Francois Andrieu
fb5f6de876
add ocp-rdu3.stg oauth config
2025-06-26 13:10:55 +02:00
Michal Konecny
302e329a54
[ipsilon] Remove secret from w2fm entry for staging
...
w2fm doesn't need a secret as it's client application and doesn't use SSO.
2025-06-03 16:33:36 +02:00
Aurélien Bompard
bcd821a69f
Fix typo
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-06-02 14:30:01 +02:00
Akashdeep Dhar
057e02bd1e
Add client config for W2FM test environment
...
Signed-off-by: Akashdeep Dhar <akashdeep.dhar@gmail.com >
2025-05-29 09:36:41 +00:00
Michal Konecny
dd230cc1ef
[ipsilon] Add toddlers OIDC entry
...
Toddlers will not be a standard OIDC client, but we need it to preserve
the toddlers tokens in db-fas01.stg.
2025-05-22 13:26:00 +02:00
Michal Konecny
9a04135442
[ipsilon] Add blockerbugs OIDC entry
...
https://pagure.io/fedora-infrastructure/issue/12516
2025-05-07 14:47:34 +02:00
Michal Konecny
33c846b516
[ipsilon] Fix redirect URL for staging libravatar
2025-04-24 13:48:03 +02:00
Michal Konecny
a76d88a1f6
[ipsilon] Add libravatar entry for staging
...
https://pagure.io/fedora-infrastructure/issue/12493
2025-04-17 15:57:44 +02:00
Michal Konecny
3a612a4230
[ipsilon] Add OIDC entry for testdays app
...
https://pagure.io/fedora-infrastructure/issue/12490
2025-04-17 13:34:21 +00:00
Adam Williamson
a23c9df05a
Make ipsilon static config file public (staging), clean it up
...
The only secrets in this file, AFAIK, are the client secrets.
Most of those are already defined as secret variables for the
plays in this repo that deploy the services to use.
So instead of duplicating most of the secrets, and keeping this
file in the private repo where we can't do PRs and editing it is
awkward, let's just make all the client secrets be variables,
and make this file public.
For all the cases where a secret wasn't already defined as a
variable, I've added it, so this should work as-is.
Note that the use of `flask_oidc_dev_stg_oidc_client_secret`
twice is not an error in this PR; that secret was reused for
the staging community blog client config. I have reported this
at https://pagure.io/fedora-infrastructure/issue/12161#comment-963303 .
This also removes the client configurations for several services
which no longer exist.
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2025-03-31 23:07:01 +00:00
Adam Williamson
4cd3765cd0
ipsilon: drop obsolete config for beaker and dead bugzillas
...
We haven't had a beaker since 2018 or so, and none of these
various staging/test/dev bugzilla instances exist any more.
Signed-off-by: Adam Williamson <awilliam@redhat.com >
2025-03-28 18:04:30 +00:00
Kevin Fenzi
58bbbca299
ipa: make sure a bunch of calls do not log sensitive data
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-03-20 14:48:12 -07:00
Michal Konecny
6428f8f772
Sunset github2fedmsg and fedmsg
...
This commit is removing all the fedmsg related stuff from ansible
repository.
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2025-02-13 10:08:51 +00:00
Michal Konecny
2ec055db6f
Use first uppercase letter for all handlers
...
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.
I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```
Then I went through all the changes and removed the ones that wasn't
expected to be changed.
Fixes https://pagure.io/fedora-infrastructure/issue/12391
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2025-02-10 20:31:49 +00:00
Kevin Fenzi
13266214d2
ipa / handlers: Fix call to 'restart sssd' that is now 'Restart sssd'
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2025-01-15 16:36:11 -08:00
Ryan Lerch
47c68f478d
ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
...
Replaces references to template: with ansible.builtin.template
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 11:30:29 +10:00
Ryan Lerch
3c41882bb0
ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell
...
Replaces references to shell: with ansible.builtin.shell
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 11:29:10 +10:00
Ryan Lerch
25391e95b7
ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
...
Replaces many references to package: with ansible.builtin.package
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 11:28:00 +10:00
Ryan Lerch
462176464b
ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
...
Replaces many references to command: with ansible.builtin.command
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 11:26:47 +10:00
Ryan Lerch
6a3816dfdc
ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
...
Replaces many references to 'copy' with ansible.builtin.copy
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 10:43:31 +10:00
Ryan Lerch
62952df107
ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
...
Replaces many references to file: with ansible.builtin.file
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 10:41:52 +10:00
Ryan Lerch
691adee6ee
Fix name[casing] ansible-lint issues
...
fix 1900 failures of the following case issue:
`name[casing]: All names should start with an uppercase letter.`
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-14 20:20:07 +10:00
Ryan Lerch
5bdfe4b1e5
copr and ipsilon - rename yml templates to .j2
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-14 08:37:33 +10:00
Kevin Fenzi
46ca55bcfc
ipsilon: update bugzilla.redhat.com saml2 data
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2024-12-03 11:01:49 -08:00
Kevin Fenzi
6d3a53901d
ipsilon: just copy the awx metadata in for now since get uri doesnt work for this
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2024-12-02 11:42:52 -08:00
Kevin Fenzi
417343b113
ipsilon: switch away from broken get_url to a local file with hotfix
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2024-12-02 10:03:08 -08:00
Ryan Lerch
89f6f1fc32
Fix majority of remaining yamllint warnings and errors
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2024-11-28 17:31:45 +10:00
Kevin Fenzi
e3e2cb1d93
odcs: retire service ( infra 12192 )
...
Time to retire ODCS. ELN is moved off and that was the last thing using
it. Thanks for all the service ODCS!
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2024-09-24 18:21:51 +00:00
Jiri Podivin
f513e7cbcd
Linting python scripts
...
Signed-off-by: Jiri Podivin <jpodivin@redhat.com >
2024-09-18 19:57:29 +00:00
Aurélien Bompard
726778e6ea
Fixup last ipsilon commit
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-08-20 15:14:35 +02:00
Aurélien Bompard
9e17fd1f37
Fixup last ipsilon commit
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-08-20 15:02:30 +02:00
Aurélien Bompard
4ffa70b0e0
Fixup last ipsilon commit
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-08-20 14:42:22 +02:00
Aurélien Bompard
622cefeca1
Add a system to deploy ipsilon patches
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-08-20 14:24:25 +02:00
Michal Konecny
705a839a57
[ipsilon] Remove PDC entries from SAML2 data files
...
Forgot to remove it from configuration. This should do the trick.
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2024-08-01 13:22:21 +02:00
Michal Konecny
3415ff33ff
Remove PDC call from ipsilon playbook
...
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2024-08-01 13:05:22 +02:00
Aurélien Bompard
bf79279ff3
Add a tag to update ipsilon's OIDC config
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2024-06-13 08:28:23 +02:00
Kevin Fenzi
d366194a22
module-build-service (mbs): retire service
...
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.
Note that toddlers needs to be adjusted still, that will happen after
this.
Thanks for all the modules!
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2024-05-22 13:38:53 -07:00
Kevin Fenzi
9c125b16ea
Add aws-pyai group for ticket 11882
...
Note that this needs the group created in ipa first and the aws iam
policy setup.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2024-04-18 21:23:57 +00:00
Kevin Fenzi
a60ca7159f
nuancier: retire and remove from ansible
...
See https://pagure.io/fedora-infrastructure/issue/11371
This service is retired.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2023-11-15 10:44:00 -08:00
David Kirwan
9c3a24e79a
zabbix: Zabbix production configuration
2023-11-09 12:55:26 +00:00
Kevin Fenzi
21a3a4f6ff
ipsilon: add SAML2 mapping for aws-openscanhub group
...
This adds a mapping for a aws-openscanhub group.
See https://pagure.io/fedora-infrastructure/issue/11384 for more info.
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2023-11-08 22:16:53 +00:00
Francois Andrieu
6af2bb2619
ipsilon: add zabbix stg sp
2023-08-14 16:50:39 +02:00
Francois Andrieu
d86babdfe9
AWX: Initial configuration
2023-07-26 13:34:08 +02:00
Aurélien Bompard
b080195aea
Ipsilon: restart apache if the code changes
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2023-05-10 18:06:20 +02:00
Aurélien Bompard
af40d62193
Ipsilon: make sure the ipsilon-fedora addons are installed
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2023-05-10 17:51:43 +02:00
Aurélien Bompard
360e184862
FMN: move the old to -old and redirect to the new
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2023-04-26 10:55:25 +02:00
Aurélien Bompard
32938ffc64
Ipsilon: automatically load the SAML2 metadata for PDC in prod as well
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2023-04-20 14:43:10 +02:00
Aurélien Bompard
7949f778d9
Ipsilon: make the package module call faster
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2023-04-20 13:54:41 +02:00
Aurélien Bompard
577ba916be
Ipsilon: add missing tags
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2023-04-20 13:52:32 +02:00
Aurélien Bompard
aa0fbcad18
Ipsilon: automatically load the SAML2 metadata for PDC
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2023-04-20 12:43:24 +02:00