NextReleaseFrozen
tracks freezes for the pending release. We formerly had a var
called RelEngFrozen which had a similar meaning, but I like this
name more because the freeze doesn't apply to *all* releng
operations - just because the current Branched is frozen doesn't
mean Rawhide or stable releases are frozen.

We keep Frozen for 'backwards compatibility', in case anyone is
referring to this variable from outside of the repo.

This goes along with https://pagure.io/infra-docs-fpo/pull-request/361
which updates the SOPs.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-02-18 19:51:50 +00:00
Carl George
2e3eaabb1c Branch epel10.0 from epel10
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-02-18 16:26:40 +00:00
Michal Konecny
6b0a66cb37 [fedora-messaging] Adding topic_prefix back
Removing the topic_prefix from fedora messaging config files was a bit
premature. So let's put them back in place.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-14 12:40:12 +01:00
Michal Konecny
6428f8f772 Sunset github2fedmsg and fedmsg
This commit is removing all the fedmsg related stuff from ansible
repository.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-13 10:08:51 +00:00
Kevin Fenzi
5c4649a150 koji hub / riscv: fix AuthKeytab
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-02-11 11:19:56 -08:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
Samyak Jain
fd17adce36 Branch Fedora 42 from Rawhide
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-02-04 15:02:50 +00:00
Kevin Fenzi
3b211105c9 koji_hub: fix another keytab reference
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-02-03 16:09:48 -08:00
Kevin Fenzi
c6bf29af77 koji_hub: adjust web keytabs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-02-03 15:54:40 -08:00
Kevin Fenzi
a976c847aa koji_hub: setup keytabs for secondary risv-koji
We need some service keytabs here in order to allow people to auth
against the secondary riscv-koji hub.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-02-03 14:21:10 -08:00
Kevin Fenzi
3938bd35e2 koji: some more containerbuild removal cleanup
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-27 15:27:58 -08:00
Kevin Fenzi
8b0cce530a koji-hub: fix some mistaken logic in kojiweb config
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-27 15:02:10 -08:00
Kevin Fenzi
4e75154825 koji-hub: redo some keytab stuff to get riscv-koji happier
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-27 14:17:13 -08:00
Kevin Fenzi
d116ab3795 koji-hub: do not install secondary keytabs yet
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-27 11:46:19 -08:00
Kevin Fenzi
2fca720176 koji_hub: remove old shadow user
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-24 12:18:07 -08:00
Kevin Fenzi
2f2ba91754 koji_hub: fix another conditional that only had one =
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-24 12:03:05 -08:00
Kevin Fenzi
49d9f1bdd0 koji_hub: fix conditional that only had one =
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-24 11:50:55 -08:00
Kevin Fenzi
6675345f58 riscv-koji secondary hub
Here's a pull request to setup a secondary riscv-koji hub.

There are still outstanding issues, but things should be
good enough to merge and deploy the initial instance and
interate from there. Also I plan to run a --check --diff to make sure
there's no changes on primary hubs/etc.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-24 19:12:04 +00:00
Kevin Fenzi
8140d863f0 koji_builder: no longer install koji-containerbuild packages
These packages were used when we were building containers in OSBS, and
since we don't do that anymore, drop installing that anywhere.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-20 14:13:31 -08:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
Ryan Lerch
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
Ryan Lerch
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:26:47 +10:00
Ryan Lerch
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
Ryan Lerch
691adee6ee Fix name[casing] ansible-lint issues
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
Kevin Fenzi
ce608d9a64 koji_hub / kojira: expire dist repos after 7 days
We orig set this because we didn't want our infra repos to disappear
after a week. However, I think now koji keeps latest repos forever, it
is just the older ones that get expired. This should save a significat
amount of disk space.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-10 11:04:52 -08:00
Kevin Fenzi
95560f3064 koji_hub: add kiwiBuild to Tasks
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-12 14:04:02 -08:00
Kevin Fenzi
0091730a63 koji_hub: fix syntax failure
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-09 09:57:44 -08:00
Kevin Fenzi
ad7df8587e koji_hub: add a ci channel for ci jobs
ci jobs have been clogging up limited s390x builders, and we also don't
want them running on our ppc64le heavybuilder.

So, there is now a ci channel with all the builders except only 2 s390x
builders and not the ppc64le heavy builder one.

Will see how this helps and adjust it.
Only 2 s390x builders may unduly constrain ci, so we may need to
increase things there, but we can see if this works first.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-09 09:36:47 -08:00
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
Kevin Fenzi
0e2d1f8d53 koji_hub: move firefox to heavybuild for now
Until we can sort out https://pagure.io/fedora-infrastructure/issue/12297
lets just try and move firefox to the heavybuild channel.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-11-25 11:54:46 -08:00