WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-31 01:11:36 +08:00
Code Issues Packages Projects Releases Wiki Activity
28,322 Commits 9 Branches 0 Tags
2c4ec00cd30a05f322db3f3e7b62ee7e15d49176
Commit Graph

28322 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Mikolaj Izdebski
2c4ec00cd3 koschei: Try to remove some stringData from backend secret 2020-04-24 21:34:11 +02:00
Kevin Fenzi
b1d3cf582e pagure: Disable SSLv2, SSLv3, TLS1.0 and leave TLS1.1 and 1.2 enabled. (ticket 8231) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
a9c97618a1 rabbitmq_cluster: Switch how permissions are done and give admin all perms 
The way we were granting perms to admin was just on existing vhost/queues.
Instead we should just give admin full privs to any queues/vhosts that might
exist now or later.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
622170c679 Revert "Koschei: Skip creation of RabbitMQ queue" 
This reverts commit d8cb686c6ad2309f23e4b5651afb1cb53fe1876d.
 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
4cce745650 Koschei: Skip creation of RabbitMQ queue 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
131c81804b openshift-apps/koschei: Deploy in production 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
d455425d9f apps-fp-o: Update URLs for Koschei 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
809a936272 openshift-apps/koschei: Add vars for production 2020-04-24 21:34:11 +02:00
Miroslav Suchý
88aa3f9a44 copr: use correct device name 2020-04-24 21:34:11 +02:00
Mikolaj Izdebski
84716f4440 openshift-apps/koschei: Add to master.yml 2020-04-24 21:34:11 +02:00
Kevin Fenzi
e2523e235d mysqld backup: try adding ionice into things. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
e5f74d8566 kerneltest: fix conditional 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
a959dc063f secondary: update file lists every 2 hours as it's taking longer than an hour. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Adam Williamson
6d0949ba61 relvalconsumer: correct a conditional 
This led to Bugzilla submission being disabled on prod, it's
meant to be enabled.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
400a37df3a certgetter: use python3 for ansible. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
e13e8cef12 pagure / stunnel: set number of open files higher for pagure stunnel. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
b1aa859cbb pagure / stg: fix cert path 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:11 +02:00
Kevin Fenzi
55f447a465 pagure / staging: set letsencrypt proxy to allow for getting cert. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Jonathan Lebon
42335b7370 rabbitmq: add coreos queue 
This is needed for CoreOS-specific messages. See
https://pagure.io/fedora-infrastructure/issue/8227.

Reviewed-by: Aurelien Bompard <abompard@redhat.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
294348566d pagure / stg: get a cert for stg.pagure.io too. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
92c3e16b55 pagure: Fix stunnel config so it validates for ssl by using the intermediate cert with a bundle. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Miroslav Suchý
990f66391b copr: enable swap as partition on AWS 2020-04-24 21:34:10 +02:00
Chenxiong Qi
60d5bacd4f mts: workaround to trigger os automatically to create a new pod 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Chenxiong Qi
c87f75402e mts: add example rule to rule file 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Chenxiong Qi
dd14d05de6 mts: fix mts-rules.yml download url 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Miroslav Suchý
e94715317a add f31 to retrace 2020-04-24 21:34:10 +02:00
Chenxiong Qi
e3619522aa mts: add os_masters to hosts in order to run playbook on prod 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Chenxiong Qi
62cd4d7c36 mts: add app_version to client_properties 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Chenxiong Qi
66392498dc mts: run actually on stg to check messages sent from mts 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Chenxiong Qi
f5e1beaf33 mts: dry_run on stg 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Chenxiong Qi
08ee75499b mts: also bind to zmq.topic for MBS 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Chenxiong Qi
2ee277f6c2 mts: enable dry_run in prod 
Signed-off-by: Chenxiong Qi <cqi@redhat.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
421f758968 openshift / prod: finished updating, new shiny node certs and all. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
6c806d3bad openshift / prod: fix name of logging volume. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
af49942b12 oci-registry: use python3 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
3c8c62288c ftbfs: update to point to f31 and f31 tracking bug 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
ddc090d1d7 oci-candidate-registry01.stg: move to f30 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
9f27c267d9 compose-x86: update to reflect reality 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
aa2442a0b0 tang: Upgraded to f30 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
60316d1df9 openshift: oreg_auth_credentials_replace is always true now. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Rick Elrod
e0fab09b47 base: collapse second uuid getter 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
1f1fda4b3e certgetter: upgraded to f30 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Rick Elrod
618752a6d6 base: debug 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:10 +02:00
Rick Elrod
3440a4ace6 base: try not using dot accessor notation here? 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
cd22554d83 krb5: fix typo 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Adam Williamson
f9fc5f21eb relvalconsumer: create directory for config file to go in 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-04-24 21:34:10 +02:00
Adam Williamson
bf2b50d32c relvalconsumer: add template file I forgot in previous commit 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-04-24 21:34:10 +02:00
Adam Williamson
10eb5d20f2 relvalconsumer: handle reporting image size bugs to Bugzilla 
This relies on changes in relvalconsumer itself and relval.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
a518f49c7b base: rework the conditional for nmcli controlled ifcfg files to be more readable. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00
Kevin Fenzi
81fb4582e7 ansible: change when conditions to use == instead of is when checking strings. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2020-04-24 21:34:10 +02:00