Commit Graph

44638 Commits

Author SHA1 Message Date
Miroslav Suchý
c0e5d61e0d bump up numbers of reserved instances for copr builders 2025-11-03 11:05:02 +01:00
Miroslav Suchý
4e582b013b bump up numbers of reserved instances for copr builders 2025-11-03 11:03:15 +01:00
Michal Konecny
ba209ee7df Fixes for OpenID only ipsilon instance in staging
After some troubleshooting I was finally able to fix the OpenID
authentication on staging. These are the changes I ended up deploying to fix
the remaining issues.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-11-03 09:33:32 +00:00
Ryan Lerch
c65826a981 forge: add codeberg to migration source whitelist
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-11-03 12:46:14 +10:00
Ryan Lerch
a4336a7ae7 Forge: add groups for the forge org
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-11-03 12:35:17 +10:00
Jiri Kyjovsky
2f12f1da9e copr: define ipa host group to let anubis role to let pass 2025-11-03 00:54:26 +00:00
Jiri Kyjovsky
3f9d336a87 copr: remove pulp leftovers part 2 2025-11-03 00:41:03 +00:00
Jiri Kyjovsky
24c6aff32a copr: move anubis role as dependency for copr-dist-git 2025-11-03 01:12:08 +01:00
James Antill
0dd8bda7ed updates+uptimes: Skip today backup in host output when today is identical.
Signed-off-by: James Antill <james@and.org>
2025-11-01 11:02:33 -04:00
Jiri Kyjovsky
ff798a8e5b copr: cleanup old copr-pulp leftovers 2025-10-31 17:38:48 +01:00
Greg Sutcliffe
162852fef5 Zabbix: Add Anubis template and role changes to apply it
Includes an SELinux module, and an attempt at alering via
anomaly detection rather than hard thresholds.

Uses the newly-created SELinux compile tasks to deploy the
new module too.

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-10-31 12:38:40 +00:00
Greg Sutcliffe
68f6aa9b95 Base: Make the SElinux module compilation reusable
THis moves the SELinux "handler" in roles/base to a global
task file, which allows it to be reused by other roles.

Eventually this should probably be a native Ansible type,
but this is still an improvment.

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-10-31 12:38:36 +00:00
Pavel Raiskup
e61cbd4ede backend: ssh checker to dump date in logs 2025-10-31 08:32:56 +01:00
Ryan Lerch
c4406babfe forge: revert changes and get staging back
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-31 15:44:52 +10:00
Ryan Lerch
3e7b655378 forge: try setting the GITEA_CUSTOM environment var
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-31 15:17:36 +10:00
Ryan Lerch
cf6a0d2e80 forge: try moving themes over in init container script
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-31 12:51:19 +10:00
Ryan Lerch
a5c90033af forge: revert changes to theming config map
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-31 12:36:22 +10:00
Ryan Lerch
feef307c50 forge: try the os gid again
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-31 12:03:12 +10:00
Ryan Lerch
8ebfeeb94c forge: revert back to fsgroup1000
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-31 11:40:59 +10:00
Ryan Lerch
b27e07c992 forge: try gitea path
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-31 11:32:10 +10:00
Ryan Lerch
cc59472cc1 forge: add supplemental groups for configmapvolume
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-31 09:41:35 +10:00
Ryan Lerch
0c5076b257 forge: actually add the configmap for css theme
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-31 09:16:11 +10:00
Ryan Lerch
afeeac016e forge: try to move theme to configmaps on staging
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-31 08:57:10 +10:00
Kevin Fenzi
7d459bcfd0 ipa: enable audit logs on ipa01/ipa01.stg
We had this set before the dc move in iad2, but we didn't ever setup the
config to enable it in rdu3.

This should do that.

Note that I have already manually enabled it, and this should just
ensure that it's enabled if we reinstall or move to the next datacenter.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-30 18:48:45 +00:00
Paul Whalen
5f39dbe9e6 IoT: drop cronjobs for iot composes
No longer use cron jobs for automated iot compose.

Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-10-30 18:44:51 +00:00
Nick Bebout
683a191ae2 Add GigSouth mirrors 2025-10-30 18:36:32 +00:00
Tomas Hrcka
a275d2ba72 [forge] update atomic-desktops fas group mapping
Signed-off-by: Tomas Hrcka <thrcka@redhat.com>
2025-10-30 18:34:06 +00:00
Gregory Bartholomew
34d8d38c45 torrent: remove torrent-web-generate.cron
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2025-10-30 18:22:38 +00:00
James Antill
e3fb6a82a0 updates+uptimes: have secs2dur always show the long duration.
Signed-off-by: James Antill <james@and.org>
2025-10-30 11:06:35 -04:00
Greg Sutcliffe
0ae9436498 Zabbix: fleet-wide LLD monitoring for discovered RAID devices
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-10-30 12:19:19 +00:00
Greg Sutcliffe
368c6c9b51 Zabbix: Update base template to allow sundries01 to be more flexible on CPU usage alerts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2025-10-30 12:17:31 +00:00
Pavel Raiskup
094e3a133d copr-be: enable workers on vmhost-p09-copr0{2,3,4} 2025-10-30 09:00:12 +01:00
Ryan Lerch
fb8459a798 [forge] Fix YAML syntax error in markup.asciidoc section
- Convert equals signs to colons for proper YAML syntax
- Resolves Helm deployment error: 'mapping values are not allowed here'
- Fixes line 635 parsing issue in staging configuration
2025-10-30 12:45:56 +10:00
Ryan Lerch
453044464f forge: enable adoc render for staging
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-30 12:37:14 +10:00
Kevin Fenzi
67b6e258ef ipsilon02: we never actually deployed a ipsilon02 in prod after the dc move
But we should have one in case 01 is not processing correctly.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-29 15:17:32 -07:00
Kevin Fenzi
b634f6c79d bodhi / web: use 4 replicas by default for web pods
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-29 10:33:30 -07:00
Kevin Fenzi
798ea762a8 f43 final freeze over
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-29 07:54:32 -07:00
David Kirwan
7e3d153e8c forgejo: Add vars runnerhostvm, valkey templates
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2025-10-29 14:12:09 +00:00
Kevin Fenzi
c58d2861dd proxies / pkgdb-json: fedora-43 is active now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-28 05:53:42 -07:00
Ryan Lerch
e04543da39 forge: set default org membership to visible
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-28 10:02:46 +10:00
Jiri Kyjovsky
8f2406ee1d copr: Try to allow anubis role for copr-dist-git 2025-10-27 10:13:35 +01:00
Ryan Lerch
d683441c85 forge: fix gitlab whitelist item
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-27 11:23:55 +10:00
Ryan Lerch
6a92514fee forge: add pagure.stg and gitlab.com/fedora/* to migrate whitelist
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-10-27 11:07:53 +10:00
Samyak Jain
c1d30b069c Fedora 43 is GO
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-10-25 16:40:50 +05:30
Aurélien Bompard
4e727d69c2 IPA-tuura: restart sssd on config change
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-24 11:22:32 +02:00
Paul Whalen
f305bdc57a IoT: sign stable with f43 key
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-10-23 17:23:20 -04:00
Kevin Fenzi
752e9e5ac7 kickstarts / ppc64le: also pass passphrase to new volumes
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-10-23 13:45:33 -07:00
Pavel Raiskup
3e0e6ba924 hardware-fedora-ppc64le-08disk.j2: disable zram on copr builders 2025-10-23 21:45:24 +02:00
Pavel Raiskup
1c52853aee hardware-fedora-ppc64le-08disk.j2: 40G for swap and 3T for vmvolumes 2025-10-23 21:39:04 +02:00
Aurélien Bompard
a85f68762e IPA-tuura: create the directories for the keytabs
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-10-23 18:25:08 +02:00