WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-30 21:41:53 +08:00
Code Issues Packages Projects Releases Wiki Activity
43,401 Commits 9 Branches 0 Tags
7aa7553b84af5dc8efa78e9d8a4e50dde369052d
Commit Graph

352 Commits

Author SHA1 Message Date
Samyak Jain
abcf1c8e76 robosignatory: enable signing on f43-python 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-05-22 05:05:52 +00:00
Samyak Jain
f8d06a6812 F40 is now EOL 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-05-13 14:58:24 +00:00
Kevin Fenzi
c581b79099 robosignatory: fix stable f42 cosmic-atomic signing, which was missing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-04-19 20:53:30 -07:00
Paul Whalen
f967081b3a IoT: sign stable with f42 key 
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
 2025-04-11 11:58:49 -04:00
Aurélien Bompard
d884a0f8ba Use the combined RabbitMQ CA cert in the clients 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2025-04-11 15:15:45 +02:00
Kevin Fenzi
c2e61b09ab robosignatory: add f42 cosmic-atomic to signing 
We added this atomic desktop, we need to sign it now. :)

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-23 08:51:51 -07:00
Kevin Fenzi
a235e2f53c robosignatory: add cosmic-atomic to f43/rawhide signing 
We added this in pungi-fedora, so its sitting there trying over and over
to sign it. We need to either merge and deploy this, or revert
the pungi-fedora changes, kill rawhide compose and re-run.

Seems easier to just push this. ;)

+1s?

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-03-13 10:07:24 -07:00
Carl George
2e3eaabb1c Branch epel10.0 from epel10 
Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2025-02-18 16:26:40 +00:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers 
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2025-02-10 20:31:49 +00:00
Samyak Jain
7880b13991 robosignatory: also allow resigning f43 tagged packages 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-02-05 07:38:50 +00:00
Samyak Jain
ccb83f5e63 robosignatory: switch eln to fedora-43 key 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-02-05 01:42:32 +05:30
Kevin Fenzi
c21b454428 robosignatory: adjust for really stupid ansible-lint rule 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-02-04 09:04:24 -08:00
Samyak Jain
fd17adce36 Branch Fedora 42 from Rawhide 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-02-04 15:02:50 +00:00
Samyak Jain
fb06fb5d5c Resign f42 builds with f43 key 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2025-01-30 09:50:15 +00:00
Kevin Fenzi
6c38d7b61a various: fix some more shell variables that were accidentally converted to builtin.shell 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-15 17:26:50 -08:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template 
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 11:30:29 +10:00
Ryan Lerch
3c41882bb0 ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell 
Replaces references to shell: with ansible.builtin.shell

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 11:29:10 +10:00
Ryan Lerch
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package 
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 11:28:00 +10:00
Ryan Lerch
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy 
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file 
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-15 10:41:52 +10:00
Ryan Lerch
691adee6ee Fix name[casing] ansible-lint issues 
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2025-01-14 20:20:07 +10:00
Kevin Fenzi
8fa1e3de8c robosignatory: autosign f42 mass rebuild tag 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2025-01-13 15:01:00 -08:00
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2024-11-28 17:31:45 +10:00
Kevin Fenzi
d279fdc48d autosign: remove f39 from signing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-11-26 11:02:58 -08:00
Paul Whalen
912cac3238 IoT: sign stable with f41 key 
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
 2024-10-25 15:04:23 -04:00
Kevin Fenzi
8a0f0dae94 robosignatory: switch eln to fedora-42 key 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-14 14:30:32 -07:00
Kevin Fenzi
0e4e647574 robosignatory: also allow resigning f42 tagged packages 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-13 08:04:33 -07:00
Samyak Jain
5096677f85 make robosignatory changes for f41 branching 
Remove resigning of 41 keys with 42; updated artificats to f41 and rawhide to f42;
updated infra-candidate/openh264 for new f42; f41 signing pending, buildsidetags etc

Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-08-13 14:13:43 +00:00
Kevin Fenzi
d967d2ae46 robosignatory: fix f42 key signing 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-08 07:13:47 -07:00
Kevin Fenzi
509e3fe2d2 Resign f41 builds with f42 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-08-08 06:20:32 -07:00
Samyak Jain
e99d5ce645 robosignatory: f41-rebuild auto signing mass rebuild tag as builds happen 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-07-16 09:45:58 +00:00
Kevin Fenzi
d11f9c5ced epel7 retirement 
Drop epel7 all the places in ansible where it is and makes sense.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-07-03 20:00:59 +00:00
james02135
e244c454d8 Add epel-10 sidetag signing 
Signed-off-by: james02135 <james02135@hotmail.com>
 2024-06-20 13:05:57 +00:00
james02135
9f5ab7b7b6 robosignatory: Use epel-10 key for appropriate tags 
Signed-off-by: james02135 <james02135@hotmail.com>
 2024-06-17 09:53:48 +00:00
Samyak Jain
ac33b4287a robosignatory: sign f41-perl side tag 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-05-28 17:47:31 +00:00
Samyak Jain
f4d3bf434b robosignatory: sign f41-python side tag 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-05-28 17:47:31 +00:00
Kevin Fenzi
d366194a22 module-build-service (mbs): retire service 
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.

Note that toddlers needs to be adjusted still, that will happen after
this.

Thanks for all the modules!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-05-22 13:38:53 -07:00
Samyak Jain
9438b39fd1 F38 is EOL 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-05-21 14:33:13 +00:00
Paul Whalen
4a8c9ecf96 IoT: Sign stable with f40 key 
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
 2024-04-22 12:53:38 -04:00
Patrik Polakovič
0d507b06ca Add EPEL9 to robosignatory config 
Signed-off-by: Patrik Polakovič <ppolakov@redhat.com>
 2024-03-27 22:46:17 +00:00
Kevin Fenzi
b0ade05e86 robosignatory: re-enable f40/branched updates flow 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-14 11:33:25 -08:00
Kevin Fenzi
a4900613e7 robosignatory: iot 'stable' should be using f39 key, not f40 
This was a branching mistake. iot stable releases should follow the
current stable release, not switch with branching.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-14 11:27:14 -08:00
Kevin Fenzi
0f082fd3bc robosignatory: switch eln over to fedora-41 signing 
eln tracks rawhide, so switch it over to fedora-41 key as well.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-13 15:24:53 -08:00
Kevin Fenzi
a537aefc31 robosignatory: clean up old releases, drop old comments, reformat to be more readable add more comments 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-13 15:21:25 -08:00
Kevin Fenzi
de072aac57 robosignatory: disable signing of f40 updates until we have a branched compose 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-13 10:52:35 -08:00
Samyak Jain
8fa8129e80 make robosignatory changes for branching 
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
 2024-02-13 13:12:33 +00:00
Kevin Fenzi
ebd01fab62 robosignatory: small fixes 
Fix the fedora-41 key, had too many characters there.
Also, the add-key script needs to be readable by the robosignatory user,
so it can't be mode 711.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-08 15:35:31 -08:00
Kevin Fenzi
100c9b484d robosignatory: resign f40 tagged packages with f41 key 
This is to prep for branching next week.
We want to set this so we can tell robosgnatory to resign all the f40
tagged packages with f41. Also, newly tagged packages will also be
signed, so by the time we branch everything should be signed for both
branched (f40) and new rawhide (f41).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-02-08 15:18:44 -08:00
Kevin Fenzi
0bb87a53e2 autosign: this should be autosign02 in prod now 
Just use the short inventory name here so it works in prod and stg.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-01-30 09:53:19 -08:00
Kevin Fenzi
c764d1ea86 autosign: adjust playbooks for prod 
We need to setup things in prod slightly differently, using keyctl.
Copy in the service and scripts.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-01-30 09:33:45 -08:00