Commit Graph

43401 Commits

Author SHA1 Message Date
Kevin Fenzi
e987aa7267 s390kojipkgs: increase timeout
This was done in trying to get caching more stable for s390x builds.
Pushing it now to match the deployed state.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 13:47:07 -07:00
Kevin Fenzi
b9eb773848 ipsilon: change crypto policy back to default
Since https://pagure.io/fedora-infrastructure/issue/12321
is fixed on the bugzilla side, we should be able to move back
to using DEFAULT.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 20:39:56 +00:00
Ryan Brue
2fd441aef6 Add Cosmic-Atomic
We have been building unofficial images at fedora-ostree-desktops based on the workstation-ostree-config files for cosmic-atomic. It's time to get it officially built.

Signed-off-by: Ryan Brue <ryanbrue.dev@gmail.com>
2025-03-19 20:35:21 +00:00
Kevin Fenzi
2f67aade41 F42 beta freeze is lifted
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-19 09:43:30 -07:00
Josef Skladanka
4761b75c97 Add lbrabec to appowners for testdays 2025-03-19 13:10:03 +01:00
Mikolaj Izdebski
10789ceba2 Koschei: Move away from deprecated fedmsg_env variable 2025-03-18 19:37:38 +01:00
Mikolaj Izdebski
fe0aa52569 Koschei stg: limit number of running builds to 2 2025-03-18 19:23:15 +01:00
Kevin Fenzi
22681acd07 releng_compose: set koji_instance: "primary"
This was missed when I was adding the riscv secondary koji before
freeze. We need it fixed because it breaks the playbooks on the
primary releng compose machines and we have a freeze break to deploy.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-17 10:59:10 -07:00
Karolina Surma
cc7f54ecfe Switch the weekly FTBFS reminders to F42 2025-03-17 17:36:21 +00:00
Jakub Kadlcik
f10301013c copr-dev: try using bootc builder image, pt.3 2025-03-16 17:59:09 +01:00
Kevin Fenzi
d7c1fdf01c pagure.io: double cpus to try and help scraper issues
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-14 12:54:31 -07:00
Patrik Polakovič
d347cf1f20 Update Ansible vars for F42 Beta release
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
2025-03-14 19:19:32 +01:00
Mark Rosenbaum
2e078cde1c Update roles/zabbix/zabbix_server/tasks/install.yml - Updating Zabbix prod to 7.0LTS
Signed-off-by: Mark Rosenbaum markrosenbaum@fedoraproject.org
2025-03-14 16:18:35 +00:00
Mark Rosenbaum
01f5e19cf6 Update roles/zabbix/zabbix_server/tasks/install.yml - Seperated Prod and Stg
Prod gets the same version it already has(6.0 LTS) and Stg now gets 7.0 LTS
2025-03-14 14:29:14 +00:00
Mark Rosenbaum
81ee6adbe2 Update roles/zabbix/zabbix_server/tasks/install.yml - rpm install 6.0LTS to rpm install 7.0LTS 2025-03-14 14:29:14 +00:00
David Kirwan
bf2aa3ebbe forgejo: updated values template with fedora forgejo image
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-14 13:11:16 +00:00
Aurélien Bompard
d68dbcba37 Mirrormanager: remove the disabled cronjob, commenting it out does not work
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-14 13:40:26 +01:00
Aurélien Bompard
d9e0180d83 MirrorManager: don't suspend jobs, only the crawlers on staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-14 12:19:02 +01:00
Kevin Fenzi
a235e2f53c robosignatory: add cosmic-atomic to f43/rawhide signing
We added this in pungi-fedora, so its sitting there trying over and over
to sign it. We need to either merge and deploy this, or revert
the pungi-fedora changes, kill rawhide compose and re-run.

Seems easier to just push this. ;)

+1s?

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-13 10:07:24 -07:00
Aurélien Bompard
90e0325597 D'uh
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-13 17:15:06 +01:00
Aurélien Bompard
4df684038d Minor fixup
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-13 17:13:55 +01:00
Aurélien Bompard
a32457a7aa Add a playbook to sync the Badges DB to staging
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-13 17:12:34 +01:00
Greg Sutcliffe
2ccdc83dce Add lint prefix to template_fullpath to match openshift/object 2025-03-13 15:45:07 +00:00
Aurélien Bompard
6687bfb589 MirrorManager: add the secrets mount to all deploymentconfigs
The crawlers need it when they import the Flask app, or we get:
```
FileNotFoundError: [Errno 2] No such file or directory: '/etc/mirrormanager-secrets/client_secrets.json'
```

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-13 09:22:18 +01:00
Pragyan Poudyal
a6177a5e52 Add pragyan-poudyal to appowners 2025-03-13 04:58:36 +00:00
Kevin Fenzi
b50b776cb5 varnish / s390x cache: move to memory based instead of disk
This was done last week to help out with builds that were failing
due to s390x cache issues. Moving to memory based seems to have
helped this stop happening, possibly along with other changes.

I'm pushing it now because it reflects the current state
after outages last week.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-12 14:21:43 -07:00
Kevin Fenzi
17c8094c2f log01 / rsyslog / splunk: adjust ip again as the previous one was not desired
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-12 14:20:27 -07:00
Francois Andrieu
5555679100 fedora-web: fix include_vars option 2025-03-12 11:21:43 +01:00
Andrew Heath
d616fa6c6c Update Splunk syslog address
Update Splunk syslog address per Red Hat's Monitoring and Loging team.
The old address will be decomed in about a week per their
communications.
2025-03-11 18:30:47 +00:00
James Antill
8e8fc651fa Turn on nftables for a few more staging groups.
Signed-off-by: James Antill <james@and.org>
2025-03-10 16:40:08 -04:00
Ryan Lerch
5c07d5b8c6 forgejo: update admin groups values from Fedora Accounts
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-03-10 15:54:47 +10:00
Greg Sutcliffe
a69b10a128 resultsdb-ci-listener: deploy app via s2i 2025-03-07 13:06:46 +00:00
Jakub Kadlcik
eec596d979 copr-dev: try using bootc builder image, pt.2 2025-03-07 12:18:18 +01:00
Jakub Kadlcik
0f902b6e9b copr-dev: try using bootc builder image
See https://github.com/fedora-copr/copr-image-builder
2025-03-06 23:57:10 +01:00
David Kirwan
184c67583f forgejo: correct oauth configuration to map sysadmin-main to admin
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-06 15:10:18 +00:00
David Kirwan
5558de59de forgejo: enable route
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-05 13:20:21 +00:00
David Kirwan
d7c54cb063 forgejo: testing ansible helm module
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-05 12:55:57 +00:00
David Kirwan
77cd46fcf9 forgejo: updating flags passed to helm
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-05 12:38:56 +00:00
David Kirwan
a7b5254c8d forgejo: update task to read in values passed to helm
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-05 10:23:15 +00:00
James Antill
69911c5d72 Enable IPv6 nftables.
Signed-off-by: James Antill <james@and.org>
2025-03-04 14:31:54 -05:00
James Antill
e83b42b572 Remove iptables cron and stop/disable services, when using nftables.
Signed-off-by: James Antill <james@and.org>
2025-03-04 14:14:37 -05:00
David Kirwan
200c9eb70d forgejo: change to point at the fedora forked forgejo helm chart
Add values template that is passed to helm at deploy

Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-03-04 15:48:57 +00:00
James Antill
ca18224faa Change osbuildapi set table to the ip filter table.
Signed-off-by: James Antill <james@and.org>
2025-03-03 17:08:20 -05:00
James Antill
224d98cbb0 Remove typo from kojibuilder nftables template.
Signed-off-by: James Antill <james@and.org>
2025-03-03 16:52:02 -05:00
James Antill
172cfc9efa Move staging builders to nftables.
Signed-off-by: James Antill <james@and.org>
2025-03-03 21:20:30 +00:00
James Antill
1c6c65844d Add new osbuildapi-update-nft.cron entries, and get it installed when nftables.
Signed-off-by: James Antill <james@and.org>
2025-03-03 21:20:30 +00:00
James Antill
4fac049b6a Actually install the nftable template file.
Signed-off-by: James Antill <james@and.org>
2025-03-03 21:20:30 +00:00
James Antill
b322316be5 Don't flush old osbuildapi entries in nftables land either.
Signed-off-by: James Antill <james@and.org>
2025-03-03 21:20:30 +00:00
James Antill
31d65aa439 Actually move to nftables for any host with nftables: true (nothing atm).
Signed-off-by: James Antill <jantill@redhat.com>
2025-03-03 21:20:30 +00:00
Aurélien Bompard
c9b9086535 Add missing j2 suffixes
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-03 10:18:14 +01:00