This will cause new sidetags to do a newrepo on creation instead of
waiting for a request for them. It's not strictly needed, but it allows
older workflows that use wait-repo to continue to work.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This should prevent error during backup:
```
Error: Local roles CA do not match globally used roles CA, KRA. A backup done on this host would not be complete enough to restore a fully functional, identical cluster.
```
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
Removing the replication agreement needs admin kerberos ticket. Let's obtain one
before removing the replication agreement.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
Long ago we sent buildSRPMFromSCM tasks to createrepo channel because we
didn't want s390x (which wasn't in that channel) to do them. However,
with koji 1.35.x these tasks obey the noarch_arches tag value as to
which arch they run on. This means we would need to add s390x and
ppc64le to createrepo for them to always work.
So, instead lets drop this hub policy for buildSRPMFromSCM and then they
will just get default channel and obey noarch_arches as is expected.
If s390x proves too slow at these tasks, we can just remove it from
noarch_arches or come up with another plan.
newRepo distRepo in this policy was pointless, koji automatically does
these tasks with channel=createrepo, so no need to specify it here.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We added tests of container building and a subset of container
and server tests on aarch64 a couple of months back. These have
now been running long enough it should be safe to add them to
the gating config (all pending updates should have had these
tests run against them if appropriate).
Signed-off-by: Adam Williamson <awilliam@redhat.com>
This was just added to help debug some startup problems, so we can drop
it now. Also, it causes the playbook to be non idempotent (ie, this task
runs and changes everytime the playbook it run, causing a lot of noise
in the check/diff runs).
/run/zabbix should get created by systemd, so no need to muck with it.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
We intend to use disk encryption and udev network interface
naming on all hosts with the re-deployment, so this attempts to
set up for that.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
An explicit provides for /usr/libexec/platform-python was added to
platform-python in RHEL 8.
https://access.redhat.com/errata/RHSA-2024:6975
This solves the original reason for needing the filelists option, so it
should be safe to remove. This will make bootstrap chroot creation
faster for all builds, not just EPEL 8.
https://pagure.io/releng/issue/12199
Signed-off-by: Carl George <carlwgeorge@gmail.com>
We've finally ironed out the issues in stage with this, so this is the
configuration to enable it in production.
This should be rolled out in conjunction with disabling the bash script
that currently handles image pushes.
Ansible `pause` module is only running once per playbook. This is a hacky way to
make it run for each host.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
When introducing the new validation mechanism I accidentally removed check for
ipa_initial from ipa-replica-install. This commit is adding it back.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
As found on in https://pagure.io/fedora-infrastructure/issue/12149 the current
method of checking if the ipa-replica-install have to be executed is not
reliable enough.
Let's instead check for log file that is created during the installation. This
will need manual intervention in case the ipa-replica-install needs to be run
again, but it will be much more reliable otherwise.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
