infra/ansible
22
2
Fork 37
Code Pull requests 22 Activity Actions 2

Restore arcane breadcrumbs (broken Forge links)

Browse source 
Also some minor changes to satisfy yamllint.

Signed-off-by: Michael Winters <fedora@mwinters.net>
This commit is contained in:
Michael Winters 2026-03-05 09:50:24 -06:00 • committed by Kevin Fenzi
commit aedf43d1f3
34 changed files with 52 additions and 54 deletions
Download patch file Download diff file Expand all files Collapse all files

2
files/httpd/fedorahosted-redirects.conf
View file

@ -39,7 +39,7 @@ RewriteRule ^/released/i/m/imapsync https://pagure.io/releases/imapsync [R=301]
RewriteRule ^/released/imapsync https://pagure.io/releases/imapsync [R=301]
RewriteRule ^/fedora-infrastructure/report https://forge.fedoraproject.org/infra/tickets [R=301]
RewriteRule ^/fedora-infrastructure/ticket/(.*) https://forge.fedoraproject.org/infra/tickets/$1 [R=301]
RewriteRule ^/fedora-infrastructure/ticket/(.*) https://forge.fedoraproject.org/infra/tickets/issues/$1 [R=301]
RewriteRule ^/fedora-infrastructure https://forge.fedoraproject.org/infra/tickets [R=301]
RewriteRule ^/fesco/report https://pagure.io/fesco/issues [R=301]

2
inventory/group_vars/all
View file

@ -3,7 +3,7 @@
# BEGIN: Ansible roles_path variables
#
# Background/reference about external repos pulled in:
# https://forge.fedoraproject.org/infra/tickets/5476
# https://forge.fedoraproject.org/infra/tickets/issues/5476
#
# IPA settings
additional_host_keytabs: []

2
playbooks/openshift-apps/resultsdb-ci-listener.yml
View file

@ -29,7 +29,7 @@
user_sent_topics: ^$
# The openshift/project role breaks if the project already exists:
# https://forge.fedoraproject.org/infra/tickets/6404
# https://forge.fedoraproject.org/infra/tickets/issues/6404
- role: openshift/project
project_app: resultsdb-ci-listener
project_description: resultsdb-ci-listener

2
playbooks/openshift-apps/resultsdb.yml
View file

@ -44,7 +44,7 @@
user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.resultsdb\..*
# The openshift/project role breaks if the project already exists:
# https://forge.fedoraproject.org/infra/tickets/6404
# https://forge.fedoraproject.org/infra/tickets/issues/6404
- role: openshift/project
project_app: resultsdb
project_description: resultsdb

2
playbooks/openshift-apps/waiverdb.yml
View file

@ -46,7 +46,7 @@
user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.waiverdb\..*
# The openshift/project role breaks if the project already exists:
# https://forge.fedoraproject.org/infra/tickets/6404
# https://forge.fedoraproject.org/infra/tickets/issues/6404
- role: openshift/project
project_app: waiverdb
project_description: waiverdb

2
roles/ansible-server/files/requirements.yml
View file

@ -1,7 +1,7 @@
---
roles:
# Needed for copr-pulp playbooks
# https://forge.fedoraproject.org/infra/tickets/11396
# https://forge.fedoraproject.org/infra/tickets/issues/11396
- name: geerlingguy.postgresql
version: 3.5.0

14
roles/apps-fp-o/files/apps.yaml
View file

@ -104,7 +104,7 @@ children:
url: https://fedoramagazine.org
docs_url: https://codex.wordpress.org/
# We don't have a SOP for the magazine yet.
# https://forge.fedoraproject.org/infra/tickets/5149
# https://forge.fedoraproject.org/infra/tickets/issues/5149
# sops:
# - put the url here
description: >
@ -129,7 +129,7 @@ children:
# TODO - add the docs_url. I asked pete travis for info on this
# docs_url: put the url here
# TODO - add a sop.
# https://forge.fedoraproject.org/infra/tickets/5150
# https://forge.fedoraproject.org/infra/tickets/issues/5150
# sops:
# - add the sop url here.
description: >
@ -152,7 +152,7 @@ children:
bugs_url: https://github.com/abrt/retrace-server/issues
docs_url: https://abrt.readthedocs.org/en/latest/howitworks.html#faf
# TODO - write SOPs for this
# https://forge.fedoraproject.org/infra/tickets/5151
# https://forge.fedoraproject.org/infra/tickets/issues/5151
# sops:
# - url goes here
# - and another one goes here
@ -190,7 +190,7 @@ children:
package_url: >
https://bugzilla.redhat.com/buglist.cgi?component=Package%20Review&query_format=advanced&short_desc_type=allwordssubstr&short_desc={package}
# TODO - write the SOP for this
# https://forge.fedoraproject.org/infra/tickets/5152
# https://forge.fedoraproject.org/infra/tickets/issues/5152
# sops:
# - url goes here
description: >
@ -243,7 +243,7 @@ children:
bugs_url: https://github.com/fedora-infra/asknot-ng/issues
docs_url: https://github.com/fedora-infra/asknot-ng/blob/develop/README.md
# TODO - write SOP for asknot-ng
# https://forge.fedoraproject.org/infra/tickets/5154
# https://forge.fedoraproject.org/infra/tickets/issues/5154
# sops:
# - url goes here
status_mappings: []
@ -425,7 +425,7 @@ children:
bugs_url: https://github.com/fedora-infra/anitya/issues
docs_url: https://fedoraproject.org/wiki/Upstream_release_monitoring
# TODO - write sops for anitya and the-new-hotness
# https://forge.fedoraproject.org/infra/tickets/5157
# https://forge.fedoraproject.org/infra/tickets/issues/5157
# sops:
# - https://infrastructure.fedoraproject.org/infra/docs/anitya.rst
# - https://infrastructure.fedoraproject.org/infra/docs/hotness.rst
@ -479,7 +479,7 @@ children:
bugs_url: https://github.com/fedora-infra/geoip-city-wsgi/issues
docs_url: https://github.com/fedora-infra/geoip-city-wsgi/blob/master/geoip-city.wsgi
# TODO - write a sop for this thing
# https://forge.fedoraproject.org/infra/tickets/5159
# https://forge.fedoraproject.org/infra/tickets/issues/5159
# sops:
# - https://infrastructure.fedoraproject.org/infra/docs/geoip.rst
description: >

2
roles/base/tasks/crypto-policies.yml
View file

@ -35,7 +35,7 @@
- crypto-policies
- base/crypto-policies
# see https://forge.fedoraproject.org/infra/tickets/12321
# see https://forge.fedoraproject.org/infra/tickets/issues/12321
# This is needed to get SAML2 auth working with bugzilla.redhat.com
- name: Set crypto-policy on ipsilon servers to FEDORA40
command: "update-crypto-policies --set DEFAULT"

2
roles/batcave/files/centos-10-sync
View file

@ -22,5 +22,5 @@ ${RSYNC} ${RS_OPT} ${RS_DEADLY} ${CENT_EXCLUDES} ${SERVER}::${RSYNC_MOD} ${RSYNC
# changes, we need to comment this out to have a snapshot of CentOS 10 that
# resembles RHEL 10.x for the epel10.x-build tag to use temporarily until the
# actual RHEL 10.x is released.
# https://forge.fedoraproject.org/infra/tickets/12394
# https://forge.fedoraproject.org/infra/tickets/issues/12394
#${RSYNC} ${RS_OPT} ${RS_DEADLY} --link-dest=${RSYNC_DESTDIR} ${RSYNC_DESTDIR} ${RSYNC_SNAPDIR}

4
roles/copr/certbot/tasks/letsencrypt.yml
View file

@ -1,7 +1,7 @@
---
- set_fact:
le_source_path: /etc/letsencrypt
# https://forge.fedoraproject.org/infra/tickets/10524
# https://forge.fedoraproject.org/infra/tickets/issues/10524
le_backup_path: /srv/certbot-certs
tags:
- certbot
@ -111,7 +111,7 @@
# several occasions and then 'lighttpd' user needs to have the access. See the
# following issues:
# https://pagure.io/copr/copr/issue/2001 Resolves:
# https://forge.fedoraproject.org/infra/tickets/10391
# https://forge.fedoraproject.org/infra/tickets/issues/10391
- name: Allow lighttpd to step into certbots directories
acl:
path: "{{ item }}"

2
roles/copr/keygen/files/backup_keyring.sh
View file

@ -7,7 +7,7 @@
# - it means we should always have at most a 24h-old backup
# - the root gpg keychain should have PUBLIC key with `user name`
# copr-keygen-backup-key, per
# https://forge.fedoraproject.org/infra/tickets/8904
# https://forge.fedoraproject.org/infra/tickets/issues/8904
# - fixed in https://github.com/fedora-copr/copr/issues/3532
PATH_TO_KEYRING_DIR="/var/lib/copr-keygen"

2
roles/distgit/pagure/tasks/main.yml
View file

@ -83,7 +83,7 @@
- pagure
- hotfix
# Fix for https://forge.fedoraproject.org/infra/tickets/11957
# Fix for https://forge.fedoraproject.org/infra/tickets/issues/11957
- name: Set ACL for newly created files in /var/log/pagure
ansible.posix.acl:
path: /var/log/pagure

2
roles/distgit/pagure/templates/pagure.cfg
View file

@ -39,7 +39,7 @@ DB_URL = 'postgresql://{{ distgit_pagure_db_user }}:{{ distgit_pagure_db_pass }}
{% endif %}
# Something breaks the database connections after a while, recycle them sooner
# https://forge.fedoraproject.org/infra/tickets/12622
# https://forge.fedoraproject.org/infra/tickets/issues/12622
DB_POOL_RECYCLE = 300
### FAS groups of pagure admins

2
roles/distgit/pagure/templates/z_pagure.conf
View file

@ -36,7 +36,7 @@ MaxConnectionsPerChild 1000
#</VirtualHost>
# Redirect files viewed in master to the main branch
# https://forge.fedoraproject.org/infra/tickets/9620
# https://forge.fedoraproject.org/infra/tickets/issues/9620
RedirectMatch 302 (.*)/rpms/(.*)blob/master/(.*) $1/rpms/$2/blob/rawhide/$3
RedirectMatch 302 (.*)/container/(.*)blob/master/(.*) $1/container/$2/blob/rawhide/$3
RedirectMatch 302 (.*)/flatpaks/(.*)blob/master/(.*) $1/flatpaks/$2/blob/stable/$3

2
roles/distgit/tasks/main.yml
View file

@ -498,7 +498,7 @@
- grokmirror
- pkgs
# https://forge.fedoraproject.org/infra/tickets/12428
# https://forge.fedoraproject.org/infra/tickets/issues/12428
- name: Hotfix for links to accounts.fpo
ansible.posix.patch:
src: files/0001-Fix-link-to-accounts.fpo-for-staging-for-adding-user.patch

11
roles/fasjson/files/aliases.static
View file

@ -208,7 +208,7 @@ fudcon-emea: flock-staff
# fudcon-na:
fudcon-latam: flock-staff
# some flock aliases disabled for now per https://forge.fedoraproject.org/infra/tickets/10411
# some flock aliases disabled for now per https://forge.fedoraproject.org/infra/tickets/issues/10411
# flock
#flockpress: fca,fpl
#flockinfo: fca,fpl
@ -217,10 +217,10 @@ flock-staff: flock-team-members@fedoraproject.org
#flock-access: flock-admin
#
# flock/sponsor alias
# https://forge.fedoraproject.org/infra/tickets/10591
# https://forge.fedoraproject.org/infra/tickets/issues/10591
sponsors: flock-team-sponsors@fedoraproject.org
# swag customer email alias https://forge.fedoraproject.org/infra/tickets/10794
# swag customer email alias https://forge.fedoraproject.org/infra/tickets/issues/10794
swag-info: fca,npazmino@redhat.com
# News
@ -407,10 +407,10 @@ containerbuild: cverna
# FTI bugzilla script - https://pagure.io/releng/issue/11169
fti-bugs: churchyard
# copr team - https://forge.fedoraproject.org/infra/tickets/10351
# copr team - https://forge.fedoraproject.org/infra/tickets/issues/10351
coprteam: copr-team@redhat.com
# fedora-review-bot - https://forge.fedoraproject.org/infra/tickets/11232
# fedora-review-bot - https://forge.fedoraproject.org/infra/tickets/issues/11232
fedora-review-bot: jkadlcik@redhat.com
# packaging-reports - this account is used to send via out smtp servers various packaging reports
@ -418,4 +418,3 @@ fedora-review-bot: jkadlcik@redhat.com
packaging-reports: maxwell@gtmx.me
#### The rest of this file is automatically generated - edit using the accounts system!

4
roles/fedora-docs/proxy/files/docs-rsync
View file

@ -1,6 +1,6 @@
#!/bin/sh
# See https://forge.fedoraproject.org/infra/tickets/7130
# See https://forge.fedoraproject.org/infra/tickets/issues/7130
# Basically we have an OLD (old 7 years ago, as of 2025-10) set of content
# and a new set of content. We want to serve the new content, and if nothing
@ -11,7 +11,7 @@
# 2. rsync new to docs.fedoraproject.org
# 3. rsync docs.fedoraproject.org to docs-combined
# BUT see https://forge.fedoraproject.org/infra/tickets/12848
# BUT see https://forge.fedoraproject.org/infra/tickets/issues/12848
# -a is the std. copy everything "archive" mode.
# -H means try to copy hardlinks as hardlinks

4
roles/fedora-docs/proxy/files/docs-rsync.stg
View file

@ -1,6 +1,6 @@
#!/bin/sh
# See https://forge.fedoraproject.org/infra/tickets/7130
# See https://forge.fedoraproject.org/infra/tickets/issues/7130
# Basically we have an OLD (old 7 years ago, as of 2025-10) set of content
# and a new set of content. We want to serve the new content, and if nothing
@ -11,7 +11,7 @@
# 2. rsync new to docs.fedoraproject.org
# 3. rsync docs.fedoraproject.org to docs-combined
# BUT see https://forge.fedoraproject.org/infra/tickets/12848
# BUT see https://forge.fedoraproject.org/infra/tickets/issues/12848
# -a is the std. copy everything "archive" mode.
# -H means try to copy hardlinks as hardlinks

2
roles/github2fedmsg/tasks/main.yml
View file

@ -67,7 +67,7 @@
notify:
- Restart apache
# Fix for https://forge.fedoraproject.org/infra/tickets/11776
# Fix for https://forge.fedoraproject.org/infra/tickets/issues/11776
- name: Hotfix - Fix the KeyError when looking for user in github event
ansible.posix.patch:
src: 11776.patch

2
roles/ipsilon/files/openid_banner.patch
View file

@ -7,7 +7,7 @@
+ <div class="alert-danger">
+ <h1 align="center">
+ You are using OpenID to authenticate. This authentication method will go away on 1st May 2026. Please consider migrating to OpenID Connect.
+ For more info look at https://forge.fedoraproject.org/infra/tickets/10241
+ For more info look at https://forge.fedoraproject.org/infra/tickets/issues/10241
+ </h1>
+ </div>
<div class="navbar navbar-light masthead">

4
roles/koji_builder/tasks/main.yml
View file

@ -143,7 +143,7 @@
# edk2-arm is dead as of F42 ...
# From: https://src.fedoraproject.org/rpms/edk2/
# commit 53fa21dafcef14a7d264a89c2977cdbef58df770
# edk2-aarch64 says: UEFI firmware for aarch64 virtual machines
# edk2-aarch64 says: UEFI firmware for aarch64 virtual machines
- name: Install arm UEFI firmware package (aarch64 only)
ansible.builtin.package: name=edk2-aarch64 state=present
tags:
@ -289,7 +289,7 @@
- koji_builder
when: env == "staging"
# https://forge.fedoraproject.org/infra/tickets/6636
# https://forge.fedoraproject.org/infra/tickets/issues/6636
- name: Install libkcapi to get increased sockets on armv7
dnf: name=libkcapi enablerepo=updates-testing state=present
tags:

2
roles/mailman3/files/enable_dmarc_mitigation.py
View file

@ -7,7 +7,7 @@ For more info about DMARC mitigation in mailman3 see
https://docs.mailman3.org/projects/mailman/en/latest/src/mailman/handlers/docs/dmarc-mitigations.html
For more info why Fedora is doing this see
https://forge.fedoraproject.org/infra/tickets/11427
https://forge.fedoraproject.org/infra/tickets/issues/11427
The script will set dmarc_mitigate related columns
in `mailman` table to preferred values.

4
roles/mailman3/files/top.html
View file

@ -1,10 +1,10 @@
<!-- This markup will be inserted after the <body> tag -->
<!-- https://forge.fedoraproject.org/infra/tickets/10741 -->
<!-- https://forge.fedoraproject.org/infra/tickets/issues/10741 -->
<!--
<div style="margin: auto" class="container">
<a href="https://fedoraproject.limequery.com/2023" target="_blank">
<img src="https://forge.fedoraproject.org/infra/tickets/raw/files/b4d328e7ce730f610530822af4c9cdab1029c47dc2bdb15648d4008e1b304e43-contributor-survey-banner.png" style="max-width: 100%">
<img src="https://forge.fedoraproject.org/fedora-infrastructure/issue/raw/files/b4d328e7ce730f610530822af4c9cdab1029c47dc2bdb15648d4008e1b304e43-contributor-survey-banner.png" style="max-width: 100%">
</a>
</div>
-->

4
roles/mailman3/tasks/main.yml
View file

@ -294,7 +294,7 @@
- Initialize authentication providers
# Add the Nest banner
# See issue https://forge.fedoraproject.org/infra/tickets/10103
# See issue https://forge.fedoraproject.org/infra/tickets/issues/10103
- name: Replace the top.html template in hyperkitty/postorius to change banner
ansible.builtin.copy:
src: top.html
@ -424,7 +424,7 @@
- Restart mailmanweb
# Fix for mailman
# https://forge.fedoraproject.org/infra/tickets/12011
# https://forge.fedoraproject.org/infra/tickets/issues/12011
# This should no longer be needed after update to mailman 3.3.10
- name: Apply hotfix for orphan issue
ansible.posix.patch:

2
roles/openshift-apps/badges/templates/tahrir.cfg.py
View file

@ -47,7 +47,7 @@ TAHRIR_USE_OPENID_EMAIL = False
# Cache
CACHE = {
# disabled, trying to see if this fix this bug
# https://forge.fedoraproject.org/infra/tickets/8689
# https://forge.fedoraproject.org/infra/tickets/issues/8689
"backend": "dogpile.cache.null",
"expiration_time": 100,
"arguments": {

4
roles/openshift-apps/noggin/templates/after-navbar.html
View file

@ -1,11 +1,11 @@
{% raw %}
<!-- This markup will be inserted after the navbar -->
<!-- https://forge.fedoraproject.org/infra/tickets/10740 -->
<!-- https://forge.fedoraproject.org/infra/tickets/issues/10740 -->
<!--
<div class="banner">
<a href="https://fedoraproject.limequery.com/2023" target="_blank">
<img src="https://forge.fedoraproject.org/infra/tickets/raw/files/b4d328e7ce730f610530822af4c9cdab1029c47dc2bdb15648d4008e1b304e43-contributor-survey-banner.png">
<img src="https://forge.fedoraproject.org/fedora-infrastructure/issue/raw/files/b4d328e7ce730f610530822af4c9cdab1029c47dc2bdb15648d4008e1b304e43-contributor-survey-banner.png">
</a>
</div>
-->

2
roles/openshift-apps/resultsdb/vars/main.yml
View file

@ -9,7 +9,7 @@ resultsdb_publish: true
resultsdb_mod_wsgi_dir: '${MOD_WSGI_MODULES_DIRECTORY}'
# For CRASHED see: https://pagure.io/task-abicheck/issue/19
# For QUEUED and RUNNING see: https://forge.fedoraproject.org/infra/tickets/8989
# For QUEUED and RUNNING see: https://forge.fedoraproject.org/infra/tickets/issues/8989
resultsdb_additional_result_outcomes: ['CRASHED', 'QUEUED', 'RUNNING']
# frontend vars

4
roles/pagure/tasks/main.yml
View file

@ -116,7 +116,7 @@
tags:
- pagure
# https://forge.fedoraproject.org/infra/tickets/12428
# https://forge.fedoraproject.org/infra/tickets/issues/12428
- name: Hotfix for links to accounts.fpo
ansible.posix.patch:
src: files/hotfix/0001-Fix-link-to-accounts.fpo-for-staging-for-adding-user.patch
@ -155,7 +155,7 @@
- fix_log
- hotfix
# Fix for https://forge.fedoraproject.org/infra/tickets/11957
# Fix for https://forge.fedoraproject.org/infra/tickets/issues/11957
- name: Set ACL for newly created files in /var/log/pagure
ansible.posix.acl:
path: /var/log/pagure

3
roles/pagure/templates/0_pagure.conf
View file

@ -321,7 +321,7 @@ Listen 3923 http
{% endif %}
# redirects for sssd docs.
# https://forge.fedoraproject.org/infra/tickets/8995
# https://forge.fedoraproject.org/infra/tickets/issues/8995
RedirectMatch ^/SSSD.sssd$ https://sssd.io
RedirectMatch ^/SSSD.sssd/$ https://sssd.io
RedirectMatch ^/SSSD.sssd/index.html https://sssd.io/index.html
@ -378,4 +378,3 @@ Listen 3923 http
</Directory>
</VirtualHost>

2
roles/people/tasks/main.yml
View file

@ -13,7 +13,7 @@
- nano
- tree # requested in ticket 5148
- mod_ssl
- tar # requested in https://forge.fedoraproject.org/infra/tickets/12638
- tar # requested in https://forge.fedoraproject.org/infra/tickets/issues/12638
tags:
- packages
- people

2
roles/varnish/templates/kojipkgs.vcl.j2
View file

@ -83,7 +83,7 @@ sub vcl_recv {
}
# Rewrite toplink URLs to improve cache hit ratio
# See: https://forge.fedoraproject.org/infra/tickets/7383
# See: https://forge.fedoraproject.org/infra/tickets/issues/7383
set req.url = regsub(req.url, "^/repos/[^/]+/[^/]+/[^/]+/toplink/", "/");
return (hash);

2
roles/varnish/templates/proxies.vcl.j2
View file

@ -116,7 +116,7 @@ sub vcl_recv {
if (req.http.X-Forwarded-Server ~ "^src.fedoraproject.org" || req.http.X-Forwarded-Server ~ "^src.stg.fedoraproject.org" ) {
set req.backend_hint = src;
# Do not cache .crate files as it messes up checksums
# see https://forge.fedoraproject.org/infra/tickets/12812
# see https://forge.fedoraproject.org/infra/tickets/issues/12812
if (req.url ~ ".*crate") {
return (pipe);
}

2
roles/varnish/templates/s390kojipkgs.vcl.j2
View file

@ -98,7 +98,7 @@ sub vcl_recv {
}
# Rewrite toplink URLs to improve cache hit ratio
# See: https://forge.fedoraproject.org/infra/tickets/7383
# See: https://forge.fedoraproject.org/infra/tickets/issues/7383
set req.url = regsub(req.url, "^/repos/[^/]+/[^/]+/[^/]+/toplink/", "/");
return (hash);

2
tasks/cloud_setup_basic.yml
View file

@ -44,7 +44,7 @@
tags:
- config
- sshkeys
# https://forge.fedoraproject.org/infra/tickets/10509
# https://forge.fedoraproject.org/infra/tickets/issues/10509
ignore_errors: true
- name: Enable ssh_sysadm_login sebool