WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-28 04:22:18 +08:00
Code Issues Packages Projects Releases Wiki Activity
42,332 Commits 9 Branches 0 Tags
dfc4e82e094bb74df17ba7afbbcd2d1c6cd4f188
Commit Graph

340 Commits

Author SHA1 Message Date
Kevin Fenzi
46ca55bcfc ipsilon: update bugzilla.redhat.com saml2 data 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-03 11:01:49 -08:00
Kevin Fenzi
6d3a53901d ipsilon: just copy the awx metadata in for now since get uri doesnt work for this 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-02 11:42:52 -08:00
Kevin Fenzi
417343b113 ipsilon: switch away from broken get_url to a local file with hotfix 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-12-02 10:03:08 -08:00
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
 2024-11-28 17:31:45 +10:00
Kevin Fenzi
e3e2cb1d93 odcs: retire service ( infra 12192 ) 
Time to retire ODCS. ELN is moved off and that was the last thing using
it. Thanks for all the service ODCS!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-09-24 18:21:51 +00:00
Jiri Podivin
f513e7cbcd Linting python scripts 
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
 2024-09-18 19:57:29 +00:00
Aurélien Bompard
726778e6ea Fixup last ipsilon commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-20 15:14:35 +02:00
Aurélien Bompard
9e17fd1f37 Fixup last ipsilon commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-20 15:02:30 +02:00
Aurélien Bompard
4ffa70b0e0 Fixup last ipsilon commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-20 14:42:22 +02:00
Aurélien Bompard
622cefeca1 Add a system to deploy ipsilon patches 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-08-20 14:24:25 +02:00
Michal Konecny
705a839a57 [ipsilon] Remove PDC entries from SAML2 data files 
Forgot to remove it from configuration. This should do the trick.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-08-01 13:22:21 +02:00
Michal Konecny
3415ff33ff Remove PDC call from ipsilon playbook 
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
 2024-08-01 13:05:22 +02:00
Aurélien Bompard
bf79279ff3 Add a tag to update ipsilon's OIDC config 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2024-06-13 08:28:23 +02:00
Kevin Fenzi
d366194a22 module-build-service (mbs): retire service 
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.

Note that toddlers needs to be adjusted still, that will happen after
this.

Thanks for all the modules!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-05-22 13:38:53 -07:00
Kevin Fenzi
9c125b16ea Add aws-pyai group for ticket 11882 
Note that this needs the group created in ipa first and the aws iam
policy setup.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2024-04-18 21:23:57 +00:00
Kevin Fenzi
a60ca7159f nuancier: retire and remove from ansible 
See https://pagure.io/fedora-infrastructure/issue/11371
This service is retired.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-15 10:44:00 -08:00
David Kirwan
9c3a24e79a zabbix: Zabbix production configuration 2023-11-09 12:55:26 +00:00
Kevin Fenzi
21a3a4f6ff ipsilon: add SAML2 mapping for aws-openscanhub group 
This adds a mapping for a aws-openscanhub group.
See https://pagure.io/fedora-infrastructure/issue/11384 for more info.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2023-11-08 22:16:53 +00:00
Francois Andrieu
6af2bb2619 ipsilon: add zabbix stg sp 2023-08-14 16:50:39 +02:00
Francois Andrieu
d86babdfe9 AWX: Initial configuration 2023-07-26 13:34:08 +02:00
Aurélien Bompard
b080195aea Ipsilon: restart apache if the code changes 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-10 18:06:20 +02:00
Aurélien Bompard
af40d62193 Ipsilon: make sure the ipsilon-fedora addons are installed 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-05-10 17:51:43 +02:00
Aurélien Bompard
360e184862 FMN: move the old to -old and redirect to the new 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-04-26 10:55:25 +02:00
Aurélien Bompard
32938ffc64 Ipsilon: automatically load the SAML2 metadata for PDC in prod as well 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-04-20 14:43:10 +02:00
Aurélien Bompard
7949f778d9 Ipsilon: make the package module call faster 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-04-20 13:54:41 +02:00
Aurélien Bompard
577ba916be Ipsilon: add missing tags 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-04-20 13:52:32 +02:00
Aurélien Bompard
aa0fbcad18 Ipsilon: automatically load the SAML2 metadata for PDC 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2023-04-20 12:43:24 +02:00
Nick Bebout
6987b8bc1e Add aws-fpl group to ipsilon per mattdm's request 2023-01-10 20:12:27 -06:00
Aurélien Bompard
aa43c7a742 Ipsilon: set CORS headers for OIDC 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-11-22 18:35:44 +01:00
Kevin Fenzi
f183f5262b pagure-stg01 / ipsilon*.stg: split db passwords from stg and prod 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-09-19 13:53:15 -07:00
Mark O Brien
fd0dbee572 add new aws role for readonly access to fcos bucket 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-08-03 12:27:30 +01:00
Aurélien Bompard
293cf34e8d Adapt to Ipsilon 3.0.3 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-07-05 17:36:03 +02:00
Mark O Brien
4bd7546413 update bugzilla stage saml 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-22 20:50:27 +01:00
Mark O Brien
2c46ee6e5e move bugzilla stage to ipsilon stage 
Signed-off-by: Mark O Brien <markobri@redhat.com>
 2022-06-22 20:35:53 +01:00
Aurélien Bompard
6b9d639421 ipsilon: add sebooleans on f36 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-06-03 09:55:25 +02:00
Kevin Fenzi
a180488e0d ipsilon: drop staging conditional on wsgiscriptalias 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 15:28:32 -07:00
Kevin Fenzi
b68200e0bc ipsilon: make sure /etc/ipsilon/root is owned by ipsilon 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-06-02 15:25:22 -07:00
Kevin Fenzi
4c4be31afb ipsilon / staging: the wsgi is named differently in stg/f36? 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-25 17:42:30 -07:00
Kevin Fenzi
792f082750 Revert "ipsilon / staging: fixes for f36" 
This reverts commit 6d5911cc3c.

Turns out these are the way the new version installs. ;)
 2022-05-25 17:38:04 -07:00
Kevin Fenzi
6d5911cc3c ipsilon / staging: fixes for f36 
The wsgi has changed from /usr/libexec/ipsilon/ipsilon.py to
/usr/libexec/ipsilon, so adjust wsgi and directory perms to handle that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-05-25 16:58:17 -07:00
Aurélien Bompard
c030ab4c77 Ipsilon needs an SELinux boolean to use python-pam 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-25 11:32:57 +02:00
Aurélien Bompard
b6390112af amend last commit 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-25 11:22:57 +02:00
Aurélien Bompard
cd277a01d8 We now use PAM auth in Ipsilon 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-25 11:21:07 +02:00
Aurélien Bompard
61821fb1ba Update ipsilon to 3.0.1 in prod 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2022-05-25 10:27:02 +02:00
Stephen Gallagher
7d26c4cde9 Use persistent SAML identifiers 
Using "unspecified" will always send just the user's (FAS) username,
which has been known to conflict with existing accounts on Gitlab. The
"persistent" name-id format guarantees uniqueness.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
 2022-05-11 18:39:05 +00:00
Kevin Fenzi
6260673484 update SAML2 data for bugzilla.redhat.com 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2022-03-01 16:58:23 -08:00
Kevin Fenzi
9bb24871c3 ipsilon: add saml2 for gitlab.com 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-11-30 15:37:33 +00:00
Kevin Fenzi
cc0f507a2c ipsilon: run the saml2 script as ipsilon user 
Right now it runs as root which means ipsilon can't read it.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
 2021-11-30 07:34:16 -08:00
Aurélien Bompard
286bde8098 Ipsilon: use the pam auth module on staging 
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
 2021-10-27 10:12:59 +02:00
Clement Verna
ea2354658f Remove fpdc playbooks and config. 
Signed-off-by: Clement Verna <cverna@tutanota.com>
 2021-08-10 20:37:12 +00:00