Commit Graph

134 Commits

Author SHA1 Message Date
Aurélien Bompard
1e56a66d34 Lower the DB connection recycling time in Dist-Git
Fixes: https://forge.fedoraproject.org/infra/tickets/issues/13099

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-02-17 13:07:51 +01:00
Kevin Fenzi
a754144f19 Update infra pagure.io links to forge.fp.o (WIP)
This should update all the references we have to
https://pagure.io/fedora-infrastructure to the
new https://forge.fedoraproject.org/infra/tickets/ area.

Do not merge this before the migration on tuesday.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-20 14:39:40 -08:00
Kevin Fenzi
d00ef11307 Save pingou's email box
We should not flood his mailbox anymore.

I set it to go to admin@fedoraproject.org, but if it's too much for
everyone we could just set it to nobody, or adjust it so it doesn't send
so many, or something else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-19 22:25:57 +00:00
Aurélien Bompard
ba0393fece Deploy a patch in distgit to fix Infra ticket 12622
See: https://pagure.io/fedora-infrastructure/issue/12622
Patch sent upstream: https://pagure.io/pagure/pull-request/5529

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-08-06 17:04:00 +02:00
James Antill
89aa66ca33 pagure: Add new SSH keys data to the config.
Signed-off-by: James Antill <james@and.org>
2025-07-08 17:10:32 -04:00
James Antill
ec5be36747 distgit: Add a mini docs comment for IP_ALLOWED_INTERNAL, just in case.
Signed-off-by: James Antill <james@and.org>
2025-07-02 23:35:35 -04:00
James Antill
8885a76136 distgit: Change iad2 to rdu3 IPs for distgit.
Signed-off-by: James Antill <james@and.org>
2025-07-02 23:25:05 -04:00
Michal Konecny
3abba00b2a [distgit] Enable commit ACLs for admin tokens
To enable retirement of rawhide branch for EPEL only packages (see
https://pagure.io/fedora-infra/toddlers/issue/151 for more info) I need
to enable `commit` ACL on dist-git (see
https://docs.pagure.org/pagure/usage/http_push.html for more info).
2025-05-12 12:29:02 +00:00
Aurélien Bompard
311f9c009a Use OIDC in Dist-Git
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-11 11:33:38 +01:00
Aurélien Bompard
fcad3efdfd Dist-Git: adjust for OIDC changes
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-11-14 08:02:08 +01:00
Aurélien Bompard
901c843706 Prepare dist-git for OIDC
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-11-13 09:53:50 +01:00
Lenka Segura
c7b8abd284 Add group_modify into ACLS dist
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2024-10-09 11:38:56 +02:00
Lenka Segura
43a8132ec2 distgit: Add group_modify ACL to distgit token
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2024-10-02 11:20:15 +02:00
Kevin Fenzi
c4024c4aa4 pdc: fare thee well!
This commit retires pdc from ansible.
The website should get redirected to a wiki page about the retirement.
If for some reason we need to bring things back, the vm's will still
have their disks and xml saved off so we can bring it back.
Would need to revert this, run proxy playbooks and do a little cleanup
on the redirect, then bring the vm's back up.
Hopefully we don't have to.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-02 13:39:15 -07:00
Kevin Fenzi
7d7f8c51ad pagure: roll out pull request acl update to prod
See: https://pagure.io/fedora-infra/ansible/pull-request/1825

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-02 11:15:07 -07:00
Kevin Fenzi
b7294036cc pagure / dist-git: add staging conditional for testing
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-27 15:33:46 -07:00
Maja Massarini
5e046c04a6 pagure: add descriptions for new available pull_request acls
Related with commit 1efcf8a90b
We need to update the acls table with their descriptions.

pagure/cli/admin.py update-acls

The above command can update the table and it looks for descriptions in the ACLS config variable.
2024-03-27 22:12:32 +00:00
Maja Massarini
1efcf8a90b Add pr update and rebase acls to user tokens
Packit needs this ACLs to be able to update PRs it has already created.
We are implementing this feature:
https://github.com/packit/packit/issues/2182

Packit needs this ACLs just in distgit.
2024-02-21 09:51:29 +01:00
amedvede
e88add7dd1 distgit: added CSP headers for staging
Signed-off-by: amedvede <amedvede@redhat.com>
2023-11-23 10:54:07 +01:00
amedvede
3fe6717504 feat: added bodhi to csp headers of distgit
Signed-off-by: amedvede <amedvede@redhat.com>
2023-11-20 10:14:04 +01:00
Kevin Fenzi
88596cb852 pagure-dist-git: more config to quash info/debug output on https push
We also have fedora-messaging spewing out on pushes, so lets set that
back to warning, and we also need to change the default pagure logging
root to WARN.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-17 12:55:24 -08:00
Kevin Fenzi
721d018ad6 pagure-dist-git: stop spewing INFO/DEBUG on https pushes
Right now when someone does a https push they get about 100 lines of
INFO and DEBUG from pagure. Everything from acls to messaging to pika to
everything. There's no need for all this debug/info spew.
Lets disable it and go back to just WARNINGS

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-01-17 12:33:45 -08:00
Kevin Fenzi
f183f5262b pagure-stg01 / ipsilon*.stg: split db passwords from stg and prod
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-19 13:53:15 -07:00
Kevin Fenzi
68141d381b resultsdb: drop old vm's and adjust other apps to new openshift url
Drop resultsdb vars and playbooks.
resultsdb is now in openshift and on a different url.
Adjust bodhi, pagure dist git for the new url.
Drop taskotron roles.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-21 14:01:28 -07:00
Sundeep Anand
88a5027744 Update roles/distgit/pagure/templates/pagure.cfg
Add Transtats link to CSP_HEADERS for Translation Status button to work.
2021-11-19 00:45:56 +00:00
Michal Konečný
98ea6b11fc distgit: Add pull_request_close ACL
Currently it's not possible to create token with pull_request_close ACL
for user (see https://pagure.io/pagure-dist-git/issue/144).

This commit will allow users to add pull_request_close ACL to their
token. The user is still validated if it has the permission, so adding
this ACL to user token doesn't allow user to use API to close any PR
currently opened in dist-git.

Thanks @pingou for helping me with this.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2021-08-11 15:22:42 +02:00
Lenka Segura
d654d59f3a Change FAS link from admin.fp.o to accounts.fp.o 2021-08-04 14:19:45 +00:00
Ryan Lerch
e8ceea85f1 distgit/pagure: change GIT_URL_SSH to use username
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2021-06-22 22:03:28 +10:00
Ryan Lerch
39b3f92abc distgit/pagure: remove the commit ACL for API keys in stg
This was removed in prod in d0a8837 but left around in stg for
testing purposes. However, it is suspected that this was causing
users to not be able to push to forks in distgit, so removing.

https://pagure.io/fedora-infrastructure/issue/10045

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2021-06-22 19:32:58 +10:00
Pierre-Yves Chibon
8b39d13364 pagure/dist-git: Adjust the IP list allowed on the internal endpoint - again
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-01 17:26:47 +01:00
Pierre-Yves Chibon
caa8b7054a pagure/dist-git: Adjust the IP list allowed on the internal endpoint
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-01 17:02:50 +01:00
Pierre-Yves Chibon
ac2c21ca4a distgit/pagure: in stg we'll use the git user now
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-01 16:17:57 +01:00
Pierre-Yves Chibon
218d692b85 dist-git/pagure: configure pagure to allow access via a single git user for everyone
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-03-01 13:21:25 +01:00
Pierre-Yves Chibon
d0a8837c07 distgit/pagure: remove the commit ACL for API keys in prod
This ACL turns out to be too confusing to users as it currently
does not work with our OIDC set-up with fedpkg.
Once we'll have figured out how to make both work together or
keep one and remove the other, we can revisit.

Keeping this in staging so we have a place where we can experiment
with this.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-02-18 09:26:48 +01:00
Pierre-Yves Chibon
b2b6bc8bcb distgit/pagure: make the short commit be 7 chars
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-02-15 14:59:27 +01:00
Neal Gompa
ff0a3beaff roles/distgit/pagure: Enable 'commit' ACL for API tokens
This permits users to create API tokens that have the ability to
commit to repositories through HTTPS. This is especially useful for
non-packagers that are trying to contribute through pull requests,
because they lack the normal packager SSH permissions.

Signed-off-by: Neal Gompa <ngompa13@gmail.com>
2021-02-04 08:35:19 +00:00
Pierre-Yves Chibon
8850720c2e distgit/pagure: send the logs to stderr instead of stdout
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-01-20 23:08:04 +01:00
Pierre-Yves Chibon
adce324050 distgit/pagure: Add the iad2 internal IP to the whitelist of IPs
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-06-06 21:03:53 +02:00
Pierre-Yves Chibon
0f7a6efc2b pagure and distgit/pagure: Drop the db-pagure hostname and populate the db used in the inventor host file instead
Basically, instead of relying on an obscure db-pagure variable that
then needs to be specified in the /etc/hosts file.
Just define the pagure_db_host variable in the host's inventory
file so it exists as a variable available in the playbook/role.
This makes things more explicit and easier to debug/tweak as needed.

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-05-26 14:08:01 +02:00
Pierre-Yves Chibon
850d3dc4b6 distgit/pagure: Add the tag_project ACL
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:28 +02:00
Pierre-Yves Chibon
a232c72149 distgit/pagure: Allow the html to connect to apps.fp.o and mdapi.fp.o
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:22 +02:00
Pierre-Yves Chibon
cae73d9dd9 distgit/pagure: move some configuration key to the shared config
- Use fedora-messaging everywhere instead of fedmsg
- Make setting: ALWAYS_FEDMSG_ON_COMMITS always true

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:20 +02:00
Pierre-Yves Chibon
30a7d4a19d disgit/pagure: moving mdapi from connect-src to script-src
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:17 +02:00
Pierre-Yves Chibon
38843d8631 distgit/pagure: allow to do ajax request to mdapi
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:17 +02:00
Julen Landa Alustiza
29942b36b2 distgit content-security-policy: allow connect to pdc.fp.o 2020-04-24 21:34:17 +02:00
Pierre-Yves Chibon
49f68f14d5 distgit/pagure: Allow the pull_request_flag ACL on cross-projects API tokens
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:17 +02:00
Pierre-Yves Chibon
ebddc53593 distgit/pagure: allow cross-project API tokens to merge PRs
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2020-04-24 21:34:09 +02:00
Julen Landa Alustiza
2de580306b dist-git: Custom csp policy that allows connecting to apps.fp.o 2020-04-24 21:34:09 +02:00
Pierre-Yves Chibon
84eebb9615 dist-git/pagure: Allow the update_watch_status ACL
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2019-06-05 11:29:36 +02:00
Pierre-Yves Chibon
527bf3a995 pagure/dist-git: allow user to change their watch status via the API
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2019-06-05 11:28:09 +02:00