1
0
Fork 0
forked from infra/ansible
Commit graph

46,581 commits

Author SHA1 Message Date
f059b1f9d2 fix(koji-http-toggle): resolve proxy IPs via shell so awk pipe works
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2026-07-07 12:32:36 +05:30
d9e7279830 Add Ansible playbook to toggle Koji HTTP access with nftables
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2026-07-07 12:14:25 +05:30
f2239cb238 feat(forgejo): oauth-proxy delegates /metrics endpoint to be accesible through token
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-07-06 15:59:51 +02:00
Lenka Segura
53bede04b2 forge: add staging docs and production relend testing-farm runners
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-07-06 15:33:27 +02:00
df71a59847
forgejo: fixed bug with UUID in zabbix template
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-07-06 13:40:36 +01:00
539176cb09
Collectd: disable collectd pod in FMN app, log01 is no longer listening
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-06 11:55:19 +01:00
Jakub Kadlcik
e5bb2ff606 copr: use the latest version of the expect package
Fix https://github.com/fedora-copr/copr/issues/4361
2026-07-06 10:49:20 +02:00
d13496b221
Collectd: stop the collectd service everywhere, prior to removal
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-03 13:09:19 +01:00
42ac8c53d5
forgejo: wip zabbix template to monitor forge metrics endpoint
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-07-03 12:03:17 +01:00
9ea0108e6d feat(forgejo): added SA,R,RB,S that zabbix will you to bypass oauth-proxy for accessing metrics endpoint
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-07-03 12:09:43 +02:00
9b65ab416b
Nagios: remove nagios_server role
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-02 13:39:18 +01:00
bf0cafb5b4
Nagios: fix removal task ordeering
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-02 13:32:09 +01:00
93f5b63c0c Nagios: remove the Nagios server components
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-02 12:29:06 +00:00
Lenka Segura
2dbf6d5978 forge: Add a handful of runners
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-07-02 09:08:55 +02:00
83270e8b3b ipa-free-ids: pass monitoring keytab to the cron jobs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 14:53:49 -07:00
b74bb8e1a3 communishift: add pvc handling and allow 3 for happinesspackets
Per infra/tickets#13437

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 14:40:17 -07:00
b6097f96c2 download: drop centos-stream content
Turns out we were syncing this, but never actually had the categories
set in mirrormanager, so we never got any traffic for it.
These download servers are really close to full, so lets just remove
this for now and see if that gives us some space.

We probibly will need to stop carrying archive or something on these
sooner or later though.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 14:13:10 -07:00
d2c6b0c7dd websites: bypass anubis for POST on forge.fedoraproject.org too
We have been seeing some 502's on forge also, that might be the same
thing we were seeing with src and koji, so lets try and bypass POSTs
here too.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 13:03:26 -07:00
56e52aa71c bodhi: adjust config in staging to allow src.stg builds
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-01 12:27:38 -07:00
b27e90e124
ELNBuildSync: Add hostname entries
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-01 14:34:56 -04:00
20687f05ee
ELNBuildSync: Wait for the build to complete
The playbook can be run with --tags all,build and it will perform the
ImageStream build and then proceed to deployment.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-01 13:57:48 -04:00
92c757a52e
Add OCP_BUILD_WAIT option to openshift/start-build role
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-01 13:56:48 -04:00
609976d3c2
Revert "ELNBuildSync: Wait for build to complete"
This reverts commit baceaabf97.
2026-07-01 13:54:34 -04:00
baceaabf97
ELNBuildSync: Wait for build to complete
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-01 13:34:47 -04:00
50c4278af6
ELNBuildSync: pull in 1.3.2
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-01 13:22:38 -04:00
James Antill
2f018f36e2 sync-http-logs: Add some missing hosts, and add some comments.
Signed-off-by: James Antill <james@and.org>
2026-07-01 13:17:58 -04:00
0b1267eb9b
Nagios: remove nagios_client role, and remove it from playbooks
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 17:31:32 +01:00
449ddd529b
Zabbix: Add koji check_lock script
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 17:31:18 +01:00
c4a96be6cc
Zabbix: set owner of centos-monitoring rabbit scripts/units/timers correctly
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 16:41:06 +01:00
2818ab897e
Nagios: change ownership of centos sender script
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 16:06:48 +01:00
6eac650a10
Nagios: remove nrpe from a bunch of smaller things
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 14:22:40 +01:00
ea960ee1a7
Nagis: remove nrpe config from rabbitmq_cluster
This actually restores some code I deleted in March, because it's needed
for the CentOS sender. It now places that config in /etc/zabbix since
/etc/nrpe.d is going to be removed.

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 14:22:40 +01:00
fbf73ff1f9
Nagios: remove nrpe from the firewall config
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 13:35:34 +01:00
bd60dab0fb
Nagios: remove nrpe from fedmsg
The user is already gone in the nagios_client commit, but this alters
the sockets to be group-owned by Zabbix instead of nrpe

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 13:35:34 +01:00
e86f495e8d
Nagios: remove nrpe from COPR
Note we can drop the nrpe.d block entirely because that dir got removed
in the previous commit.

Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 13:35:34 +01:00
9a83bf66d4
Nagios: remove nrpe from servers
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 13:35:34 +01:00
31776c27e4 Fix syntax error
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-01 14:26:36 +02:00
d96ff34676 Enable infra tags repos on RHEL10
There are now infra tags repositories for RHEL10, let's enable them.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-01 14:19:37 +02:00
cc06635ada
Zabbix: kojipkgs uses a different port for Varnish
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 10:24:30 +01:00
b5a2ece0b9
Zabbix: adjust Varnish tcp port check, and selinux rule
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-01 10:12:46 +01:00
6837abe432 Add forge-releng-provenpackagers in releng org
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2026-07-01 08:20:27 +00:00
541c938f4e greenwave: gate on desktop_notifications_postinstall_updatetest x86_64
Test is disabled on aarch64 on KDE for being flaky, and is also
a bit flaky on aarch64 on GNOME on F43, so we can't gate on
aarch64 for now. Will maybe re-assess when F43 goes EOL.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-30 11:48:51 -07:00
975539e3bb
ELNBuildSync: Don't tell YAML to strip newlines
See "BLOCK SCALARS" in
https://env.dev/cheatsheets/yaml-cheat-sheet

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-30 13:25:03 -04:00
7cbe56ce2f
ELNBuildSync: bump to 1.3.1
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-30 12:34:11 -04:00
e98613ae82
ELNBuildSync: Make mount paths read-only
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-30 12:33:13 -04:00
539427b4c8 robosignatory: setup f45-perl signing and drop f45-python since it is merged
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-30 09:24:09 -07:00
f70420248f
ELNBuildSync: properly quote FM queue name
Also ensure that the fedora-messaging config is updated whenever the tag
is specified.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-30 10:01:11 -04:00
5492b306d8 [flatpak-indexer] Remove quay differ deployment
It seems that we doesn't need this as both differ deployments are
processing tasks from both quay.io and registry.fp.o indexer.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-06-30 14:59:05 +02:00
796ccbdec9 [flatpak-indexer] Fix deployment
Remove tests from deployment - they are failing, but on upstream all of
them passing.
Fix the quay.io config - use correct quay.io namespace, delta and icons
uris need to point to registry.fp.o as there isn't any space on quay.io
to store them
Use upstream repository for redis build

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-06-30 13:58:29 +02:00
969a94bd18
Zabbix: add tags missed in previous commit
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-30 12:48:53 +01:00