This *should* configure a new queue and consumer for openQA to
report dist-git PR test results back. It's all a bit speculative
ATM, may need some tweaking. Mostly applied only on staging for
now.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
AI caught that I've been cargo-culting a dumb message queue
config around from somewhere or other forever. Non-durable,
exclusive, and auto-delete is just about the worst config for a
queue you want to survive transitory issues like the server or
client going down or whatever. This might actually explain the
occasional issues we have with test results not showing up in
resultsdb, even.
This brings the config in line with most other message queues in
infra.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
See https://bugzilla.redhat.com/show_bug.cgi?id=2490607
We have found a bug in FreeIPA replica enrolment with the
OpenSSL 4 update. However, the bug is tricky to fix and the update
is massive and maintaining its side tag is very painful. As a
very exceptional case, we're disabling gating on these tests so
the update can be merged without causing all subsequent updates
to fail gating. We will endeavour to fix the bug and re-enable
normal gating service ASAP.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
This commit updates the `matrixadmin@fp.o` email address alias to now
use the `commops-wg-matrix` sponsor membership for the people who will
automatically receive email to the Matrix admin email. This is one step
to somewhat simplify membership of the email alias to a FAS-backed
mechanism for tracking and updating the sponsors.
Of course, sponsors cannot be updated in Noggin at the moment, so this
requires an IPA FAS admin to update the sponsor list for membership, but
this is an interim step for now.
Additionally, the `cle-managers@fp.o` email alias is added, which
ensures that key members of the CLE Team management will receive comms
to this email address, in the event that a key person from Fedora Infra
is on PTO, unavailable to respond, and to ensure delegation of access in
case of the "lottery factor".
People impacted by this change: @gwmngilfen@jasonbrooks@shaunm@blc@smilner@ancarrol@jbley@mattdm
Signed-off-by: Justin Wheeler <jwheel@redhat.com>
Ansible doesn't detect Deployment changes when dependent files are
modified, so we'll just add a serial we can bump up whenever we need to
force Ansible to re-deploy.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
Instead of having foo: and foo_stg: variables with ternary() selections
based on environment, take a cue from Koschei and use two variable files
in the role, selected by environment name.
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
Different versions of OpenShift return different messages when a Secret
already exists in the project. Check for both variants out of an
abundance of caution.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
Allows the idempotent creation of a bot user with a randomized password.
Administrators can retrieve a keytab for this user without modifying the
password.
Playbook usage:
- role: keytab/botuser
username: "somebot"
kt_location: /etc/keytabs/somebot.keytab
tags:
- config
- krb5
Also accepts `first` and `last` arguments for given and family name, if
desired.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
Also fix missing variable reference for the main role deployment
playbook.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
