WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-03-20 03:57:02 +08:00
Code Issues Packages Projects Releases Wiki Activity
45,338 Commits 9 Branches 0 Tags
a943654af2095b3da4c730ce38e5c6c53a258b0f
Commit Graph

27503 Commits

Author SHA1 Message Date
Kevin Fenzi
a754144f19 Update infra pagure.io links to forge.fp.o (WIP) 
This should update all the references we have to
https://pagure.io/fedora-infrastructure to the
new https://forge.fedoraproject.org/infra/tickets/ area.

Do not merge this before the migration on tuesday.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-20 14:39:40 -08:00
Michal Konecny
867111750e [ipsilon] Add OIDC entry for GNOME Damned Lies 
Add staging OIDC entry to ipsilon for GNOME Damned Lies. See more info
in https://pagure.io/fedora-infrastructure/issue/13017.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-20 15:16:48 +01:00
Greg Sutcliffe
babb906403 Zabbix: increase value cache size 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2026-01-20 13:51:43 +00:00
Akashdeep Dhar
c060befdf9 Provide namespace/group mapping for translations 
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
 2026-01-20 11:30:36 +00:00
Jakub Kadlcik
7a7d7dac7d copr-be-dev: use image-builder for uploads to libvirt 
There is a small bug in the `image-builder upload` code, causing it to always
use the "default" libvirt pool. I am proposing a fix here
https://github.com/osbuild/images/pull/2147
and I uploaded the current builder images with the patched version.
 2026-01-20 11:24:12 +01:00
Justin Wheeler
0ba3182601 📧 roles(fasjson): Use flock-team FAS group membership for emails 
This commit uses the `flock-team` FAS group to direct who receives
emails for the members and sponsors email of the FAS group. By default,
group sponsors will receive mail for Flock sponsorship, while all group
members will receive email for mail sent to the Flock staff mail alias.

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
 2026-01-20 10:17:49 +00:00
Ryan Lerch
31ac8f1ff1 [forge] notify admins on new user creation 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-20 18:07:59 +10:00
Ryan Lerch
fd7c38b8f8 [forge]: require additional emails to be verified 
resolves: https://forge.fedoraproject.org/forge/forge/issues/352

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-20 18:00:27 +10:00
Ryan Lerch
aa5124ddc5 [forge] dont require email confirm for oauth2 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-20 09:43:36 +10:00
Ryan Lerch
4d84bce710 [forge] enable email confirm for staging 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-20 08:50:20 +10:00
x3mboy
f79959431b Updating the podcast team members 2026-01-19 22:34:44 +00:00
Gregory Bartholomew
86696cf807 dl.fedoraproject.org: make *-CHECKSUM files download 
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
 2026-01-19 22:30:08 +00:00
Kevin Fenzi
d00ef11307 Save pingou's email box 
We should not flood his mailbox anymore.

I set it to go to admin@fedoraproject.org, but if it's too much for
everyone we could just set it to nobody, or adjust it so it doesn't send
so many, or something else.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 22:25:57 +00:00
Kevin Fenzi
c5482adb6c proxy03/14: set hosts to use internal ip for gateway 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 13:59:03 -08:00
Kevin Fenzi
561b15591d proxy03/14: use correct hostname for ccd file 
This is based on the hostname, and will assign the actual correct vpn
ips to proxy03/14, which will help https://pagure.io/fedora-infrastructure/issue/12833

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 13:54:02 -08:00
Kevin Fenzi
8db612803a pagure: hard code gateway to the internal ip for now 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-19 09:21:27 -08:00
Ryan Lerch
b395302ecc [forge] - enable email notifications by default 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 22:35:53 +10:00
Jakub Kadlcik
c97e52d18d copr-fe: configure high-perf builders for npache/Kernel-ark-ci 
Fix https://github.com/fedora-copr/copr/issues/4118
 2026-01-19 10:52:59 +01:00
Ryan Lerch
2415856c73 Add additional groups to match the forge naming scheme. 
Resolves: https://forge.fedoraproject.org/forge/forge/issues/350

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 18:56:48 +10:00
Ryan Lerch
4ca651c1f2 [forge] adding some formatting to the group map for prod 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 17:32:43 +10:00
Ryan Lerch
9c8a47f5fb [forge] try adding some formatting to the group map in staging 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 17:20:42 +10:00
Akashdeep Dhar
05225400a6 Map for Operations, Mindshare, Mentorship and Marketing 
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
 2026-01-19 16:59:43 +10:00
Ryan Lerch
cf82acd017 [forge] add COSMIC sif team mappings 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-19 16:20:45 +10:00
Ryan Lerch
2a1e4ae525 [forge] - revert changes to staging map, and add asahi teams 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-16 13:09:19 +10:00
Kevin Fenzi
e5f736c308 riscv-kojipkgs: add a custom reversepassproxy config 
This will help not expose things we should not.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-15 12:36:40 -08:00
Aashish Radhakrishnan
1d48d46cde Remove coreos-ostree-importer.stg certificate entry 2026-01-15 19:27:10 +00:00
Aashish Radhakrishnan
a18576f826 Remove coreos-ostree-importer playbook and templates 
Removes the OpenShift configuration for coreos-ostree-importer including
playbooks and related templates

Ref: https://github.com/coreos/fedora-coreos-tracker/issues/2070
 2026-01-15 19:27:10 +00:00
Greg Sutcliffe
4b8780246b Nagios: another batch of services moved to Zabbix 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2026-01-15 15:43:45 +00:00
Greg Sutcliffe
d87851c2a3 Zabbix: fix typo in datanommer item tags 
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2026-01-15 15:43:45 +00:00
Michal Konecny
6fc54fb18c [bodhi] Increase the amount of staging consumers 
See https://pagure.io/fedora-infrastructure/issue/12932.

The Bodhi needs some optimization as the processing of some messages
takes 40 seconds. We need to keep at least 10 consumers to handle the
load on staging.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-15 16:33:52 +01:00
Jakub Kadlcik
938f070470 copr-be-dev: use image-builder for uploading to OSUOSL OpenStack 2026-01-15 14:50:12 +01:00
Jakub Kadlcik
7a85d348d4 copr-be-dev: use image-builder for uploading images to IBM Cloud 
Completely dropping the dependency on
https://github.com/praiskup/ibmcloud-cli-fedora-container

Although I needed to copy its `create_in_region` function here to this code.
That part is not supported by `image-builder` yet. But either way, we don't
need the `ibmcloud` binary at this point.
 2026-01-15 14:50:12 +01:00
Jakub Kadlcik
afc0a2c783 copr: install jq on our servers 2026-01-15 14:50:12 +01:00
James Antill
c3e35d5807 Try to deal with giant bodhi_bodhi-consumer-13-mdrln_bodhi etc. messages. 
Signed-off-by: James Antill <james@and.org>
 2026-01-14 11:02:16 -05:00
Anton Medvedev
dcd31e878e feat(robosignatory): f44-rebuild autosigning mass rebuild tag 
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
 2026-01-14 13:54:50 +00:00
Greg Sutcliffe
93ed0457e0 Nagios: remove first batch of services 
This removes the known-good things we've had in Zabbix for a while -
RAID, disk space, processes, and mail queue. It also removes swap which
we've decided we don't need.

Also includes some FS overrides on the Zabbix side so the relevant
NFS mounts get monitored on the OCI, and pkgs hosts, as per Nagios had.

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
 2026-01-14 10:25:15 +00:00
Ryan Lerch
3cb16462ea forge-dist-git: add group mappings for sigs 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2026-01-14 11:49:53 +10:00
Akashdeep Dhar
a4add50740 Perform mapping for Fedora Localization teams and groups 
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
 2026-01-14 00:37:15 +00:00
Tomáš Hrčka
f836929e43 Update roles/anubis/templates/policies.yaml.j2 
Add attlasian to the allow list in anubis
 2026-01-14 00:06:10 +00:00
Michael Scherer
4a6c6cf37e Disable TCP forwarding on sshd 
While there is a firewall on most of the the hosting facilities used
by the project, this is another layer of protection.
 2026-01-13 23:46:37 +00:00
Kevin Fenzi
71c59eb4c4 matrix: add org.matrix.msc2965.authentication for mas migration 
EMS is updating our servers (both fedora.im and fedoraproject.org) to
use MAS (Matrix Auth Service). This will allow users to use new
element-x and such.

We need to add these things in order for older clients to still be
able to connect/get to the right place for auth.

These files should be valid json, please check

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-13 23:37:40 +00:00
Kevin Fenzi
8caea853ad base: rsyslog-audit: no audit to log01 in aws 
In the aws 'datacenter' we don't want to send audit logs to log01, since
there is no access to log01 from there and it just doesn't work.

https://pagure.io/fedora-infrastructure/issue/12947

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-13 14:15:12 -08:00
Kevin Fenzi
57f13b1a73 poddlers: remove unused override 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-13 14:02:59 -08:00
Carl George
0f16bf1dc3 Revert "batcave: modify rhel10-sync to delete problematic redhat-release package" 
This reverts commit 3e4f01e82c.  The
underlying issue was resolved in redhat-release-10.1-18.el10.

Signed-off-by: Carl George <carlwgeorge@gmail.com>
 2026-01-13 14:59:00 -06:00
Aurélien Bompard
2d80cc95c2 Cleanup stage users: loop over all the pages 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2026-01-13 17:31:12 +01:00
Michal Konecny
d18fb23702 [languages] Suspend cron jobs 
We don't need cron jobs to run anymore.

See https://pagure.io/fedora-infrastructure/issue/12998 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-13 14:28:51 +01:00
Michal Konecny
e737326250 [languages] Set replica value to 0 
Let's keep the project around, just set it to 0.

See https://pagure.io/fedora-infrastructure/issue/12998 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2026-01-13 14:20:44 +01:00
Kevin Fenzi
443cac3cb1 varnish: remove commented block from 11 years ago 
I can't recall why we disabled this at the time, but it's been disabled
for 11 years, so the likelyhood of us needing it now is low.

So, lets just delete it.

See https://pagure.io/fedora-infrastructure/issue/13002 for discussion.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-12 12:50:31 -08:00
Kevin Fenzi
15003c92ed koji_hub: add cef to heavybuilder 
See https://pagure.io/fedora-infrastructure/issue/12995
We want to be careful adding anything here, but the same reasons we add
chromium are in play here. There's no ppc64le or s390x builds, so it
will just affect aarch64 and x86_64 where we have a lot of hosts in
heavybuilder channel.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2026-01-12 12:44:39 -08:00
Jakub Kadlcik
4997a77bd0 copr-be: automatically AWS images with FedoraGroup=copr 2026-01-12 16:33:17 +01:00