505a17f2aa
Address review comments
...
- liberal use of no_log in the kyroptic module
- Switch to using an environment variable for openssl PIN
2026-07-21 15:55:43 -04:00
Jeremy Cline
f76f1dcdde
siguldry: raise max connections on the signing helper
...
This is controls (indirectly) the number of concurrent signing
operations.
Signed-off-by: Jeremy Cline <jeremycline@microsoft.com>
2026-07-21 18:38:19 +00:00
Jeremy Cline
21599de42d
draft: add roles for siguldry server and bridge
...
These roles deploy the Siguldry server and bridge.
There's a few TODOs, and one step that isn't covered at all is the
deployment of the TLS private keys. These need to be encrypted with
systemd-creds, which should be doable via ansible, but the pesign bridge
isn't doing it so I've left it out for now.
Signed-off-by: Jeremy Cline <jeremycline@microsoft.com>
2026-07-21 18:38:19 +00:00
8d4ad009c9
forge: add group team mappings for i3 organization on Fedora Forge
...
Related: forge/forge#641
2026-07-21 12:57:22 +10:00
e2daea1e4a
batcave: don't apply uri patch on rhel10 batcave
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 19:51:35 -07:00
bef38a85ba
git-hooks: we do want fedora-messaging-git-hook here, it is a seperate package
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 14:55:00 -07:00
419c43026b
git hooks: adjust git hooks for el10
...
kitchen no longer exists, nor does the fedora-messaging-git-hook
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 14:29:07 -07:00
e82cd64564
ansible-server: push the actual new file too
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 13:53:55 -07:00
607364e153
ansible-server: galaxy requires the requirements file end in yml
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 13:49:30 -07:00
3c69a3ac35
ansible_server: install pulp installer (deprecated) from galaxy too
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 13:42:48 -07:00
db5d7673eb
ansible_server: install ansible collections from galaxy for now
...
We need to go back and branch these for epel10 properly, but
for now we can just install from ansible-galaxy hopefully.
This shouldn't affect batcave01 (rhel9) only batcave02 (rhel10).
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 13:35:49 -07:00
655201fdc0
openshift / read-only: ignore errors from removing self provisioner for now as it will always error after the first time
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 11:10:19 -07:00
9ab4e9bb24
openshift / read-only: it is log, not logs
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 11:09:02 -07:00
8cebfd18a8
we want to keep applications
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-20 19:42:15 +02:00
94e2d9dfeb
fix the sysadmin-opshift-ro role permissions
...
Assisted-by: Claude Sonnet 5
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-20 19:37:59 +02:00
b48606202d
communishift: add more resources for copr ( ticket 13409
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 09:45:08 -07:00
a160490f7d
batcave01: backup should be /srv/git, not /git
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-20 09:30:19 -07:00
Patrik Polakovič
4a2be280f8
F45 mass rebuild: adjust robosignatory config before mass tagging
...
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
2026-07-20 13:17:45 +02:00
f354172037
forge: add group team mappings for sca-tools organization on Fedora Forge
...
Related: forge/forge#623
2026-07-20 19:04:01 +10:00
1038395bea
forge: add group team mappings for iot organization on Fedora Forge
...
Related: forge/forge#604
2026-07-20 18:34:49 +10:00
0926c03180
forge: add group team mappings for java organization on Fedora Forge
...
Related: forge/forge#669
2026-07-20 12:16:54 +10:00
Jakub Kadlcik
07520d81d9
copr: suspend more known warnings
2026-07-18 18:55:19 +02:00
c476977452
openshift-readonly: try and add routes and applications to resources, drop logs from verbs
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-18 09:13:43 -07:00
da96011bab
openshift: try adding logs verbs to openshift readonly
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-18 09:05:57 -07:00
96d3eaaae8
take ipa02 out of list for fasjson also
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-17 18:27:58 -07:00
d0ec720155
communishift / copr: increase some limits per ticket 13409
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-17 09:44:32 -07:00
340c8f8fb9
openqa/worker: add a script to reap unknown qemu processes
...
This is a workaround for an annoying bug which results in floods
of incomplete jobs. See:
quality/tickets#913
https://progress.opensuse.org/issues/180110
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-07-16 16:45:23 -07:00
f3292f4178
batcave02: create new rhel10 batcave02 to sync batcave01 to
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-16 16:44:12 -07:00
fadbb39054
batcave01: add git and attachments to backups again
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-16 16:43:10 -07:00
2219d51f35
increase memory on proxy12 and proxy04
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-16 15:34:33 -07:00
3ea92477e7
sundries: actually install python3-paste
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-16 15:03:31 -07:00
1fa43050e4
sundries: increase mem and cpus
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-16 15:01:30 -07:00
1bb6f56c24
sundries01: move to rhel10
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-16 14:36:35 -07:00
ee67de3495
sundries02: move to rhel10
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-16 14:19:12 -07:00
2c2d72d2b0
sha256sum, you too shut up please
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 22:51:21 +02:00
a45467a6a5
chmod 644 the .acl files
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 20:42:06 +00:00
bb61d36c76
silence the geoip script
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 22:29:24 +02:00
0834ae1657
maxmind ships a folder inside the .zip file, we need to specify that
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 21:58:28 +02:00
9bab140ca3
geoip-download-databases: move location argument
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-16 12:42:33 -07:00
24c8abdaa8
fix the script and cron definition ( #3530 )
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Reviewed-on: infra/ansible#3530
2026-07-16 19:33:28 +00:00
d8c4b9241e
jinja now shouldn't think it's comments
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 20:59:08 +02:00
49076524e3
geoip-city: also install python3-paste
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-16 11:53:40 -07:00
dccf24d022
modify some error messages in the script
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 18:39:54 +00:00
ac9150ef83
remove trailing space
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 18:39:54 +00:00
41c3db1ac8
switch to cp -af here
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 18:39:54 +00:00
7744fc7959
run the script with the lock-wrapper
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 18:39:54 +00:00
07b6cffb6e
save us from headaches with selinux
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 18:39:54 +00:00
4379fbcfbc
add quotes to the push line
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 18:39:54 +00:00
c3cb4c5140
maybe one day, i will learn to write
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 18:39:54 +00:00
df67c2e3b7
this should save us if no files were downloaded
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-16 18:39:54 +00:00
