Commit Graph

34880 Commits

Author SHA1 Message Date
Adam Saleh
dfd5d17e3a Replacing bodhi2_openshift_pods with hardcoded values as the var is not defined anywhere, and it seems to be hardcoded elsewhere. 2021-05-08 10:48:58 +02:00
Adam Saleh
71b10befce Queue didn't have properly placed env-suffix for bodhi-backend stg configuration. 2021-05-08 10:23:02 +02:00
Pavel Raiskup
6e599ef73b copr-be: define provision_directory by set_fact 2021-05-08 08:28:24 +02:00
Pavel Raiskup
4aba2b99d3 copr-be/copr-hv: some config vars are useless for copr-hv
Those config variables are used in vars files templates;  so instead of
defining fake/unused vars for copr-hv, rather don't generate those vars
files at all.
2021-05-08 08:08:53 +02:00
Adam Williamson
16b06a655c openQA: use scratch os-autoinst on lab, stable on prod
Drop updates-testing repo for prod (though might have to put it
back next week). Use a scratch os-autoinst current git build on
lab to see if it works.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2021-05-07 13:27:41 -07:00
Pavel Raiskup
bac778eb7c copr-hv/copr-be: templates dir, not files 2021-05-07 22:24:55 +02:00
Pavel Raiskup
6705180ba0 copr-be/copr-hv: use absolute source paths 2021-05-07 21:31:16 +02:00
Pavel Raiskup
2197736a84 copr-hv: tag the provision_config include 2021-05-07 21:26:38 +02:00
Pavel Raiskup
fc3ae04144 copr-be/copr-hv: use relative file paths
So it can be used both from the role (BE), but also included externally (HV)
2021-05-07 21:23:07 +02:00
Pavel Raiskup
51605e4f69 copr-hv: try to include role's tasks 2021-05-07 20:15:12 +02:00
Pavel Raiskup
d646d7c54d copr-hv: ssh pub file as copr-uid only, attempt #2 2021-05-07 19:36:37 +02:00
Pavel Raiskup
672a02ee3a copr-hv: ssh pub file as copr-uid only 2021-05-07 19:29:51 +02:00
Pavel Raiskup
fe5073d8f5 copr-hv: prepare qcow2 images on hypervisors 2021-05-07 19:13:09 +02:00
Adam Saleh
f986c67882 Removing fedmsg/base from bodhi-backend in staging as we are no longer using it. 2021-05-07 19:05:22 +02:00
Adam Saleh
d0fb0a4463 Moving bodhi backend task before kerberos tasks so that apache user exists. 2021-05-07 18:50:17 +02:00
Adam Saleh
c3e0bc972c Removing fedmsg/base from bodhi-backend in staging as we are no longer using it. 2021-05-07 18:29:14 +02:00
Adam Saleh
4e08a57f48 Changing bodhi-stg to a generic fedora kickstart file. 2021-05-07 17:40:34 +02:00
Adam Saleh
f6b6440b6f Updating bodhi on staging to run on f34. 2021-05-07 14:34:53 +02:00
Aurélien Bompard
86567270dc The keytab path is hostname-dependant
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-05-07 10:12:11 +02:00
Aurélien Bompard
bfe6cf9d02 Only run the cron job on one server
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-05-07 09:34:27 +02:00
Aurélien Bompard
abaf67b66c Adjust the keytab location to the service
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-05-07 09:16:16 +02:00
Aurélien Bompard
551ba9bd39 Oops.
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-05-06 19:04:34 +02:00
Aurélien Bompard
f1e9387759 Finally, use a service for the stage users cleanup script
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-05-06 19:02:38 +02:00
Aurélien Bompard
3ddc3934da Add a periodic cleanup script for stage users
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-05-06 13:59:21 +02:00
Aurélien Bompard
3719dff88e Add some missing tags
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-05-06 13:58:40 +02:00
Pierre-Yves Chibon
9d4623b8f8 fedmsg/hub: simplify the logic when install fedmsg-hub
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-05-06 13:57:25 +02:00
Pierre-Yves Chibon
a372c6b119 FMN: make the backend be py3
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-05-06 13:48:57 +02:00
Mark O'Brien
2649c23c52 ipa: add env_suffix for stg 2021-05-06 12:30:29 +01:00
Pierre-Yves Chibon
aff35d0dc3 notifs: change the way we notify that notifs_web is py3
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-05-06 12:21:41 +02:00
Pierre-Yves Chibon
0d42d25c45 notifs: make notifs-web02 be python3 for fedmsg
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr>
2021-05-06 12:15:48 +02:00
František Zatloukal
12913c02bd Blockerbugs: fixup FAS on stg 2021-05-06 07:36:48 +02:00
Kevin Fenzi
866206b9b2 batcave13: use two nick virt-install
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 18:39:20 -07:00
Kevin Fenzi
e4d7627ce8 haproxy: disable notifs-web02 until it's ready
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 17:40:18 -07:00
Kevin Fenzi
1b1c9c8733 notifs-web02: fix kickstart name
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 17:14:49 -07:00
Kevin Fenzi
d03a311132 batcave: drop old openstack packages
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 17:12:38 -07:00
Kevin Fenzi
80fce3afbd notifs: make notifs-web02 and notifs-backend02 (ticket 9746)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 17:07:52 -07:00
Kevin Fenzi
a1547eb885 buildvm-a32-03: fix mac address
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 16:51:04 -07:00
Kevin Fenzi
7da7d72b5f batcave: drop cgit everywhere.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 16:45:32 -07:00
Kevin Fenzi
f9849b7316 git/hooks: everything using this role should be python3 now.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 16:28:06 -07:00
Kevin Fenzi
0cf61ae919 ipa / client: do not exclude mock ipa user on people02
We have a legit user who has the 'mock' account. So, we allow the ipa
one to override on people02 (since they have a shell account there), but
keep the filer everywhere else where we may run 'mock' the command.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 16:04:32 -07:00
Kevin Fenzi
c455b7f3bb batcave13: move to rhel8
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 15:57:14 -07:00
Kevin Fenzi
5a8f149f62 bastion: bastion13 has to have vpn to enroll in ipa
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 15:39:18 -07:00
Kevin Fenzi
3caebd6095 openvpn/server: really remove the group
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 15:29:06 -07:00
Kevin Fenzi
a9235bfd3d bastion: move ipa client after vpn
We need vpn to reach the ipa servers.
Instead lets try and fix this by not specifying the group in
nagios/client.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 15:22:57 -07:00
Kevin Fenzi
43d3fbcdb8 Clean up some no longer used playbooks.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 15:16:21 -07:00
Kevin Fenzi
bee623abd2 bastion: move ipa/client before openvpn-server as it needs sysadmin-main group now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 15:05:32 -07:00
Kevin Fenzi
556ad722f2 bastion: move openvpn server role before nagios_client that requires a /etc/openvpn/server/ccd dir
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 15:01:58 -07:00
Kevin Fenzi
0760ee57a6 openvpn / server: make the ccd dir idempotent
Right now this task makes the ccd dir as 0755 and root.root, but then a
later task syncs this from batcave01 and it gets 2755 and
root.sysadmin-main. Just change this to match so we are more idempotent.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 14:53:03 -07:00
Kevin Fenzi
8d63ab50b2 bastion13: move to rhel8
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-05-05 14:34:39 -07:00
Tim Flink
67e0a56c24 blockerbugs: moving stg down to f33 from f34 2021-05-05 13:55:29 -06:00