1
0
Fork 0
forked from infra/ansible
Commit graph

46,870 commits

Author SHA1 Message Date
2a2097cecd [ipa] Move ipa03 to RHEL10
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-13 13:29:29 +02:00
7377e2fa32 add APP_MODULE back inwq
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-07-13 20:58:36 +10:00
606632288a forgefiler: devmode on staging for now
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-07-13 19:50:30 +10:00
eb48e86f1b forgefiler: add route
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-07-13 19:42:41 +10:00
759426bfc7 forgefiler: remove APP_MODULE
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-07-13 19:29:01 +10:00
8d7c1a3d5a
Add buildhw-x86-15 to inventory
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-13 10:25:59 +01:00
0f17cc12ef forgefiler: tweak APP_MODULE
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-07-13 19:23:52 +10:00
1079f6511e forgefiler: add APP_MODULE
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-07-13 19:16:40 +10:00
71e87509a6 forgefiler: add staging setup for forgefiler
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2026-07-13 19:10:56 +10:00
d7d4e8b7f7 copr-builder: setup user agent
Fixes: https://github.com/fedora-copr/copr/issues/4360
2026-07-11 20:28:39 +02:00
7da832a8fc mailman: increase apache limits as we were hitting the old 400 one
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-11 10:06:00 -07:00
692fa4eb8f openqa: only define dist-git token in config when needed
No need to expose this anywhere we don't absolutely need to.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-07-10 18:28:18 -07:00
b9a1fa57f3 openqa: enable dist-git testing in prod
This should enable dist-git PR testing in prod, and make *only*
prod report status back to dist-git (staging no longer should).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-07-10 18:21:28 -07:00
14af240a82 swap buildhw-a64-02 and bvmhost-a64-03
bvmhost-a64-03 has a bad memory slot, so needs to be sent back to get
fixed/replaced. In the mean time lets replace it with buildhw-a64-02,
which has the same specs.

When the fixed one comes back we can make it a new buildhw-a64-02.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-10 10:21:33 -07:00
4376cb6af3 buildhw-a64-03: move into secureboot group and drop 02 out
We are moving 02 out to become the new bvmhost-a64-03 while that one is
shipped back for repairs. 03 will take over on secureboot.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-10 09:40:20 -07:00
Jiri Podivin
25175c7261 Enable pre-commit linters, set versions to hash
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-10 15:59:40 +00:00
dd027f50c6 Revert "[ipa] Switch ipa_server to ipa03.stg"
This reverts commit 0a1c8efada.
2026-07-10 13:41:13 +02:00
0a1c8efada [ipa] Switch ipa_server to ipa03.stg
This is temporary to reinstall ipa01.stg

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-10 13:26:32 +02:00
bb4724a116 [ipa] Move ipa01.stg to RHEL 10
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-10 13:12:41 +02:00
4b8a238b78 [ipa] Remove nagios leftovers
There was a nagios task in IPA role and as the Nagios is no longer
around let's remove it.

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-10 12:47:21 +02:00
Jiri Podivin
4f2d4e500e Fix issues highlighted by linter
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-10 10:25:09 +00:00
Jiri Podivin
ffca0313f5 Derive Log Detective credentials from securely stored values
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-10 10:25:09 +00:00
8b4b0b4587 [ipa] Use correct ks file
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-10 10:56:58 +02:00
bc04ce9e65 [ipa] Move ipa02.stg to RHEL10
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-10 10:48:07 +02:00
d6cca9eb11 yumrepos: fix rhel10-infra-stg repo also
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-09 15:09:04 -07:00
a326adbb30 epel10-infra: add new signing key
The old key we were using for old releases had some sha1 in it
somewhere, so rhel10 rejects it (great!). So, lets use a newly generated
key that is acceptable to rhel10 and much nicer.

This adds the public key file, the repos that use that file, the rhel10
post kickstart that sets up the repo, robosignatory to sign epel10-infra
stuff with this new key and finally on rhel10 hosts put the new repo in
place.

Note that this only changes the rhel10 setup, all rhel8/9 machines are
still using the old key. We may want to move them over, or just not care
as we retire all of them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-09 14:52:33 -07:00
8533d32360
ELNBuildSync: Upgrade to 1.3.3 in prod
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-09 16:17:20 -04:00
cc1925ec64 add app-actions to elnbuildsync (#3506)
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Reviewed-on: infra/ansible#3506
2026-07-09 19:51:44 +00:00
7b15ebf44a migrate openshift-apps to use openshift/app-actions (#3459)
Reviewed-on: infra/ansible#3459
2026-07-09 19:09:25 +00:00
c089fea71e
ELNBuildSync: use port 25 for email
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-09 14:47:43 -04:00
9808527826
ELNBuildSync: Deploy 1.3.3 in staging
Adds better protection for the loglevel endpoints and adds control
endpoints to pause/unpause operation immediately.

Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-09 13:39:07 -04:00
b922b9dba1
ELNBuildSync: Enable email sending
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>

rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-09 12:21:19 -04:00
Jakub Kadlcik
7e50a3dd8a copr: oops, fix pool names dev -> prod 2026-07-09 16:22:41 +02:00
Jakub Kadlcik
0056660a66 copr-be: don't set permissions for state=absent
FAILED! => {"changed": false, "msg": "'permissions' MUST NOT be set
    when 'state=absent'."}

This is a leftover after e86f495e8d.
2026-07-09 15:56:28 +02:00
4164dbee61
Add buildhw-x86-17 to inventory
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 14:55:35 +01:00
Jakub Kadlcik
11c1eaeda1 copr-be: increase allowed startup time for s390x builders to 300s 2026-07-09 15:34:32 +02:00
40890a5962
Copr: add trigger opdata to Zabbix builds template
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 14:22:00 +01:00
50d9008108
Zabbix: Start using nested hostgroups so RBAC works properly
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 13:43:44 +01:00
c52f7a9416
Copr: Add build-checks template to Zabbix
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 13:22:34 +01:00
d4825ebfb2
zabbix: Update openshift proxy configuration
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-07-09 13:08:53 +01:00
7324f9f5df
zabbix: openshift proxy prod deploy
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-07-09 12:50:34 +01:00
2cc782bab0
Copr: raise build timeouts on s390 pools to 300s
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 12:14:57 +01:00
c51e04de81 Collectd: cleanup collectd everywhere except FMN
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 11:01:41 +00:00
1529684dc1 Revert "bvmhost-x86-05/06: we need iscsi client here"
This reverts commit 65dc5ada06.
2026-07-08 15:28:57 -07:00
65dc5ada06 bvmhost-x86-05/06: we need iscsi client here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-08 15:20:55 -07:00
f77550f85c kickstarts: rhel10: remove vnc, it is no longer supported and rdp has to be specified on the boot line
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-08 13:35:57 -07:00
92b2fddd2c fedora-ostree-pruner: update to Fedora 44
xref: https://github.com/coreos/fedora-coreos-tracker/issues/2055
2026-07-08 15:52:00 +00:00
072c8a765d coreos-koji-tagger: update to Fedora 44
xref: https://github.com/coreos/fedora-coreos-tracker/issues/2055
2026-07-08 15:52:00 +00:00
eb6222610b coreos-cincinnati: update to Fedora 44
xref: https://github.com/coreos/fedora-coreos-tracker/issues/2055
2026-07-08 15:52:00 +00:00
e924d1be9e
Add buildhw-x86-16 to inventory too
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-08 16:22:02 +01:00