1
0
Fork 0
forked from infra/ansible
Commit graph

46,223 commits

Author SHA1 Message Date
013b1f8b48
Zabbix: Add COPR notification target
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-06-03 14:51:42 +01:00
e8799f5dc5
forgejo: disabling oauth-proxy for further debugging
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-06-03 14:46:01 +01:00
c9d9ff084f
forgejo: reenable oauth-proxy patch
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-06-03 14:36:47 +01:00
e5db9f4036
forgejo: oauth-proxy image replaced with quay image
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-06-03 14:28:14 +01:00
6a1a255d9f drm-panic-frontend: Add deployment 2026-06-02 20:51:28 +00:00
f1bd6131f6 bodhi: fix the hotfix patch
test_models.py is not packaged, so we need to use a modified
patch file with the changes to that file stripped.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-02 12:23:57 -07:00
f89447b834 openshift-apps/bodhi: fix annotations metadata in wrong place
728b6c57a3 inadvertently put the
annotations in the wrong place for bodhi-celery (in spec, not in
metadata).

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-02 11:47:05 -07:00
564b6552f6 bodhi: hotfix for ELN gating
See https://github.com/fedora-infra/bodhi/pull/6110

Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2026-06-02 18:38:53 +00:00
31b024cdf5 greenwave: quick fix: add missing endif
D'oh.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-02 11:31:12 -07:00
9cd1b6f82d greenwave: handle ELN product_version rename, enable RemoteRule
See https://github.com/fedora-infra/bodhi/pull/6110 . We want to
be able to gate (only) Fedora ELN kernel updates via gating.yaml
(RemoteRule). However, if we just turned on the RemoteRule policy
for "fedora-eln", suddenly hundreds of existing gating.yamls which
specify "fedora-*" would apply to ELN, which we don't want.

To solve this, we will make Bodhi use "eln" not "fedora-eln" as
the product_version for ELN. That requires us to add "eln" to the
null policies. Let's also enable RemoteRule for "eln" at the same
time. This should not cause any existing policies to apply (unless
there are any which just specify '*', I guess) but will allow us
to add a kernel policy that applies to 'eln'.

Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-02 18:21:34 +00:00
102149236d blockerbugs: add DEBUG env var for staging, remove legacy VM role
Set DEBUG=true for staging OpenShift deployment (both the main
Deployment and the sync CronJob) to enable debug logging.

Remove the entire roles/blockerbugs/ directory which was the old
VM-based deployment (Apache/WSGI). This role has been fully
superseded by roles/openshift-apps/blockerbugs/ and is not
referenced by any playbook.

Assisted-by: Claude Opus 4.6
2026-06-02 15:35:07 +00:00
566eabaac0 quality: blockerbugs app - update health check probes 2026-06-02 15:33:58 +00:00
1066361541
forgejo: disable oauth-container patch for debugging
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-06-02 16:17:10 +01:00
d12a457c97 feat(forge): securing /metrics endpoint for staging
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-06-02 14:50:44 +02:00
3457eea89b
Add the RabbitMQ user for the lookaside cache
Fixes: infra/tickets#13380

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 11:54:21 +02:00
728b6c57a3
Fix deployment triggers
The annotations must be on the deployment's metadata, not on the pod
template's metadata.

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 10:14:01 +02:00
d98ce9b9f8
Fix the triggers for the deployment in webhook2fedmsg
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 09:53:40 +02:00
ea82ea2c9a
Fix the openshift user id in badges
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 09:53:40 +02:00
3731a63a13 bodhi-stg: add python-redis to base image
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2026-06-02 09:08:15 +02:00
James Antill
3fdaf170d5 nftables: Use the config. table names in staging.
Signed-off-by: James Antill <james@and.org>
2026-06-01 18:43:59 -04:00
James Antill
e11b39314d nftables: Fix/merge monitoring changes between prod/staging.
Signed-off-by: James Antill <james@and.org>
2026-06-01 18:38:22 -04:00
James Antill
4a6fc0fdf5 nftables: Fix table name scoping issue.
Signed-off-by: James Antill <james@and.org>
2026-06-01 17:42:12 -04:00
James Antill
5c6868260b Merge branch 'nftables' into upstream
* nftables: (2 commits)
  Cleanup nft merge. Chg osbuildapi and nft_custom_rules to use nft_table_filter.
  ...

Signed-off-by: James Antill <james@and.org>
2026-06-01 17:33:24 -04:00
James Antill
40b3225890 pagure: hotfix for commit hash
Signed-off-by: James Antill <james@and.org>
2026-06-01 21:12:12 +00:00
a9adce6136 robosignatory: enable signing on f45-python 2026-06-01 21:09:43 +00:00
a0156fc54d pkgs: allow apache to read fedora-messaging key
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-01 10:27:44 -07:00
ce1edea8ee distgit: fix the ca cert the git hooks use for fedora-messaging
We were copying in the req instead of the ca, so this messaging hook has
been broken for a long while. This is the hook that notifys on uploads.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-01 09:59:51 -07:00
Jiri Kyjovsky
259ec5b2e8 copr-be: enable rpmeta build time prediction (observability-only)
Deploy rpmeta config to copr-be.conf and hardware pools YAML with
real builder specs. Initially logging-only, does not affect VM allocation.
2026-06-01 17:21:57 +02:00
Lenka Segura
c8a55f0113 forgejo: Increase the capacity of 'ci' and 'atomic-desktops' runners
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-06-01 09:58:08 +00:00
c6f7e6e601 Update Bodhi Pungi comps git URL from pagure.io to forge.fedoraproject.org/releng/fedora-comps after the fedora-comps migration
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2026-06-01 14:12:09 +05:30
d830f9ae6e copr: bump up number of reserved instances 2026-06-01 09:54:20 +02:00
615af75669 copr-be: more quota per sandbox 2026-06-01 09:27:15 +02:00
8bbcceafdd proxies: bump max connections fromm 3200 to 4000
It seems like the alerts we have been getting have been when proxies are
near the limit rejecting things via anubis, but unable to keep up.
So, lets try and jump this up a bit and see if it solves those
alerts/slowdowns.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-30 08:36:39 -07:00
71aec6a544 Move s390x staging builders and koji.stg hub to f44.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 12:23:51 -07:00
0248c0d535 virthost: rkhunter is available in epel10/10.2
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 11:26:08 -07:00
06c765b10d buildvm-x86: reinstall with fedora 44
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 11:24:25 -07:00
1be1c69f0f proxy12: fix mac address
This had the hard coded mac address of the previous vm.
We moved to using ansible to just fill in the current mac, so fix that
here too.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 10:52:26 -07:00
141940d1ad basessh: allow tcp forwarding on noc as well as bastion.
We sometimes use forwarding here to access mgmt devices.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 10:41:46 -07:00
63315f4602 proxy12: reinstall with f44
We need to do this anyhow, but this will test to see if the weird alerts
we have been getting persist on f44 with the latest libvirt machine
setup.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 10:10:44 -07:00
9a5bca7aad copr-dist-git: hotfix https://github.com/fedora-copr/copr/issues/4318 2026-05-29 13:49:59 +02:00
6a767b3706 always a missing :
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-28 16:21:54 -07:00
9d572f1839 add coreos-agent, rag-magazine-guidelines, and public-inboc-poc communishift projects
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-28 16:20:15 -07:00
Lenka Segura
177bb00442 forgejo: strip the labels after ':' during registration
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-05-28 20:59:57 +00:00
Patrik Polakovič
a1c7d0828a Fedora 42 is now End Of Life
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
2026-05-28 20:33:06 +02:00
e73d603bd2
Nagios: remove SSH monitoring, Zabbix does it
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 17:18:50 +01:00
f3a05e1b72
Zabbix: Fix cronjob that generates the SSH target list 2026-05-28 17:18:50 +01:00
f29d91d7af
forgejo: runner config not being passed to the openshift secret
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-05-28 13:40:44 +01:00
641887c8cf
Zabbix: also test SSH access to the bastions from Batcave
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 13:36:04 +01:00
de6e36a4e5
Nagios: Remove PostgreSQL checks that we already have in Zabbix
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 13:28:04 +01:00
e104755e4e
Zabbix: fix DNS perf units, and regexp record trigger
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 13:20:09 +01:00