WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 03:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity
45,288 Commits 9 Branches 0 Tags
8e09c0498e3aa336036d75d075451dffcef21991
Commit Graph

45288 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Kevin Fenzi
d00ef11307 Save pingou's email box 
We should not flood his mailbox anymore.

I set it to go to admin@fedoraproject.org, but if it's too much for
everyone we could just set it to nobody, or adjust it so it doesn't send
so many, or something else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 22:25:57 +00:00
Kevin Fenzi
c5482adb6c proxy03/14: set hosts to use internal ip for gateway 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 13:59:03 -08:00
Kevin Fenzi
561b15591d proxy03/14: use correct hostname for ccd file 
This is based on the hostname, and will assign the actual correct vpn
ips to proxy03/14, which will help https://pagure.io/fedora-infrastructure/issue/12833

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 13:54:02 -08:00
Kevin Fenzi
bad6a2db89 storinator01: add mac addresses and fix ip var 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 12:44:01 -08:00
Kevin Fenzi
8db612803a pagure: hard code gateway to the internal ip for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 09:21:27 -08:00
Michal Konecny
5809288d1e Remove proxy05 from mirrorlist proxies 
The proxy05 is unavailable for last few days, let's remove it from
mirrorlist_proxies till the situation is resolved.

This will fix mirrorlist-statistics cronjob. See
https://pagure.io/fedora-infrastructure/issue/12993 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-19 13:37:35 +01:00
Ryan Lerch
b395302ecc [forge] - enable email notifications by default 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 22:35:53 +10:00
Jakub Kadlcik
c97e52d18d copr-fe: configure high-perf builders for npache/Kernel-ark-ci 
Fix https://github.com/fedora-copr/copr/issues/4118
 2026-01-19 10:52:59 +01:00
Ryan Lerch
2415856c73 Add additional groups to match the forge naming scheme. 
Resolves: https://forge.fedoraproject.org/forge/forge/issues/350

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 18:56:48 +10:00
Ryan Lerch
4ca651c1f2 [forge] adding some formatting to the group map for prod 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 17:32:43 +10:00
Ryan Lerch
9c8a47f5fb [forge] try adding some formatting to the group map in staging 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 17:20:42 +10:00
Akashdeep Dhar
05225400a6 Map for Operations, Mindshare, Mentorship and Marketing 
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
 2026-01-19 16:59:43 +10:00
Ryan Lerch
cf82acd017 [forge] add COSMIC sif team mappings 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 16:20:45 +10:00
James Antill
bded16fdab stg.pagure.io: Test against pagure-staging. Also change prod. test. 
Signed-off-by: James Antill <james@and.org>
 2026-01-16 15:07:45 -05:00
Ryan Lerch
2a1e4ae525 [forge] - revert changes to staging map, and add asahi teams 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-16 13:09:19 +10:00
Hristo Marinov
b6538653e2 proxies-redirects.yml: Atomic Desktops Docs Fix 
See https://pagure.io/fedora-infra/ansible/pull-request/3035
 2026-01-15 23:26:10 +00:00
Gregory Bartholomew
0535d64f12 proxies-redirects: point fedoracommunity.org at the fedora wiki 
Since there are still a handful of active community sites and they are
documented in the Fedora Wiki, point fedoracommunity.org at the Fedora
Wiki so they can be found.

Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
 2026-01-15 23:22:21 +00:00
Kevin Fenzi
e5f736c308 riscv-kojipkgs: add a custom reversepassproxy config 
This will help not expose things we should not.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-15 12:36:40 -08:00
Kevin Fenzi
5298fcbd4b proxy03/14: fix larger memory sizes 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-15 11:41:26 -08:00
Aashish Radhakrishnan
1d48d46cde Remove coreos-ostree-importer.stg certificate entry 2026-01-15 19:27:10 +00:00
Aashish Radhakrishnan
a18576f826 Remove coreos-ostree-importer playbook and templates 
Removes the OpenShift configuration for coreos-ostree-importer including
playbooks and related templates

Ref: https://github.com/coreos/fedora-coreos-tracker/issues/2070
 2026-01-15 19:27:10 +00:00
Aurélien Bompard
20064ac2d4 Use blocks to apply the tags to the tasks within an included role 
See: https://docs.ansible.com/projects/ansible/latest/playbook_guide/playbooks_tags.html#tag-inheritance-for-includes-blocks-and-the-apply-keyword

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2026-01-15 18:16:04 +01:00
Aurélien Bompard
223288d6c8 Ansible can't loop over roles 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2026-01-15 18:06:42 +01:00
Greg Sutcliffe
4b8780246b Nagios: another batch of services moved to Zabbix 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2026-01-15 15:43:45 +00:00
Greg Sutcliffe
d87851c2a3 Zabbix: fix typo in datanommer item tags 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2026-01-15 15:43:45 +00:00
Michal Konecny
6fc54fb18c [bodhi] Increase the amount of staging consumers 
See https://pagure.io/fedora-infrastructure/issue/12932.

The Bodhi needs some optimization as the processing of some messages
takes 40 seconds. We need to keep at least 10 consumers to handle the
load on staging.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-15 16:33:52 +01:00
Jakub Kadlcik
f68255f1ae copr-be-dev: upgrade builder images to F43 
Except for HV because of https://github.com/fedora-copr/copr/issues/4040
 2026-01-15 14:50:12 +01:00
Jakub Kadlcik
938f070470 copr-be-dev: use image-builder for uploading to OSUOSL OpenStack 2026-01-15 14:50:12 +01:00
Jakub Kadlcik
7a85d348d4 copr-be-dev: use image-builder for uploading images to IBM Cloud 
Completely dropping the dependency on
https://github.com/praiskup/ibmcloud-cli-fedora-container

Although I needed to copy its `create_in_region` function here to this code.
That part is not supported by `image-builder` yet. But either way, we don't
need the `ibmcloud` binary at this point.
 2026-01-15 14:50:12 +01:00
Jakub Kadlcik
afc0a2c783 copr: install jq on our servers 2026-01-15 14:50:12 +01:00
Hristo Marinov
b07c973305 proxies-redirects.yml: Atomic Desktops docs: Fix regex 2026-01-14 21:23:38 +00:00
Hristo Marinov
10bfb9b3ba proxies-redirects.yml: Atomic Desktops docs 
Redirects for individual Atomic Desktops docs URLs to to the unified single one
 2026-01-14 21:23:38 +00:00
James Antill
c3e35d5807 Try to deal with giant bodhi_bodhi-consumer-13-mdrln_bodhi etc. messages. 
Signed-off-by: James Antill <james@and.org>
 2026-01-14 11:02:16 -05:00
James Antill
fef533ae90 updates+uptimes: Minor UI changes, mostly --history 
Signed-off-by: James Antill <james@and.org>
 2026-01-14 10:59:33 -05:00
Anton Medvedev
dcd31e878e feat(robosignatory): f44-rebuild autosigning mass rebuild tag 
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
 2026-01-14 13:54:50 +00:00
Greg Sutcliffe
93ed0457e0 Nagios: remove first batch of services 
This removes the known-good things we've had in Zabbix for a while -
RAID, disk space, processes, and mail queue. It also removes swap which
we've decided we don't need.

Also includes some FS overrides on the Zabbix side so the relevant
NFS mounts get monitored on the OCI, and pkgs hosts, as per Nagios had.

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2026-01-14 10:25:15 +00:00
Ryan Lerch
3cb16462ea forge-dist-git: add group mappings for sigs 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-14 11:49:53 +10:00
Akashdeep Dhar
a4add50740 Perform mapping for Fedora Localization teams and groups 
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
 2026-01-14 00:37:15 +00:00
Tomáš Hrčka
f836929e43 Update roles/anubis/templates/policies.yaml.j2 
Add attlasian to the allow list in anubis
 2026-01-14 00:06:10 +00:00
Gregory Bartholomew
34b9084d52 websites: Revive the Fedora Community website redirect for Brasil 
There is a request to fix the link for the Fedora Community Brasil site
that has been open for over a year, but it was filed in the old Pagure
repo, so I hadn't noticed it until now.

https://pagure.io/fedora-websites/pull-request/1246

Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
 2026-01-13 23:52:41 +00:00
Michael Scherer
4a6c6cf37e Disable TCP forwarding on sshd 
While there is a firewall on most of the the hosting facilities used
by the project, this is another layer of protection.
 2026-01-13 23:46:37 +00:00
Kevin Fenzi
71c59eb4c4 matrix: add org.matrix.msc2965.authentication for mas migration 
EMS is updating our servers (both fedora.im and fedoraproject.org) to
use MAS (Matrix Auth Service). This will allow users to use new
element-x and such.

We need to add these things in order for older clients to still be
able to connect/get to the right place for auth.

These files should be valid json, please check

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-13 23:37:40 +00:00
Kevin Fenzi
8caea853ad base: rsyslog-audit: no audit to log01 in aws 
In the aws 'datacenter' we don't want to send audit logs to log01, since
there is no access to log01 from there and it just doesn't work.

https://pagure.io/fedora-infrastructure/issue/12947

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-13 14:15:12 -08:00
Kevin Fenzi
57f13b1a73 poddlers: remove unused override 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-13 14:02:59 -08:00
Carl George
0f16bf1dc3 Revert "batcave: modify rhel10-sync to delete problematic redhat-release package" 
This reverts commit 3e4f01e82c.  The
underlying issue was resolved in redhat-release-10.1-18.el10.

Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2026-01-13 14:59:00 -06:00
Aurélien Bompard
2d80cc95c2 Cleanup stage users: loop over all the pages 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2026-01-13 17:31:12 +01:00
Michal Konecny
d18fb23702 [languages] Suspend cron jobs 
We don't need cron jobs to run anymore.

See https://pagure.io/fedora-infrastructure/issue/12998 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-13 14:28:51 +01:00
Michal Konecny
e737326250 [languages] Set replica value to 0 
Let's keep the project around, just set it to 0.

See https://pagure.io/fedora-infrastructure/issue/12998 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-13 14:20:44 +01:00
Kevin Fenzi
443cac3cb1 varnish: remove commented block from 11 years ago 
I can't recall why we disabled this at the time, but it's been disabled
for 11 years, so the likelyhood of us needing it now is low.

So, lets just delete it.

See https://pagure.io/fedora-infrastructure/issue/13002 for discussion.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-12 12:50:31 -08:00
Kevin Fenzi
15003c92ed koji_hub: add cef to heavybuilder 
See https://pagure.io/fedora-infrastructure/issue/12995
We want to be careful adding anything here, but the same reasons we add
chromium are in play here. There's no ppc64le or s390x builds, so it
will just affect aarch64 and x86_64 where we have a lot of hosts in
heavybuilder channel.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-12 12:44:39 -08:00