4b8a238b78
[ipa] Remove nagios leftovers
...
There was a nagios task in IPA role and as the Nagios is no longer
around let's remove it.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-10 12:47:21 +02:00
Jiri Podivin
4f2d4e500e
Fix issues highlighted by linter
...
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-10 10:25:09 +00:00
Jiri Podivin
ffca0313f5
Derive Log Detective credentials from securely stored values
...
Signed-off-by: Jiri Podivin <jpodivin@redhat.com>
2026-07-10 10:25:09 +00:00
8b4b0b4587
[ipa] Use correct ks file
...
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-10 10:56:58 +02:00
bc04ce9e65
[ipa] Move ipa02.stg to RHEL10
...
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-10 10:48:07 +02:00
d6cca9eb11
yumrepos: fix rhel10-infra-stg repo also
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-09 15:09:04 -07:00
a326adbb30
epel10-infra: add new signing key
...
The old key we were using for old releases had some sha1 in it
somewhere, so rhel10 rejects it (great!). So, lets use a newly generated
key that is acceptable to rhel10 and much nicer.
This adds the public key file, the repos that use that file, the rhel10
post kickstart that sets up the repo, robosignatory to sign epel10-infra
stuff with this new key and finally on rhel10 hosts put the new repo in
place.
Note that this only changes the rhel10 setup, all rhel8/9 machines are
still using the old key. We may want to move them over, or just not care
as we retire all of them.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-09 14:52:33 -07:00
8533d32360
ELNBuildSync: Upgrade to 1.3.3 in prod
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-09 16:17:20 -04:00
cc1925ec64
add app-actions to elnbuildsync ( #3506 )
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
Reviewed-on: infra/ansible#3506
2026-07-09 19:51:44 +00:00
7b15ebf44a
migrate openshift-apps to use openshift/app-actions ( #3459 )
...
Reviewed-on: infra/ansible#3459
2026-07-09 19:09:25 +00:00
c089fea71e
ELNBuildSync: use port 25 for email
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-09 14:47:43 -04:00
9808527826
ELNBuildSync: Deploy 1.3.3 in staging
...
Adds better protection for the loglevel endpoints and adds control
endpoints to pause/unpause operation immediately.
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-09 13:39:07 -04:00
b922b9dba1
ELNBuildSync: Enable email sending
...
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-09 12:21:19 -04:00
Jakub Kadlcik
7e50a3dd8a
copr: oops, fix pool names dev -> prod
2026-07-09 16:22:41 +02:00
Jakub Kadlcik
0056660a66
copr-be: don't set permissions for state=absent
...
FAILED! => {"changed": false, "msg": "'permissions' MUST NOT be set
when 'state=absent'."}
This is a leftover after e86f495e8d
2026-07-09 15:56:28 +02:00
4164dbee61
Add buildhw-x86-17 to inventory
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 14:55:35 +01:00
Jakub Kadlcik
11c1eaeda1
copr-be: increase allowed startup time for s390x builders to 300s
2026-07-09 15:34:32 +02:00
40890a5962
Copr: add trigger opdata to Zabbix builds template
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 14:22:00 +01:00
50d9008108
Zabbix: Start using nested hostgroups so RBAC works properly
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 13:43:44 +01:00
c52f7a9416
Copr: Add build-checks template to Zabbix
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 13:22:34 +01:00
d4825ebfb2
zabbix: Update openshift proxy configuration
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-07-09 13:08:53 +01:00
7324f9f5df
zabbix: openshift proxy prod deploy
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-07-09 12:50:34 +01:00
2cc782bab0
Copr: raise build timeouts on s390 pools to 300s
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 12:14:57 +01:00
c51e04de81
Collectd: cleanup collectd everywhere except FMN
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-09 11:01:41 +00:00
1529684dc1
Revert "bvmhost-x86-05/06: we need iscsi client here"
...
This reverts commit 65dc5ada06
2026-07-08 15:28:57 -07:00
65dc5ada06
bvmhost-x86-05/06: we need iscsi client here
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-08 15:20:55 -07:00
f77550f85c
kickstarts: rhel10: remove vnc, it is no longer supported and rdp has to be specified on the boot line
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-08 13:35:57 -07:00
92b2fddd2c
fedora-ostree-pruner: update to Fedora 44
...
xref: https://github.com/coreos/fedora-coreos-tracker/issues/2055
2026-07-08 15:52:00 +00:00
072c8a765d
coreos-koji-tagger: update to Fedora 44
...
xref: https://github.com/coreos/fedora-coreos-tracker/issues/2055
2026-07-08 15:52:00 +00:00
eb6222610b
coreos-cincinnati: update to Fedora 44
...
xref: https://github.com/coreos/fedora-coreos-tracker/issues/2055
2026-07-08 15:52:00 +00:00
e924d1be9e
Add buildhw-x86-16 to inventory too
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-08 16:22:02 +01:00
6303816ffa
IAD2: add newly-built buildhw-x86-16
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-08 16:13:25 +01:00
f14c45f68c
Collectd: missed a deleted role in psql playblook
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-08 14:00:11 +01:00
c5e16e687c
[flatpak-indexer] Separate the instances
...
Try another approach to separate the instances. Create a separate redis
instance for quay.io, that should allow to have completely separate
quay.io resources and registry.fp.o resources.
Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2026-07-08 12:48:20 +00:00
c712b24ee4
Collectd: remove files & packages
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-08 12:23:07 +00:00
f796c95508
OScontrol: add missing yaml directive to playbook
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-08 13:11:36 +01:00
92fe69c649
OpenShift: Refactor os-control playbook to a role and add monitoring
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-07-08 12:06:57 +00:00
360f493bc4
pagure: try adjusting lines on patch
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-07 17:33:10 -07:00
71585073ad
pagure: add a line to the patch so the numbers match up and it applies
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-07 17:14:36 -07:00
d0e61275a6
Allow draft builds on ELN side-tags
...
Fixes: releng/tickets#13374
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
rh-pre-commit.version: 2.4.0
rh-pre-commit.check-secrets: ENABLED
2026-07-08 00:05:53 +00:00
6882b20e9b
pagure: add a line to the patch so the numbers match up and it applies
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-07 17:01:28 -07:00
29cce54d62
📧 roles(fasjson): Update logo alias
...
This commit updates the `logo` alias to make sure trademark permission
requests are correctly routed to the Fedora Design Team Admins as the
most responsible party for the legal stewardship of the Fedora Project
trademark and brand. Therefore, to encourage use of FAS group membership
to better manage access to these hand-coded email aliases, this will now
send all emails to this alias to FAS account users with membership as
sponsors in the `designteam` FAS group.
Once this change is deployed and updated in production, this mail alias
will begin sending mail to @duffy (no change), @ekidney , @jesschitas ,
@jflory7 , @madelinepeck (no change), and @mleonova .
Signed-off-by: Justin Wheeler <jwheel@redhat.com>
2026-07-07 23:58:12 +00:00
3d93bf17bc
releng: run sig_policy script daily instead of weekly
...
This script should be inexpensive to run, so it'd be nice to run it more
frequently.
2026-07-07 23:54:23 +00:00
99e363981c
releng: use new git repo for sig_policy script
2026-07-07 23:54:23 +00:00
66caf2072c
add openshift/app-actions to blockerbugs.yml
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-07 22:42:56 +00:00
48d0ccef83
add openshift/app-actions to badges.yml
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-07 22:42:32 +00:00
200b7a1fd7
add openshift/app-actions to asknot.yml
...
Signed-off-by: Vít Smolík <me@smoliicek.cz>
2026-07-07 22:40:46 +00:00
3ddb342c58
application-monitoring: retire app
...
We never deployed this in the new clusters since we moved and the folks
who were working on it have left. If we want to revive it later, we can
always pull it out of git history.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-07-07 15:38:59 -07:00
c7a559d359
feat(pagure.io): added notification banner and git hook that informs about pagure migration
...
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-07-07 22:34:20 +00:00
0be5e89880
ci: implement differential yamllint scan
...
Use vcs-diff-lint (with csdiff backend) to report only new warnings and
errors introduced in a PR. This prevents older, pre-existing linter
violations from blocking new changes.
Same analyzer version is used for both the base and the head commit to
ensure consistent results.
See: infra/ansible#3143
2026-07-07 22:11:11 +00:00
