... in the httpd configurations.
The httpd container requires it to reliably determine server's fully
qualified domain name.
Signed-off-by: Siteshwar Vashisht <svashisht@redhat.com>
This reverts commit 26358b62a2.
So, this broke the toddler that handles package retirements. ;(
It seems it was commited on feb 20th, but not actually pushed out until
March 4th. At that point, retirements stop. ;(
I think it's getting the new git pagure messages, but they don't
contain the information it expects so it just drops them.
We will need to adjust toddlers before we can re-drop this.
zabbix_agent uses shm (and a fair bit of it), so bump that check up all
around.
Change the ipa whitelist, as it's changed files in new ipa.
There's no longer a system subdir involved.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We accidentally dropped the os-control playbook, since it was part of
the openshift 3.11 cluster playbooks. So, re-add that here, and move
staging over to rhel9.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This removes osbs and allmost all it's associated playbooks and files.
It served long and well, but we no longer need it.
flatpaks are building with a koji-flatpak plugin.
base/minimal/toolbox containers are building with kiwi.
We aren't building any other containers right now, and we did they could
be added to kiwi.
This is the end of an era... I look with nostolga on
ansible-ansible-openshift-ansible (a role to setup ansible on a control
host and run it from our ansible).
Good bye osbs!
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Apache was adding host name to X-Forwarded-Host, but this was already filled by
Fedora proxy and it caused to duplicate the domain. Disabling proxy headers in
apache solves the situation.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
These machines on recent kernels often have a LOT of processes.
They are ok, they just spawn a lot of threads for things like storage
and virtual guests. There's no point in alerting on this, it happens all
the time and the machines are fine.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We occasionally run into problems with certs that aren't renewed in time
or are close to expiring. Just running the proxies playbook will renew
them, but in freezes or the like sometimes there's a long time period
where we don't run that playbook.
So, lets just run weekly with the right tag. This should renew any cert
thats close to expiring.
The job shouldn't normally output anything, but if there's errors it
will email them to admin@
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Related with commit 1efcf8a90b
We need to update the acls table with their descriptions.
pagure/cli/admin.py update-acls
The above command can update the table and it looks for descriptions in the ACLS config variable.
Right now we are still trying to get this site working, and it's doing
passthough, so letsencrypt won't work. So, lets just disable it for now.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
The ansible-core-2.14.x in rhel9 (using python 3.9 now) can't handle
running uri module on fedora (python-3.12) without erroring.
There's a backported fix in 2.15, but until thats in rhel9, this will
keep hitting us.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This is fixing the error `django.core.exceptions.ImproperlyConfigured: Passing a 3-tuple to include() is not supported. Pass a 2-tuple containing the list of patterns and app_name, and provide the namespace argument to include() instead.`
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
