anubis-el: set correct selinux labels for podman

selinux was preventing anubis from reading its policy file.
So, set the right context here so it is happy.

Note that we cannot use :Z in the podman call, because it runs as the
anubis user which cannot chcon those files on the host.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

roles/anubis-el/tasks/main.yml

@@ -84,6 +84,25 @@
   - config
   - anubis
 
+- name: Set SELinux context for anubis directory
+  community.general.sefcontext:
+    target: "/srv/anubis(/.*)?"
+    setype: container_file_t
+    state: present
+  tags:
+  - config
+  - anubis
+  - selinux
+
+- name: Apply SELinux changes to anubis directory
+  ansible.builtin.command: restorecon -irv "/srv/anubis/"
+  register: restorecon_output
+  changed_when: restorecon_output.stdout is defined and restorecon_output.stdout | length > 0
+  tags:
+  - config
+  - anubis
+  - selinux
+
 # This service calls podman to pull the anubis container,
 # then sets various env variables for the service and runs it.
 

roles/copr/frontend/templates/copr.conf

@@ -294,6 +294,10 @@ USAGE_TREEMAP_TEAMS = {
     "Python-team": ["@python", "thrnciar", "torsava", "encukou", "cstratak", "churchyard"],
 }
 
+# What storage should be set for new projects.
+# Possible options are "backend" and "pulp"
+DEFAULT_STORAGE = "pulp"
+
 PULP_CONTENT_URL = '{{ backend_base_url }}/results/'
 
 

roles/distgit/pagure/templates/fedora-messaging.toml

@@ -11,6 +11,8 @@ topic_prefix = "org.fedoraproject.stg"
 topic_prefix = "org.fedoraproject.prod"
 {% endif %}
 
+publish_exchange = "amq.topic"
+
 [tls]
 ca_cert = "/etc/pki/rabbitmq/pagurecert/src.fp.o.ca"
 keyfile = "/etc/pki/rabbitmq/pagurecert/src.fp.o.key"

roles/openshift-apps/greenwave/templates/imagestream.yml.j2

@@ -13,8 +13,8 @@ spec:
 {% if env == 'staging' %}
       # The latest successful build of master that passes tests
       # is auto-tagged here. 
-      name: quay.io/factory2/greenwave:latest
+      name: quay.io/redhat-user-workloads/exd-sp-rhel-wf-tenant/greenwave:latest
 {% else %}
       # This is 'prod' tag is maintained by hand.
-      name: quay.io/factory2/greenwave:prod-fedora
+      name: quay.io/redhat-user-workloads/exd-sp-rhel-wf-tenant/greenwave:prod-fedora
 {% endif %}

roles/openshift-apps/waiverdb/templates/imagestream.yml.j2

@@ -13,8 +13,8 @@ spec:
 {% if env == 'staging' %}
       # The latest successful build of master that passes tests
       # is auto-tagged here. 
-      name: quay.io/factory2/waiverdb:latest
+      name: quay.io/redhat-user-workloads/exd-sp-rhel-wf-tenant/waiverdb:latest
 {% else %}
       # This is 'prod' tag is maintained by hand.
-      name: quay.io/factory2/waiverdb:prod-fedora
+      name: quay.io/redhat-user-workloads/exd-sp-rhel-wf-tenant/waiverdb:prod-fedora
 {% endif %}