d4825ebfb2
zabbix: Update openshift proxy configuration
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-07-09 13:08:53 +01:00
c51e04de81
Collectd: cleanup collectd everywhere except FMN
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 11:01:41 +00:00
f77550f85c
kickstarts: rhel10: remove vnc, it is no longer supported and rdp has to be specified on the boot line
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-08 13:35:57 -07:00
92b2fddd2c
fedora-ostree-pruner: update to Fedora 44
...
xref: https://github.com/coreos/fedora-coreos-tracker/issues/2055
2026-07-08 15:52:00 +00:00
072c8a765d
coreos-koji-tagger: update to Fedora 44
...
xref: https://github.com/coreos/fedora-coreos-tracker/issues/2055
2026-07-08 15:52:00 +00:00
eb6222610b
coreos-cincinnati: update to Fedora 44
...
xref: https://github.com/coreos/fedora-coreos-tracker/issues/2055
2026-07-08 15:52:00 +00:00
c5e16e687c
[flatpak-indexer] Separate the instances
...
Try another approach to separate the instances. Create a separate redis
instance for quay.io, that should allow to have completely separate
quay.io resources and registry.fp.o resources.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-08 12:48:20 +00:00
c712b24ee4
Collectd: remove files & packages
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-08 12:23:07 +00:00
92fe69c649
OpenShift: Refactor os-control playbook to a role and add monitoring
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-08 12:06:57 +00:00
360f493bc4
pagure: try adjusting lines on patch
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-07 17:33:10 -07:00
71585073ad
pagure: add a line to the patch so the numbers match up and it applies
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-07 17:14:36 -07:00
d0e61275a6
Allow draft builds on ELN side-tags
...
Fixes: releng/tickets#13374
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-08 00:05:53 +00:00
6882b20e9b
pagure: add a line to the patch so the numbers match up and it applies
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-07 17:01:28 -07:00
29cce54d62
📧 roles(fasjson): Update logo alias
...
This commit updates the `logo` alias to make sure trademark permission
requests are correctly routed to the Fedora Design Team Admins as the
most responsible party for the legal stewardship of the Fedora Project
trademark and brand. Therefore, to encourage use of FAS group membership
to better manage access to these hand-coded email aliases, this will now
send all emails to this alias to FAS account users with membership as
sponsors in the `designteam` FAS group.
Once this change is deployed and updated in production, this mail alias
will begin sending mail to @duffy (no change), @ekidney , @jesschitas ,
@jflory7 , @madelinepeck (no change), and @mleonova .
Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-07-07 23:58:12 +00:00
3d93bf17bc
releng: run sig_policy script daily instead of weekly
...
This script should be inexpensive to run, so it'd be nice to run it more
frequently.
2026-07-07 23:54:23 +00:00
99e363981c
releng: use new git repo for sig_policy script
2026-07-07 23:54:23 +00:00
3ddb342c58
application-monitoring: retire app
...
We never deployed this in the new clusters since we moved and the folks
who were working on it have left. If we want to revive it later, we can
always pull it out of git history.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-07 15:38:59 -07:00
c7a559d359
feat(pagure.io): added notification banner and git hook that informs about pagure migration
...
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-07-07 22:34:20 +00:00
Jiri Kyjovsky
99f1ff2202
base: disable iptables service when nftables is enabled
...
When `nftables=True` the base role deploys nftables rules and enables the
nftables service, but never disables the iptables service. On freshly
provisioned hosts the iptables service can be left running from cloud-init,
overwriting nftables rules and silently dropping traffic on ports defined
in `tcp_ports`.
Stop and disable the iptables service explicitly when nftables is the
intended firewall backend.
2026-07-07 22:02:24 +00:00
James Antill
ff663e686f
elnbuildsync: Use auth_method=client_secret_basic.
...
Signed-off-by: James Antill <james@and.org>
2026-07-07 17:12:49 -04:00
dabb77faf4
ELNBuildSync: Set authorized groups
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-07 19:52:17 +00:00
James Antill
108228f6fd
elnbuildsync: Add stg. config. to ipsilon.
...
Signed-off-by: James Antill <james@and.org>
2026-07-07 15:39:11 -04:00
d880671e4f
ELNBuildSync: fix client_id on staging
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-07 14:09:22 -04:00
cd7f6c2efc
ELNBuildSync: Use the right namespace in the service object
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-07 13:32:04 -04:00
0aa20b9436
ELNBuildSync: Prepare prod deployment
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-07 11:07:32 -04:00
Jiri Podivin
6f377c8d87
Check for undefined deploy script
...
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-07 12:37:45 +02:00
dee5b453f1
Zabbix: get the tag name/value pair the right way around
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-07 10:45:17 +01:00
ea32c85fa7
Zabbix: 13450 - filter COPR notifications better
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-07 10:40:59 +01:00
83b0f60d6a
[postfix] Change the relayhost for sign machines
...
Today the bastion relayhost didn't work for sign-bridge. So we changed
it to bastion01.rdu3.fedoraproject.org. This worked, so let's reflect
that change in ansible as well.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-07 11:01:08 +02:00
Jiri Podivin
51a458f26b
User certbot role for Log Detective
...
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-07 08:45:21 +00:00
Jiri Podivin
f4c497e764
Create a separate role for certbot driven certificate renewal
...
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-07 08:45:21 +00:00
Jiri Podivin
cd29c1260e
Attempt shut down Log Detective service before restarting it
...
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-07 08:39:45 +00:00
Lenka Segura
6e63ce738b
forge: Add mobility runner to production
...
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-07-07 10:26:01 +02:00
Lenka Segura
5686cf77b7
forge: add regular runner for go org
...
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-07-07 07:30:40 +00:00
f2239cb238
feat(forgejo): oauth-proxy delegates /metrics endpoint to be accesible through token
...
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-07-06 15:59:51 +02:00
Lenka Segura
53bede04b2
forge: add staging docs and production relend testing-farm runners
...
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-07-06 15:33:27 +02:00
df71a59847
forgejo: fixed bug with UUID in zabbix template
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-07-06 13:40:36 +01:00
539176cb09
Collectd: disable collectd pod in FMN app, log01 is no longer listening
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-06 11:55:19 +01:00
Jakub Kadlcik
e5bb2ff606
copr: use the latest version of the expect package
...
Fix https://github.com/fedora-copr/copr/issues/4361
2026-07-06 10:49:20 +02:00
d13496b221
Collectd: stop the collectd service everywhere, prior to removal
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-03 13:09:19 +01:00
42ac8c53d5
forgejo: wip zabbix template to monitor forge metrics endpoint
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-07-03 12:03:17 +01:00
9ea0108e6d
feat(forgejo): added SA,R,RB,S that zabbix will you to bypass oauth-proxy for accessing metrics endpoint
...
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-07-03 12:09:43 +02:00
9b65ab416b
Nagios: remove nagios_server role
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-02 13:39:18 +01:00
bf0cafb5b4
Nagios: fix removal task ordeering
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-02 13:32:09 +01:00
93f5b63c0c
Nagios: remove the Nagios server components
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-02 12:29:06 +00:00
Lenka Segura
2dbf6d5978
forge: Add a handful of runners
...
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-07-02 09:08:55 +02:00
83270e8b3b
ipa-free-ids: pass monitoring keytab to the cron jobs
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 14:53:49 -07:00
b74bb8e1a3
communishift: add pvc handling and allow 3 for happinesspackets
...
Per infra/tickets#13437
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 14:40:17 -07:00
d2c6b0c7dd
websites: bypass anubis for POST on forge.fedoraproject.org too
...
We have been seeing some 502's on forge also, that might be the same
thing we were seeing with src and koji, so lets try and bypass POSTs
here too.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 13:03:26 -07:00
56e52aa71c
bodhi: adjust config in staging to allow src.stg builds
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 12:27:38 -07:00
