1
0
Fork 0
forked from infra/ansible
Commit graph

46,619 commits

Author SHA1 Message Date
9a7c1aebeb
Deploy jira-sync to prod
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-29 19:41:59 +02:00
7b5ae8e938
Jira-sync: fix secrets name in cronjob
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-29 18:51:17 +02:00
3068b93915
Jira-sync: there is no token for codeberg, and use token_file
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-29 18:46:42 +02:00
f4dd0f6c2f
Jira-sync: there is no stg token for backends
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-29 18:43:00 +02:00
Lenka Segura
0ec84de2f4 forge: add runner for koji
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-06-29 11:00:15 +02:00
ab3253d1e8
fix command
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-27 00:30:42 +02:00
76cc776377
Poetry is not inside the image
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-27 00:29:32 +02:00
6aef344777
Adjust path and name
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-27 00:24:50 +02:00
a5c7b8018c
And look: more syntax
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-27 00:13:10 +02:00
f9ef7d87c7
Syntax, again
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-27 00:12:15 +02:00
ee0afdd0aa
Syntax
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-27 00:11:06 +02:00
ff96161c07
Create the project first
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-26 23:54:37 +02:00
ae6524da08
Typo
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-26 23:52:54 +02:00
98276d6b77
Scaffolding for jira-sync in staging Openshift
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-26 23:50:01 +02:00
Cristian Le
16f15b85a1 Add osci-pipeline queue for scratch-build-test 2026-06-26 21:36:54 +00:00
9fb01cb4ef
ELNBuildSync: move to 1.2.1 in STG
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 16:54:34 -04:00
6f5d450cc0
ELNBuildSync: Fix typo in command-line argument
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 16:36:27 -04:00
9443e8e293
ELNBuildSync: Fix incorrect ConfigMap field
ConfigMap and Secret differ nonsensically on the definition of this
keyword.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 15:23:30 -04:00
b8403b4b0f
ELNBuildSync: Force apply of OpenShift objects
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 15:11:54 -04:00
29481de49e
ELNBuildSync: push Kubernetes objects when building
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 14:41:19 -04:00
fa6805a254 ELNBuildSync: Make ebs_oidc_secret an actual Secret
This also means that static-config can be a ConfigMap, rather than a
Secret since it no longer contains any sensitive data.

Also use `stringData` instead of `data` to be explicit about its format.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 17:52:33 +00:00
5eff1cce5b ELNBuildSync: rename public-config to static-config
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 17:52:33 +00:00
0e8523bab3 ELNBuildSync: rename ebs-config.yml to ebs-secrets.yml
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 17:52:33 +00:00
86843d5b2c ELNBuildSync: Add OpenID Connect support
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 17:52:33 +00:00
318288aedc ELNBuildSync: Add static configuration file
Includes the Koji, Bodhi and Database configuration

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 17:52:33 +00:00
3e3a01df73 ELNBuildSync: reorganize ansible variables
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-06-26 17:52:33 +00:00
0ce30a13ba buildvm-s390x-13.s390.fedoraproject.org: remove from compose
We have 3 compose builders, but we don't really need all of them I don't
think. The rawhide composes do boot.iso for everything and server
and server dvd here, so 2 builders I think should be fine.

Lets move this one to be a general builder to try and prevent
backlogs.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-26 09:33:09 -07:00
531895bc5e 📧 roles(fasjson): Update releng-team alias
This commit updates the assignments for the releng-team@fp.o alias to
use a FAS group membership mail for dynamically updating who receives
email sent to this mail alias. The overall goal is to ensure a trusted
and responsible person receives email sent to this alias, and to use a
FAS group to more dynamically handle membership for who should receive
access to emails sent to this alias.

I noticed this while adjusting other aliases in the file nearby, and saw
that @jnsamyak was not yet a member of the email alias. By using the FAS
group member address, all people in the `releng-team` FAS group will
also receive mail sent to releng-team@fp.o from now on.

FYI: @humaton @kevin @jnsamyak

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-06-26 11:46:08 +00:00
1f036616d5 [ipa] Correctly disable NIS on RHEL10
Oops. I just enabled it only for RHEL10 and newer and it should be just
versions lesser than RHEL10.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-06-26 10:44:03 +02:00
505e300ae4 [ipa] Disable NIS on RHEL10
NIS is no longer supported on RHEL10 IPA. We don't need to disable it anymore.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-06-26 10:35:33 +02:00
d6f46658ec
Revert "Refs 13419 - disable worker 04/05 in the proxies as httpd-lb isn't doing it's thing"
This reverts commit bdf834a3e9. The
workers are back online now, and we can use them again.
2026-06-26 09:08:04 +01:00
d13f189e4f [ipa] Use the correct ks_url
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-06-26 09:41:14 +02:00
2ab3444d16 openqa/dispatcher: avoid extraneous quote marks in config
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-25 23:13:25 +01:00
db0b9e4f0c nbde: set threshold to 5
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-25 14:27:07 -07:00
efc43822cd vmhost-x86-copr02: fix mac for bond port
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-25 11:09:20 -07:00
03295b7d89 vmhost-x86-copr01: fix mac for bond port
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-25 11:08:25 -07:00
0016f9bbf5 bastion/aliases: add alias for eln-buildsync user
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-25 10:05:51 -07:00
68a1efb111 buildhw-x86-12: fix mgmt ip
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-25 09:40:45 -07:00
479256ae92 [ipa] Move ipa03.stg to RHEL10
First step to move IPA on staging to RHEL 10.
See infra/tickets#13382

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-06-25 14:40:33 +00:00
a16deeb465
Postfix: use postfix_group variable to get the right main.cf for maintainer_test
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-25 15:28:25 +01:00
4962777991
Postfix: test host-specific main.cf file for postfix
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-25 15:21:04 +01:00
7db40e0556
Postfix: use vpn route for ending via bastion on maintainer-test hosts
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-25 14:31:13 +01:00
bdf834a3e9
Refs 13419 - disable worker 04/05 in the proxies as httpd-lb isn't doing it's thing
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-25 10:45:12 +01:00
465c2ca3ec Revert "openQA etc: use a single-cert CA cert file for staging rabbitmq (#13422)"
This reverts commit 49f42faa1b.
I've updated to latest fedora-messaging and want to see if this
is unnecessary now.
2026-06-25 09:50:35 +01:00
0294ed72df 📧 roles(fasjson): Update Fedora Marketing and Ambassadors aliases
This commit updates the assignments for various Fedora Marketing and
Fedora Ambassadors aliases to send mail to specific leadership roles
(i.e., @jspaleta the Fedora Project Leader, @jflory7 the Fedora
Community Architect, @amoloney the Fedora Operations Architect, and some
specific groups such as the Fedora Council private mailing list, Fedora
Mindshare Committee members, and Fedora Marketing Team.

The overall goal is to ensure an accountable person receives email sent
to some of these aliases, and to use FAS group membership to dynamically
add and remove members from the mail alias in the future.

Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-06-24 19:04:36 +00:00
383ec9d082 feat(openshift-app-image-report): add enviroment searching
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-06-24 19:01:14 +00:00
412e39286b feat: add a script for checking os versions in openshift-apps
Assisted-by: OpenAI gpt-5.5 in Codex
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-06-24 19:01:14 +00:00
b3fe510408 riscv-kojipkgs: fix template name to actually apply
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-24 11:33:55 -07:00
15d3280750 [bodhi] Always run pre_tasks
When running the playbook with specific tag it will skip pre_tasks and
some of the vars are missing if that happens. Let's add tags: always to
run it everytime.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-06-24 10:59:36 +02:00
c1724e8ac1 [bodhi] Use the correct namespace in quay.io
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-06-24 10:40:59 +02:00