This is a grab bag of things done today to try and mitigate a massive
scraper hit against src.fedoraproject.org.
- increase memory on riscv-koji (it was getting OOM killed)
- add memory and cpu to pkgs to process more
- increase wsgi procs and threads to allow pkgs to process more
- increase max requests on proxies, since we were hitting the old limits
- block Lightpanda useragent
- tell varnish on proxies to only wait 10s for pkgs connections,
this lets us 503 them sooner and prevents pile ups waiting.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Limit exception pings and @releng-bot valid to the releng scm-validators
team instead of the whole org membership list.
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
- Add .forgejo/workflows/* to ignore list since workflow files use
GitHub Actions syntax (like 'on:') that doesn't conform to Ansible
YAML truthy value requirements
- Fix truthy values in vars files to use lowercase 'true'/'false'
instead of 'True'/'False' to comply with yamllint requirements
Add document start marker (---) to 28 YAML files that were missing it
to comply with yamllint requirements for proper YAML document structure.
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
Sidetag config gets the key/keyid to use to sign sidetags with from the
previous tag stanza. When this is after the one that has moved to the
fedora-46 key, it starts using fedora-46 to sign with. We don't want to
move to that until next week, so move this sidetag stanza up above the
fedora-46 using one.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
Listen for forgejo.issues via W2FM and parse the Forge payload when a
ticket on releng/fedora-scm-requests is closed, instead of pagure.io
issue.edit messages.
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
It's failing to resolve bastion when crashes occur so I stopped getting
emails about crashes. According to Kevin it needs to be the fqdn due to
some OpenShift quirk.
Signed-off-by: Jeremy Cline <jeremycline@microsoft.com>
Point production at forge.fedoraproject.org and forgejo.* W2FM topics.
Staging keeps forge.stg credentials; both envs share the Forgejo topics.
Requires toddlers_forgejo_api_key in ansible-private before prod deploy.
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
Use forgejo.* W2FM topics and forge.stg credentials for
scm_request_processor and unretire_packages in staging only.
Production stays on pagure.io until cutover.
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
Mailman doesn't respect type in db paths in postfix config, but it
respects default_database_type if set. So set this to lmdb to prevent
issue infra/tickets#13391 in the
future.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
pagure-stg-ro01 was missing from the [staging] inventory group, so it
got production wildcard cert vars instead of staging ones. Also pass
SSLCertificateChainFile through to httpd/website to avoid falling back
to the hardcoded 2025 production default.
This commit contains several mail alias recipient changes which related
to the recent announcement that Shaun McCance (@shaunm) is stepping into
the role of Fedora Community Architect. From now until October 2026,
Shaun and I (@jflory7) are in a transition phase.
The most significant change is the added assignment of Shaun to the
fca@fp.o mail alias. This still leaves me on there for now, but the
intention is after October 2026, it will only be Shaun. This is the bulk
of inbound mail for the Fedora Community Architect role.
A few other changes were made to aliases while staging this change:
1. All aliases where `shaunm` was added as a recipient were dropped,
since `fca` was also receiving mail at that alias. This means Shaun
would receive two copies of every email.
2. `dei` alias adds the DEI Team FAS group sponsors as recipients.
3. Alphabetize `codeofconduct` alias recipients, add myself @jflory7
as an individual member of the CoC Committee, since I will remain
a member separate from the Fedora Community Architect role.
4. Alphabetize `fedora-ready-team` alias recipients, add myself
@jflory7 as an individual recipient. I need to transition this
responsibility separate from the Fedora Community Architect role,
but I do not have a timeline for when this will happen yet.
ref: https://fedoramagazine.org/shaun-mccance-next-fedora-community-architect/
Signed-off-by: Justin Wheeler <jwheel@redhat.com>
