WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-27 20:12:54 +08:00
Code Issues Packages Projects Releases Wiki Activity
41,859 Commits 9 Branches 0 Tags
12cac257fd98e6180dd75e7dc117dac7b6087bfb
Commit Graph

41859 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kevin Fenzi
12cac257fd Revert "mirrormanager: try adding ftpsync as supplementary group" 
This reverts commit 469dbff21b.
 2024-10-26 12:28:25 -07:00
Kevin Fenzi
3ee35749ab Revert "mirrormanager: for now, just try and using the anyuid ssc" 
This reverts commit 3437236664.
 2024-10-26 12:28:15 -07:00
Kevin Fenzi
3437236664 mirrormanager: for now, just try and using the anyuid ssc 
This is a bit more broad than we want, we only want to have:

  Supplemental Groups Strategy: RunAsAny
    Ranges:                                     <none>

but as a quick fix it should be ok I hope.
It does provide that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-10-26 12:13:37 -07:00
Kevin Fenzi
469dbff21b mirrormanager: try adding ftpsync as supplementary group 
Right now mirrormanage isn't able to update mirrorlists because we have
a pre bitflip release thats not open to it. It gets a perm denied and
just crashes.

We use this pattern already in coreos where they have to deal with
ftpsync owned content (although it's writing there, not reading).

See: https://github.com/fedora-infra/mirrormanager2/issues/407

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-10-26 11:35:55 -07:00
Paul Whalen
912cac3238 IoT: sign stable with f41 key 
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
 2024-10-25 15:04:23 -04:00
Samyak Jain
7e501dcb94 Fedora 41 is GO 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-10-25 23:17:53 +05:30
Jakub Kadlcik
a64d001446 copr: use SRPM for copr-ping from GitHub 
https://github.com/fedora-copr/copr/issues/3488
 2024-10-25 13:23:01 +02:00
David Kirwan
0df3922881 communishift: wip cleanup notifications debuggin 2024-10-24 15:41:03 +01:00
David Kirwan
7f110e01df communishift: wip debugging notifcation system cleanup 2024-10-24 15:32:31 +01:00
David Kirwan
339b3e0231 communishift: fix task syntax 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2024-10-24 14:01:26 +01:00
David Kirwan
8a30fc6118 communishift: wip cleanup and notifcation tasks 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2024-10-24 13:55:01 +01:00
Miroslav Suchý
b6e51f8c7b db.aws: try this 2024-10-23 18:38:22 +02:00
Miroslav Suchý
621345c81c db.aws: disable this for now 2024-10-23 18:37:47 +02:00
Miroslav Suchý
1477857a85 db.aws: try this 2024-10-23 18:33:07 +02:00
Miroslav Suchý
008454b6df db.aws: try this - add msuchy as root user 2024-10-23 18:29:20 +02:00
Miroslav Suchý
914a4dca67 db.aws: try this 2024-10-23 18:26:19 +02:00
Miroslav Suchý
66fcba5a8c db.aws: try this 2024-10-23 18:19:48 +02:00
Miroslav Suchý
457c3ffa60 db.aws: reload systemd-daemon 2024-10-23 18:14:35 +02:00
Miroslav Suchý
61f2e86764 second try to configure db.stg.aws 
This should be separate SQL server in AWS for instances in AWS.
First customer is planned fossology instance, and then maybe copr servers
 2024-10-23 16:19:49 +02:00
Miroslav Suchý
8abef95b45 first try to configure db.stg.aws 
This should be separate SQL server in AWS for instances in AWS.
First customer is planned fossology instance, and then maybe copr servers
 2024-10-23 15:58:57 +02:00
Jakub Kadlcik
b51caf37a6 copr: require subscription for rhel and epel chroots 2024-10-22 18:51:57 +02:00
Jakub Kadlcik
e2d28ea66b copr: oops, these were just for debugging 2024-10-22 18:34:12 +02:00
Jakub Kadlcik
1f55cc93f7 copr-be: use copr-builder-rhsm-subscribe-daemon to activate subscription 
See https://github.com/fedora-copr/copr/pull/3434
See https://github.com/fedora-copr/copr/pull/3426
 2024-10-22 15:39:59 +00:00
Ryan Lerch
e389d23f65 maubot-stg: remove deleteing DC from playbook 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2024-10-22 16:22:44 +10:00
Ryan Lerch
aef1669b96 maubot-stg: add objecttype to removeal of DC 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2024-10-22 16:17:20 +10:00
Ryan Lerch
0aa1e3725d maubot-stg: remove old deploymentconfig 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2024-10-22 16:12:25 +10:00
Ryan Lerch
d490d6acc6 maubot-stg: fix wront dfeployment filename 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2024-10-22 15:59:00 +10:00
Ryan Lerch
d8e2b9ca74 maubot-stg: try to use deployment over deploymentconfig 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2024-10-22 15:53:53 +10:00
Adam Piasecki
7d22991ac7 coreos-koji-tagger: Add Adam Piasecki to owners 
reason: monitoring and development.
 2024-10-21 13:48:42 +01:00
David Kirwan
307060801c communishift: marked projects not to be cleaned up by clean up script 
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
 2024-10-21 08:11:33 +01:00
Francois Andrieu
43aba64c0f languages: compute stats for F40 2024-10-20 21:38:20 +02:00
Aurélien Bompard
e9158e857a Bugzilla2fedmsg: prepare the caching configuration 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-10-18 16:33:13 +02:00
Michal Konecny
2803a028a6 [ipsilon_stg] Change the group that has access to sysadmin-noc 
We are currently not able to create a new group in ipa on staging. But to gain
access to @luhliarik to test https://pagure.io/fedora-infrastructure/issue/12092
let's use some existing group.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-10-18 13:06:38 +02:00
Pavel Raiskup
a3b2904a2a logdetective02: birthday no more 2024-10-17 14:42:08 +02:00
Pavel Raiskup
549eaa2834 logdetective02: mount data volume 2024-10-17 14:40:50 +02:00
Pavel Raiskup
29a7d1a4f1 logdetective: add missing handlers 2024-10-17 08:41:36 +02:00
Pavel Raiskup
e12ee56865 logdetective: move the playbook to groups/ 2024-10-17 08:10:58 +02:00
Kevin Fenzi
474207466b people: increase quota for ngompa. ticket#12244 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-10-16 15:18:13 -07:00
Jakub Kadlcik
f674dc1b29 copr: define copr_rhsm_activation_key and copr_rhsm_org_id 2024-10-16 23:34:09 +02:00
Justin W. Flory (he/him)
83360f5c91 📧 roles(fasjson): Create jww@ email alias for @jflory7 
This commit adds a new fedoraproject.org email alias for me, using my
new initials. The short story is that I am in the process of legally
changing my last name. Although the name change is still underway, I
want to prepare the infrastructure bits in advance so I can have a
graceful transition once the legal process is complete.

Signed-off-by: Justin W. Flory (he/him) <jwf@redhat.com>
 2024-10-16 21:02:45 +00:00
Aurélien Bompard
33c98f7467 Allow appowners to create pods in MirrorManager 
Ref: https://discussion.fedoraproject.org/t/openshift-permissions-for-appowners/133816

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-10-16 12:22:27 +02:00
Michal Konecny
7c3e93ce27 [ipsilon_stg] Add shell and sudo access groups 
This should help as solving access for @luhliarik to help resolve
https://pagure.io/fedora-infrastructure/issue/12092

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-10-16 10:08:01 +00:00
Michal Konecny
4cb4e55304 Update yamllint config to fix the CI errors 
Recently we started seeing CI failing on fi-ansible-lint-diff job, this update
to yamllint config should fix that. See
https://ansible.readthedocs.io/projects/lint/rules/yaml/#yamllint-configuration
for more information about the default yamllint config.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-10-16 11:33:41 +02:00
Kevin Fenzi
c01bff8ea1 We are in f41 final freeze 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-10-15 15:30:21 -07:00
Adam Williamson
95f385cf4d openqa: bump the load average threshold on p09 worker hosts 
They seem to be hitting this nonsense cap, bump it.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2024-10-15 13:17:24 -07:00
Adam Williamson
cb026b4120 openqa/worker: kill stuck qemu processes daily 
This is an awful hack to deal with
https://github.com/os-autoinst/os-autoinst/issues/2549 while we
try and fix it properly. This finds stuck qemu processes by
parsing the journal messages of the workers, and kills them.
workers stuck in the broken state should then recover on the
next checkin with the server. I tested this manually on all the
worker hosts and it...seemed to work, mostly. I'll keep an eye on
things after deploying it.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2024-10-15 13:13:42 -07:00
Kevin Fenzi
b288e65343 ocp4 sysadmin: update to drop folks not around anymore and add james 
james is going to poke around getting ACS working in staging, so add him
here. Drop some folks who are not really around anymore.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-10-15 12:27:03 -07:00
Samyak Jain
3f3e05721a Fedora 41 is in final freeze 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-10-15 15:13:51 +00:00
Pavel Raiskup
f3cca61957 logdetective: cleanup playbook (lint) 2024-10-15 16:21:08 +02:00
Pavel Raiskup
2ac3166624 logdetective02 is an EC2 host 2024-10-15 16:14:15 +02:00