Commit Graph

144 Commits

Author SHA1 Message Date
Carl George
b565e59d32 batcave: set up rhel10.0 sync
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-05-14 16:12:51 +00:00
Aurélien Bompard
d884a0f8ba Use the combined RabbitMQ CA cert in the clients
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
Michal Konecny
7b58dfdce8 Remove fedmsg and github2fedmsg from staging
The messaging bridges openshift project and github2fedmsg VM were
already removed in staging. This is to clean the ansible playbooks.

I will create a separate one for production after this one is merged.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-04 09:13:40 +01:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
Ryan Lerch
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
Ryan Lerch
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:26:47 +10:00
Ryan Lerch
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
Ryan Lerch
691adee6ee Fix name[casing] ansible-lint issues
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
David Kirwan
ef45d81b72 batcave: python3-requests-kerberos package
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-11-21 16:02:40 +00:00
Aurélien Bompard
096f4ed89c The geoip script contains a secret
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-06 18:41:09 +02:00
Aurélien Bompard
2fad8816a6 Restore the GeoIP download script
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-06 18:19:57 +02:00
Stephen Smoogen
432a3a497b Go through and remove entries for EL6 and EL7
Using `git grep el6` and `git grep el7` and variants like EL-7 or
el-7, I found various entries and files which were no longer needed
with the current ansible. I updated text or tests to later versions of
RHEL as needed.

found entries for the fedora ami's for the original cloud and removed
those entries also.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
2024-07-03 22:20:30 +00:00
Nils Philippsen
0d6c24558a batcave: Set git directories as safe
Or else users in sysadmin-main can’t access the repositories.

Signed-off-by: Nils Philippsen <nils@redhat.com>
2024-07-01 13:34:48 +00:00
Kevin Fenzi
1f75c26aa6 rhel7: no need to sync it anymore
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-29 18:41:52 -07:00
Kevin Fenzi
73c4e62b57 batcave: redirect top infrastructure page to docs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-06-17 14:56:02 -07:00
Carl George
8350b55843 Stop syncing and grobisplitting CentOS Stream 8
CentOS Stream 8 is now EOL, so it is no longer necessary to sync and
grobisplit that content for EPEL 8 Next to build against.

https://pagure.io/releng/issue/12147
2024-06-05 13:14:16 +00:00
Aurélien Bompard
134f77da5b Add a cron job to expose the rabbitmq certs
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-05-07 17:35:33 +02:00
Kevin Fenzi
38b254a579 batcave: enable centos-10-sync
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-02 16:42:02 -07:00
Kevin Fenzi
4c113b98bf batcave01: we do not want the old rhel7 openshift repo
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-30 13:01:19 -07:00
Kevin Fenzi
c5f2475537 batcave: renew proxy letsencrypt certs weekly
We occasionally run into problems with certs that aren't renewed in time
or are close to expiring. Just running the proxies playbook will renew
them, but in freezes or the like sometimes there's a long time period
where we don't run that playbook.

So, lets just run weekly with the right tag. This should renew any cert
thats close to expiring.

The job shouldn't normally output anything, but if there's errors it
will email them to admin@

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-27 17:29:48 -07:00
Kevin Fenzi
c45521fcb5 batcave01: patch the uri module to work on fedora targets
The ansible-core-2.14.x in rhel9 (using python 3.9 now) can't handle
running uri module on fedora (python-3.12) without erroring.
There's a backported fix in 2.15, but until thats in rhel9, this will
keep hitting us.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-03-27 12:00:19 -07:00
Aurélien Bompard
4442a309aa Use the fedora-messaging-git-hook package on batcave
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-12-04 12:05:00 +01:00
Kevin Fenzi
3c06415a17 batcave01: install moreutils for dns hook
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-17 15:33:02 -07:00
Kevin Fenzi
3d5dde0970 batcave01: git repos moved from /git to /srv/git a long while back
We still were expecting them to be in /git.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 17:06:25 -07:00
Kevin Fenzi
da20307fcc batcave01: no python39-jmespath for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 16:34:47 -07:00
Kevin Fenzi
78422a3fd2 batcave01(NEW AND IMPROVED): adjust for rhle9 move
Fix the kickstart/repo for reinstall.
Add rhel-system-roles for linux-system-roles/networking
Drop some python2 items that aren't available in rhel9 anymore.
Collapse the batcave02 stuff into batcave01

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 16:21:24 -07:00
Kevin Fenzi
a780dc21a1 db-datanommer01: retire this database server
We moved to timescaledb over on db-datanommer02 a while back, so this vm
it just sitting there doing nothing. ;)
So, lets drop it off and save some resources.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-26 10:16:11 -07:00
Kevin Fenzi
dc82b8da30 batcave: adjust packages for rhel9
This is for a test batcave02 for now, but will be used when we move
batcave01 over to rhel9

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-10 16:34:17 -07:00
Kevin Fenzi
feceb99528 batcave: install python39-jmespath for copr playbooks
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-11-18 18:28:00 -08:00
Stephen Smoogen
669b21fb67 remove the grobisplitter parts from batcave role. The playbook calls grobisplitter role so different jobs would replace different files. 2022-06-07 14:29:48 -04:00
Kevin Fenzi
8c22933617 batcave/dhcp_servers: drop tftpboot2 and just have one tftpboot dir 2022-05-17 15:34:03 -07:00
Kevin Fenzi
6b677313e9 batcave: setup for rhel9 syncing
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-05-17 08:44:58 -07:00
Kevin Fenzi
f2eb6caf29 Revert "Revert "batcave: switch to ansible-core + some collections instead of ansible 'classic'""
This reverts commit dc1f503bdd.
2022-04-04 14:27:00 -07:00
Kevin Fenzi
dc1f503bdd Revert "batcave: switch to ansible-core + some collections instead of ansible 'classic'"
This reverts commit 78ba658d3c.
2022-03-30 13:06:52 -07:00
Kevin Fenzi
78ba658d3c batcave: switch to ansible-core + some collections instead of ansible 'classic'
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-03-30 12:14:47 -07:00
Leo Puvilland
a25a46b312 Add nano to hosts 2021-11-03 22:13:31 +00:00
Kevin Fenzi
774645fb06 batcave: add sync for centos-9-stream ( releng 10235 )
Sync down once a day the centos 9 stream buildroot.
This will be used as a base for epel9-next bringup.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-07-29 12:25:57 -07:00
Mark O Brien
c9f047f0a6 batcave: move rhcos folder
Signed-off-by: Mark O Brien <markobri@redhat.com>
2021-07-29 11:22:46 +01:00
Mark O Brien
132402f40f remove quote marks
Signed-off-by: Mark O Brien <markobri@redhat.com>
2021-07-21 13:01:14 +01:00
Mark O Brien
85aa736050 add rhcos pxeboot directory
Signed-off-by: Mark O Brien <markobri@redhat.com>
2021-07-21 12:53:18 +01:00
Mark O Brien
a37980bb0b make dir for sysadmin-openshift group 2021-07-12 10:47:40 +01:00
Kevin Fenzi
b3d2dc7d90 batcave: clean up old tasks
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 10:42:18 -07:00
Kevin Fenzi
1ee14dc2f4 batcave: install postgresql12 psql for client querys to db-datanommer
See ticket https://pagure.io/fedora-infrastructure/issue/9913

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 10:37:25 -07:00
Kevin Fenzi
ec210427ec batcave: allow sysadmin to read rbac-playbook config
This should allow folks in the sysadmin group to read (but not write)
the rbac-playbook config. This should allow folks to more easily tell
who is granted rights to run some playbook.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-17 09:31:27 -07:00
Kevin Fenzi
d03a311132 batcave: drop old openstack packages
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 17:12:38 -07:00
Kevin Fenzi
3d372b037a batcave: install ansible-collection-community-general for various useful modules
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 10:51:20 -07:00
Ryan Lerch
9a11a95feb remove batcave's retrieve-security-question.py
Removes the batcave script, retrieve-security-question.py
which is no longer needed with Noggin / FreeIPA-FAS

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2021-04-19 08:38:25 +10:00