WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 03:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity
45,326 Commits 9 Branches 0 Tags
8104cee874bae4c5a3e98bab110585b74ac9c80b
Commit Graph

27491 Commits

Author SHA1 Message Date
Kevin Fenzi
d00ef11307 Save pingou's email box 
We should not flood his mailbox anymore.

I set it to go to admin@fedoraproject.org, but if it's too much for
everyone we could just set it to nobody, or adjust it so it doesn't send
so many, or something else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 22:25:57 +00:00
Kevin Fenzi
c5482adb6c proxy03/14: set hosts to use internal ip for gateway 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 13:59:03 -08:00
Kevin Fenzi
561b15591d proxy03/14: use correct hostname for ccd file 
This is based on the hostname, and will assign the actual correct vpn
ips to proxy03/14, which will help https://pagure.io/fedora-infrastructure/issue/12833

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 13:54:02 -08:00
Kevin Fenzi
8db612803a pagure: hard code gateway to the internal ip for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 09:21:27 -08:00
Ryan Lerch
b395302ecc [forge] - enable email notifications by default 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 22:35:53 +10:00
Jakub Kadlcik
c97e52d18d copr-fe: configure high-perf builders for npache/Kernel-ark-ci 
Fix https://github.com/fedora-copr/copr/issues/4118
 2026-01-19 10:52:59 +01:00
Ryan Lerch
2415856c73 Add additional groups to match the forge naming scheme. 
Resolves: https://forge.fedoraproject.org/forge/forge/issues/350

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 18:56:48 +10:00
Ryan Lerch
4ca651c1f2 [forge] adding some formatting to the group map for prod 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 17:32:43 +10:00
Ryan Lerch
9c8a47f5fb [forge] try adding some formatting to the group map in staging 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 17:20:42 +10:00
Akashdeep Dhar
05225400a6 Map for Operations, Mindshare, Mentorship and Marketing 
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
 2026-01-19 16:59:43 +10:00
Ryan Lerch
cf82acd017 [forge] add COSMIC sif team mappings 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 16:20:45 +10:00
Ryan Lerch
2a1e4ae525 [forge] - revert changes to staging map, and add asahi teams 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-16 13:09:19 +10:00
Kevin Fenzi
e5f736c308 riscv-kojipkgs: add a custom reversepassproxy config 
This will help not expose things we should not.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-15 12:36:40 -08:00
Aashish Radhakrishnan
1d48d46cde Remove coreos-ostree-importer.stg certificate entry 2026-01-15 19:27:10 +00:00
Aashish Radhakrishnan
a18576f826 Remove coreos-ostree-importer playbook and templates 
Removes the OpenShift configuration for coreos-ostree-importer including
playbooks and related templates

Ref: https://github.com/coreos/fedora-coreos-tracker/issues/2070
 2026-01-15 19:27:10 +00:00
Greg Sutcliffe
4b8780246b Nagios: another batch of services moved to Zabbix 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2026-01-15 15:43:45 +00:00
Greg Sutcliffe
d87851c2a3 Zabbix: fix typo in datanommer item tags 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2026-01-15 15:43:45 +00:00
Michal Konecny
6fc54fb18c [bodhi] Increase the amount of staging consumers 
See https://pagure.io/fedora-infrastructure/issue/12932.

The Bodhi needs some optimization as the processing of some messages
takes 40 seconds. We need to keep at least 10 consumers to handle the
load on staging.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-15 16:33:52 +01:00
Jakub Kadlcik
938f070470 copr-be-dev: use image-builder for uploading to OSUOSL OpenStack 2026-01-15 14:50:12 +01:00
Jakub Kadlcik
7a85d348d4 copr-be-dev: use image-builder for uploading images to IBM Cloud 
Completely dropping the dependency on
https://github.com/praiskup/ibmcloud-cli-fedora-container

Although I needed to copy its `create_in_region` function here to this code.
That part is not supported by `image-builder` yet. But either way, we don't
need the `ibmcloud` binary at this point.
 2026-01-15 14:50:12 +01:00
Jakub Kadlcik
afc0a2c783 copr: install jq on our servers 2026-01-15 14:50:12 +01:00
James Antill
c3e35d5807 Try to deal with giant bodhi_bodhi-consumer-13-mdrln_bodhi etc. messages. 
Signed-off-by: James Antill <james@and.org>
 2026-01-14 11:02:16 -05:00
Anton Medvedev
dcd31e878e feat(robosignatory): f44-rebuild autosigning mass rebuild tag 
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
 2026-01-14 13:54:50 +00:00
Greg Sutcliffe
93ed0457e0 Nagios: remove first batch of services 
This removes the known-good things we've had in Zabbix for a while -
RAID, disk space, processes, and mail queue. It also removes swap which
we've decided we don't need.

Also includes some FS overrides on the Zabbix side so the relevant
NFS mounts get monitored on the OCI, and pkgs hosts, as per Nagios had.

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2026-01-14 10:25:15 +00:00
Ryan Lerch
3cb16462ea forge-dist-git: add group mappings for sigs 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-14 11:49:53 +10:00
Akashdeep Dhar
a4add50740 Perform mapping for Fedora Localization teams and groups 
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
 2026-01-14 00:37:15 +00:00
Tomáš Hrčka
f836929e43 Update roles/anubis/templates/policies.yaml.j2 
Add attlasian to the allow list in anubis
 2026-01-14 00:06:10 +00:00
Michael Scherer
4a6c6cf37e Disable TCP forwarding on sshd 
While there is a firewall on most of the the hosting facilities used
by the project, this is another layer of protection.
 2026-01-13 23:46:37 +00:00
Kevin Fenzi
71c59eb4c4 matrix: add org.matrix.msc2965.authentication for mas migration 
EMS is updating our servers (both fedora.im and fedoraproject.org) to
use MAS (Matrix Auth Service). This will allow users to use new
element-x and such.

We need to add these things in order for older clients to still be
able to connect/get to the right place for auth.

These files should be valid json, please check

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-13 23:37:40 +00:00
Kevin Fenzi
8caea853ad base: rsyslog-audit: no audit to log01 in aws 
In the aws 'datacenter' we don't want to send audit logs to log01, since
there is no access to log01 from there and it just doesn't work.

https://pagure.io/fedora-infrastructure/issue/12947

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-13 14:15:12 -08:00
Kevin Fenzi
57f13b1a73 poddlers: remove unused override 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-13 14:02:59 -08:00
Carl George
0f16bf1dc3 Revert "batcave: modify rhel10-sync to delete problematic redhat-release package" 
This reverts commit 3e4f01e82c.  The
underlying issue was resolved in redhat-release-10.1-18.el10.

Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2026-01-13 14:59:00 -06:00
Aurélien Bompard
2d80cc95c2 Cleanup stage users: loop over all the pages 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2026-01-13 17:31:12 +01:00
Michal Konecny
d18fb23702 [languages] Suspend cron jobs 
We don't need cron jobs to run anymore.

See https://pagure.io/fedora-infrastructure/issue/12998 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-13 14:28:51 +01:00
Michal Konecny
e737326250 [languages] Set replica value to 0 
Let's keep the project around, just set it to 0.

See https://pagure.io/fedora-infrastructure/issue/12998 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-13 14:20:44 +01:00
Kevin Fenzi
443cac3cb1 varnish: remove commented block from 11 years ago 
I can't recall why we disabled this at the time, but it's been disabled
for 11 years, so the likelyhood of us needing it now is low.

So, lets just delete it.

See https://pagure.io/fedora-infrastructure/issue/13002 for discussion.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-12 12:50:31 -08:00
Kevin Fenzi
15003c92ed koji_hub: add cef to heavybuilder 
See https://pagure.io/fedora-infrastructure/issue/12995
We want to be careful adding anything here, but the same reasons we add
chromium are in play here. There's no ppc64le or s390x builds, so it
will just affect aarch64 and x86_64 where we have a lot of hosts in
heavybuilder channel.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-12 12:44:39 -08:00
Jakub Kadlcik
4997a77bd0 copr-be: automatically AWS images with FedoraGroup=copr 2026-01-12 16:33:17 +01:00
Aurélien Bompard
56d7fd54da Add a patch to Pagure 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2026-01-12 16:25:47 +01:00
Jakub Kadlcik
7cce8fddce copr-be-dev: install image-builder for uploading builder images 2026-01-12 16:20:08 +01:00
Jakub Kadlcik
44cbb54975 copr-be: add dependency on pv 2026-01-12 15:44:27 +01:00
Jiri Kyjovsky
88102722cb copr-anubis: allow copr-related user agents to pass without challenge 2026-01-12 09:00:32 +00:00
Adam Williamson
021c63e9df Update some Forgejo-migrated repo URLs 
Signed-off-by: Adam Williamson <awilliam@redhat.com>
 2026-01-09 18:51:10 -08:00
Jakub Kadlcik
9f7c3b53c6 copr-be: don't modify the redirect path for dnf install 2026-01-08 17:47:33 +01:00
Jiri Kyjovsky
02d6781cc9 copr-anubis: allow comps.xml endpoint for Copr backend 
The backend uses urlretrieve() to download comps.xml from the frontend
at /coprs/<user>/<project>/chroot/<chroot>/comps/. Since this path is
under /coprs/ which is protected by Anubis, the backend receives the
JavaScript challenge page instead of the actual comps data.

This HTML then gets saved as comps.xml and included in the repository
metadata, causing users to download Anubis challenge HTML instead of
the actual comps.xml.gz file.
 2026-01-08 17:06:03 +01:00
Jiri Kyjovsky
dd07996948 copr-dist-git: redirect http to https 2026-01-08 16:56:35 +01:00
Jiri Kyjovsky
3595436104 copr-anubis: loosen policies (go through defaults), allow essentials 2026-01-08 16:40:34 +01:00
Michal Konecny
4029d659d7 [flatpak-indexer] Use the correct path for fedora 
The image is in fedora namespace.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-08 14:32:03 +01:00
Michal Konecny
1dbed15284 [flatpak-indexer] Set imagestream to fedora:latest 
For some reason flatpak indexer had fedora:latest redefined to
fedora:40. Let's correct this.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-08 14:18:17 +01:00
Jakub Kadlcik
a56f61e4b5 copr-be: oops a typo, in lua there is no != but ~= 2026-01-07 21:50:18 +01:00