Commit Graph

9187 Commits

Author SHA1 Message Date
James Antill
03865d03b3 batcave: Move from mirror_pagure_ansible to mirror_forge_ansible.
Signed-off-by: James Antill <james@and.org>
2026-02-16 18:17:13 -05:00
Pavel Raiskup
55f225d428 copr-hv: typofix 2026-02-16 08:11:22 +01:00
Pavel Raiskup
7faef4610c copr-hv: tag the Copr-specific role 2026-02-16 08:09:51 +01:00
James Antill
c4c58299c2 check-etc: Add playbook to check /etc for old/unmanaged files.
Signed-off-by: James Antill <james@and.org>
2026-02-14 09:52:16 -05:00
Angel Cervera Roldan
59debdda2c Update playbooks/openshift-apps/fedora-coreos-pipeline.yml 2026-02-10 13:42:04 +00:00
Gregory Bartholomew
502f7c6273 openshift-apps/websites: requesting access for glb
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-02-01 11:19:51 -06:00
Kevin Fenzi
39563d49fe noc-cc01 is no more
Remove it from main and remove it's playbook.
It was already removed from anisible.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-31 16:40:52 -08:00
Kevin Fenzi
c0f13a07e1 generate-updates-per-host: try explicitly disabling become
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-30 11:18:19 -08:00
Kevin Fenzi
3d68919779 updates/uptimes: use user root
Some hosts don't seem to be setup right for sudo/become (copr mostly).
Just use root like our normal ansible stuff does.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-30 11:01:28 -08:00
Kevin Fenzi
5091fd4373 ocp-rdu3: retire this host/proxy/cert now that we are moved
There's no need to keep ocp-rdu3 around anymore, we only used
it when we were moving datacenters last year.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-30 10:35:10 -08:00
James Antill
13d2c38ad0 proxies: Add stg.fp.o tags for wildcard cert changes.
Signed-off-by: James Antill <james@and.org>
2026-01-29 16:12:58 -05:00
James Antill
0dd9a4f2c4 proxies: Renewed stg.fp.o wildcard cert
Signed-off-by: James Antill <james@fedoraproject.org>
2026-01-29 15:30:33 -05:00
David Kirwan
ec59933a54 adding os-control01 to backups01 management
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-01-28 13:49:54 +00:00
Justin Wheeler
5d6a775e51 🔧 proxies-redirects: Write simpler regex for redirect rules
This commit standardizes the regex redirection used for all Fedora Docs
sites where a language code is involved in the original site and the
redirected site. This new regex pattern matches anything between the
slashes where the language code for the Fedora Docs site appears. This
allows for greater flexibility of anything that may appear now or in the
future for the language codes, including some that use two letters and
others that use four letters.

It makes the redirect consistent across all Fedora Docs redirects, in
the general aim of promoting a common best practice for Fedora Docs
redirects for old site names to new ones.

CC: @pbokoc @pboy

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-01-27 18:01:42 +00:00
Justin Wheeler
7d325cb3ac 🔧 proxies-redirects: docs.fp.o, s/program_management/operations/
This commit adds a new redirect rule for the migration of the Fedora
Operations Architect documentation, or the Fedora Program Management
docs, into their new home as Fedora Program Operations docs. This will
fit in with the new Forgejo home for these docs, and help give a better
home and identity to the efforts around program management for Fedora,
like the release schedule and other core parts of the release program
and schedule.

I also added a `docs` tag since it is a Fedora Docs-specific redirect.

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-01-27 17:31:52 +00:00
Greg Sutcliffe
00e4eb6b3d Proxies: Fixes #13051 - remove old cert management for getfedora
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-22 22:39:24 +00:00
Kevin Fenzi
9717d920af anubis: rename anubis-el8 to anubis-el and see about enabling on download
Looks like the scrapers are hitting the download servers now.
So, look at setting up an anubis pod there like we did for pagure.
anubis package isn't available for epel9, so we just use the container.

Will test this with dl01 and tweak until it's working.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 08:50:34 -08:00
Adam Williamson
d76afa032b Move the qa-landingpage reverse proxy config removal
...we already have a better place to do this, it turns out.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 15:44:01 -08:00
Adam Williamson
a994e1031a Gah, drop the when as well
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:46:39 -08:00
Adam Williamson
c2f25426e8 Try and fix the qa redirect
ugh, it's hard to understand this stuff.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:46:16 -08:00
Adam Williamson
2a5465404f proxies-redirects: add a tag for the qa redirects
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:36:47 -08:00
Adam Williamson
382f947eff Drop qa-landingpage, clean up blockerbugs config a bit
Per https://pagure.io/fedora-qa/issue/859 we want to drop the QA
landing page at qa.fedoraproject.org. This should turn it back
into a redirect to the wiki page. We also drop the certificate
for qa.fp.o (since blockerbugs uses the wildcard certificate
anyway) and remove a duplicate reverseproxy entry for blockerbugs
(we had two otherwise-identical entries that were restricted to
prod and stg with `when` conditions).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:29:13 -08:00
Greg Sutcliffe
0e0b5f92c6 Zabbix: add shush/ok scripts and playbook
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-21 17:00:06 +00:00
Kevin Fenzi
a754144f19 Update infra pagure.io links to forge.fp.o (WIP)
This should update all the references we have to
https://pagure.io/fedora-infrastructure to the
new https://forge.fedoraproject.org/infra/tickets/ area.

Do not merge this before the migration on tuesday.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-20 14:39:40 -08:00
Rolv Apneseth
c3af50bd49 Add user rapneset to playbooks/openshift-apps/fedora-coreos-pipeline.yml 2026-01-20 10:44:56 +00:00
Gregory Bartholomew
d0fe436ca2 proxies-redirects: fix extra trailing slash on getfedora.org redirect
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-19 22:28:30 +00:00
James Antill
bded16fdab stg.pagure.io: Test against pagure-staging. Also change prod. test.
Signed-off-by: James Antill <james@and.org>
2026-01-16 15:07:45 -05:00
Hristo Marinov
b6538653e2 proxies-redirects.yml: Atomic Desktops Docs Fix
See https://pagure.io/fedora-infra/ansible/pull-request/3035
2026-01-15 23:26:10 +00:00
Gregory Bartholomew
0535d64f12 proxies-redirects: point fedoracommunity.org at the fedora wiki
Since there are still a handful of active community sites and they are
documented in the Fedora Wiki, point fedoracommunity.org at the Fedora
Wiki so they can be found.

Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-15 23:22:21 +00:00
Aashish Radhakrishnan
a18576f826 Remove coreos-ostree-importer playbook and templates
Removes the OpenShift configuration for coreos-ostree-importer including
playbooks and related templates

Ref: https://github.com/coreos/fedora-coreos-tracker/issues/2070
2026-01-15 19:27:10 +00:00
Aurélien Bompard
20064ac2d4 Use blocks to apply the tags to the tasks within an included role
See: https://docs.ansible.com/projects/ansible/latest/playbook_guide/playbooks_tags.html#tag-inheritance-for-includes-blocks-and-the-apply-keyword

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-01-15 18:16:04 +01:00
Aurélien Bompard
223288d6c8 Ansible can't loop over roles
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-01-15 18:06:42 +01:00
Michal Konecny
6fc54fb18c [bodhi] Increase the amount of staging consumers
See https://pagure.io/fedora-infrastructure/issue/12932.

The Bodhi needs some optimization as the processing of some messages
takes 40 seconds. We need to keep at least 10 consumers to handle the
load on staging.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-15 16:33:52 +01:00
Hristo Marinov
b07c973305 proxies-redirects.yml: Atomic Desktops docs: Fix regex 2026-01-14 21:23:38 +00:00
Hristo Marinov
10bfb9b3ba proxies-redirects.yml: Atomic Desktops docs
Redirects for individual Atomic Desktops docs URLs to to the unified single one
2026-01-14 21:23:38 +00:00
Gregory Bartholomew
34b9084d52 websites: Revive the Fedora Community website redirect for Brasil
There is a request to fix the link for the Fedora Community Brasil site
that has been open for over a year, but it was filed in the old Pagure
repo, so I hadn't noticed it until now.

https://pagure.io/fedora-websites/pull-request/1246

Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-13 23:52:41 +00:00
Michal Konecny
fd247ae355 [proxies] Remove the reverse proxy for languages
This seems to conflict with redirect config. So let's remove it.

See https://pagure.io/fedora-infrastructure/issue/12998 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-05 15:37:24 +01:00
Michal Konecny
540ec86d79 [proxies] Add redirect for languages.fp.o
See https://pagure.io/fedora-infrastructure/issue/12998 for more info.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-05 15:06:18 +01:00
Huijing Hei
76a5fb4097 coreos-ci: add hhei as appowners 2026-01-05 08:50:54 +00:00
Pragyan Poudyal
bc1cae0f5f Update playbooks/openshift-apps/coreos-ci.yml
Add pragyan-poudyal to appowners
2026-01-05 08:49:09 +00:00
Greg Sutcliffe
b3b1947c21 Zabbix: Update host_reboot play to shush Zabbix
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-12-19 13:15:01 +00:00
Adam Williamson
01150e5290 elections: use set-forwarded-headers: replace for now
This should 'fix' broken redirects in the elections UI, see
https://pagure.io/fedora-infrastructure/issue/12997 .

This probably isn't ultimately the correct fix but it should make
things work for now. The real issue seems to be that elections'
custom WSGI app wrapper which attempts to handle the app being
reverse-proxied doesn't handle all proxied headers and/or doesn't
handle comma-separated list values. The long-term fix is likely
to be using werkzeug/middleware/proxy_fix.py instead, see
https://pagure.io/elections/issue/106 .

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-12-18 11:14:50 -08:00
David Kirwan
4f4fbd3c26 communishift: renaming tasks in cleanup notification playbook
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-12-18 15:39:37 +00:00
David Kirwan
2154067fef communishift: rename task being called in cleanup notification playbook
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-12-18 15:36:32 +00:00
David Kirwan
ada7943373 communishift: remove unnecessary imports in clean up notification tasks
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-12-18 15:34:33 +00:00
Kevin Fenzi
eac03a251a download-iso01: adjust for new location
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-11 15:44:09 -08:00
Kevin Fenzi
f5e8dd2a9a proxies: move docs behind anubis too
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-11 10:46:49 -08:00
Kevin Fenzi
56ce3d434c proxies: fix creates in shell call
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-12-11 08:49:43 -08:00
Greg Sutcliffe
d08b0f7814 Proxies: Fix indentation in proxy playbook
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-12-11 16:45:19 +00:00
Greg Sutcliffe
e2bc07005c Zabbix: add external http connectivity checks to proxies
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-12-11 16:40:16 +00:00