1
0
Fork 0
forked from infra/ansible
Commit graph

9,373 commits

Author SHA1 Message Date
318288aedc ELNBuildSync: Add static configuration file
Includes the Koji, Bodhi and Database configuration

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 17:52:33 +00:00
0ce30a13ba buildvm-s390x-13.s390.fedoraproject.org: remove from compose
We have 3 compose builders, but we don't really need all of them I don't
think. The rawhide composes do boot.iso for everything and server
and server dvd here, so 2 builders I think should be fine.

Lets move this one to be a general builder to try and prevent
backlogs.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-26 09:33:09 -07:00
15d3280750 [bodhi] Always run pre_tasks
When running the playbook with specific tag it will skip pre_tasks and
some of the vars are missing if that happens. Let's add tags: always to
run it everytime.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-06-24 10:59:36 +02:00
9d21d55364 fix lint errors
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-06-23 19:30:22 +00:00
642b7afdf3 feat(openshift): add restart for openscanhub + reusable role
Assisted-by: gpt-5.5 in Codex
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-06-23 19:30:22 +00:00
ecac04bf27 Whoops, add the openQA distgit reporter queue to the playbook
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-19 14:14:13 +02:00
3191e90c16
Zabbix: add zabbix_agent to places where nagios_client is used
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-19 11:41:51 +01:00
98747b34a7
ELNBuildSync: Further fixes for prod/stg var split
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-15 16:25:13 -04:00
James Antill
0a8e3dbe21 Revert "elnbuildsync: Add keytab_service variable for openshift/keytab."
This reverts commit 816d3c74a2.
2026-06-15 15:49:53 -04:00
James Antill
816d3c74a2 elnbuildsync: Add keytab_service variable for openshift/keytab.
Signed-off-by: James Antill <james@and.org>
2026-06-15 15:46:18 -04:00
9da15d2b03
ELNBuildSync: rework variable locations
Instead of having foo: and foo_stg: variables with ternary() selections
based on environment, take a cue from Koschei and use two variable files
in the role, selected by environment name.

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-15 14:30:12 -04:00
f5a5681182
elnbuildsync: Retrieve keytab from IPA
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-15 10:49:42 -04:00
7ef75bd174
elnbuildsync: limit to staging for now
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-15 09:08:05 -04:00
92d93d29f0 ELNBuildSync: Use different config branch on staging
Also fix missing variable reference for the main role deployment
playbook.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-11 18:13:32 +00:00
63101653a1 ELNBuildSync: Fix AMQP configuration
Feedback from code review:

* Drop unused routing key
* Remove hardcoded .prod.
* Sync with queue_routing_keys in the playbook
* Properly interpret Jinja variables

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-11 18:13:32 +00:00
377e504d21 ELNBuildSync: support staging RabbitMQ
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-11 18:13:32 +00:00
de5806c609
Fix RabbitMQ cert path
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-11 15:25:50 +02:00
000d326ddf
Zabbix: move Nagios moby check, pt2
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-11 11:10:17 +01:00
0759572fcf Move the ELNBuildSync queue setup
Now that ELNBuildSync is being deployed via Ansible, we should keep its
queue setup with the rest of the playbook.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-09 13:22:41 +00:00
0cc2b77915 Add ELNBuildSync deployment
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-09 13:22:41 +00:00
77cfc6bff2
Add zabbix_agent to sign-bridge
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-08 14:02:10 +01:00
fbab66f62c drm-panic-frontend: Deploy in production 2026-06-04 19:17:43 +00:00
52ac6c7ec6 pagure-stg-ro01: add new instance for readonly pagure in stg ( ticket 13351 )
For infra/tickets#13351
This makes a staging rhel10 vm thats just the same size / place
as pagure-stg01.

It still needs external ip's and nat in from those, but this should be
enough to install it and start setting things up.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-03 19:55:22 +00:00
6a1a255d9f drm-panic-frontend: Add deployment 2026-06-02 20:51:28 +00:00
0248c0d535 virthost: rkhunter is available in epel10/10.2
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 11:26:08 -07:00
Jan Matufka
d77168ff0c logdetective: service, dependency on nvidia-cdi
- for persistent deployment

Signed-off-by: Jan Matufka <jmatufka@redhat.com>
2026-05-28 08:15:50 +00:00
0baaabd735
Prepare W2FM in staging for Pretix
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-05-27 16:56:14 +02:00
068605d67d
Fixup 814582dc: actually use the imagestream.yml file
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-05-27 11:52:51 +02:00
b5eddd80ea bodhi-stg: cannot use --include to override valkey conf
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2026-05-23 11:01:41 +02:00
481443b92f bodhi-stg: use valkey cache
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2026-05-23 10:41:49 +02:00
4cf99e088a
fix(proxies): add www.fedoraproject.org back
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-05-18 09:14:27 +02:00
51081991be buildhw: install pesign_bridge on all secureboot group members
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-15 12:30:12 -07:00
af80a6a3a0 secure-boot: clean up old bkernel role and add 2 more builders
We are no longer using the bkernel role (using the old card thats in
buildhw-x86-01), so this removes that role and mentions of it.

Also, because we are urgently building kernels all the time now,
add one more buildhw-x86 and one more buildhw-a64 to secure-boot channel
so we can build more/faster kernels.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-15 19:14:17 +00:00
b641125564 proxies / redirectmatch / provisioning-server: I am not sure how this worked before, but it needs a regex
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-11 17:35:41 -07:00
0df0dc0ec9 proxies / koji: lower the keepalive on the proxy side
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-11 14:30:03 -07:00
0b9ff51e27
zabbix: playbook to deploy the zabbix proxy in openshift
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-05-11 16:04:35 +01:00
c6704f92dc
communishift: added cleanup playbook cleanup-administration-delete-projects.yml
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-05-11 12:27:28 +01:00
ec82c78f22 bodhi-stg: add secret definition
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2026-05-11 09:39:07 +02:00
06fc965500 bodhi-stg: define bodhi-valkey-storage pvc
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
AI-assisted-by: Claude (Anthropic)
2026-05-10 10:18:34 +02:00
565a59722b resultsdb / resultsdb-ci-listener: convert from deploymentconfig to deployment
This moves these two apps from deploymentconfig to deployment.

Assisted-by: calude

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-06 20:37:07 +00:00
e6491b5cba
communishift: Send email notification when disabling projects
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-05-06 20:11:29 +01:00
e4321ec9c3
communishift: Disable project playbook
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-05-06 19:58:48 +01:00
85f227197c [bodhi] Add missing vars file to playbook
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-05-06 11:46:34 +02:00
Nikita Dubrovskii
66580813a6 coreos-ci: add azukku as appowners 2026-05-05 07:37:33 +00:00
a00af9f5cd openshift: adjust rollout in playbooks for deployment instead of deploymentconfig
Since we have moved (almost everything) to deployment, we need to adjust
adjust these rollout commands to use deployment instead.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-04 13:39:23 -07:00
cc8e259360 compose-tracker: move stray playbook to the right place
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-04 13:20:20 -07:00
e3e74bc722 waiverdb: fix deployment reference
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2026-05-04 19:57:20 +00:00
830d4d5560 bodhi: try and standardize the app names and also adjust playbook for deployment instead of deploymentconfig for scaling
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-02 10:06:44 -07:00
36218c17e2 bodhi: fix deployment reference
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2026-05-02 16:45:56 +00:00
b5de39dc82 noggin-centos / noggin: use object_os_app name for image stream namespace for nogin vs nogin-centos
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-02 09:39:58 -07:00