Commit Graph

813 Commits

Author SHA1 Message Date
Aurélien Bompard
b80627f26a Add the publish_exchange to DistGit's fedora messaging config
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-02-12 17:13:22 +01:00
Kevin Fenzi
423f7c0c52 pagure / dist-git: drop hotfix that was pulled into rpm
We pulled this fix into the epel8 rpm we are using, so we shouldn't try
and apply it here also.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-31 08:18:00 -08:00
Greg Sutcliffe
460cd098d7 Zabbix: fix apache-status access on pkgs
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-27 18:03:36 +00:00
Kevin Fenzi
a754144f19 Update infra pagure.io links to forge.fp.o (WIP)
This should update all the references we have to
https://pagure.io/fedora-infrastructure to the
new https://forge.fedoraproject.org/infra/tickets/ area.

Do not merge this before the migration on tuesday.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-20 14:39:40 -08:00
Kevin Fenzi
d00ef11307 Save pingou's email box
We should not flood his mailbox anymore.

I set it to go to admin@fedoraproject.org, but if it's too much for
everyone we could just set it to nobody, or adjust it so it doesn't send
so many, or something else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-19 22:25:57 +00:00
Aurélien Bompard
56d7fd54da Add a patch to Pagure
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-01-12 16:25:47 +01:00
Kevin Fenzi
d9ea824473 pkgs01: sync apache values with what we have on pagure.io
This will increase some values to allow for handling
scrapers better. In any case it doesn't seem to hurt.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-06 10:10:35 -08:00
Anton Medvedev
8a26675cb4 ref: part of releng repo refactory affecting get_retired_packages.sh
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2025-10-06 16:15:11 +00:00
Diego Herrera
5499136832 distgit: only blacklist tag names that correspond to reserved branch names
Signed-off-by: Diego Herrera <dherrera@redhat.com>
2025-09-17 14:40:10 -03:00
Diego Herrera
129198918a distgit: blacklist git tag refs from being pushed to distgit
Signed-off-by: Diego Herrera <dherrera@redhat.com>
2025-09-17 14:40:10 -03:00
Lenka Segura
8177465025 distgit: hotfix for links to accounts.fpo
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2025-08-11 14:08:53 +02:00
Lenka Segura
ca10dca26a distgit: fix lint errors in distgit role
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2025-08-11 13:06:25 +02:00
Aurélien Bompard
ba0393fece Deploy a patch in distgit to fix Infra ticket 12622
See: https://pagure.io/fedora-infrastructure/issue/12622
Patch sent upstream: https://pagure.io/pagure/pull-request/5529

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-08-06 17:04:00 +02:00
Aurélien Bompard
be82a1ee19 Add a system to apply patches to Pagure's dist-git
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-22 09:54:40 +02:00
James Antill
23641d29ab distgit: Copy the rsyslog logrotate from copr.
Signed-off-by: James Antill <james@and.org>
2025-07-15 19:43:48 -04:00
James Antill
3ea2e91e4f pagure: Add a copy of rsyslog-logrotate where ansible can find it.
Signed-off-by: James Antill <james@and.org>
2025-07-08 18:20:09 -04:00
James Antill
dd4caad147 pagure: Update the tasks for logrotate.
Signed-off-by: James Antill <james@and.org>
2025-07-08 17:47:17 -04:00
James Antill
3c4184912e pagure: Use the basefile as we moved from syslog to rsyslog.
Signed-off-by: James Antill <james@and.org>
2025-07-08 17:13:51 -04:00
James Antill
89aa66ca33 pagure: Add new SSH keys data to the config.
Signed-off-by: James Antill <james@and.org>
2025-07-08 17:10:32 -04:00
James Antill
2a76cdf5a9 distgit: Deploy fedora-messaging conf and certs.
Signed-off-by: James Antill <james@and.org>
2025-07-03 17:05:48 -04:00
James Antill
ec5be36747 distgit: Add a mini docs comment for IP_ALLOWED_INTERNAL, just in case.
Signed-off-by: James Antill <james@and.org>
2025-07-02 23:35:35 -04:00
James Antill
8885a76136 distgit: Change iad2 to rdu3 IPs for distgit.
Signed-off-by: James Antill <james@and.org>
2025-07-02 23:25:05 -04:00
James Antill
58e0695082 pkgs: use rhel9 python3 in rdu3 more.
Signed-off-by: James Antill <james@and.org>
2025-07-01 16:56:12 -04:00
Kevin Fenzi
f0638bc627 pkgs: use rhel9 python3 in rdu3 too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-01 11:13:48 -07:00
Aurélien Bompard
07bee7f2f4 Make distgit use its own RabbitMQ user
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-01 00:53:22 +02:00
Michal Konecny
7d94a911ae [pkgs] Fix the user creation task
append parameter needs to be used together with groups parameter. Let's
fix that.
2025-06-26 17:44:01 +00:00
Kevin Fenzi
07c894ea21 pkgs: drop recursive call to facl setting
In a0046b5b4b there was a bunch of fixes for ansible lint to the
distgit/pagure roles.

However, it seems like a
recursive: true
was added to the facl call, when it wasn't present before.

I noticed this when my playbook run on pkgs was running for several
hours. ;(

I don't think there's any reason to run this recursively,
as permissions should inherit from the top level one and have always
worked without it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-05-29 15:28:21 -07:00
Michal Konecny
3abba00b2a [distgit] Enable commit ACLs for admin tokens
To enable retirement of rawhide branch for EPEL only packages (see
https://pagure.io/fedora-infra/toddlers/issue/151 for more info) I need
to enable `commit` ACL on dist-git (see
https://docs.pagure.org/pagure/usage/http_push.html for more info).
2025-05-12 12:29:02 +00:00
Michal Konecny
3d9bc5b494 [distgit] Fix the patch
The patch provided originally was made against the latest pagure code,
but we are not on the latest dev version. So I created the patch
directly for the source file deployed on src.stg.fedoraproject.org.
2025-04-30 15:09:25 +02:00
Michal Konecny
561d6b540d [distgit] Fix typo
Even with the CI this typo wasn't found till execution of the playbook.
2025-04-30 14:48:02 +02:00
Michal Konecny
5b0120cea9 [dist-git] Fix for api call token
There is a local fix on src.fedoraproject.org that is missing on
src.stg.fedoraproject.org. I provided the fix in
https://pagure.io/pagure/pull-request/5525 and this commit is adding it
as patch to ansible, so the change is permanent.
2025-04-30 12:36:11 +00:00
Michal Konecny
a0046b5b4b [distgit] Fixing ansible lint errors
This commit is fixing ansible lint errors for distgit role.

It also introduces two new addition to skip list as the structure of our
ansible repository doesn't adhere to ansible standards.

The errors that will be now skipped are:
- role-name[path] - we have plenty of roles that have sub-roles inside
  them and we need to access them
- var-naming[no-role-prefix] - variables for roles are not usually
  prefixed correctly in our repository and forcing people to change that
  will introduce more issues than what it solves
2025-04-30 10:07:35 +00:00
Aurélien Bompard
d884a0f8ba Use the combined RabbitMQ CA cert in the clients
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00
Michal Konecny
6b0a66cb37 [fedora-messaging] Adding topic_prefix back
Removing the topic_prefix from fedora messaging config files was a bit
premature. So let's put them back in place.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-14 12:40:12 +01:00
Diego Herrera
3602ac8f97 Change new parameter to work as a flag
Signed-off-by: Diego Herrera <dherrera@redhat.com>
2025-02-14 02:28:50 -03:00
Diego Herrera
45d4c31ebd Add branchingfrom argument for epel purposes, rawhide still default
Signed-off-by: Diego Herrera <dherrera@redhat.com>
2025-02-14 01:46:13 -03:00
Michal Konecny
6428f8f772 Sunset github2fedmsg and fedmsg
This commit is removing all the fedmsg related stuff from ansible
repository.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-13 10:08:51 +00:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
Ryan Lerch
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
Ryan Lerch
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:26:47 +10:00
Ryan Lerch
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
Ryan Lerch
691adee6ee Fix name[casing] ansible-lint issues
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
Aurélien Bompard
183f4ff7a4 Distgit: missing dependency
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-11 11:51:03 +01:00
Aurélien Bompard
311f9c009a Use OIDC in Dist-Git
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-12-11 11:33:38 +01:00
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
Aurélien Bompard
0fc0a819fa Distgit: fix the staging test in the client_secrets file
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-11-14 09:09:12 +01:00
Aurélien Bompard
8400c340ff Distgit: fix the client_id in the client_secrets file
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-11-14 09:05:06 +01:00
Aurélien Bompard
134cfc522f Distgit: deploy the client_secrets file
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-11-14 08:49:23 +01:00