WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-24 10:31:56 +08:00
Code Issues Packages Projects Releases Wiki Activity
33,932 Commits 9 Branches 0 Tags
c994c4e5cd27324052d04de7e5c534f479b79adb
Commit Graph

189 Commits

Author SHA1 Message Date
Kevin Fenzi
5927f7b321 distgit / hooks: only tweak perms on batcave hooks perms 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-01-15 11:39:26 -08:00
Pierre-Yves Chibon
3351fbd3b4 drop run_once when install selinux policies 
Otherwise the policy doesn't get installed everywhere...

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 16:48:42 +01:00
Pierre-Yves Chibon
1df7a7c0d3 distgit: add a selinux tag 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:38:09 +01:00
Pierre-Yves Chibon
1ef758c408 distgit: install another custom selinux policy 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-10 15:35:33 +01:00
Pierre-Yves Chibon
3f03400dac distgit: drop pagure related selinux config since it's now handled in the pagure role 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:27:27 +01:00
Pierre-Yves Chibon
a7e2a97fad distgit: drop selinux config from the distgit role as it is now in pagure role 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-11-05 17:24:18 +01:00
Pierre-Yves Chibon
19ad9380b0 dist-git: clean up the playbook for the left over phx2 sections 
Remove all the sections there were RHEL7/phx2/gitolite related
now that we're running on RHEL8 with python3 and all of its goodies

Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-07-10 12:51:56 +00:00
Pierre-Yves Chibon
f2066c896d distgit: looks like the acl action does not support with_items, pity 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-16 20:56:31 +02:00
Pierre-Yves Chibon
b57fcaccf7 distgit: Add missing tag to a task 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-16 20:53:17 +02:00
Pierre-Yves Chibon
46b327807f distgit: turn on fedora-messaging notification and give apache access to the git hook cert and keys 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-06-15 13:56:38 +02:00
Pierre-Yves Chibon
5b4ba6cd8e distgit: install py3-grokmirror in staging/iad2 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-27 07:59:26 +02:00
Pierre-Yves Chibon
1dfa047cec distgit: python-grokmirror is now available on epel8-infra 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-26 22:42:53 +02:00
Pierre-Yves Chibon
e0ed6697f4 distgit: make the iad2 host closer to the current staging and different from phx2 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-25 23:10:15 +02:00
Pierre-Yves Chibon
592e4749c1 distgit: create the pkgs.stg certs via letsencrypt 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-23 15:56:46 +02:00
Pierre-Yves Chibon
687230bfb8 distgit: turn off grokmirror for now in stg 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-23 15:08:51 +02:00
Pierre-Yves Chibon
3ad71fd2a0 distgit: Install mod_auth_openidc via modules in RHEL8 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-22 17:54:51 +02:00
Pierre-Yves Chibon
23c94a35d1 distgit: now that the dist-git package is available, a number of steps can be re-enabled 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-22 11:30:58 +02:00
Pierre-Yves Chibon
93a30623c6 distgit: another place we're being bitten by the lack of dist-git package 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 18:28:06 +02:00
Pierre-Yves Chibon
7c2b0b2923 distgit: a few other places where the missing dist-git needs to be accounted for 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 17:59:15 +02:00
Pierre-Yves Chibon
54cbb646a5 distgit: dist-git is not yet available for rhel8, so is its config folder 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 17:38:33 +02:00
Pierre-Yves Chibon
6881735c06 distgit: fun thing, dist-git isn't available for rhel8 atm... 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 17:04:13 +02:00
Pierre-Yves Chibon
6ef5a99f56 distgit: mod_auth_openidc is not in rhel8 yet 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 16:45:20 +02:00
Pierre-Yves Chibon
ce213161a3 distgit: adjust the list of packages to be installed in stg/rhel8 and drop gitolite there as well 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2020-05-20 16:24:45 +02:00
Stephen Smoogen
ccaa519dd3 [pkgs]: remove mentions of repospanner so that playbooks will set up things without it 2020-04-24 21:34:20 +02:00
Kevin Fenzi
9790382e6b distgit/koji_hub: drop updatecrl. No longer used. 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2019-05-13 21:36:09 +00:00
Patrick Uiterwijk
55c9fb266b Remove cgit from dist-git 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-13 15:57:00 +02:00
Patrick Uiterwijk
0c7449ea1d Add sslciphers tags 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2019-04-08 21:41:17 +02:00
Pierre-Yves Chibon
5480289f1c Place the cron job in a dedicated file 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-02-12 12:05:19 +01:00
Pierre-Yves Chibon
89ceaf5e06 Apparently the minute and hour must be in quotes 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-02-12 12:00:22 +01:00
Pierre-Yves Chibon
d0ae5f84a7 Export the repo info as JSON every two hours 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-02-12 11:58:50 +01:00
Pierre-Yves Chibon
c444bb0a61 Install a repospanner-admin config file in /etc/pagure 
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
 2019-02-12 11:46:03 +01:00
Kevin Fenzi
9a3865176b you can only have one when 2018-11-12 00:59:20 +00:00
Kevin Fenzi
7887029ffb Some selinux policy for staging. 2018-10-10 20:01:45 +00:00
Patrick Uiterwijk
02ff6983fa Use the Pagure code for http cloning 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 07:28:38 +02:00
Patrick Uiterwijk
f92899fe69 Pagure runs as 'pagure' here 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 05:08:43 +02:00
Patrick Uiterwijk
f68bb7e4aa Deploy initial repoSpanner config for stg dist-git 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2018-10-05 05:05:25 +02:00
Kevin Fenzi
9e1c8172d4 Do not use latest here. If we need to update it we update it on updates cycles or manually. 2018-10-01 17:53:20 +00:00
Kevin Fenzi
1b289a0382 let us try a more generic approach to copying around letsencrypt certs to additional hosts and just do it at the letsencrypt role level 2018-08-15 19:54:01 +00:00
Kevin Fenzi
789310091c add missing quotes 2018-08-15 19:36:04 +00:00
Kevin Fenzi
7dd1f05bb4 try and copy cert from proxy01 to pkgs 2018-08-15 19:34:48 +00:00
Rick Elrod
4a60ddc875 Nuke pkgdb some more... and probably break everything. 
Signed-off-by: Rick Elrod <relrod@redhat.com>
 2018-07-19 20:40:14 +00:00
Patrick Uiterwijk
c4844d58ed Move cgit to suexec'd as well 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-06-12 11:10:34 +02:00
Patrick Uiterwijk
4a8fc6080e All scripts on pkgs02 are now run as pagure 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-06-11 17:29:09 +02:00
Kevin Fenzi
9ffea1b7f1 Fix typo 2018-06-04 19:06:07 +00:00
Patrick Uiterwijk
c666f61ee4 Deploy https pushing to prod 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-31 00:17:48 +02:00
Patrick Uiterwijk
06c04a3fb9 Commit http push stuff 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-28 15:08:48 +02:00
Patrick Uiterwijk
39bfc5317e Only do m_a_openidc in staging 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-23 21:26:11 +00:00
Patrick Uiterwijk
5d2c3bd947 This is a template 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-23 21:25:36 +00:00
Patrick Uiterwijk
bf392d6e41 Add auth_openidc config 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-23 21:17:38 +00:00
Patrick Uiterwijk
b10187776c Install m_a_openidc for pkgs staging 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2018-05-23 21:09:36 +00:00