1
0
Fork 0
forked from infra/ansible
Commit graph

46,247 commits

Author SHA1 Message Date
Jakub Kadlcik
7e92010a30 copr-be-dev: update builder images to F44
See https://github.com/fedora-copr/copr/issues/4306
2026-06-05 12:20:39 +02:00
Jakub Kadlcik
dab4b02c10 copr-be: set a non-empty value for IBMCLOUD_CRN
There is a too strict validation in `image-builder upload` requiring this value
to not be empty but we don't actually need or use it.

It should be fixed in `image-builder` but that's not something I want to get
blocked by right now.
2026-06-05 12:12:40 +02:00
bac5b82bfd
Zabbix: copy CPU macro from copr-be to copr-be-dev
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-05 09:38:08 +01:00
17c185f2eb Update all the hosts we upgraded to fedora 44 in the outage today
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-04 20:06:18 -07:00
a9644e208c openQA: specify low minimum free space for server dirs
Recent openQA has a mechanism where it refuses to schedule jobs
if the free space for various dirs (results, asset, archive) is
less than X%, where the default X is 5. We use a very large share
for these things and expand it only on need, so it's usually quite
close to 100% full. Let's try only needing 0.5% to be free.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-04 17:04:02 -07:00
9fa66d2441 proxies_stg: move to f44
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-04 12:39:55 -07:00
fbab66f62c drm-panic-frontend: Deploy in production 2026-06-04 19:17:43 +00:00
57a760e09c
Zabbix: port remaining Copr items from Nagios
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-04 16:54:37 +01:00
cf9c46c830
Zabbix: adjust copr-be cpu threshold
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-04 13:23:16 +01:00
1b8573d6bc
Zabbix: migrate Copr ping check on the copr-be from Nagios
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-04 13:23:16 +01:00
615ebcbf0c [oraculum] Add missing fedora:latest imagestream
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-06-04 13:20:56 +02:00
146d5d519b [oraculum] Build the redis container locally
The previous deployment of Redis has issue with the latest version and
the docker.io is failing on ratelimit. So let's build the redis
deployment from the flatpak-indexer Dockerfile. For details see infra/tickets#13390

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-06-04 13:10:54 +02:00
d5b39ff4d3 Add pagure-stg-ro01 hosts file and fix the gpu01 one.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-03 13:36:05 -07:00
52ac6c7ec6 pagure-stg-ro01: add new instance for readonly pagure in stg ( ticket 13351 )
For infra/tickets#13351
This makes a staging rhel10 vm thats just the same size / place
as pagure-stg01.

It still needs external ip's and nat in from those, but this should be
enough to install it and start setting things up.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-03 19:55:22 +00:00
James Antill
f2e951adb6 nftables: Remove zabbix rules. Minor cleanup for jinja comments.
Signed-off-by: James Antill <james@and.org>
2026-06-03 14:37:09 -04:00
8f8a5a0a23 koji / pesign: add systemd-boot to hub policy and pesign
Set the systemd-boot package to build on secure-boot channel and set all
the normal permissions for that that other secure-boot builds have.

Add the systemd-boot cert to pesign config so it can be signed by the
right cert.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-03 17:47:55 +00:00
ecd54431d7 smtp-mm-iso01: fix ipv6 address
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-03 09:18:08 -07:00
f2ebff39e9
Nagios: fix typo in previous commit
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-03 16:46:01 +01:00
8ef433c8f6
Nagios: Remove rdu-cc-gw
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-03 16:03:18 +01:00
7d0db42137
Zabbix: improve copr notification logic
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-03 16:03:18 +01:00
Lenka Segura
f6b3f494ae forgejo: Increase the concurrency of the standard runners to 4
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-06-03 14:49:19 +00:00
7516de601e
Zabbix: Move Copr-fe CDN check from Nagios
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-03 15:32:20 +01:00
743f69c8a8
forgejo: debugging oauth-proxy
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-06-03 15:11:26 +01:00
0fdaf5ff7d
Zabbix: Use a dedicated Copr group and optional host tag
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-03 15:10:46 +01:00
013b1f8b48
Zabbix: Add COPR notification target
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-03 14:51:42 +01:00
e8799f5dc5
forgejo: disabling oauth-proxy for further debugging
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-06-03 14:46:01 +01:00
c9d9ff084f
forgejo: reenable oauth-proxy patch
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-06-03 14:36:47 +01:00
e5db9f4036
forgejo: oauth-proxy image replaced with quay image
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-06-03 14:28:14 +01:00
6a1a255d9f drm-panic-frontend: Add deployment 2026-06-02 20:51:28 +00:00
f1bd6131f6 bodhi: fix the hotfix patch
test_models.py is not packaged, so we need to use a modified
patch file with the changes to that file stripped.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-02 12:23:57 -07:00
f89447b834 openshift-apps/bodhi: fix annotations metadata in wrong place
728b6c57a3 inadvertently put the
annotations in the wrong place for bodhi-celery (in spec, not in
metadata).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-02 11:47:05 -07:00
564b6552f6 bodhi: hotfix for ELN gating
See https://github.com/fedora-infra/bodhi/pull/6110

Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2026-06-02 18:38:53 +00:00
31b024cdf5 greenwave: quick fix: add missing endif
D'oh.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-02 11:31:12 -07:00
9cd1b6f82d greenwave: handle ELN product_version rename, enable RemoteRule
See https://github.com/fedora-infra/bodhi/pull/6110 . We want to
be able to gate (only) Fedora ELN kernel updates via gating.yaml
(RemoteRule). However, if we just turned on the RemoteRule policy
for "fedora-eln", suddenly hundreds of existing gating.yamls which
specify "fedora-*" would apply to ELN, which we don't want.

To solve this, we will make Bodhi use "eln" not "fedora-eln" as
the product_version for ELN. That requires us to add "eln" to the
null policies. Let's also enable RemoteRule for "eln" at the same
time. This should not cause any existing policies to apply (unless
there are any which just specify '*', I guess) but will allow us
to add a kernel policy that applies to 'eln'.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-02 18:21:34 +00:00
102149236d blockerbugs: add DEBUG env var for staging, remove legacy VM role
Set DEBUG=true for staging OpenShift deployment (both the main
Deployment and the sync CronJob) to enable debug logging.

Remove the entire roles/blockerbugs/ directory which was the old
VM-based deployment (Apache/WSGI). This role has been fully
superseded by roles/openshift-apps/blockerbugs/ and is not
referenced by any playbook.

Assisted-by: Claude Opus 4.6
2026-06-02 15:35:07 +00:00
566eabaac0 quality: blockerbugs app - update health check probes 2026-06-02 15:33:58 +00:00
1066361541
forgejo: disable oauth-container patch for debugging
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-06-02 16:17:10 +01:00
d12a457c97 feat(forge): securing /metrics endpoint for staging
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-06-02 14:50:44 +02:00
3457eea89b
Add the RabbitMQ user for the lookaside cache
Fixes: infra/tickets#13380

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 11:54:21 +02:00
728b6c57a3
Fix deployment triggers
The annotations must be on the deployment's metadata, not on the pod
template's metadata.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 10:14:01 +02:00
d98ce9b9f8
Fix the triggers for the deployment in webhook2fedmsg
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 09:53:40 +02:00
ea82ea2c9a
Fix the openshift user id in badges
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 09:53:40 +02:00
3731a63a13 bodhi-stg: add python-redis to base image
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2026-06-02 09:08:15 +02:00
James Antill
3fdaf170d5 nftables: Use the config. table names in staging.
Signed-off-by: James Antill <james@and.org>
2026-06-01 18:43:59 -04:00
James Antill
e11b39314d nftables: Fix/merge monitoring changes between prod/staging.
Signed-off-by: James Antill <james@and.org>
2026-06-01 18:38:22 -04:00
James Antill
4a6fc0fdf5 nftables: Fix table name scoping issue.
Signed-off-by: James Antill <james@and.org>
2026-06-01 17:42:12 -04:00
James Antill
5c6868260b Merge branch 'nftables' into upstream
* nftables: (2 commits)
  Cleanup nft merge. Chg osbuildapi and nft_custom_rules to use nft_table_filter.
  ...

Signed-off-by: James Antill <james@and.org>
2026-06-01 17:33:24 -04:00
James Antill
40b3225890 pagure: hotfix for commit hash
Signed-off-by: James Antill <james@and.org>
2026-06-01 21:12:12 +00:00
a9adce6136 robosignatory: enable signing on f45-python 2026-06-01 21:09:43 +00:00
a0156fc54d pkgs: allow apache to read fedora-messaging key
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-01 10:27:44 -07:00