WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-29 13:01:36 +08:00
Code Issues Packages Projects Releases Wiki Activity
42,595 Commits 9 Branches 0 Tags
42b0fcb33cef6d7329ddd93fe69e005d7978ca30
Commit Graph

42595 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Carl George
42b0fcb33c koji_hub: add EPEL 9 and 10 to the prune policy 
Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-02-26 01:49:27 +00:00
Carl George
092622b6bc bodhi2/backend: don't change epel-release-latest symlink if destination filename is the same 
https://pagure.io/epel/issue/318

Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-02-26 00:33:27 +00:00
Aurélien Bompard
d11b793965 tabs to spaces 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-25 09:19:44 +01:00
Aurélien Bompard
938471e9f1 The clean packagers groups toddler needs a different keytab 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-25 09:18:51 +01:00
Aurélien Bompard
097b8f9214 Give the clean packagers groups toddler access to the corresponding service's keytab 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-25 08:54:06 +01:00
Jiri Kyjovsky
1e8c7dcba9 copr: we now use dnf5 on copr, theres no need of dnf-plugins-core then 2025-02-24 13:56:45 +01:00
Jiri Kyjovsky
bb9dd04964 frontend: provide stg url for oidc metadata 2025-02-24 11:18:47 +01:00
Jiri Kyjovsky
da9a451e34 copr: feed oidc env variables to frontend 2025-02-24 00:48:29 +01:00
Adam Williamson
6102284c0d Reapply fixed "Don't hardcode the branched number in Bodhi compose repo config" 
This reverts commit 6d4c6b0be1, but
fixes the problem.
 2025-02-23 19:19:15 +00:00
Patrik Polakovič
d63afb09d8 Remove all mentions of monitor-gating 
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
 2025-02-20 11:07:20 +01:00
Kevin Fenzi
6d4c6b0be1 Revert "Don't hardcode the branched number in Bodhi compose repo config" 
This reverts commit 13a95660e4.

Templating is wonky here.
 2025-02-19 10:24:10 -08:00
Adam Williamson
13a95660e4 Don't hardcode the branched number in Bodhi compose repo config 
There's no need for this to be hardcoded and manually updated,
we can template it. Add some clarifying notes on what happens
when Branched doesn't exist, and why it doesn't matter that we
don't set a correct config for the Rawhide release.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-02-19 18:10:53 +00:00
Aurélien Bompard
a508708744 IPA: do the toddlers user setup before destroying the admin ticket 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-19 12:20:08 +01:00
Aurélien Bompard
b3c7a683e2 IPA: setup a toddlers service to remove users from groups 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-19 12:16:05 +01:00
Kevin Fenzi
860daa90a3 vars / frozen: quote variable 
ansible wants variables like this quoted.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-18 15:30:40 -08:00
Carl George
4aa261f704 bodhi2/backend: keep using branch name for fedora comps 
Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-02-18 17:22:55 -06:00
Carl George
89b5326271 bodhi2/backend: use major version only determine comps file name 
Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-02-18 17:02:10 -06:00
Adam Williamson
88b6f9b6f3 Clarify the Frozen variable 
Per https://pagure.io/infra-docs-fpo/pull-request/361 there seems
to be substantial confusion about what the "Frozen" variable
means: does it refer to the infrastructure freeze, or a freeze
for the pending release? It seems like @kevin thought about it
as referring to the former, but the only practical use of it in
this repo treats it as the latter.

Let's make this clear with explicitly-named variables.
InfraFrozen tracks the infrastructure freeze, NextReleaseFrozen
tracks freezes for the pending release. We formerly had a var
called RelEngFrozen which had a similar meaning, but I like this
name more because the freeze doesn't apply to *all* releng
operations - just because the current Branched is frozen doesn't
mean Rawhide or stable releases are frozen.

We keep Frozen for 'backwards compatibility', in case anyone is
referring to this variable from outside of the repo.

This goes along with https://pagure.io/infra-docs-fpo/pull-request/361
which updates the SOPs.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2025-02-18 19:51:50 +00:00
Carl George
2e3eaabb1c Branch epel10.0 from epel10 
Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-02-18 16:26:40 +00:00
Aurélien Bompard
a84201642d FMN: hash_key arg has been replaced by secret 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-18 16:03:44 +01:00
Samyak Jain
0a5f23be98 Set Frozen to true - infra and releng freeze 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-02-18 14:59:13 +00:00
Samyak Jain
8dd3b37966 Fedora 42 Bodhi enablement and Beta freeze 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-02-18 14:59:13 +00:00
Aurélien Bompard
2577b8fea6 Amend 7bc0f837 (rebase FMN to python 3.12 to get a newer nodejs) 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-18 15:35:08 +01:00
Aurélien Bompard
7bc0f83735 Rebase FMN on python 3.12 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-18 14:57:34 +01:00
Kevin Fenzi
401d40c098 compose-x86-riscv: adjust some nfs client logic 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 16:01:55 -08:00
Kevin Fenzi
3a2574b495 releng-compose: no ftp mount on compose-x86-riscv01 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 14:52:38 -08:00
Kevin Fenzi
4b0331e576 compose-x86-riscv01: set secondary koji instance 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 14:35:02 -08:00
Kevin Fenzi
5aaff87f87 compose-x86-riscv01: fix name thinkos 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 14:17:13 -08:00
Kevin Fenzi
f0663ae52f compose-riscv01: add a secondary x86 compose host for riscv 
This vm will hopefully allow for composing images, repos, etc

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 13:56:23 -08:00
Kevin Fenzi
4dc4029ad7 koji_hub: enable mod_wsgi role in prod as well 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 13:19:55 -08:00
Kevin Fenzi
72cc6a829a koji-hub / staging: fix typos 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 13:04:45 -08:00
Kevin Fenzi
5c492b87a1 koji_hub / staging: try and include mod_wsgi role 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 13:02:31 -08:00
Kevin Fenzi
0a986e4f7e nagios / registry: check registry via the actual registry instead of the web page 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 12:19:30 -08:00
Kevin Fenzi
8556f3aba5 proxies / registry: redirect https pages to quay.io 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-17 12:07:06 -08:00
James Antill
0405924e26 Add mod_wsgi.actions and libdnf plugin, to restart httpd. 
Signed-off-by: James Antill <james@and.org>
 2025-02-17 19:36:55 +00:00
Aurélien Bompard
fb4e2937a3 Badges: adjust the loop control vars in the build and rollout targets 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-17 14:41:50 +01:00
Aurélien Bompard
19c12af33d Badges: add skipped users, they're in the config now 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-02-17 13:58:33 +01:00
Kevin Fenzi
d3975febbe ipa/client: sssd drop in needs to be same permission as sssd.conf also 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-16 14:35:32 -08:00
Kevin Fenzi
258fa9fd14 ipa/client: sssd drop in needs to be owned by root, sssd changes it on restart 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-16 10:31:28 -08:00
Kevin Fenzi
47fcb90839 buildvm_aarch64_stg: set primary instance here too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-16 08:58:04 -08:00
Kevin Fenzi
f04ff347dd buildvm_s390x_stg: set primary instance here too 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-16 08:56:22 -08:00
Kevin Fenzi
de1fae51d8 osbuildapi-update: supress mention of duplicate ipts 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-14 16:58:28 -08:00
Kevin Fenzi
e7b50aaee4 osbuildapi-update: just keep adding to ipset 
It seems sso.redhat.com has a 20 second time to live, so it changes
often. However, it seems to only change the pool of ips from a small
(5-10) number. So, lets just add to the set so we allow any of the ips
we have seen. The set will grow, but if the pool is small it should
stablize to have all the ips in the pool.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-14 09:32:26 -08:00
Michal Konecny
6b0a66cb37 [fedora-messaging] Adding topic_prefix back 
Removing the topic_prefix from fedora messaging config files was a bit
premature. So let's put them back in place.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-02-14 12:40:12 +01:00
Jakub Kadlcik
e4e9f1ca3c copr-fe: use lower shared_buffers value on STG 
The instance has only 4G of RAM so PostgreSQL fails to start with:

    FATAL: could not map anonymous shared memory: Cannot allocate memory
 2025-02-14 12:28:47 +01:00
Michal Konecny
f63e839698 [nagios-server] Move the datanommer checks to noc01 
There were few fedora-messaging datanommer checks that were running on
busgateway01. As this machine is part of fedmsg it will be
decommissioned. Let's move the checks to noc01.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-02-14 09:45:39 +00:00
Jakub Kadlcik
2a51f32eaf dnf-automatic: create the drop-in file if it doesn't already exist 2025-02-14 10:35:48 +01:00
Jakub Kadlcik
fa9a8edeb0 dnf-automatic: create a drop-in for the Mon..Fri configuration 
See https://github.com/fedora-copr/copr/issues/3623#issuecomment-2656844947
 2025-02-14 09:22:21 +00:00
Diego Herrera
3602ac8f97 Change new parameter to work as a flag 
Signed-off-by: Diego Herrera <dherrera@redhat.com>
 2025-02-14 02:28:50 -03:00
Diego Herrera
45d4c31ebd Add branchingfrom argument for epel purposes, rawhide still default 
Signed-off-by: Diego Herrera <dherrera@redhat.com>
 2025-02-14 01:46:13 -03:00