6 Commits

Author SHA1 Message Date
Kevin Fenzi
264d680760 Moved to https://forge.fedoraproject.org/infra/ansible
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-02-17 09:24:34 -08:00
Aurélien Bompard
b8c965de2c HyperKitty: activate pagination in the API
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-02-17 17:12:17 +01:00
Samyak Jain
2e01ca9793 Fedora 44 Bodhi enablement and Beta freeze - froze releng not infra
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2026-02-17 20:07:41 +05:30
Aurélien Bompard
1e56a66d34 Lower the DB connection recycling time in Dist-Git
Fixes: https://forge.fedoraproject.org/infra/tickets/issues/13099

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-02-17 13:07:51 +01:00
Jiri Kyjovsky
369056132a copr-hv: enable x86 hvs for prod 2026-02-17 13:01:54 +01:00
Jiri Podivin
e6f5f2b8cc Adding jmatufka to root_auth_users
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-02-17 10:53:41 +01:00
8 changed files with 12 additions and 151 deletions

144
README.md
View File

@@ -1,143 +1,3 @@
Fedora Infrastructure This repo has moved to https://forge.fedoraproject.org/infra/ansible
=====================
Welcome! This is the Fedora Infrastructure Ansible Pagure project.
Pull requests and forks can be made against this repository hosted
at https://pagure.io/fedora-infra/ansible
This repository is also mirrored for production runs to
https://infrastructure.fedoraproject.org/infra/ansible/
but this is the working repository where changes are made.
If you would like to help out with Fedora Infrastructure, see:
* https://docs.fedoraproject.org/en-US/infra/gettingstarted/
* https://docs.fedoraproject.org/en-US/infra/apprentice/
Ansible repository/structure
----------------------------
```
files - files and templates for use in playbooks/tasks
- subdirs for specific tasks/dirs highly recommended
inventory - where the inventory and additional vars is stored
- All files in this directory in ini format
- added together for total inventory
group_vars:
- per group variables set here in a file per group
host_vars:
- per host variables set here in a file per host
library - library of custom local ansible modules
playbooks - collections of plays we want to run on systems
groups: groups of hosts configured from one playbook.
hosts: playbooks for single hosts.
manual: playbooks that are only run manually by an admin as needed.
tasks - snippets of tasks that should be included in plays
roles - specific roles to be use in playbooks.
Each role has it's own files/templates/vars
filter_plugins - Jinja filters
main.yml - This is the main playbook, consisting of all
current group and host playbooks. Note that the
daily cron doesn't run this, it runs even over
playbooks that are not yet included in main.
This playbook is usefull for making changes over
multiple groups/hosts usually with -t (tag).
```
Paths
-----
The public path on batcave01 (our control host) for everything is `/srv/web/infra/ansible`
The private path on batcave01 (our control host) (which is sysadmin-main accessible only)
is `/srv/private/ansible`
In general to run any ansible playbook you will want to run:
```
sudo -i ansible-playbook /path/to/playbook.yml
```
(On batcave01, our control host)
Scheduled check-diff
--------------------
Every night a cron job runs over all playbooks under `playbooks/{groups}{hosts}`
with `ansible --check --diff`. A report from this is sent to sysadmin-logs.
In the ideal state this report would be empty.
Idempotency
-----------
All playbooks should be idempotent. Ie, if run once they should bring the
machine(s) to the desired state, and if run again N times after that they should
make 0 changes (because the machine(s) are in the desired state).
Please make sure your playbooks are idempotent.
Can be run anytime
------------------
When a playbook or change is checked into ansible you should assume
that it could be run at ***ANY TIME***. Always make sure the checked in state
is the desired state. Always test changes when they land so they don't
surprise you later.
Contributing and Licensing
--------------------------
Contributions to this repository are subject to the Fedora Project
Contributor Agreement. If no license is specified, the MIT license is used, otherwise
the contribution is under the specified acceptable Fedora License.
See https://docs.fedoraproject.org/en-US/legal/fpca/
for more information.
Contributing Pull Requests
--------------------------
If found a way to improve this repository or fix an issue found in our
infrastructure tracker (see https://forge.fedoraproject.org/infra/tickets)
open a pull-request.
You either should have capability to run the playbooks after they have been reviewed,
and merged or find the person responsible and work with them to make sure the changes
will be aplied afterwards.
We are currently working on a simple to use list of Point Of Contanct people for the applications
here, untill it is done, you can, look at people that recently edited the ansible files,
or if you belong to sysadmin group, view the /etc/ansible_utils/rbac.yaml located on batcave01,
where you can see the groups of people that have capabilities to run the relevant playbooks.
For example, to upgrade Release Monitoring, you need to run playbook openshift-apps/release-monitoring.yaml.
People in sysadmin-releasemonitoring have that capability, and you cand find the members in https://accounts.fedoraproject.org/group/sysadmin-releasemonitoring/
If the application in question is not on the critical path it should be sufficient,
if person responsible for the application reviews the PR.
If the files in question are on the critical path, that are necessary for functioning packager workflow,
at least two different people should review the PR.
If there is any risk at all, that the application of the changes would induce downtime,
work closely with other to ensure that the downtime is properly scheduled:
- there is an issue in https://forge.fedoraproject.org/infra/tickets specifying the downtime
- there is an email sent to the devel-list
- https://status.fedoraproject.org is updated (see https://docs.fedoraproject.org/en-US/infra/sysadmin_guide/status-fedora/)
Applications on critical path: pagure, mirrormanager, toddlers, bodhi, noggin, mdapi, rpmautospec, pagure-dist-git, mirror_from_pagure, fedora-messaging, dist-git, PDC/FPDC, FMN, sigul
robosignatory, tag2distrepo, ci-resultsdb-listener, stylo, mirrorlist
resultsdb, Nagios, koschei, wiki / mediawiki, wiki / moin, waiverdb,
greenwave, ODCS, Mailman3 / HK, mailman 2, OSBS, pungi, koji, MBS,
IPA, rabbitmq, geoip,ipsilon
Please go there to make any changes.

View File

@@ -47,13 +47,13 @@ builders:
p09_hypervisor_04: p09_hypervisor_04:
ppc64le: [15, 5, 15] ppc64le: [15, 5, 15]
x86_hypervisor_01: x86_hypervisor_01:
x86_64: [0, 4, 20] x86_64: [20, 4, 20]
x86_hypervisor_02: x86_hypervisor_02:
x86_64: [0, 4, 20] x86_64: [20, 4, 20]
x86_hypervisor_03: x86_hypervisor_03:
x86_64: [0, 4, 20] x86_64: [20, 4, 20]
x86_hypervisor_04: x86_hypervisor_04:
x86_64: [0, 4, 20] x86_64: [20, 4, 20]
ibm_cloud_us_east_hp: ibm_cloud_us_east_hp:
s390x: [2, 1, 0] s390x: [2, 1, 0]

View File

@@ -15,7 +15,7 @@ drive_device: 38e6c8c2-5747-47bf-b3d2-9f0dea371edc
datacenter: aws datacenter: aws
devel: false devel: false
root_auth_users: msuchy frostyx praiskup nikromen ttomecek jpodivin sgallagh mmassari root_auth_users: msuchy frostyx praiskup nikromen ttomecek jpodivin sgallagh mmassari jmatufka
nrpe_client_uid: 500 nrpe_client_uid: 500

View File

@@ -15,7 +15,7 @@ drive_device: c62e20b2-3388-459f-87ff-aa937d6a9318
datacenter: aws datacenter: aws
devel: false devel: false
root_auth_users: msuchy frostyx praiskup nikromen ttomecek jpodivin sgallagh mmassari root_auth_users: msuchy frostyx praiskup nikromen ttomecek jpodivin sgallagh mmassari jmatufka
nagios_Can_Connect: false nagios_Can_Connect: false
nagios_Check_Services: nagios_Check_Services:

View File

@@ -40,7 +40,7 @@ DB_URL = 'postgresql://{{ distgit_pagure_db_user }}:{{ distgit_pagure_db_pass }}
# Something breaks the database connections after a while, recycle them sooner # Something breaks the database connections after a while, recycle them sooner
# https://forge.fedoraproject.org/infra/tickets/12622 # https://forge.fedoraproject.org/infra/tickets/12622
DB_POOL_RECYCLE = 600 DB_POOL_RECYCLE = 300
### FAS groups of pagure admins ### FAS groups of pagure admins
ADMIN_GROUP = ['cvsadmin', 'sysadmin-main'] ADMIN_GROUP = ['cvsadmin', 'sysadmin-main']

View File

@@ -300,6 +300,7 @@ Q_CLUSTER = {
# #
REST_FRAMEWORK = { REST_FRAMEWORK = {
'PAGE_SIZE': 10, 'PAGE_SIZE': 10,
'DEFAULT_PAGINATION_CLASS': 'rest_framework.pagination.PageNumberPagination',
'DEFAULT_RENDERER_CLASSES': [ 'DEFAULT_RENDERER_CLASSES': [
'rest_framework.renderers.JSONRenderer', 'rest_framework.renderers.JSONRenderer',
], ],

View File

@@ -4,4 +4,4 @@
# postbeta: After beta release and before final release # postbeta: After beta release and before final release
# current: After final release # current: After final release
--- ---
FedoraBranchedBodhi: preenable FedoraBranchedBodhi: prebeta

View File

@@ -2,6 +2,6 @@
# is the infrastructure freeze currently in place? # is the infrastructure freeze currently in place?
InfraFrozen: False InfraFrozen: False
# is the pending release (Branched) currently frozen? # is the pending release (Branched) currently frozen?
NextReleaseFrozen: False NextReleaseFrozen: True
# for 'backwards compatibility' # for 'backwards compatibility'
Frozen: "{{ InfraFrozen }}" Frozen: "{{ InfraFrozen }}"