WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-25 11:00:32 +08:00
Code Issues Packages Projects Releases Wiki Activity
33,719 Commits 9 Branches 0 Tags
0f79ff17ec6eb537eb03ffd4123f2ea4effcfd07
Commit Graph

33719 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Pierre-Yves Chibon
0f79ff17ec test commit - final mirror testing 2021-01-12 21:32:09 +01:00
Kevin Fenzi
8588cbc3c6 yet another whitespace change 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-12 12:27:31 -08:00
Kevin Fenzi
9f87c10546 Revert "whitespace change to test syncing" 
This reverts commit d6aed4704e.
 2021-01-12 12:21:01 -08:00
Kevin Fenzi
d6aed4704e whitespace change to test syncing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-12 12:19:38 -08:00
Kevin Fenzi
46964671a9 Rename master.yml to main.yml 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-12 09:11:33 -08:00
Nils Philippsen
38d5a0d9a4 Configure HBAC rules for IPA clients 
- Install a cluster-wide rule allowing sysadmin-main members to do
  anything, anywhere
- Disable the cluster-wide default `allow_all` rule
- Add host-based rules to give certain groups shell access

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-01-12 17:06:39 +00:00
Nils Philippsen
0f892f559b Fix and improve IPA client enrollment 
- Ensure the `freeipa-client` package is installed
- Configure systems to create home directories on the fly
- Tag enrollment task

Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-01-12 17:06:39 +00:00
Nils Philippsen
d530dfb078 Add missing ansible-freeipa package for CI 
Signed-off-by: Nils Philippsen <nils@redhat.com>
 2021-01-12 17:06:39 +00:00
Kevin Fenzi
59717b009d fedmsg / irc / fm-releng: only show pungi.status.change, not pungi.start/stop 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-11 16:47:56 -08:00
Mattia Verga
166ec42f7e bodhi: bugs in changelog should not be added to ELN updates 
Signed-off-by: Mattia Verga <mattia.verga@protonmail.com>
 2021-01-12 00:07:43 +00:00
Kevin Fenzi
e0f71dc6e2 fedmsg / irc / fm-releng: adjust to not show new repos requests 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-11 15:54:43 -08:00
Kevin Fenzi
70d84a4686 fedmsg / irc / #fedora-releng: try and rework fm-releng to be more picky 
In https://pagure.io/releng/issue/9778 we are asked to reduce noise in
this is confusing to me and likely I still got it wrong. ;)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-11 14:22:39 -08:00
Kevin Fenzi
438375f518 registry / logrotate: replace the rsyslog file, not syslog 
We use rsyslog, the syslog file has no effect.
If we overrite rsyslog we get the effect we want (daily logrotate with
xz compression).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-11 11:26:52 -08:00
Pavel Raiskup
affd5a1524 copr: backend: redirect backend.log to backend.log.gz when not found 2021-01-11 20:12:26 +01:00
Pavel Raiskup
a69f354186 copr: backend: fix non-existing *log.gz content-encoding header 
Fixes: https://pagure.io/copr/copr/issue/1176
 2021-01-11 19:51:50 +01:00
Pierre-Yves Chibon
3960dd182f distgit/pagure: make 'rawhide' be the default branch created when a repo is created 
This will only take effect once pagure 5.12+ is deployed

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-11 17:35:55 +01:00
Pavel Raiskup
c2f9f58813 copr-backend: unify dev/prod lighttpd configuration 
By syncing the devel instance with production (not vice versa).  The
exception is that I've dropped the trailing white-spaces in production
config.
 2021-01-10 21:37:15 +01:00
Kevin Fenzi
9ef275491c copr / base: update root fowrard 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-08 16:27:33 -08:00
Pierre-Yves Chibon
75c5d77699 test commit - sorry for the noise, still 2021-01-08 21:04:20 +01:00
Pierre-Yves Chibon
2a9d069381 test commit - sorry for the noise, still 2021-01-08 21:04:18 +01:00
Pierre-Yves Chibon
5d18697e9c pagure: add a couple of tags 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-08 10:53:11 +01:00
Pierre-Yves Chibon
677e20cf5d pagure: install python3-pagure-messages on the host 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-08 10:38:51 +01:00
Pierre-Yves Chibon
467113e65d pagure: fix the path to the ssl cert in the stunnel config 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-08 10:29:46 +01:00
Pierre-Yves Chibon
2a082a2912 test commit - sorry for the noise 2021-01-08 10:03:27 +01:00
Pierre-Yves Chibon
bae8e9a677 test commit - sorry for the noise 2021-01-08 10:00:47 +01:00
Pierre-Yves Chibon
78ecdfe13d pagure: the hotfix to the stream server needs to restart the pagure_ev service, not httpd 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-08 09:58:07 +01:00
Pierre-Yves Chibon
7142c188a0 pagure: hotfix the stream server with the py3-only version 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-08 09:56:39 +01:00
Kevin Fenzi
af302f46e0 rabbitmq / centos-odcs: more adjustments to user creation 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-07 15:59:53 -08:00
Kevin Fenzi
88cae583c6 rabbitmq / centos-odcs: specify correct vhost 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-07 15:56:22 -08:00
Kevin Fenzi
c60c1fbaf8 rabbitmq / centos-odcs: we need a centos-odcs user 
This was hidden away in the odcs playbook in fedora infra, so I missed
that we didn't make it in the odcs role, which is where we copied the
things for the centos odcs application. So, add it in there so it makes
a centos-odcs user.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-07 15:45:09 -08:00
Kevin Fenzi
b76dd79a6c bodhi / pungi: disallow pkg reuse in updates pungi runs 
This should prevent a recent issue where a unsigned package managed to
get synced out. The package was mistagged, was fixed, but then it's
cached signed copies had been garbage collected. This caused the push to
fail, but then the resumed one didn't regather the signed version of
that package, and instead just reused the unsigned one.
Setting this should prevent pungi from doing any package reuse here,
which is fine as updates don't reuse packages.
See https://pagure.io/pungi/issue/1480 for more information.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-07 10:53:54 -08:00
Pierre-Yves Chibon
e566318411 toddlers: and move back to building from the debug branch 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-07 09:50:45 +01:00
Kevin Fenzi
765e526a83 proxies / mirrormanager / download redirect: fix https/http mixing 
Fixes https://pagure.io/fedora-infrastructure/issue/9564

download.fedoraproject.org queries mirrormanager for a redirect to a
mirror for the path/request. Before we were just taking any mirror that
mirrormanager had, if it was http or https. This caused requests that
were sent in as https to get a http mirror and error out. So, now we
just redirect http ones to http mirrors and https requests to https
mirrors.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-06 15:51:08 -08:00
Kevin Fenzi
57a7a855b6 pagure / staging: increase disk to 50G 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-06 12:58:31 -08:00
Mohan Boddu
b05f8e93f6 Attempt 2: Update epel-release-latest-<rel>.noarch.rpm on /pub/epel 
Use the relative path to symlink and only use x86_64/ dir for symlinking

This reverts commit 297a736e80.
 2021-01-06 17:50:29 +00:00
Mohan Boddu
bd0219f65f fedora-comps default branch is set to main 
Signed-off-by: Mohan Boddu <mboddu@bhujji.com>
 2021-01-06 17:25:11 +00:00
Pierre-Yves Chibon
15968c2909 toddlers: move back to build from the production branch 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-06 18:21:21 +01:00
Pierre-Yves Chibon
69e11c43da toddlers: move back to build from the debug branch 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-06 18:00:26 +01:00
Pavel Raiskup
d568d3e656 Revert "copr-hypervisor: drop openvpn client role" 2021-01-06 14:22:29 +01:00
Pavel Raiskup
2f5199716c copr-hypervisor: typo in script name 2021-01-06 10:04:24 +01:00
Pavel Raiskup
64be3c6096 copr-hypervisor: drop openvpn client role 
I think we don't need to use openvpn.  It was inherited from
playbooks/groups/retrace.yml where the role was added by
commit 1cf024e37f.
 2021-01-06 10:03:32 +01:00
Mattia Verga
638fec9de7 bodhi: override dnf tsflags when installing docs 
Signed-off-by: Mattia Verga <mattia.verga@protonmail.com>
 2021-01-05 23:33:18 +00:00
Francois Andrieu
0bfc8b728d logview: add header, extract play run date from path for easier filtering with -d option 2021-01-05 23:34:01 +01:00
Francois Andrieu
5e91005e93 logview: migrate optparse to argparse, add additional date filtering capabilities, and some pep8 fixes 2021-01-05 23:34:01 +01:00
Francois Andrieu
88b07454b7 logdetail: resolve variable in task name 
Signed-off-by: Francois Andrieu <darknao@fedoraproject.org>
 2021-01-05 23:34:01 +01:00
Francois Andrieu
80f3f3b574 logview: playbooks stats, tabular display, improve date filtering and some more 
Signed-off-by: Francois Andrieu <darknao@fedoraproject.org>
 2021-01-05 23:34:01 +01:00
Francois Andrieu
6d1d72ee20 logview: reformat output 
Signed-off-by: Francois Andrieu <darknao@fedoraproject.org>
 2021-01-05 23:34:01 +01:00
Francois Andrieu
71c8cedc00 logview: add an option to list all playbook ever run 
Signed-off-by: Francois Andrieu <darknao@fedoraproject.org>
 2021-01-05 23:34:01 +01:00
Francois Andrieu
84f9b4aed3 logview: hosts filtering 
Signed-off-by: Francois Andrieu <darknao@fedoraproject.org>
 2021-01-05 23:34:01 +01:00
Francois Andrieu
aca152fe74 logview: add log_path parameter 
Signed-off-by: Francois Andrieu <darknao@fedoraproject.org>
 2021-01-05 23:34:01 +01:00