WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-06-27 23:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity
38,288 Commits 9 Branches 0 Tags
47cf07184e0df3c53098067485b625db89fefa2e
Commit Graph

7897 Commits

Author SHA1 Message Date
Kevin Fenzi
47cf07184e wildcard-2023.fedoraproject.org: new wildcard ssl cert 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-01-11 08:48:40 -08:00
Kevin Fenzi
4b262d7ada apps.ocp.stg new certs for 2023 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-01-08 18:26:33 -08:00
Kevin Fenzi
31f11df469 koschei: increase timeout from 30s to 180s to allow loading larger queries 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-01-08 11:12:00 -08:00
Stephen Smoogen
69ba9efed8 Move to using new certs for fedorapeople 
Get new certs per instructions
Put new certs in ansible_private from letsencrypt
Change the cert name in configs to 2023 to show different from 2017 one.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
 2023-01-05 12:50:34 -05:00
David Kirwan
b33aa64cde fas2discourse: Create playbook/role 
Create task to generate keytab
 2022-12-21 10:09:54 +09:00
Kevin Fenzi
5ca2b2eb36 os.fedoraproject.org / app.os.fedoraproject.org: remove more old openshift 3.11 cluster stuff 
It may be that having this on some of the proxies is causing problems
because it's trying to ping the old openshift 3.11 cluster and filling
up apache slots with it. We do not need this stuff anymore, so remove
it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-16 10:15:27 -08:00
David Kirwan
e4b47ff35c communishift: testing venv workaround for dependency issues 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2022-12-15 15:36:35 +09:00
David Kirwan
2378c9cf35 communishift: testing venv workaround for dependency issues 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2022-12-15 15:21:59 +09:00
Dusty Mabe
caf71e42b7 openshift-apps: remove build step from a few apps 
Everytime we run the playbook a new build kicks off, but
the app was just restarted. So what happens is we end up
with the app getting started twice (once when the
deploymentconfig gets updated and once when the build finishes).
This could be bad if the app has some startup steps that need
to not be interrupted.

Let's just manually trigger builds since we have the permissions
to do that in the web interface and via the CLI.
 2022-12-14 15:29:04 -05:00
Michal Konečný
222d670bf0 [mdapi] Add t0xic0der to appowners 
https://pagure.io/fedora-infrastructure/issue/11053

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
 2022-12-14 10:43:32 +01:00
Francois Andrieu
bd4c0ae2a1 websites: add missing deployment 2022-12-09 01:31:27 +01:00
Francois Andrieu
dc0dcb3db9 websites: s3 creds will be manually fetched 2022-12-09 00:14:44 +00:00
Francois Andrieu
5b5edd11eb websites: new main website deployment on stg 2022-12-09 00:14:44 +00:00
Kevin Fenzi
5a1289069c add communishift-fedora-review-service app 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-08 15:11:34 -08:00
Dusty Mabe
8d70d287ca fedora-coreos-pipeline: add Adam Piasecki (c4rt0) drop some others 
The few we're dropping are either inactive or have moved on.
 2022-12-06 09:59:24 -05:00
Kevin Fenzi
147459b7b0 proxies_stg: disable zabbix for now as it is not installable 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-05 14:26:25 -08:00
Francois Andrieu
9000dd6def docs: remove docs-old 2022-12-05 22:08:18 +00:00
Pavel Raiskup
2667ac065f inventory/copr: drop unused hosts/vars 
The non-aws variant is not used for a looong time.  It just confuses
contributors now.  The stg is not used either.
 2022-12-04 15:02:29 +01:00
Kevin Fenzi
70530bf832 proxies: drop some old openshift3 things 
fas, openshift kerneltest and the old openshift console/api are no more.
Remove them now to fix up reverseproxy templates.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-12-03 20:47:00 -08:00
Pavel Raiskup
e21db9be97 copr-dist-git: typo in the restart_services.yml import 2022-11-29 17:54:00 +01:00
Kevin Fenzi
b1b0923af0 openshift 3.11: raise a glass! 
Our openshift 3.11 cluster(s) served us long and well.

Now we have everything finally moved to the openshift 4 clusters (fas2
was the last holdout). We can finally retire this. :)

🎉🥂

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-28 13:08:01 -08:00
Adam Williamson
6aa77e9423 openqa: try and fix on-disk encryption stuff 
Some of the openqa workers are encrypted and some aren't (this is a bit of a
mess that's partly a result of all the redeployments we did around
https://bugzilla.redhat.com/show_bug.cgi?id=2009585 ). We should only run
the nbde_client role on workers which are encrypted. Hopefully this gets that
right.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2022-11-25 16:10:11 -08:00
Jakub Kadlcik
44d826078b copr: move user creation back to copr/keygen role 2022-11-22 10:13:40 +01:00
Jakub Kadlcik
32b72e13dd copr: hmm, I guess those comments needs to be under tasks 2022-11-22 04:19:22 +01:00
Jakub Kadlcik
076777af9f copr: trying to fix a syntax error 2022-11-22 04:12:44 +01:00
Jakub Kadlcik
067f4e7998 copr: that was probably a wrong place to create users 2022-11-22 04:07:00 +01:00
Jakub Kadlcik
1d58562bfa copr: pre-create users and groups with specifics UIDs and GIDs 2022-11-22 04:00:10 +01:00
Aurélien Bompard
6871f63bdf Register FMN with IPA 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-21 12:21:40 +01:00
Aurélien Bompard
a060cef52e FMN: add a keytab for FASJSON access 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-21 10:56:42 +01:00
Aurélien Bompard
2b53f7bd03 Don't use the rabbit/queue role for vhost-specific queues 
There are naming constraints on those queues and we don't want them.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-21 10:40:10 +01:00
Aurélien Bompard
c8c4dfe72c FMN: setup the fmn vhost in rabbitmq 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-21 10:30:43 +01:00
Aurélien Bompard
5afe93f783 FMN: create the RabbitMQ user 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-21 09:49:19 +01:00
Jakub Kadlcik
6959217b11 copr: explicitly import handlers 
See 36a976c5ef
 2022-11-19 18:31:08 +01:00
Jakub Kadlcik
6dd20a81b3 copr: apply nagios_client role before any copr roles for all servers 2022-11-19 14:55:21 +01:00
Jakub Kadlcik
d596f825c4 copr: apply nagios_client role before any copr roles 
Otherwise we fail in our Copr specific configuration

TASK [copr/base : install nrpe checks]
fatal: [copr-fe-dev.aws.fedoraproject.org]: FAILED! => {"changed": false, "checksum": "0795e7c4f6bbb7974ea9bf74a81ba7cde5177fdd", "msg": "Destination directory /etc/nrpe.d does not exist"}
 2022-11-19 14:47:51 +01:00
Timothée Ravier
95eaf4f2f1 playbooks/openshift-apps/silverblue: Minor whitespace fix 2022-11-19 02:23:49 +00:00
Timothée Ravier
0acae10155 playbooks/openshift-apps/silverblue: Add siosm & tpopela 
Give @siosm and @tpopela access to the Silverblue website deployment.
 2022-11-19 02:23:49 +00:00
Kevin Fenzi
310ddb9b36 greenwave: rabbitmq queue no longer needed 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-18 13:10:36 -08:00
Timothée Ravier
7da090f98e playbooks/openshift-apps/coreos-cincinnati: Fix yamllint warnings 2022-11-18 19:46:24 +00:00
Timothée Ravier
c41faa09b7 playbooks/openshift-apps/coreos-cincinnati: Add siosm to owners 
Add @siosm to appowners for the Fedora CoreOS cincinnati project.
 2022-11-18 19:46:24 +00:00
Jakub Kadlcik
36a976c5ef copr: explicitly import handlers for copr-frontend.yml 
Trying to solve this issue

    TASK [Mount swap]
    ERROR! The requested handler 'restart swap.swap' was not found in
    either the main handlers list nor in the listening handlers list
 2022-11-18 18:29:25 +01:00
Aurélien Bompard
b03a8c6a93 First attempt at a FMN deployment in staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-18 11:40:00 +01:00
Pavel Raiskup
86a787200b storinator: drop copr-dist-git* volumes, enlarge copr-be 2022-11-11 14:16:29 +01:00
Kevin Fenzi
27e99835e5 Fix target of calendar redirect 
Turns out that target has to be a url or apache barfs on it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-11-02 17:33:22 -07:00
Seddik Alaoui Ismaili
8d703f7a53 redirect fedora calendar app 2022-11-02 19:40:58 +00:00
Mark O Brien
1b91f2410e remove bad communishift project name 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-11-02 12:40:02 +00:00
Mark O Brien
e5972671c8 add bad communishift project name for testing 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-11-02 11:33:03 +00:00
Francois Andrieu
fc75c07ef4 proxies: remove cloud-to-atomic redirect 2022-10-31 01:16:53 +01:00
Kevin Fenzi
1282c45a97 communishift: add mattdm project ( ticket 10935 ) 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-10-27 15:27:31 -07:00
David Kirwan
0f2e641d48 CentOS-CI: Manual playbook for creation of CentOS CI keytabs 
Signed-off-by: David Kirwan <dkirwan@redhat.com>
 2022-10-25 12:13:19 +01:00