WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-05 02:20:51 +08:00
Code Issues Packages Projects Releases Wiki Activity
43,966 Commits 9 Branches 0 Tags
04dcafe578f9cd6d98ad525529341b35f424ad4e
Commit Graph

43966 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kevin Fenzi
759ee55f18 bastion: fix delivering non contributors emails locally 
Should fix:
https://pagure.io/fedora-infrastructure/issue/12361

Basically postfix default is:
local_recipient_maps = proxy:unix:passwd.byname $alias_maps
so if the user is a local user or an alias, it's valid.
However, sssd and ipa show all users (even ones with no
access to that host). This means we were accepting and delivering
(locally) emails for anyuser@fedoraproject.org.

Setting this to just $alias_maps will just treat aliases as valid
and ignore all the local users. This should be fine as we use
aliases to send even to root or other system users.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-17 15:31:21 -08:00
Kevin Fenzi
96a5107afa registry: just test in staging for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-17 10:27:44 -08:00
Kevin Fenzi
719417e668 registry: handle stg redirect too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-17 10:18:24 -08:00
Mattia Verga
926b12b2a5 Move registry redirects rules to reverseproxy 2025-01-17 17:52:24 +00:00
Kevin Fenzi
351066d106 registry: add back sync for flatpak-indexes 
We had the flatpak indexes mixed in here with the registry page made by
reg. We need to keep this so we continue to sync flatpak deltas
correctly out.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-17 09:45:26 -08:00
Kevin Fenzi
51965498c1 proxies: drop registry sync cronjob 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-16 17:43:22 -08:00
Kevin Fenzi
b17c119bea btrfs: fix another handler case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-16 15:14:10 -08:00
Kevin Fenzi
d4523c609d koji_builder: fix another handler case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-16 15:06:57 -08:00
Kevin Fenzi
e196958322 base: fix another handler case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-16 14:52:49 -08:00
Kevin Fenzi
1e77199920 base: fix more handler renaming issues 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-16 14:44:00 -08:00
Timothée Ravier
1507d79814 bodhi2/pungi.rpm.conf: Don't build Atomic Desktops for PPC64LE (F42+) 
See: https://fedoraproject.org/wiki/Changes/AtomicDesktopsNoPpc64le
 2025-01-16 22:06:47 +00:00
Timothée Ravier
3f1c708217 bodhi2/pungi.rpm.conf: Simplify failable key to '*' 2025-01-16 22:06:47 +00:00
Timothée Ravier
a1802527a6 bodhi2/pungi.rpm.conf: Update now that F39 is EOL 
This condition is now always true.
 2025-01-16 22:06:47 +00:00
Mattia Verga
afaaf68b22 reg-server: stop serving outdated pages 
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
 2025-01-16 21:35:11 +00:00
James Antill
80aa4bbbc2 Initial version of iptables to nftables conversion. 2025-01-16 11:28:24 -05:00
Aurélien Bompard
f6b0cd0d48 Add collectd to the poddlers builder image 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-01-16 16:29:23 +01:00
Michal Konecny
809f6c45fd [release-monitoring] Narrow GitHub scopes 
We don't need anything else than e-mail and username to login user.
Let's narrow the scopes for GitHub to only user:email.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-01-16 14:33:00 +01:00
Michal Konecny
0716233b7a [proxies] Fix redirect for epel.io 
Fixes https://pagure.io/fedora-infrastructure/issue/12364

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-01-16 12:30:35 +01:00
Aurélien Bompard
bac0e1e18f Poddlers: add liveness and readiness monitoring 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-01-16 09:43:51 +01:00
Kevin Fenzi
6c38d7b61a various: fix some more shell variables that were accidentally converted to builtin.shell 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 17:26:50 -08:00
Kevin Fenzi
1f8751a00c xinetd: no change in case on xinetd restart 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 17:17:08 -08:00
Kevin Fenzi
1145fa67a6 rsyncd: fix notifier case 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 17:16:12 -08:00
Kevin Fenzi
d30b2ecfaa nagios_client: fix shell call to useradd 
This is a actual shell var, not a call to the ansible shell plugin.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 17:08:56 -08:00
Kevin Fenzi
13266214d2 ipa / handlers: Fix call to 'restart sssd' that is now 'Restart sssd' 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 16:36:11 -08:00
Justin W. Flory (he/him)
f5368a271c 🔧 proxies-redirects: Redirect parameter for docs.fp.o/dei/ redirect 
This commit enhances the redirect regex used for the docs.fp.o redirect
for the DEI Team documentation. I follow @kevin's example from the CPE
to CLE docs redirect, which uses a parameter and redirects a specific
page to the new address. Currently, the DEI Team docs redirect will take
the user to the main page of the team, regardless of what specific page
is visited.

I also added a `docs` tag to the CLE tags redirect, since it is a Fedora
Docs-specific redirect too.

Signed-off-by: Justin W. Flory (he/him) <jwf@redhat.com>
 2025-01-15 13:11:24 -05:00
Kevin Fenzi
b30121aee4 proxies / redirectmatch: redirect cpe to cle for docs ( https://pagure.io/cpe/docs/issue/35 ) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 09:29:10 -08:00
Pavel Raiskup
fda55f0dd9 copr-fe: fix the high-performance pattern for @secureblue 
https://github.com/fedora-copr/copr/issues/3331
 2025-01-15 12:52:05 +01:00
Ryan Lerch
a0cd459d47 Fix some references in tasks dropping .j2 
When fixing conflicts when merging the PR containing commit 47c68f4,
some of the .j2 suffuxes i added in tasks were erronounusly dropped.

this fixes those.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 19:44:59 +10:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template 
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 11:30:29 +10:00
Ryan Lerch
3c41882bb0 ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell 
Replaces references to shell: with ansible.builtin.shell

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 11:29:10 +10:00
Ryan Lerch
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package 
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 11:28:00 +10:00
Ryan Lerch
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command 
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 11:26:47 +10:00
Ryan Lerch
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy 
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file 
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 10:41:52 +10:00
Aurélien Bompard
f3517ab537 Escape jinja template chars when necessary 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-01-14 17:25:50 +01:00
Aurélien Bompard
4fe5bfd9e5 MirrorManager: add protoc to the builder image 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-01-14 17:03:47 +01:00
Ryan Lerch
691adee6ee Fix name[casing] ansible-lint issues 
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 20:20:07 +10:00
Kevin Fenzi
01030eaf26 staging: new wildcard cert 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-13 15:18:03 -08:00
Kevin Fenzi
8fa1e3de8c robosignatory: autosign f42 mass rebuild tag 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-13 15:01:00 -08:00
Ryan Lerch
67d200fa9e testdays - rename yml templates to .j2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 08:37:33 +10:00
Ryan Lerch
d8d6ee8809 blockerbugs - rename yml templates to .j2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 08:37:33 +10:00
Ryan Lerch
ec70f35b93 oraculum - rename yml templates to .j2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 08:37:33 +10:00
Ryan Lerch
851d07fa55 kanban - rename yml templates to .j2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 08:37:33 +10:00
Ryan Lerch
5bdfe4b1e5 copr and ipsilon - rename yml templates to .j2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 08:37:33 +10:00
Ryan Lerch
0a080ac582 bodhi - rename yml templates to .j2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 08:37:32 +10:00
Ryan Lerch
f1847426a4 bugzilla2fedmsg - rename yml templates to .j2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 08:37:32 +10:00
Ryan Lerch
1fe835dc3c composetracker - rename yml templates to .j2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 08:37:32 +10:00
Ryan Lerch
a8f85f4bb5 coreos - rename yml templates to .j2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 08:37:32 +10:00
Ryan Lerch
16e054eea7 datanommer/datagreppr - rename yml templates to .j2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 08:37:32 +10:00
Ryan Lerch
0caf7aaf2a discourse2fedmsg - rename yml templates to .j2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 08:37:32 +10:00