WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-26 03:23:08 +08:00
Code Issues Packages Projects Releases Wiki Activity
33,719 Commits 9 Branches 0 Tags
0f79ff17ec6eb537eb03ffd4123f2ea4effcfd07
Commit Graph

695 Commits

Author SHA1 Message Date
Pierre-Yves Chibon
3960dd182f distgit/pagure: make 'rawhide' be the default branch created when a repo is created 
This will only take effect once pagure 5.12+ is deployed

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2021-01-11 17:35:55 +01:00
Pierre-Yves Chibon
998c84baaa dist-git: add missing type 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 17:26:26 +01:00
Pierre-Yves Chibon
872090ee54 dist-git: some more selinux policy changes 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 17:24:55 +01:00
Pierre-Yves Chibon
d503f374db distgit: some more selinux policy update 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:51:51 +01:00
Pierre-Yves Chibon
3351fbd3b4 drop run_once when install selinux policies 
Otherwise the policy doesn't get installed everywhere...

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:48:42 +01:00
Pierre-Yves Chibon
74890814a1 distgit: adjust the selinux policy a little more 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:48:30 +01:00
Pierre-Yves Chibon
be1c8bcb45 distgit: keep working on the http_policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:56:37 +01:00
Pierre-Yves Chibon
f3a1c52522 distgit: ad missing instruction in the http_policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:53:18 +01:00
Pierre-Yves Chibon
f580d72f24 distgit: add the missing headers in the http_policy policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:49:30 +01:00
Pierre-Yves Chibon
1df7a7c0d3 distgit: add a selinux tag 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:38:09 +01:00
Pierre-Yves Chibon
1ef758c408 distgit: install another custom selinux policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:35:33 +01:00
Pierre-Yves Chibon
3f03400dac distgit: drop pagure related selinux config since it's now handled in the pagure role 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:27:27 +01:00
Pierre-Yves Chibon
a7e2a97fad distgit: drop selinux config from the distgit role as it is now in pagure role 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:24:18 +01:00
Pierre-Yves Chibon
0b3a2cc4a8 distgit/pagure: use symlink instead of complicated paths 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 15:58:58 +01:00
Pierre-Yves Chibon
618cbde6cc distgit/pagure: make the selinux files available to the distgit/pagure role 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 15:55:14 +01:00
Pierre-Yves Chibon
8890fb10a9 distgit/pagure: add missing '/' 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 15:50:20 +01:00
Pierre-Yves Chibon
77096060f6 distgit/pagure: Configure selinux in distgit just like on pagure.io 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 15:48:41 +01:00
Kevin Fenzi
d9e8f5951a distgit: correct path to pagure_sar.py script 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-10-02 09:27:38 -07:00
Pavel Raiskup
b7bdcacc3e distgit: fix chown in make-new-lookaside-links 
Followup for 9d9680cc73
 2020-08-19 13:24:58 +02:00
张皓
9d9680cc73 Fix syntax error in make-new-lookaside-links 
Fix syntax error in make-new-lookaside-links
 2020-08-19 10:08:56 +00:00
Pierre-Yves Chibon
69cd8056e1 distgit/pagure: update deprecated environment variable to the new one 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-08-07 09:59:21 +02:00
Pierre-Yves Chibon
4ceb0b2c1c distgit/pagure: Drop old code dealing with phx2 and py2 and rhel7 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-27 09:46:58 +02:00
Pierre-Yves Chibon
84f046eaba distgit/pagure: Drop 1755 in favor of spelled out permissions on /var/log/pagure 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-27 09:44:44 +02:00
Pierre-Yves Chibon
e6c0433e19 distgit/pagure: set the sticky bit on /var/log/pagure so the group membership remains 
The owner itself does not really matter, especially when considering the
section above where the pagure user is created in the packager group.

Fixes https://pagure.io/releng/issue/9623

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-24 11:24:28 +02:00
Pierre-Yves Chibon
43a68e2c57 distgit/pagure: another clean up of old cruft from another time (py2/rhel7) 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-23 13:15:24 +02:00
Pierre-Yves Chibon
745e7b04ce distgit/pagure: remove old cruft from another time (py2/rhel7) 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-23 13:14:19 +02:00
Pierre-Yves Chibon
5aa15e44e3 distgit/pagure: Do not allow packagers to create the 'master' branch if it does not exist in PDC 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-23 13:03:10 +02:00
Pierre-Yves Chibon
7c51566c36 distgit/pagure: Log auth-related into in a file on disk and create the place for it 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-23 12:59:20 +02:00
Pierre-Yves Chibon
19ad9380b0 dist-git: clean up the playbook for the left over phx2 sections 
Remove all the sections there were RHEL7/phx2/gitolite related
now that we're running on RHEL8 with python3 and all of its goodies

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-10 12:51:56 +00:00
Pierre-Yves Chibon
f2066c896d distgit: looks like the acl action does not support with_items, pity 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-16 20:56:31 +02:00
Pierre-Yves Chibon
9d4902f887 distgit: the configuration file does not support quotes and it doesn't find the file if there are some 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-16 20:53:39 +02:00
Pierre-Yves Chibon
b57fcaccf7 distgit: Add missing tag to a task 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-16 20:53:17 +02:00
Pierre-Yves Chibon
46b327807f distgit: turn on fedora-messaging notification and give apache access to the git hook cert and keys 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-15 13:56:38 +02:00
Pierre-Yves Chibon
891dcaac2b distgit: give access to the fedora-messaging certs to the packager group 
This solves the permission denied error packager would see otherwise
when pushing to dist-git as the hooks would fail to send notifications
on the fedora-messaging bus.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-10 10:06:13 +02:00
Pierre-Yves Chibon
be6153da0d distgit/pagure: there is no longer a gitolite_queue worker so don't put things in that queue 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-10 00:01:13 +02:00
Kevin Fenzi
0b64e5469a iad2: disable fedmsg on upload now until its ported 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-06-09 14:53:11 -07:00
Pierre-Yves Chibon
c05f210557 distgit/pagure: don't do fedmsg anymore 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-06 21:17:19 +02:00
Pierre-Yves Chibon
adce324050 distgit/pagure: Add the iad2 internal IP to the whitelist of IPs 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-06 21:03:53 +02:00
Pierre-Yves Chibon
aacd00cdc1 distgit: iad2 also runs rhel8 and thus python 3.6 so adjust the path to the static files 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-04 14:27:01 +02:00
Pierre-Yves Chibon
64773f2049 distgit/pagure: iad2 has the same rules as staging, python 3.6 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-04 14:11:50 +02:00
Pierre-Yves Chibon
4d2f3eb5ac distgit/pagure: flip httpd_can_network_connect on the host 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-27 16:37:29 +02:00
Pierre-Yves Chibon
5b4ba6cd8e distgit: install py3-grokmirror in staging/iad2 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-27 07:59:26 +02:00
Pierre-Yves Chibon
1dfa047cec distgit: python-grokmirror is now available on epel8-infra 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-26 22:42:53 +02:00
Pierre-Yves Chibon
0f7a6efc2b pagure and distgit/pagure: Drop the db-pagure hostname and populate the db used in the inventor host file instead 
Basically, instead of relying on an obscure db-pagure variable that
then needs to be specified in the /etc/hosts file.
Just define the pagure_db_host variable in the host's inventory
file so it exists as a variable available in the playbook/role.
This makes things more explicit and easier to debug/tweak as needed.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-26 14:08:01 +02:00
Pierre-Yves Chibon
e0ed6697f4 distgit: make the iad2 host closer to the current staging and different from phx2 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-25 23:10:15 +02:00
Pierre-Yves Chibon
2d1de54c89 distgit: Apply Kevin's fix to get the static files to show 
Basically, we have two places where we apply the rewrite rule
allowing to access static files either in pagure-dist-git
or in the regular pagure.
We had fixed the first one earlier and this commit fixes the
second one.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-23 21:30:32 +02:00
Pierre-Yves Chibon
da660c1852 distgit/pagure: pagure in staging runs with python 3.6 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-23 20:02:39 +02:00
Pierre-Yves Chibon
592e4749c1 distgit: create the pkgs.stg certs via letsencrypt 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-23 15:56:46 +02:00
Pierre-Yves Chibon
687230bfb8 distgit: turn off grokmirror for now in stg 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-23 15:08:51 +02:00
Pierre-Yves Chibon
3ad71fd2a0 distgit: Install mod_auth_openidc via modules in RHEL8 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-22 17:54:51 +02:00