abcf1c8e76
robosignatory: enable signing on f43-python
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-05-22 05:05:52 +00:00
f8d06a6812
F40 is now EOL
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-05-13 14:58:24 +00:00
c581b79099
robosignatory: fix stable f42 cosmic-atomic signing, which was missing
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-04-19 20:53:30 -07:00
Paul Whalen
f967081b3a
IoT: sign stable with f42 key
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2025-04-11 11:58:49 -04:00
d884a0f8ba
Use the combined RabbitMQ CA cert in the clients
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00
c2e61b09ab
robosignatory: add f42 cosmic-atomic to signing
...
We added this atomic desktop, we need to sign it now. :)
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-23 08:51:51 -07:00
a235e2f53c
robosignatory: add cosmic-atomic to f43/rawhide signing
...
We added this in pungi-fedora, so its sitting there trying over and over
to sign it. We need to either merge and deploy this, or revert
the pungi-fedora changes, kill rawhide compose and re-run.
Seems easier to just push this. ;)
+1s?
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-03-13 10:07:24 -07:00
2e3eaabb1c
Branch epel10.0 from epel10
...
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2025-02-18 16:26:40 +00:00
2ec055db6f
Use first uppercase letter for all handlers
...
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.
I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```
Then I went through all the changes and removed the ones that wasn't
expected to be changed.
Fixes https://pagure.io/fedora-infrastructure/issue/12391
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
7880b13991
robosignatory: also allow resigning f43 tagged packages
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-02-05 07:38:50 +00:00
ccb83f5e63
robosignatory: switch eln to fedora-43 key
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-02-05 01:42:32 +05:30
c21b454428
robosignatory: adjust for really stupid ansible-lint rule
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-02-04 09:04:24 -08:00
fd17adce36
Branch Fedora 42 from Rawhide
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-02-04 15:02:50 +00:00
fb06fb5d5c
Resign f42 builds with f43 key
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2025-01-30 09:50:15 +00:00
6c38d7b61a
various: fix some more shell variables that were accidentally converted to builtin.shell
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-15 17:26:50 -08:00
47c68f478d
ansiblelint fixes - fqcn[action-core] - template to ansible.builtin.template
...
Replaces references to template: with ansible.builtin.template
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:30:29 +10:00
3c41882bb0
ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell
...
Replaces references to shell: with ansible.builtin.shell
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:29:10 +10:00
25391e95b7
ansiblelint fixes - fqcn[action-core] - package to ansible.builtin.package
...
Replaces many references to package: with ansible.builtin.package
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:28:00 +10:00
6a3816dfdc
ansiblelint fixes-- fqcn[action-core] - copy to ansible.builtin.copy
...
Replaces many references to 'copy' with ansible.builtin.copy
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:43:31 +10:00
62952df107
ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
...
Replaces many references to file: with ansible.builtin.file
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
691adee6ee
Fix name[casing] ansible-lint issues
...
fix 1900 failures of the following case issue:
`name[casing]: All names should start with an uppercase letter.`
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-14 20:20:07 +10:00
8fa1e3de8c
robosignatory: autosign f42 mass rebuild tag
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2025-01-13 15:01:00 -08:00
89f6f1fc32
Fix majority of remaining yamllint warnings and errors
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-28 17:31:45 +10:00
d279fdc48d
autosign: remove f39 from signing
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-11-26 11:02:58 -08:00
Paul Whalen
912cac3238
IoT: sign stable with f41 key
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-10-25 15:04:23 -04:00
8a0f0dae94
robosignatory: switch eln to fedora-42 key
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-14 14:30:32 -07:00
0e4e647574
robosignatory: also allow resigning f42 tagged packages
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-13 08:04:33 -07:00
5096677f85
make robosignatory changes for f41 branching
...
Remove resigning of 41 keys with 42; updated artificats to f41 and rawhide to f42;
updated infra-candidate/openh264 for new f42; f41 signing pending, buildsidetags etc
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-08-13 14:13:43 +00:00
d967d2ae46
robosignatory: fix f42 key signing
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-08 07:13:47 -07:00
509e3fe2d2
Resign f41 builds with f42
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-08-08 06:20:32 -07:00
e99d5ce645
robosignatory: f41-rebuild auto signing mass rebuild tag as builds happen
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-07-16 09:45:58 +00:00
d11f9c5ced
epel7 retirement
...
Drop epel7 all the places in ansible where it is and makes sense.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-07-03 20:00:59 +00:00
james02135
e244c454d8
Add epel-10 sidetag signing
...
Signed-off-by: james02135 <james02135@hotmail.com>
2024-06-20 13:05:57 +00:00
james02135
9f5ab7b7b6
robosignatory: Use epel-10 key for appropriate tags
...
Signed-off-by: james02135 <james02135@hotmail.com>
2024-06-17 09:53:48 +00:00
ac33b4287a
robosignatory: sign f41-perl side tag
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-05-28 17:47:31 +00:00
f4d3bf434b
robosignatory: sign f41-python side tag
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-05-28 17:47:31 +00:00
d366194a22
module-build-service (mbs): retire service
...
With the EOL of Fedora 38 yesterday, we are no longer building any
modules and can retire our module build service.
Note that toddlers needs to be adjusted still, that will happen after
this.
Thanks for all the modules!
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-05-22 13:38:53 -07:00
9438b39fd1
F38 is EOL
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-05-21 14:33:13 +00:00
Paul Whalen
4a8c9ecf96
IoT: Sign stable with f40 key
...
Signed-off-by: Paul Whalen <pwhalen@fedoraproject.org>
2024-04-22 12:53:38 -04:00
Patrik Polakovič
0d507b06ca
Add EPEL9 to robosignatory config
...
Signed-off-by: Patrik Polakovič <ppolakov@redhat.com>
2024-03-27 22:46:17 +00:00
b0ade05e86
robosignatory: re-enable f40/branched updates flow
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-14 11:33:25 -08:00
a4900613e7
robosignatory: iot 'stable' should be using f39 key, not f40
...
This was a branching mistake. iot stable releases should follow the
current stable release, not switch with branching.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-14 11:27:14 -08:00
0f082fd3bc
robosignatory: switch eln over to fedora-41 signing
...
eln tracks rawhide, so switch it over to fedora-41 key as well.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 15:24:53 -08:00
a537aefc31
robosignatory: clean up old releases, drop old comments, reformat to be more readable add more comments
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 15:21:25 -08:00
de072aac57
robosignatory: disable signing of f40 updates until we have a branched compose
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-13 10:52:35 -08:00
8fa8129e80
make robosignatory changes for branching
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2024-02-13 13:12:33 +00:00
ebd01fab62
robosignatory: small fixes
...
Fix the fedora-41 key, had too many characters there.
Also, the add-key script needs to be readable by the robosignatory user,
so it can't be mode 711.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-08 15:35:31 -08:00
100c9b484d
robosignatory: resign f40 tagged packages with f41 key
...
This is to prep for branching next week.
We want to set this so we can tell robosgnatory to resign all the f40
tagged packages with f41. Also, newly tagged packages will also be
signed, so by the time we branch everything should be signed for both
branched (f40) and new rawhide (f41).
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-02-08 15:18:44 -08:00
0bb87a53e2
autosign: this should be autosign02 in prod now
...
Just use the short inventory name here so it works in prod and stg.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-01-30 09:53:19 -08:00
c764d1ea86
autosign: adjust playbooks for prod
...
We need to setup things in prod slightly differently, using keyctl.
Copy in the service and scripts.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2024-01-30 09:33:45 -08:00
