Commit Graph

41 Commits

Author SHA1 Message Date
Aurélien Bompard
d884a0f8ba Use the combined RabbitMQ CA cert in the clients
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
Kevin Fenzi
c21b454428 robosignatory: adjust for really stupid ansible-lint rule
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-02-04 09:04:24 -08:00
Kevin Fenzi
6c38d7b61a various: fix some more shell variables that were accidentally converted to builtin.shell
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-15 17:26:50 -08:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
Ryan Lerch
3c41882bb0 ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell
Replaces references to shell: with ansible.builtin.shell

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:29:10 +10:00
Ryan Lerch
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
Ryan Lerch
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
Kevin Fenzi
ebd01fab62 robosignatory: small fixes
Fix the fedora-41 key, had too many characters there.
Also, the add-key script needs to be readable by the robosignatory user,
so it can't be mode 711.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-08 15:35:31 -08:00
Kevin Fenzi
c764d1ea86 autosign: adjust playbooks for prod
We need to setup things in prod slightly differently, using keyctl.
Copy in the service and scripts.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-01-30 09:33:45 -08:00
Aurélien Bompard
6ed2d3ab2d Robosig: restart on config changes
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-06-27 18:23:40 +02:00
Patrick Uiterwijk
9b0bddf050 Update robosignatory role for py3
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-06-10 10:08:51 +02:00
Patrick Uiterwijk
f30c881bf5 Use tmpfiles for the ask-password ACL
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-06-10 09:58:24 +02:00
Patrick Uiterwijk
f5d9df89ac Allow robosignatory to use systemd-ask-password
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-06-10 09:30:29 +02:00
Patrick Uiterwijk
0abfb431da Revert "Temporarily don't install python2-robosig"
This reverts commit 6bb193ba14.
2020-06-09 21:57:26 +02:00
Patrick Uiterwijk
6bb193ba14 Temporarily don't install python2-robosig
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2020-06-09 21:56:22 +02:00
Kevin Fenzi
9bc3ceb2a2 robosignatory: uid/gid change for autosign
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:28 +02:00
Kevin Fenzi
7972e75131 robosign: only use fm-message service in stg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:25 +02:00
Kevin Fenzi
b484b4038d robosignatory: add a tag for just updating the config
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:23 +02:00
Kevin Fenzi
c55fd61bb8 robosignatory: Use gid 988 for robosignatory group.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
2149c1ffb3 Fix ownership of files in the sigul directory
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Aurélien Bompard
a6a33d14e5 Robosignatory: install fedora-messaging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:12 +02:00
Kevin Fenzi
c0c05799b7 robosignatory: add group first before user.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-04-24 21:34:11 +02:00
Aurélien Bompard
46914eae7b Update Robosignatory
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-04-24 21:34:11 +02:00
Patrick Uiterwijk
7608ce4d49 Fix up robosig koji conf in stg
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2019-07-03 13:39:02 +00:00
Patrick Uiterwijk
adcbf72f03 Packageize this, packageize that, packageize the world
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-08 22:25:52 +00:00
Patrick Uiterwijk
2c916ebfe2 This dir is in the package
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-05-09 18:10:40 +00:00
Patrick Uiterwijk
cc13dcaacf Add sigul pkg
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-05-09 18:10:03 +00:00
Patrick Uiterwijk
0e5508d13a Add sigul dir
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-05-09 17:59:08 +00:00
Patrick Uiterwijk
4b4782a8ff No cert needed for robosignatory
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-11 20:53:33 +00:00
Patrick Uiterwijk
1b4e469a96 Add sigul configuration for autosign
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-10-17 09:37:36 +00:00
Patrick Uiterwijk
405d4b5093 Add robosignatory tag
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-27 00:17:40 +00:00
Patrick Uiterwijk
2fb4b617f3 Autosign f26-pending -> f26
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-26 16:01:41 +00:00
Patrick Uiterwijk
4f239c979b TPM stuff is needed by autosign
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-14 19:56:09 +00:00
Patrick Uiterwijk
d66260bc46 Add koji config
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-14 18:51:08 +00:00
Patrick Uiterwijk
467bc9ca40 I really cant do filesystem locations
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-14 18:41:10 +00:00
Patrick Uiterwijk
7da95bb7c7 Fix typo
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-14 18:39:16 +00:00
Patrick Uiterwijk
a7371ea44b Create koji cert for autosign
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-14 18:35:14 +00:00
Patrick Uiterwijk
75d3a06353 Add robosignatory plays
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-09-14 16:38:08 +00:00