Commit Graph

35021 Commits

Author SHA1 Message Date
Pavel Raiskup
07d2d46d96 copr-be: fix prod inventory for previous commit 2021-05-23 22:44:52 +02:00
Pavel Raiskup
3fdc635dd4 copr-be: simplify VM quota 2021-05-23 22:40:48 +02:00
Pavel Raiskup
07ac442116 copr-be: backend config tagged as provision_config
The provision limits/quota is directly reflected in copr-be.conf.
2021-05-23 22:08:23 +02:00
Pavel Raiskup
9b00f4b02a copr-be: centralize aws/spot/hypervisor config in inventory 2021-05-23 22:06:04 +02:00
Kevin Fenzi
54a29eaaa1 repo files: drop failovermethod=priority as it's not been used in years
Additionally, newer fedora complains about it being invalid.
It was used back in the yum days and never ported to dnf.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-23 11:07:35 -07:00
Kevin Fenzi
fd2a8ab38c staging-sync/koji: fix another nfs server case
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-23 10:52:37 -07:00
Kevin Fenzi
24def8cd00 staging-sync/koji: nfs is nfs-server now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-23 10:51:01 -07:00
Kevin Fenzi
52a197735b ipa/client: split out these groups
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-22 10:36:20 -07:00
Kevin Fenzi
1c6dfc82fd ipa/client: no comment in this jinja2 sadly, just make this a normal comment
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-22 10:26:50 -07:00
Kevin Fenzi
24ae7d3d16 ipa / client: rework the excluded local users from sssd
There's a real user 'mock' who we want to allow on ipsilon (so they can
login to anything) and people02 (so they can get to their people space),
but no where else, since we ened the local mock user on places like
builders, etc.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-21 12:51:32 -07:00
Francois Andrieu
d9fc78b0e4 nagios: remove MBSProducer check from mbs-backend 2021-05-21 18:58:14 +00:00
Francois Andrieu
9006cf784e nagios: remove unused check_datanommer_faf 2021-05-21 18:57:09 +00:00
Kevin Fenzi
1dc01d036e proxies: packages site is the same in prod and stg with an alias
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-21 11:11:35 -07:00
Brendan Early
e3484c5f3d packages-static: add proxy 2021-05-21 17:38:32 +00:00
Kevin Fenzi
fafa47de96 bodhi / backend: add url for repomd sync checking for epel8-next and epel8-next-testing
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-21 09:40:19 -07:00
Adam Williamson
176f1fa3cf openQA lab: bump os-autoinst scratch build
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2021-05-20 13:53:13 -07:00
Adam Williamson
6580fb89c0 openQA staging: use new openqa scratch build too
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2021-05-20 13:20:51 -07:00
Brendan Early
c9f5c11ba6 packages-static: correct port 2021-05-20 13:45:30 -05:00
Carl George
a2f14e982e bodhi2/backend: Add epel8-next to releases in new-updates-sync
Signed-off-by: Carl George <carl@george.computer>
2021-05-20 17:14:16 +00:00
Kevin Fenzi
61be8367c8 remove last vestiges of 2fa_client
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-19 18:29:52 -07:00
Frank Ch. Eigler
7185d7774e debuginfod redirect+proxy: combine into handcrafted httpd conf file 2021-05-20 00:42:32 +00:00
Adam Williamson
c9ee450c6a greenwave: specify exact versions for openQA gating policy
I was assuming Bodhi queried on "fedora-rawhide" for Rawhide
updates, but it seems it does not, it queries on "fedora-35" (or
whatever the release number is). We do not want to apply the
gating to Rawhide updates ATM, as openQA does not test them.
So unfortunately we'll need to hand-tend this list unless I can
think of a better approach.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2021-05-19 15:31:39 -07:00
Kevin Fenzi
535041fcdd robosignatory: add kinoite signing for rawhide
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-19 12:06:51 -07:00
Kevin Fenzi
d890a9fbf4 bugzilla2fedmsg: drop checks against vm as it has moved to openshift
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-19 12:00:49 -07:00
Adam Saleh
45cf6f92d1 Toddlers - add asaleh as owner and remove ref to staging, as it was never deployed there. 2021-05-19 18:21:59 +02:00
Aurélien Bompard
3381359876 Disable the VM version of bugzilla2fedmsg
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-05-19 17:35:28 +02:00
Pavel Raiskup
c95c641f1e copr-builder: run cleanup script after each builder release
Under root, so we can clean-up everything needed:

Fixes: https://pagure.io/copr/copr/issue/1258
2021-05-19 16:46:17 +02:00
Pavel Raiskup
0b6408df27 copr-be: implement livecheck for the hypervisor VMs, too 2021-05-19 16:40:50 +02:00
Aurélien Bompard
cc5436f6b0 Deploy the new bugzilla2fedmsg to openshift in prod
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-05-19 15:50:47 +02:00
Pavel Raiskup
0295b35a21 copr-dev: configure spot instances
And also add a configuration options for the s390x arch quota.
2021-05-19 14:19:46 +02:00
Pavel Raiskup
ee0a88df33 copr-be: terminate spot instances on shutdown
Per the following error:
fatal: [127.0.0.1]: FAILED! => {"changed": false, "msg": "instance_initiated_shutdown_behavior=stop is not supported for spot instances."}
2021-05-19 13:59:41 +02:00
Pavel Raiskup
30b8e21945 copr-be: spot instance spawning, #1 2021-05-19 13:28:37 +02:00
Brendan Early
52e2a301cc packages-static: update container port 2021-05-18 17:25:18 -05:00
Brendan Early
e9b1c3c53d packages-static: use unprivileged port on container 2021-05-18 21:54:39 +00:00
Brendan Early
8b203e5d85 packages-static: correct solr deploymentconfig 2021-05-18 21:54:39 +00:00
Kevin Fenzi
a6558b4b35 download: do not make a /mnt/koji/compose as it is handled by symlink later
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-18 13:56:54 -07:00
Brendan Early
decd358666 packages-static: have the init script mange solr config
openshift does not allow subdirectories in configmap volumes.
2021-05-18 20:54:16 +00:00
Kevin Fenzi
81b2cd2e9c download: adjust koji mount to allow odcs/eln images to work right
Right now odcs uses /mnt/koji for packages links, but uses
/mnt/fedora_koji/koji for images. Adjusting this and adding a link in
should fix it for both.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-18 13:33:37 -07:00
Brendan Early
9c1297a026 packages-static: make sure that solrconfig is applied properly 2021-05-18 20:28:52 +00:00
Tim Flink
488bb78ccd blockerbugs: upgrade prod to F33 2021-05-18 12:07:49 -06:00
Kevin Fenzi
e0662c5f2d rsyncd / download: adjust odcs to allow package rsyncs
odcs just links to the packages in a compose on the /mnt/koji volume
with relative symlinks. ie (
../../../../../../../../mnt/koji/packages/zip/3.0/28.eln109/data/signed/9867c58f/x86_64/zip-3.0-28.eln109.x86_64.rpm
)
Change odcs on download servers to mount on /mnt like koji and then tell
rsync to chroot at /mnt, so it can follow those links and copy the file
from koji volume.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 13:46:36 -07:00
Kevin Fenzi
f23fd1b7a1 totpcgi / 2fa: remove old totpci and files and roles.
Note: there are still some calls here in old fas in openshift, but we
will remove those when we remove old fas (likely as soon as zodbot is
ported over to noggin).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 13:00:56 -07:00
Kevin Fenzi
6ac5a89b14 playbooks / fedmsg: drop fedmsg/base from pkgs and releng-compose
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 12:30:42 -07:00
Kevin Fenzi
b3d2dc7d90 batcave: clean up old tasks
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 10:42:18 -07:00
Kevin Fenzi
1ee14dc2f4 batcave: install postgresql12 psql for client querys to db-datanommer
See ticket https://pagure.io/fedora-infrastructure/issue/9913

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 10:37:25 -07:00
Kevin Fenzi
1bbfd7f02f koji_hub: increase max_delete_processes from 4 to 20
This is the threads that are doing deletes of repos. Since we have so
many repos, lets increase the delete threads as well so it can hopefully
keep up.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 10:17:43 -07:00
Kevin Fenzi
421fbeff12 koji_hub: add fwupd-efi to secure boot channel.
See https://pagure.io/fedora-infrastructure/issue/9912

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 10:08:53 -07:00
Kevin Fenzi
3a26611841 haproxy: add ipa03 into the mix as a backup behind ipa02
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 09:55:58 -07:00
Kevin Fenzi
368bfaef01 haproxy: adjust content length for new text in 503 message
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 09:43:45 -07:00
Kevin Fenzi
80079bec37 503: adjust wording on the service not available doc
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 16:40:25 +00:00