Commit Graph

43778 Commits

Author SHA1 Message Date
Michal Konecny
ac63dc1ed1 [freemedia] Use the correct module name 2025-07-11 14:14:39 +02:00
Michal Konecny
f18b2fbf84 [freemedia] Fix lint errors
Let's make the ansible-lint happy.
2025-07-11 14:08:17 +02:00
Michal Konecny
2cea99c83e [freemedia] Use sefcontext module
Instead of command that is setting SELinux context (not applying it)
let's use module that will do that for us.
2025-07-11 13:50:50 +02:00
Adam Williamson
666196bbed openqa/worker: don't start worker unless NFS mount is up
There's this annoying pattern where the NFS mount fails on boot
and then the worker services all start up and take jobs, but they
instafail because the share isn't there.

Ideally we could handle this very easily with Restart= directives
but systemd has...*opinions* about this:

https://github.com/systemd/systemd/issues/4468
https://github.com/systemd/systemd/issues/1312

so we have to do some fairly awkward hacks to just express:

* Retry the NFS mount if it fails
* Don't start the workers unless the NFS mount is up
* Retry the workers after a while if they were blocked

It's ugly, but in testing this same config on one worker it seems
to work...

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-07-10 19:07:54 -07:00
Kevin Fenzi
a64ef334cc ns02.rdu3 becomes ns03.rdu3.
This is to disambiguate 'ns02'. Right now we have ns02.fedoraproject.org
and also ns02.rdu3.fedoraproject.org. After this we will just have a
ns02 and a ns03.rdu3 server.

This will also allow us to more easily change whois/glue records.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-10 10:53:19 -07:00
Michal Konecny
7f7d887102 [nagios_client] Add missing nagios plugin
When looking at the mailman alert I found out that it's using
nagios-plugins-http, which is not installed by default. So let's add it
to list of installed packages.
2025-07-10 15:45:42 +02:00
Aurélien Bompard
fd48d02915 Improve the check_ipa_free_ids.py script to be able to set thresholds
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-10 11:53:25 +02:00
Aurélien Bompard
0c6153cebe Create an IPA service for monitoring and use it for check-ipa-free-ids
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-10 11:46:05 +02:00
Aurélien Bompard
5d1c0427c9 Nagios: use a keytab for check_ipa_free_ids
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-10 10:17:07 +02:00
Michal Konecny
4658698927 [openshift] Update sysadmin openshift group
* Add myself to sysadmin openshift
* Remove Vipul as he is no longer in the project
2025-07-10 08:05:07 +02:00
Akashdeep Dhar
c319941db9 Add client config for W2FM UI test environment
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-07-10 05:16:44 +00:00
Kevin Fenzi
434f2f9405 inventory: add bodhi-backend01.stg to staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-09 16:06:44 -07:00
Kevin Fenzi
70c633121e Add bodhi-backend01.stg and adjust value01
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-09 16:00:08 -07:00
Kevin Fenzi
05311f97fc flatpak-cache01: use correct vmhost
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-09 11:21:31 -07:00
Kevin Fenzi
0228df9cd0 flatpak-cache01: add rdu3 host vars and install
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-09 11:16:50 -07:00
Kevin Fenzi
233ec96688 inventory: drop non existant machines
These are various machines that are not yet deployed, or no longer exist
in rdu3 (though they did in iad2). This should clean up nagios
a fair bit and when/if we redeploy these we can add them back in.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-09 10:26:51 -07:00
Aurélien Bompard
cf00289c06 Add a Nagios check to monitor IPA ID ranges
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-09 17:27:19 +02:00
Aurélien Bompard
4272c8aa77 proxy04 and proxy12 are reachable again
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-09 16:16:12 +02:00
Aurélien Bompard
02abc93d59 Add a script to send queue metrics to CentOS's Zabbix
Fixes: https://pagure.io/fedora-infrastructure/issue/12617

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-09 15:13:32 +02:00
Yaakov Selkowitz
cddfb47925 releng: tweak eln compose schedule
Signed-off-by: Yaakov Selkowitz <yselkowi@redhat.com>
2025-07-08 23:28:08 +00:00
Nils Philippsen
3f2138029b Add myself to sysadmin-openshift
Signed-off-by: Nils Philippsen <nils@redhat.com>
2025-07-08 23:21:29 +00:00
Nils Philippsen
59e778fa99 ansible-lint: Name ocp4-sysadmin-openshift play
Signed-off-by: Nils Philippsen <nils@redhat.com>
2025-07-08 23:21:29 +00:00
Justin Wheeler
91ea4432e0 📧 roles(fasjson): Update codeofconduct alias for current membership
This commit changes the `codeofconduct` email alias to account for the
departure of Matthew Miller (@mattdm) and Marie Nordin (@riecatnor) as
members of the Code of Conduct Committee. Additionally, @jspaleta will
eventually receive mail sent to this alias after the `fpl` alias is
updated. Also, Dorka Volavkova (@dvolavko) is retiring as a full member
of the Fedora Code of Conduct Committee, and instead, will serve as a
member of the Flock to Fedora on-site response team, along with several
other appointees for the purpose of Flock.

Additionally, @jberkus and @nimbinatus are added as temporary members
until September 30th, 2025 on the Fedora Code of Conduct Committee, to
fill in for the recent departures and my planned leave of absence later
this month.

ref: https://docs.fedoraproject.org/en-US/project/code-of-conduct/committee/
ref: https://pagure.io/CoC/issue/355

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2025-07-08 23:20:14 +00:00
Michael Scherer
ae20e8c26c Add a script for the Fedora Username Change project
It will be replaced by self service on Noggin one day
and will be removed by then.
2025-07-08 23:10:57 +00:00
James Antill
3ea2e91e4f pagure: Add a copy of rsyslog-logrotate where ansible can find it.
Signed-off-by: James Antill <james@and.org>
2025-07-08 18:20:09 -04:00
James Antill
dd4caad147 pagure: Update the tasks for logrotate.
Signed-off-by: James Antill <james@and.org>
2025-07-08 17:47:17 -04:00
James Antill
3c4184912e pagure: Use the basefile as we moved from syslog to rsyslog.
Signed-off-by: James Antill <james@and.org>
2025-07-08 17:13:51 -04:00
James Antill
89aa66ca33 pagure: Add new SSH keys data to the config.
Signed-off-by: James Antill <james@and.org>
2025-07-08 17:10:32 -04:00
Kevin Fenzi
9053bd61a4 mailman01.stg: this host should be in the staging group
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-08 14:07:43 -07:00
Kevin Fenzi
6d796a6fff basset: remove monitoring, we havent deployed this in years
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-08 10:45:24 -07:00
David Kirwan
1014db5bf0 forgejo: run helm dependencdy update before calling chart
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-07-08 13:23:55 +01:00
David Kirwan
284e150a3c forgejo: create the oadp secret from file
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-07-08 13:10:52 +01:00
David Kirwan
1c0b3f2cac os-control: ensure kubernetes package is available on os-control(s)
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-07-08 10:45:00 +01:00
Kevin Fenzi
4628e2d52a zezere: drop the reverseproxy so the redirect will work
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-07 16:15:26 -07:00
Aurélien Bompard
60b7c10cf4 RabbitMQ: set the max acknowledgment time to 6h
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-07 23:41:51 +02:00
Nils Philippsen
28f63de007 people: Install tar
Fixes: #12638

Signed-off-by: Nils Philippsen <nils@redhat.com>
2025-07-07 19:14:09 +00:00
Justin Wheeler
f21d2fa01a 📧 roles(fasjson): Update fpl mail alias
This commit makes a notable change to the use of the `fpl` email alias
and reassigns some mail aliases from @mattdm to @jspaleta, as the new
Fedora Project Leader. This will also formally transition all email sent
to the `fpl` alias to Jef.

Some other minor changes were made here:

- Create `cle-managers` alias, move existing aliases in `cpe-managers`
  here, redirect `cpe-managers` to `cle-managers`. Also add a helpful
  comment to clarify the primary purpose of this alias and who is on it.
- Add @mattdm to the `cle-managers` alias, since he is a CLE manager!
- Make `fpl` the alias that is assigned to an individual, instead of
  `chair`.
- Send `legal` alias mail to `fpl` instead of @mattdm.
- Add `fpl` alias to `fedora-docker-trusted` alias. I kept @mattdm here
  for now because I am not sure about the historical use or purpose of
  this alias. Matthew could elect later to be removed from this alias if
  necessary.

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2025-07-07 12:51:22 -04:00
Kevin Fenzi
a75c44d3ff koji_builder: try and fix /mnt/koji link for riscv buildvms
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-07 09:43:58 -07:00
Kevin Fenzi
21f6b5acf8 bodhi: use fqdn for bastion/smtp host
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-07 09:04:11 -07:00
Aurélien Bompard
bd65adc71d routing_keys is a list
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-07 17:57:31 +02:00
Aurélien Bompard
83ce202846 Don't expire queues at all in the /pubsub vhost
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-07 17:13:08 +02:00
Aurélien Bompard
56fb57934b Ipsilon: adjust rewrite rule because apache now adds the / prefix
Fixes: https://pagure.io/fedora-infrastructure/issue/12624

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-07 16:36:42 +02:00
Aurélien Bompard
82b4bb3b4e Change the fedocal OIDC callback URL
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-07 12:14:00 +02:00
Aurélien Bompard
7da433b68c fedocal: use a more recent version of Python for prod too
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-07-07 10:31:03 +02:00
Kevin Fenzi
cb3a9a1bc7 proxies: add a tag for meetbot-raw config
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-06 18:50:35 -07:00
Carl George
0f03b772e5 roles/bodhi2: Disable delta RPMs for EPEL 8
We previously disabled delta RPMs for EPEL 9 and 10.  It looks like we
should disable this for EPEL 8 as well, because Pulp 3 (part of
Satellite 6.17) intentionally blocks mirror syncing of repos with delta
RPMs.

Related: https://pagure.io/fedora-infra/ansible/pull-request/2391
Related: https://community.theforeman.org/t/content-management-suse-drpm-files-not-syncing/25243
Resolves: https://pagure.io/releng/issue/12790
2025-07-06 22:26:04 +00:00
Kevin Fenzi
ae2432c684 people: increase quota for dusty ( ticket 12614 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-06 15:23:23 -07:00
František Zatloukal
7d54a27e26 Blockerbugs: project_alert_users: kparal 2025-07-06 21:54:25 +02:00
Yaakov Selkowitz
f3fcf8fe01 releng: fix /mnt/koji on compose-eln
This appears to be a thinko; stg compose machines use /mnt/fedora_koji_prod.

Signed-off-by: Yaakov Selkowitz <yselkowi@redhat.com>
2025-07-06 13:21:28 -04:00
Kevin Fenzi
3a9405cd77 bvirthost: increase default number of processes before alerting
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-07-06 09:37:40 -07:00