Commit graph

45,750 commits

Author SHA1 Message Date
Lenka Segura
1d018aaf21 forgejo: enable linger and podman socket
All checks were successful
Linter / yamllint (pull_request) Successful in 24s
Linter / ansible-lint (pull_request) Successful in 40s
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-04-08 16:43:01 +02:00
James Antill
d3db58fc89 vmhost-x86-01.stg: Use ipa02.stg as ipa_server
Signed-off-by: James Antill <james@and.org>
2026-04-07 16:00:09 -04:00
4fb1f446c5 feat: koji_hub: move rccl to heavybuild
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-04-07 19:17:10 +00:00
0265ecd8b4 openshift / docstranslation: disable cron runs for now.
Per infra/tickets#13171
we want to disable cron runs for now while repos and other things are
sorted out. We can just revert this after things are ready.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-06 19:59:52 +00:00
869ea27150 Add tar to datanommer
Some checks failed
Linter / yamllint (pull_request) Successful in 25s
Linter / ansible-lint (pull_request) Failing after 41s
Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-04-06 11:06:14 -05:00
a9744b9cd0 Fix location after move in 8fa423e72a
All checks were successful
Linter / yamllint (pull_request) Successful in 25s
Linter / ansible-lint (pull_request) Successful in 40s
Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-04-03 09:00:42 -05:00
8fa423e72a move file-retention-iso-date to files/scripts
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-02 20:39:31 -07:00
2db3130404 Fix Tpyos and errata
Some checks failed
Linter / yamllint (pull_request) Successful in 26s
Linter / ansible-lint (pull_request) Failing after 49s
Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-04-02 21:12:54 -05:00
92e35f4f25 Lean on chronic for public-db-copy
Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-04-02 23:35:10 +00:00
df3b1f249e Add set -e to cron jobs to help chronic
Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-04-02 23:35:10 +00:00
8ac48ade3b Use chronic for datanommer daily export
Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-04-02 23:35:10 +00:00
70088899eb Prudent error checking
Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-04-02 23:35:10 +00:00
8e218fd14c Use chronic to manage cron email for db backup
Mimics blockerbugs/tasks/main.yml per PR feedback

Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-04-02 23:35:10 +00:00
2a941c4482 Rename retention script per feedback
Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-04-02 23:35:10 +00:00
4fd6c27207 Requested changes
Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-04-02 23:35:10 +00:00
7f493a042a Datanommer daily exports
Export daily 24h data in addition to the full pg_dump to allow
downstream replicas to stay in sync without requiring full PG
replication.

We call this "incremental" in some places because perhaps later we will
decide on a different level of granularity, e.g. hourly or weekly.

Signed-off-by: Michael Winters <fedora@mwinters.net>
2026-04-02 23:35:10 +00:00
b69ce1c8d8 siguldry/pesign-bridge: commit the new ca cert to the right filename
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-02 12:02:25 -07:00
ab68f31d85 Revert "siguldry/pesign-bridge: also commit the ca cert"
This was the wrong cert for this.

This reverts commit 9ea5c72641.
2026-04-02 12:01:40 -07:00
9ea5c72641 siguldry/pesign-bridge: also commit the ca cert
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-02 11:56:03 -07:00
f45f1e088d add 20250530 ca cert so we can verify signing grub2 with it
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-02 18:45:17 +00:00
ad84375160 siguldry/pesign-bridge: fix acl call and fix 2nd grub2 cert
The acl call wasn't in the right place, it needed to be in the top
section instead of under [sigul] so it was getting ignored.
Once this is working we can remove the acl calls in ansible related to
this.

Also, at the same time grub2 is being signed by 2 certs currently (which
end up being the same one in the end). We want to switch the old
obsolete one over to the new 2025 one.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-02 18:45:17 +00:00
cec3e52d78 copr-be: remove s390x concurrency limits
This restriction is no longer necessary now that s390x builds are
emulated (hopefully temporarily!) on x86_64, where we have 200+
instances available.  These limits were blocking many s390x Packit
builds.
2026-04-02 15:04:15 +02:00
15dafee626 [packages] Fix the service for deployment
All checks were successful
Linter / yamllint (pull_request) Successful in 26s
Linter / ansible-lint (pull_request) Successful in 42s
The service selector.app needs to match with deployment.selector app. In
this case we have a conflict. This change will fix it.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-04-02 13:20:06 +02:00
6933510d42 [hotness] Fix the service for deployment
All checks were successful
Linter / yamllint (pull_request) Successful in 27s
Linter / ansible-lint (pull_request) Successful in 44s
According to what I found the service selector app needs to match the
deployment app, which is pointing to the-new-hotness instead of
the-new-hotness redis. Hopefully this will fix the network issue between
the-new-hotness pod and redis pod.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-04-02 12:41:03 +02:00
964cf982ec 📧 roles(fasjson): Add my @redhat.com email to all Flock aliases
When I made the change back in January in commit 0ba3182601, little did
I realize that I put myself into a world of hurt because my FAS email
does not route mail to my Red Hat email address. This is not acceptable
for Flock planning since I need the emails in Red Hat email.

*mild internal screaming ensues*

So, this fixes the problem and continues to use FAS group membership for
the mail alias, but now my Red Hat email is specifically folded into the
recipient list for the Flock aliases.

CC: @shaunm @jasonbrooks

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-04-02 10:16:37 +00:00
d508aa48da [websites] Clean the role
The websites moved to new way of doing things and we don't need the old
fedora websites build anymore. This change will clean the role of the
obsolete files.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-04-02 07:18:00 +00:00
002c57d701 forge: add i18n org team mappings
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-04-02 15:43:10 +10:00
2b7628fcb3 forge: add koji org team mappings
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-04-02 13:45:19 +10:00
4c5a880ae2 forge: revert packaging commitee mappings changes added in error
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-04-02 13:44:33 +10:00
59b3670b00 forge: add group mappings for packaging committee
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-04-02 11:12:51 +10:00
5c334b2d63 proxies / staging: split out openqa and disable anubis in stg only
We want to test and see if this change broke websockets
in openqa.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-01 18:06:06 -07:00
60ab3ffb2a the-new-hotness: when specifying the registry using the app/image path
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-01 17:51:12 -07:00
c2b800ab7a the-new-hotness: switch to bitnamilegacy for redis container
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-01 17:40:42 -07:00
faa9ad6195 the-new-hotness: specify the local registry for images
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-01 17:37:05 -07:00
57fe4438fe replaced deployment file in playbook and fixed image path
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2026-04-02 00:11:54 +00:00
0aa5a2eb56 add the-new-hotness deployment
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2026-04-02 00:11:54 +00:00
e4b23af09a mdapi: fix selector
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-01 17:06:43 -07:00
3bddd3eceb mdapi: fix deployment reference
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2026-04-02 00:04:28 +00:00
ac42cf820c mdapi: use correct name of app in image stream
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2026-04-02 00:04:28 +00:00
2c36f66fc4 replaced deployment file in playbook and fixed image path
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2026-04-02 00:04:28 +00:00
fee1ffedad add mdapi deployment
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2026-04-02 00:04:28 +00:00
d6b59232d2 proxies: fix typo
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-01 12:20:21 -07:00
a9d17bebb7 proxies: tag last change to allow quick deploy
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-01 12:14:55 -07:00
393678ce45 proxies: put openqa behind anubis as it is unusable currently
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-04-01 12:14:07 -07:00
b7a8ccdf87
forgejo: update dependencies for the runnerhost VM
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-04-01 17:18:43 +01:00
5efffb53b4
forgejo: Create the forgejo runnerhost serviceaccount, rbac etc
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-04-01 13:47:04 +01:00
27b24d3938
forgejo: move service account into the legacy VM defintion
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-04-01 13:32:15 +01:00
88f165d25c
Zabbix/Copr: copy zabbix staging groupvars to copr_dev_aws
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-04-01 13:17:20 +01:00
5470bdff4d bump up number of reserved instances 2026-04-01 14:15:19 +02:00
Jiri Kyjovsky
d7a41b08da copr-rpmeta: pip does not have creates arg 2026-04-01 13:50:34 +02:00