Commit Graph

363 Commits

Author SHA1 Message Date
Francois Andrieu
fb5f6de876 add ocp-rdu3.stg oauth config 2025-06-26 13:10:55 +02:00
Michal Konecny
302e329a54 [ipsilon] Remove secret from w2fm entry for staging
w2fm doesn't need a secret as it's client application and doesn't use SSO.
2025-06-03 16:33:36 +02:00
Aurélien Bompard
bcd821a69f Fix typo
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-06-02 14:30:01 +02:00
Akashdeep Dhar
057e02bd1e Add client config for W2FM test environment
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com>
2025-05-29 09:36:41 +00:00
Michal Konecny
dd230cc1ef [ipsilon] Add toddlers OIDC entry
Toddlers will not be a standard OIDC client, but we need it to preserve
the toddlers tokens in db-fas01.stg.
2025-05-22 13:26:00 +02:00
Michal Konecny
9a04135442 [ipsilon] Add blockerbugs OIDC entry
https://pagure.io/fedora-infrastructure/issue/12516
2025-05-07 14:47:34 +02:00
Michal Konecny
33c846b516 [ipsilon] Fix redirect URL for staging libravatar 2025-04-24 13:48:03 +02:00
Michal Konecny
a76d88a1f6 [ipsilon] Add libravatar entry for staging
https://pagure.io/fedora-infrastructure/issue/12493
2025-04-17 15:57:44 +02:00
Michal Konecny
3a612a4230 [ipsilon] Add OIDC entry for testdays app
https://pagure.io/fedora-infrastructure/issue/12490
2025-04-17 13:34:21 +00:00
Adam Williamson
a23c9df05a Make ipsilon static config file public (staging), clean it up
The only secrets in this file, AFAIK, are the client secrets.
Most of those are already defined as secret variables for the
plays in this repo that deploy the services to use.

So instead of duplicating most of the secrets, and keeping this
file in the private repo where we can't do PRs and editing it is
awkward, let's just make all the client secrets be variables,
and make this file public.

For all the cases where a secret wasn't already defined as a
variable, I've added it, so this should work as-is.

Note that the use of `flask_oidc_dev_stg_oidc_client_secret`
twice is not an error in this PR; that secret was reused for
the staging community blog client config. I have reported this
at https://pagure.io/fedora-infrastructure/issue/12161#comment-963303 .

This also removes the client configurations for several services
which no longer exist.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-03-31 23:07:01 +00:00
Adam Williamson
4cd3765cd0 ipsilon: drop obsolete config for beaker and dead bugzillas
We haven't had a beaker since 2018 or so, and none of these
various staging/test/dev bugzilla instances exist any more.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2025-03-28 18:04:30 +00:00
Kevin Fenzi
58bbbca299 ipa: make sure a bunch of calls do not log sensitive data
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-20 14:48:12 -07:00
Michal Konecny
6428f8f772 Sunset github2fedmsg and fedmsg
This commit is removing all the fedmsg related stuff from ansible
repository.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-13 10:08:51 +00:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
Kevin Fenzi
13266214d2 ipa / handlers: Fix call to 'restart sssd' that is now 'Restart sssd'
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-15 16:36:11 -08:00
Ryan Lerch
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
Ryan Lerch
3c41882bb0 ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell
Replaces references to shell: with ansible.builtin.shell

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:29:10 +10:00
Ryan Lerch
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
Ryan Lerch
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:26:47 +10:00
Ryan Lerch
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
Ryan Lerch
691adee6ee Fix name[casing] ansible-lint issues
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
Ryan Lerch
5bdfe4b1e5 copr and ipsilon - rename yml templates to .j2
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 08:37:33 +10:00
Kevin Fenzi
46ca55bcfc ipsilon: update bugzilla.redhat.com saml2 data
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-03 11:01:49 -08:00
Kevin Fenzi
6d3a53901d ipsilon: just copy the awx metadata in for now since get uri doesnt work for this
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-02 11:42:52 -08:00
Kevin Fenzi
417343b113 ipsilon: switch away from broken get_url to a local file with hotfix
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-12-02 10:03:08 -08:00
Ryan Lerch
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
Kevin Fenzi
e3e2cb1d93 odcs: retire service ( infra 12192 )
Time to retire ODCS. ELN is moved off and that was the last thing using
it. Thanks for all the service ODCS!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-09-24 18:21:51 +00:00
Jiri Podivin
f513e7cbcd Linting python scripts
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2024-09-18 19:57:29 +00:00
Aurélien Bompard
726778e6ea Fixup last ipsilon commit
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-20 15:14:35 +02:00
Aurélien Bompard
9e17fd1f37 Fixup last ipsilon commit
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-20 15:02:30 +02:00
Aurélien Bompard
4ffa70b0e0 Fixup last ipsilon commit
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-20 14:42:22 +02:00
Aurélien Bompard
622cefeca1 Add a system to deploy ipsilon patches
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-08-20 14:24:25 +02:00
Michal Konecny
705a839a57 [ipsilon] Remove PDC entries from SAML2 data files
Forgot to remove it from configuration. This should do the trick.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-08-01 13:22:21 +02:00
Michal Konecny
3415ff33ff Remove PDC call from ipsilon playbook
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2024-08-01 13:05:22 +02:00
Aurélien Bompard
bf79279ff3 Add a tag to update ipsilon's OIDC config
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2024-06-13 08:28:23 +02:00
Kevin Fenzi
d366194a22 module-build-service (mbs): retire service
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.

Note that toddlers needs to be adjusted still, that will happen after
this.

Thanks for all the modules!

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-22 13:38:53 -07:00
Kevin Fenzi
9c125b16ea Add aws-pyai group for ticket 11882
Note that this needs the group created in ipa first and the aws iam
policy setup.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-04-18 21:23:57 +00:00
Kevin Fenzi
a60ca7159f nuancier: retire and remove from ansible
See https://pagure.io/fedora-infrastructure/issue/11371
This service is retired.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-15 10:44:00 -08:00
David Kirwan
9c3a24e79a zabbix: Zabbix production configuration 2023-11-09 12:55:26 +00:00
Kevin Fenzi
21a3a4f6ff ipsilon: add SAML2 mapping for aws-openscanhub group
This adds a mapping for a aws-openscanhub group.
See https://pagure.io/fedora-infrastructure/issue/11384 for more info.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-11-08 22:16:53 +00:00
Francois Andrieu
6af2bb2619 ipsilon: add zabbix stg sp 2023-08-14 16:50:39 +02:00
Francois Andrieu
d86babdfe9 AWX: Initial configuration 2023-07-26 13:34:08 +02:00
Aurélien Bompard
b080195aea Ipsilon: restart apache if the code changes
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-05-10 18:06:20 +02:00
Aurélien Bompard
af40d62193 Ipsilon: make sure the ipsilon-fedora addons are installed
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-05-10 17:51:43 +02:00
Aurélien Bompard
360e184862 FMN: move the old to -old and redirect to the new
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-04-26 10:55:25 +02:00
Aurélien Bompard
32938ffc64 Ipsilon: automatically load the SAML2 metadata for PDC in prod as well
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-04-20 14:43:10 +02:00
Aurélien Bompard
7949f778d9 Ipsilon: make the package module call faster
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-04-20 13:54:41 +02:00
Aurélien Bompard
577ba916be Ipsilon: add missing tags
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-04-20 13:52:32 +02:00
Aurélien Bompard
aa0fbcad18 Ipsilon: automatically load the SAML2 metadata for PDC
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-04-20 12:43:24 +02:00