Adam Saleh
dfd5d17e3a
Replacing bodhi2_openshift_pods with hardcoded values as the var is not defined anywhere, and it seems to be hardcoded elsewhere.
2021-05-08 10:48:58 +02:00
Adam Saleh
71b10befce
Queue didn't have properly placed env-suffix for bodhi-backend stg configuration.
2021-05-08 10:23:02 +02:00
Pavel Raiskup
6e599ef73b
copr-be: define provision_directory by set_fact
2021-05-08 08:28:24 +02:00
Pavel Raiskup
4aba2b99d3
copr-be/copr-hv: some config vars are useless for copr-hv
...
Those config variables are used in vars files templates; so instead of
defining fake/unused vars for copr-hv, rather don't generate those vars
files at all.
2021-05-08 08:08:53 +02:00
Adam Williamson
16b06a655c
openQA: use scratch os-autoinst on lab, stable on prod
...
Drop updates-testing repo for prod (though might have to put it
back next week). Use a scratch os-autoinst current git build on
lab to see if it works.
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2021-05-07 13:27:41 -07:00
Pavel Raiskup
bac778eb7c
copr-hv/copr-be: templates dir, not files
2021-05-07 22:24:55 +02:00
Pavel Raiskup
6705180ba0
copr-be/copr-hv: use absolute source paths
2021-05-07 21:31:16 +02:00
Pavel Raiskup
2197736a84
copr-hv: tag the provision_config include
2021-05-07 21:26:38 +02:00
Pavel Raiskup
fc3ae04144
copr-be/copr-hv: use relative file paths
...
So it can be used both from the role (BE), but also included externally (HV)
2021-05-07 21:23:07 +02:00
Pavel Raiskup
51605e4f69
copr-hv: try to include role's tasks
2021-05-07 20:15:12 +02:00
Pavel Raiskup
d646d7c54d
copr-hv: ssh pub file as copr-uid only, attempt #2
2021-05-07 19:36:37 +02:00
Pavel Raiskup
672a02ee3a
copr-hv: ssh pub file as copr-uid only
2021-05-07 19:29:51 +02:00
Pavel Raiskup
fe5073d8f5
copr-hv: prepare qcow2 images on hypervisors
2021-05-07 19:13:09 +02:00
Adam Saleh
f986c67882
Removing fedmsg/base from bodhi-backend in staging as we are no longer using it.
2021-05-07 19:05:22 +02:00
Adam Saleh
d0fb0a4463
Moving bodhi backend task before kerberos tasks so that apache user exists.
2021-05-07 18:50:17 +02:00
Adam Saleh
c3e0bc972c
Removing fedmsg/base from bodhi-backend in staging as we are no longer using it.
2021-05-07 18:29:14 +02:00
Adam Saleh
4e08a57f48
Changing bodhi-stg to a generic fedora kickstart file.
2021-05-07 17:40:34 +02:00
Adam Saleh
f6b6440b6f
Updating bodhi on staging to run on f34.
2021-05-07 14:34:53 +02:00
Aurélien Bompard
86567270dc
The keytab path is hostname-dependant
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2021-05-07 10:12:11 +02:00
Aurélien Bompard
bfe6cf9d02
Only run the cron job on one server
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2021-05-07 09:34:27 +02:00
Aurélien Bompard
abaf67b66c
Adjust the keytab location to the service
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2021-05-07 09:16:16 +02:00
Aurélien Bompard
551ba9bd39
Oops.
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2021-05-06 19:04:34 +02:00
Aurélien Bompard
f1e9387759
Finally, use a service for the stage users cleanup script
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2021-05-06 19:02:38 +02:00
Aurélien Bompard
3ddc3934da
Add a periodic cleanup script for stage users
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2021-05-06 13:59:21 +02:00
Aurélien Bompard
3719dff88e
Add some missing tags
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2021-05-06 13:58:40 +02:00
Pierre-Yves Chibon
9d4623b8f8
fedmsg/hub: simplify the logic when install fedmsg-hub
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2021-05-06 13:57:25 +02:00
Pierre-Yves Chibon
a372c6b119
FMN: make the backend be py3
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2021-05-06 13:48:57 +02:00
Mark O'Brien
2649c23c52
ipa: add env_suffix for stg
2021-05-06 12:30:29 +01:00
Pierre-Yves Chibon
aff35d0dc3
notifs: change the way we notify that notifs_web is py3
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2021-05-06 12:21:41 +02:00
Pierre-Yves Chibon
0d42d25c45
notifs: make notifs-web02 be python3 for fedmsg
...
Signed-off-by: Pierre-Yves Chibon <pingou@pingoured.fr >
2021-05-06 12:15:48 +02:00
František Zatloukal
12913c02bd
Blockerbugs: fixup FAS on stg
2021-05-06 07:36:48 +02:00
Kevin Fenzi
866206b9b2
batcave13: use two nick virt-install
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 18:39:20 -07:00
Kevin Fenzi
e4d7627ce8
haproxy: disable notifs-web02 until it's ready
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 17:40:18 -07:00
Kevin Fenzi
1b1c9c8733
notifs-web02: fix kickstart name
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 17:14:49 -07:00
Kevin Fenzi
d03a311132
batcave: drop old openstack packages
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 17:12:38 -07:00
Kevin Fenzi
80fce3afbd
notifs: make notifs-web02 and notifs-backend02 (ticket 9746)
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 17:07:52 -07:00
Kevin Fenzi
a1547eb885
buildvm-a32-03: fix mac address
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 16:51:04 -07:00
Kevin Fenzi
7da7d72b5f
batcave: drop cgit everywhere.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 16:45:32 -07:00
Kevin Fenzi
f9849b7316
git/hooks: everything using this role should be python3 now.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 16:28:06 -07:00
Kevin Fenzi
0cf61ae919
ipa / client: do not exclude mock ipa user on people02
...
We have a legit user who has the 'mock' account. So, we allow the ipa
one to override on people02 (since they have a shell account there), but
keep the filer everywhere else where we may run 'mock' the command.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 16:04:32 -07:00
Kevin Fenzi
c455b7f3bb
batcave13: move to rhel8
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 15:57:14 -07:00
Kevin Fenzi
5a8f149f62
bastion: bastion13 has to have vpn to enroll in ipa
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 15:39:18 -07:00
Kevin Fenzi
3caebd6095
openvpn/server: really remove the group
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 15:29:06 -07:00
Kevin Fenzi
a9235bfd3d
bastion: move ipa client after vpn
...
We need vpn to reach the ipa servers.
Instead lets try and fix this by not specifying the group in
nagios/client.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 15:22:57 -07:00
Kevin Fenzi
43d3fbcdb8
Clean up some no longer used playbooks.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 15:16:21 -07:00
Kevin Fenzi
bee623abd2
bastion: move ipa/client before openvpn-server as it needs sysadmin-main group now
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 15:05:32 -07:00
Kevin Fenzi
556ad722f2
bastion: move openvpn server role before nagios_client that requires a /etc/openvpn/server/ccd dir
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 15:01:58 -07:00
Kevin Fenzi
0760ee57a6
openvpn / server: make the ccd dir idempotent
...
Right now this task makes the ccd dir as 0755 and root.root, but then a
later task syncs this from batcave01 and it gets 2755 and
root.sysadmin-main. Just change this to match so we are more idempotent.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 14:53:03 -07:00
Kevin Fenzi
8d63ab50b2
bastion13: move to rhel8
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-05-05 14:34:39 -07:00
Tim Flink
67e0a56c24
blockerbugs: moving stg down to f33 from f34
2021-05-05 13:55:29 -06:00