1
0
Fork 0
forked from infra/ansible
Commit graph

213 commits

Author SHA1 Message Date
50559f83d7 memcached: move to new rhel10 instances
This moves all the applications that are using memcached to point to
the 01 (rhel10) versions intead of the 02 (rhel9) ones.

After pushing this, I will roll the changes out in staging and confirm
everything works, then do production. In the event of problems will roll
this back.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-27 12:37:23 -07:00
369337d0a0 update torrent and mediawiki configs for new ips
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-08-20 14:03:16 -07:00
6c85fda0c9 Mass remove/replace iad2 -> rdu3, 10.3. -> 10.16.
Signed-off-by: Nils Philippsen <nils@redhat.com>
2025-07-03 20:05:02 +02:00
d884a0f8ba
Use the combined RabbitMQ CA cert in the clients
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
47c68f478d ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
Replaces references to template: with ansible.builtin.template

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
25391e95b7 ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
Replaces many references to  package: with ansible.builtin.package

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
462176464b ansiblelint fixes-- fqcn[action-core] - command to ansible.builtin.command
Replaces many references to  command: with ansible.builtin.command

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:26:47 +10:00
6a3816dfdc ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
Replaces many references to 'copy' with ansible.builtin.copy

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
691adee6ee Fix name[casing] ansible-lint issues
fix 1900 failures of the following case issue:

`name[casing]: All names should start with an uppercase letter.`

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
24aaee6429 move apps to memcached02 2024-12-11 23:22:28 +00:00
89f6f1fc32 Fix majority of remaining yamllint warnings and errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
c88ab2cb08 test move apps to memcached02 2024-11-25 13:20:45 +00:00
b083c70da2 Move building fedoramessaging extensaion after links are made
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-05-16 18:04:00 +10:00
194cca2240
Mediawiki no longer uses fedmsg
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-07 11:11:32 +02:00
840c898fec
Add tags
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-05 15:45:01 +02:00
6fbc69fdcf
Small fixup
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-05 15:44:09 +02:00
586733c645
Deploy the new fedora-messaging emitter for mediawiki to prod. Yolo.
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-05 15:32:29 +02:00
82e7d6ab4c
Install php dependencies
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-03 17:16:26 +02:00
b12d5b588e
Missing file
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-03 14:56:49 +02:00
5db080088e
Add missing dep
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-03 14:53:56 +02:00
9df13d4abb
Use the new fedora-messaging emitter in Mediawiki
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-03 14:52:33 +02:00
4a99b7b62a wiki: try and re-enable passwordattemptthrottle
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-06-04 08:28:16 -07:00
08e7c38a96 mediawiki: merge changes in from staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-31 16:57:58 -07:00
3d32e12a1f [wiki] Remove old patched openIDConnect, and comment about new setup
We previously moved the FPCA check from a patched file held here in
ansible into the RPM itself when it was built for the Fedora infra
repos. While we no longer installed the patched file, it remained here
in the files dir of the wiki role, so we are deleting it.

Also, have added a comment to the play to say where we are holding this
patch now, so when i forget about it again, and come back to it in
another year or so, i can remember faster

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2023-05-24 16:45:41 +10:00
0111ccfe2d Retire old rdu2 space.
This space was in a networking cage thats going away and all the
machines there are old and out of warentee.
This space was intended for disaster recovery purposes.
For that now we have a internal vm that can access our mirrored netapp
storage, so we can sync anything off it we need to when iad2 is down.
I will be resetting up a batcave13 in another datacenter to allow us a
backup ansible/dns control host. bastion13/ns13/proxy13 will likely just
go away forever. download-rdu01 should be replaced by the new
download-cc-rdu01 once we have the new hardware in place for that.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-22 10:09:34 -07:00
814fd550cd wiki / staging: some changes in config for the new wiki in staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-22 09:54:50 -07:00
d3b4521668 Fix Upload TypeError #10877
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2023-01-17 20:56:40 +00:00
c2cab48398 All php vars need to end with a ;
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 14:26:16 -07:00
801bdf4450 wiki: up cookie lifetime to 10hours
Right now by default users are logged out after 1 hour of inactivity on
the wiki. This is anoying for people who do a number of edits during the
day. So, lets increase this timeout to 10 hours.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 13:54:43 -07:00
bd7e118855 mediawiki: try disabling loginattemptthrottle entirely
Sometimes folks are unable to login to the wiki because there have been
too many login attempts from the proxy they happen to be hitting the
wiki from. Lets just disable this throttle entirely, as brute force
won't work ever anyhow.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-09-14 12:50:13 -07:00
56f26f0ec8 mediawiki: try and adjust the throttling by default to avoid proxies hitting limits
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-27 12:07:40 -07:00
201707b04d Wiki: fix issue with version number in fedmsg plugin
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2022-06-17 13:19:46 +10:00
ba3d86568f Fix the fedmsg emitter for the wiki
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2022-06-17 12:59:32 +10:00
d82fc074dc wiki: drop 2 hotfixes we no longer need
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-16 15:12:03 -07:00
985d30bcc6 wiki: drop HTTP302Found for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2022-06-16 14:31:57 -07:00
db00f9020a [wiki] disable HTTP302Found plugin
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2022-06-17 06:56:14 +10:00
e505abaa2f [wiki] apply new pluggable auth settings for prod
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2022-06-17 06:41:36 +10:00
664db28a9f [wiki] comment out $wgActorTableSchemaMigrationStage
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2022-06-13 21:17:08 +10:00
e39c030219 [wiki] change NS_IMAGE* contancts to NS_FILE*
mediawiki deprecated the NS_IMAGE constants in favor of the NS_FILE
constants back in 1.14. They were removed in 1.34, so now we change
them.

c429074687/RELEASE-NOTES-1.34 (L225)

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2022-06-13 21:01:48 +10:00
f9a1fd07e8 Update OIDC settings for newer versions of plugins
mediawiki-OpenIDConnect and mediawiki-PluggableAuth are updated to newer
versions, and the config setup has changed. this tweaks it for the wiki
stage.

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2022-06-13 19:54:49 +10:00
Nikolay Udovik
893275ab13 mediawiki - update reverse proxy ips. issue #10294. squashed commits
update mediawiki reverse proxy ips. issue  #10294

mediawiki - update proxy13 and proxy30 addresses
2022-06-08 16:50:35 +00:00
6ef496d56a Reconfigure IPv6
Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Configure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Reconfigure IPv6

Configure IPv6

Update IPv6 address for noc02 rule

Update IPv6 address in confg for noc02 address change

Update IPv6 address for proxy04

Update IPv6 address for torrent02
2021-11-08 22:56:05 +00:00
b7fb1b1faf Mediawiki: disable editing of talk pages
We don't use talk pages, people often add notes to them and no one ever
sees them. We want discussion of things on our lists or matrix, not in a
talk page no one reads.

This disables editing talk pages by using the lockdown plugin and only
granting permissions to edit talk pages to 'noone'. Since that group
doesn't exist, no one can edit them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-11-03 22:29:27 +00:00
983d456072 wiki: update content license note
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-08-20 13:52:39 -07:00
7c03fc1954
Fix the wiki FPCA requirement
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-04-29 10:46:54 +02:00
6e68f8fe4f
Fix the mediawiki auth plugin
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2021-03-25 11:15:29 +01:00
f88bdf2c78 mediawiki: drop old fas cla and use agreements in prod now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-03-24 11:39:11 -07:00
cf6f1a8b52 mediawiki: in staging, fix the port and password
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-10-07 12:13:41 -07:00