1
0
Fork 0
forked from infra/ansible
Commit graph

9,404 commits

Author SHA1 Message Date
79f1a7c324 gpu01: add vpn and hosts file
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-03-05 16:51:37 -08:00
893e103461 gpu01: add new gpu01 machine in rdu3-iso
This machine is in the rdu3 isolated network.
For now, just setup a simple kickstart on one disk and a playbook that
does the normal base role things. We can adjust from here.

This machine has 1 nvme and another spinning rust device.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-03-05 19:55:21 +00:00
59eddc51a8 EPEL minor branching: create symlinks as apache user
epel/releng#89

Signed-off-by: Carl George <carlwgeorge@gmail.com>
2026-03-02 19:07:42 +00:00
4051930fa7 EPEL minor branching: update major-only compose symlinks
epel/releng#88

Signed-off-by: Carl George <carlwgeorge@gmail.com>
2026-03-02 19:07:42 +00:00
b4ddcdd830 removed ipsilon-website entries in proxies-reverseproxy.yml and proxies-websites.yml playbooks
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2026-02-27 18:03:21 +00:00
8fa05b2955 deleted ipsilon-website playbook
Signed-off-by: Pedro Moura <pmoura@redhat.com>
2026-02-27 18:03:21 +00:00
488e9ae7e5 ocp4: add someone to readonly to test with in staging
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-02-27 09:54:40 -08:00
James Antill
38fe6cbb19 check-etc: Add lots of files/prefixes.
Signed-off-by: James Antill <james@and.org>
2026-02-25 13:47:28 -05:00
1847606af0 buildhw: enable sigul pesign bridge on buildhw-a64-02
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-02-24 15:11:45 -08:00
46dc8aa2f5 EPEL minor branching: refactor directory creation and createrepo commands
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2026-02-23 13:46:38 -06:00
fd8b32bffc EPEL minor branching: specify global find options first to avoid output on stderr
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2026-02-23 12:27:45 -06:00
2bfad288f8 EPEL minor branching: fix typo in repo path
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2026-02-23 12:20:30 -06:00
c6ce410820 EPEL minor branching: use epel_branched_minor var at the appropriate place
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2026-02-23 10:59:50 -06:00
135582f377 EPEL minor branching: fix concatenation of int variable in string
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2026-02-23 10:44:19 -06:00
9f7bc352ca EPEL minor branching: include EPEL vars file in manual playbooks
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2026-02-23 10:27:17 -06:00
69473d4e45 EPEL minor branching: port manual playbooks to use existing EPEL vars
Signed-off-by: Carl George <carlwgeorge@gmail.com>
2026-02-23 15:41:04 +00:00
33065287fb buildhw-x86-02: add in pesign bridge
This machine is disabled in koji and not frozen, so using it to deploy
and test this setup. Once I can manually sign something with it, we can
look at enabling it for real (after freeze).

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-02-18 15:45:16 -08:00
James Antill
03865d03b3 batcave: Move from mirror_pagure_ansible to mirror_forge_ansible.
Signed-off-by: James Antill <james@and.org>
2026-02-16 18:17:13 -05:00
55f225d428 copr-hv: typofix 2026-02-16 08:11:22 +01:00
7faef4610c copr-hv: tag the Copr-specific role 2026-02-16 08:09:51 +01:00
James Antill
c4c58299c2 check-etc: Add playbook to check /etc for old/unmanaged files.
Signed-off-by: James Antill <james@and.org>
2026-02-14 09:52:16 -05:00
59debdda2c Update playbooks/openshift-apps/fedora-coreos-pipeline.yml 2026-02-10 13:42:04 +00:00
502f7c6273
openshift-apps/websites: requesting access for glb
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-02-01 11:19:51 -06:00
39563d49fe noc-cc01 is no more
Remove it from main and remove it's playbook.
It was already removed from anisible.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-31 16:40:52 -08:00
c0f13a07e1 generate-updates-per-host: try explicitly disabling become
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-30 11:18:19 -08:00
3d68919779 updates/uptimes: use user root
Some hosts don't seem to be setup right for sudo/become (copr mostly).
Just use root like our normal ansible stuff does.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-30 11:01:28 -08:00
5091fd4373 ocp-rdu3: retire this host/proxy/cert now that we are moved
There's no need to keep ocp-rdu3 around anymore, we only used
it when we were moving datacenters last year.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-30 10:35:10 -08:00
James Antill
13d2c38ad0 proxies: Add stg.fp.o tags for wildcard cert changes.
Signed-off-by: James Antill <james@and.org>
2026-01-29 16:12:58 -05:00
James Antill
0dd9a4f2c4 proxies: Renewed stg.fp.o wildcard cert
Signed-off-by: James Antill <james@fedoraproject.org>
2026-01-29 15:30:33 -05:00
ec59933a54
adding os-control01 to backups01 management
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-01-28 13:49:54 +00:00
5d6a775e51 🔧 proxies-redirects: Write simpler regex for redirect rules
This commit standardizes the regex redirection used for all Fedora Docs
sites where a language code is involved in the original site and the
redirected site. This new regex pattern matches anything between the
slashes where the language code for the Fedora Docs site appears. This
allows for greater flexibility of anything that may appear now or in the
future for the language codes, including some that use two letters and
others that use four letters.

It makes the redirect consistent across all Fedora Docs redirects, in
the general aim of promoting a common best practice for Fedora Docs
redirects for old site names to new ones.

CC: @pbokoc @pboy

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-01-27 18:01:42 +00:00
7d325cb3ac 🔧 proxies-redirects: docs.fp.o, s/program_management/operations/
This commit adds a new redirect rule for the migration of the Fedora
Operations Architect documentation, or the Fedora Program Management
docs, into their new home as Fedora Program Operations docs. This will
fit in with the new Forgejo home for these docs, and help give a better
home and identity to the efforts around program management for Fedora,
like the release schedule and other core parts of the release program
and schedule.

I also added a `docs` tag since it is a Fedora Docs-specific redirect.

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-01-27 17:31:52 +00:00
00e4eb6b3d Proxies: Fixes #13051 - remove old cert management for getfedora
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-22 22:39:24 +00:00
9717d920af anubis: rename anubis-el8 to anubis-el and see about enabling on download
Looks like the scrapers are hitting the download servers now.
So, look at setting up an anubis pod there like we did for pagure.
anubis package isn't available for epel9, so we just use the container.

Will test this with dl01 and tweak until it's working.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-22 08:50:34 -08:00
d76afa032b Move the qa-landingpage reverse proxy config removal
...we already have a better place to do this, it turns out.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 15:44:01 -08:00
a994e1031a Gah, drop the when as well
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:46:39 -08:00
c2f25426e8 Try and fix the qa redirect
ugh, it's hard to understand this stuff.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:46:16 -08:00
2a5465404f proxies-redirects: add a tag for the qa redirects
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:36:47 -08:00
382f947eff Drop qa-landingpage, clean up blockerbugs config a bit
Per https://pagure.io/fedora-qa/issue/859 we want to drop the QA
landing page at qa.fedoraproject.org. This should turn it back
into a redirect to the wiki page. We also drop the certificate
for qa.fp.o (since blockerbugs uses the wildcard certificate
anyway) and remove a duplicate reverseproxy entry for blockerbugs
(we had two otherwise-identical entries that were restricted to
prod and stg with `when` conditions).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-01-21 14:29:13 -08:00
0e0b5f92c6
Zabbix: add shush/ok scripts and playbook
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-01-21 17:00:06 +00:00
a754144f19 Update infra pagure.io links to forge.fp.o (WIP)
This should update all the references we have to
https://pagure.io/fedora-infrastructure to the
new https://forge.fedoraproject.org/infra/tickets/ area.

Do not merge this before the migration on tuesday.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-01-20 14:39:40 -08:00
Rolv Apneseth
c3af50bd49 Add user rapneset to playbooks/openshift-apps/fedora-coreos-pipeline.yml 2026-01-20 10:44:56 +00:00
d0fe436ca2 proxies-redirects: fix extra trailing slash on getfedora.org redirect
Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-19 22:28:30 +00:00
James Antill
bded16fdab stg.pagure.io: Test against pagure-staging. Also change prod. test.
Signed-off-by: James Antill <james@and.org>
2026-01-16 15:07:45 -05:00
Hristo Marinov
b6538653e2 proxies-redirects.yml: Atomic Desktops Docs Fix
See https://pagure.io/fedora-infra/ansible/pull-request/3035
2026-01-15 23:26:10 +00:00
0535d64f12 proxies-redirects: point fedoracommunity.org at the fedora wiki
Since there are still a handful of active community sites and they are
documented in the Fedora Wiki, point fedoracommunity.org at the Fedora
Wiki so they can be found.

Signed-off-by: Gregory Bartholomew <gregory.lee.bartholomew@gmail.com>
2026-01-15 23:22:21 +00:00
a18576f826 Remove coreos-ostree-importer playbook and templates
Removes the OpenShift configuration for coreos-ostree-importer including
playbooks and related templates

Ref: https://github.com/coreos/fedora-coreos-tracker/issues/2070
2026-01-15 19:27:10 +00:00
20064ac2d4
Use blocks to apply the tags to the tasks within an included role
See: https://docs.ansible.com/projects/ansible/latest/playbook_guide/playbooks_tags.html#tag-inheritance-for-includes-blocks-and-the-apply-keyword

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-01-15 18:16:04 +01:00
223288d6c8
Ansible can't loop over roles
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-01-15 18:06:42 +01:00
6fc54fb18c [bodhi] Increase the amount of staging consumers
See https://pagure.io/fedora-infrastructure/issue/12932.

The Bodhi needs some optimization as the processing of some messages
takes 40 seconds. We need to keep at least 10 consumers to handle the
load on staging.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-01-15 16:33:52 +01:00