1
0
Fork 0
forked from infra/ansible
Commit graph

39,249 commits

Author SHA1 Message Date
22dde8163b unbound: remove and retire unbound servers
These instances served long and well as fallback resolvers for
dnssec-trigger. This is no longer needed or used, so lets remove them.
See https://pagure.io/fedora-infrastructure/issue/11415

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-24 14:40:43 -07:00
377edfb74a rabbitmq / distrobuildsync-cs: remove queue for now until ELN folks are ready to consume it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-24 12:57:45 -07:00
0944ac4ef3 copr-dist-git: decrease storage warning quota
With 5T storage, it is enough to warn on remaining 12%, and error on 6%.
2023-07-24 07:14:16 +02:00
07f9caa49f pagure: drop this websites block
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 12:58:11 -07:00
fcd9c449ad pagure: set dns2, otherwise the default is a internal iad2 one
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 11:31:01 -07:00
1e26a28c2c openqa/server: try setting a limit on test result disk usage
We're having issues with test results eating up all the disk
space we can throw at them (prod is over 4T, stg is over 2T -
I don't know why prod is bigger, that's odd, but it may be an
odd effect of having more arches on stg, maybe aarch64 and
ppc64le tests generally have smaller videos, or something).
This config setting should make openQA keep the space usage
on the partition at a max of 85%, by deleting videos from older
tests as required.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2023-07-21 10:19:54 -07:00
9e98f4c0de koji_builder / runroot: Also add bind mount to nspwan args
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:57:43 -07:00
7c10f88b02 koji_builder / runroot: set this mount at the mock level on compose channel hosts only
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:46:08 -07:00
8735931424 kojibuilder / runroot: revert fuse attempts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:42:33 -07:00
f94a4d1a8f koji_builder / runroot: try no options here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:34:47 -07:00
f4e8a921a6 koji_builder: add /dev/fuse mount to runroots
ostree unified composes need /dev/fuse, so allow/add it to runroot
defaults. See https://pagure.io/fedora-infrastructure/issue/11420

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 09:05:14 -07:00
06d4c39372 flocktofedora: add tag
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-21 08:02:59 -07:00
Stephen Smoogen
a1e9d8364c Temporary fix website by restoring multiview
It was thought that MultiViews was not needed for various websites to work and so was removed. It turns out that was wrong, and it was very much relied on for permissions of pages to work on the proxies and such. Mea-culpa mea-culpa

This fix restores the item until we are able to come up with a better fix.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
2023-07-21 08:36:23 -04:00
4c4723e928 start: add a tag to quickly re-run it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-20 20:27:43 -07:00
50b0ac71d7 start: put multiviews back here for now until we can fix it correctly to not use it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-20 17:43:23 -07:00
ee4df11e44 Remove MultiViews from web configs
Signed-off-by: Patrick Creech <pcreech@redhat.com>
2023-07-20 17:23:40 -04:00
5e95d86756 retire spins.fedoraproject.org 2023-07-20 21:13:19 +00:00
a52d44e77b proxies: redirect spins to new website 2023-07-20 21:13:19 +00:00
18e45433df data-reports01: disable for now, we will re-add later
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-20 12:58:37 -07:00
David Kirwan
6475c71205 mdapi: update api on mdapi deployment config
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-07-20 11:07:47 +01:00
David Kirwan
34bc1a5e5f mdapi: reduce replicas to 1
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-07-20 11:03:52 +01:00
94018157ef aliases: Add spotz to flock-staff alias
Amy Marrich, aka @spotz, is helping significantly with Flock organizing.
She should be added to the email alias list so she can stay informed
about important communications related to this year's Fedora Flock.

Signed-off-by: Justin W. Flory (he/him) <jwf@redhat.com>
2023-07-19 19:57:42 +00:00
9fd21ff5d1 robosignatory: fix to use right key for rebuild
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-19 08:02:26 -07:00
00490e9426 autosign: all not external
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 17:53:05 -07:00
e525521345 robosignatory: signing for f39-rebuild tag
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 17:49:11 -07:00
609df42eff communishift: add openscanhub ( infra 11414 )
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-18 15:08:52 -07:00
5238a92325 [Pagure] Add flask OIDC package to dependencies
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-18 16:12:05 +02:00
e54dae6574 [Pagure] Use correct staging env variable
Also change the client_secrets.json permissions to match pagure.cfg.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-18 14:53:16 +02:00
ec843a62c1 Reformatted main.yml
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2023-07-17 23:36:22 +00:00
bae7c13024 Added quotes to avoid errors due to version of find
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2023-07-17 23:36:22 +00:00
b0bfe39e7d Add a randomized start time before running compress_logs.sh
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2023-07-17 23:36:22 +00:00
00141350c9 Replaced xz with pxz
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2023-07-17 23:36:22 +00:00
1b05dd52ba Add script to compress log files every month to reduce storage
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2023-07-17 23:36:22 +00:00
Stephen Smoogen
7d7d0bf0a8 Remove smooge from various aliases
Currently, I (Stephen Smoogen) do not have the time to work on Fedora
system administration items. However, I get a lot of email and people
see my email address in various places to ping me for working on
things. I feel it would be better to remove myself from those places
and let Fedora Infrastructure add someone else to replace me when it
is possible to do so.

Signed-off-by: Stephen Smoogen <ssmoogen@redhat.com>
2023-07-17 23:34:18 +00:00
4527510448 log01: compress job: try escaping the %s for cron
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-17 16:31:12 -07:00
3c06415a17 batcave01: install moreutils for dns hook
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-17 15:33:02 -07:00
b7cecd3deb gateway: do not try and specify a local_recipient_maps
This map wasn't there, causing bastion02 to basically reject emails.
So, instead just comment it out because we aren't using it anyhow.
We are luckly bastion01's postfix hasn't been restarted and breaking it
there.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-17 11:19:28 -07:00
b34e3e08e6 [Pagure] Use the correct name of variable
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-17 18:45:31 +02:00
82cc3661a7 [Pagure] Remove undefined variable
We are enabling OIDC just for staging now, so no need to have production
variable in place.

Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-17 18:37:21 +02:00
4e14997780 [Pagure] Fix yamllint errors
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-17 18:04:18 +02:00
d1dc3f649b [Pagure] Enable OIDC in staging
Signed-off-by: Michal Konečný <mkonecny@redhat.com>
2023-07-17 17:35:38 +02:00
David Kirwan
ed4a2192f5 zabbix: update zabbix server dependencies to include php-openssl
Signed-off-by: David Kirwan <dkirwan@redhat.com>
2023-07-17 13:53:15 +01:00
4b18017d42
Sundries doesn't actually use fedmsg
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2023-07-17 12:05:00 +02:00
e1951ad45a buildvm: default to f38
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-14 11:04:03 -07:00
bdfd9d8517 batcave02: drop batcave02, it's batcave01 now.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 17:21:50 -07:00
3d5dde0970 batcave01: git repos moved from /git to /srv/git a long while back
We still were expecting them to be in /git.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 17:06:25 -07:00
da20307fcc batcave01: no python39-jmespath for now
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 16:34:47 -07:00
b32af87444 Empty commit to make things sync.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 16:25:11 -07:00
78422a3fd2 batcave01(NEW AND IMPROVED): adjust for rhle9 move
Fix the kickstart/repo for reinstall.
Add rhel-system-roles for linux-system-roles/networking
Drop some python2 items that aren't available in rhel9 anymore.
Collapse the batcave02 stuff into batcave01

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 16:21:24 -07:00
757c4f65c3 batcave01: only try and delete files here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-07-13 13:36:05 -07:00