9cd1b6f82d
greenwave: handle ELN product_version rename, enable RemoteRule
...
See https://github.com/fedora-infra/bodhi/pull/6110 . We want to
be able to gate (only) Fedora ELN kernel updates via gating.yaml
(RemoteRule). However, if we just turned on the RemoteRule policy
for "fedora-eln", suddenly hundreds of existing gating.yamls which
specify "fedora-*" would apply to ELN, which we don't want.
To solve this, we will make Bodhi use "eln" not "fedora-eln" as
the product_version for ELN. That requires us to add "eln" to the
null policies. Let's also enable RemoteRule for "eln" at the same
time. This should not cause any existing policies to apply (unless
there are any which just specify '*', I guess) but will allow us
to add a kernel policy that applies to 'eln'.
Signed-off-by: Adam Williamson <awilliam@redhat.com>
2026-06-02 18:21:34 +00:00
102149236d
blockerbugs: add DEBUG env var for staging, remove legacy VM role
...
Set DEBUG=true for staging OpenShift deployment (both the main
Deployment and the sync CronJob) to enable debug logging.
Remove the entire roles/blockerbugs/ directory which was the old
VM-based deployment (Apache/WSGI). This role has been fully
superseded by roles/openshift-apps/blockerbugs/ and is not
referenced by any playbook.
Assisted-by: Claude Opus 4.6
2026-06-02 15:35:07 +00:00
566eabaac0
quality: blockerbugs app - update health check probes
2026-06-02 15:33:58 +00:00
1066361541
forgejo: disable oauth-container patch for debugging
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-06-02 16:17:10 +01:00
d12a457c97
feat(forge): securing /metrics endpoint for staging
...
Signed-off-by: Anton Medvedev <amedvede@redhat.com>
2026-06-02 14:50:44 +02:00
3457eea89b
Add the RabbitMQ user for the lookaside cache
...
Fixes: infra/tickets#13380
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 11:54:21 +02:00
728b6c57a3
Fix deployment triggers
...
The annotations must be on the deployment's metadata, not on the pod
template's metadata.
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 10:14:01 +02:00
d98ce9b9f8
Fix the triggers for the deployment in webhook2fedmsg
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 09:53:40 +02:00
ea82ea2c9a
Fix the openshift user id in badges
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2026-06-02 09:53:40 +02:00
3731a63a13
bodhi-stg: add python-redis to base image
...
Signed-off-by: Mattia Verga <mattia.verga@tiscali.it>
2026-06-02 09:08:15 +02:00
James Antill
3fdaf170d5
nftables: Use the config. table names in staging.
...
Signed-off-by: James Antill <james@and.org>
2026-06-01 18:43:59 -04:00
James Antill
e11b39314d
nftables: Fix/merge monitoring changes between prod/staging.
...
Signed-off-by: James Antill <james@and.org>
2026-06-01 18:38:22 -04:00
James Antill
4a6fc0fdf5
nftables: Fix table name scoping issue.
...
Signed-off-by: James Antill <james@and.org>
2026-06-01 17:42:12 -04:00
James Antill
5c6868260b
Merge branch 'nftables' into upstream
...
* nftables: (2 commits)
Cleanup nft merge. Chg osbuildapi and nft_custom_rules to use nft_table_filter.
...
Signed-off-by: James Antill <james@and.org>
2026-06-01 17:33:24 -04:00
James Antill
40b3225890
pagure: hotfix for commit hash
...
Signed-off-by: James Antill <james@and.org>
2026-06-01 21:12:12 +00:00
a9adce6136
robosignatory: enable signing on f45-python
2026-06-01 21:09:43 +00:00
a0156fc54d
pkgs: allow apache to read fedora-messaging key
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-01 10:27:44 -07:00
ce1edea8ee
distgit: fix the ca cert the git hooks use for fedora-messaging
...
We were copying in the req instead of the ca, so this messaging hook has
been broken for a long while. This is the hook that notifys on uploads.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-06-01 09:59:51 -07:00
Jiri Kyjovsky
259ec5b2e8
copr-be: enable rpmeta build time prediction (observability-only)
...
Deploy rpmeta config to copr-be.conf and hardware pools YAML with
real builder specs. Initially logging-only, does not affect VM allocation.
2026-06-01 17:21:57 +02:00
Lenka Segura
c8a55f0113
forgejo: Increase the capacity of 'ci' and 'atomic-desktops' runners
...
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-06-01 09:58:08 +00:00
c6f7e6e601
Update Bodhi Pungi comps git URL from pagure.io to forge.fedoraproject.org/releng/fedora-comps after the fedora-comps migration
...
Signed-off-by: Samyak Jain <samyak.jn11@gmail.com>
2026-06-01 14:12:09 +05:30
d830f9ae6e
copr: bump up number of reserved instances
2026-06-01 09:54:20 +02:00
615af75669
copr-be: more quota per sandbox
2026-06-01 09:27:15 +02:00
8bbcceafdd
proxies: bump max connections fromm 3200 to 4000
...
It seems like the alerts we have been getting have been when proxies are
near the limit rejecting things via anubis, but unable to keep up.
So, lets try and jump this up a bit and see if it solves those
alerts/slowdowns.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-30 08:36:39 -07:00
71aec6a544
Move s390x staging builders and koji.stg hub to f44.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 12:23:51 -07:00
0248c0d535
virthost: rkhunter is available in epel10/10.2
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 11:26:08 -07:00
06c765b10d
buildvm-x86: reinstall with fedora 44
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 11:24:25 -07:00
1be1c69f0f
proxy12: fix mac address
...
This had the hard coded mac address of the previous vm.
We moved to using ansible to just fill in the current mac, so fix that
here too.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 10:52:26 -07:00
141940d1ad
basessh: allow tcp forwarding on noc as well as bastion.
...
We sometimes use forwarding here to access mgmt devices.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 10:41:46 -07:00
63315f4602
proxy12: reinstall with f44
...
We need to do this anyhow, but this will test to see if the weird alerts
we have been getting persist on f44 with the latest libvirt machine
setup.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-29 10:10:44 -07:00
9a5bca7aad
copr-dist-git: hotfix https://github.com/fedora-copr/copr/issues/4318
2026-05-29 13:49:59 +02:00
6a767b3706
always a missing :
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-28 16:21:54 -07:00
9d572f1839
add coreos-agent, rag-magazine-guidelines, and public-inboc-poc communishift projects
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2026-05-28 16:20:15 -07:00
Lenka Segura
177bb00442
forgejo: strip the labels after ':' during registration
...
Signed-off-by: Lenka Segura <lsegura@redhat.com>
2026-05-28 20:59:57 +00:00
Patrik Polakovič
a1c7d0828a
Fedora 42 is now End Of Life
...
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
2026-05-28 20:33:06 +02:00
e73d603bd2
Nagios: remove SSH monitoring, Zabbix does it
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 17:18:50 +01:00
f3a05e1b72
Zabbix: Fix cronjob that generates the SSH target list
2026-05-28 17:18:50 +01:00
f29d91d7af
forgejo: runner config not being passed to the openshift secret
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2026-05-28 13:40:44 +01:00
641887c8cf
Zabbix: also test SSH access to the bastions from Batcave
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 13:36:04 +01:00
de6e36a4e5
Nagios: Remove PostgreSQL checks that we already have in Zabbix
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 13:28:04 +01:00
e104755e4e
Zabbix: fix DNS perf units, and regexp record trigger
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 13:20:09 +01:00
9e3cd9d4ff
Zabbix: Move DNS checks from Nagios
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 13:12:00 +01:00
Jakub Kadlcik
e537215abc
copr-dist-git: move sentry configuration to the correct config
2026-05-28 12:40:26 +02:00
44951845e4
Zabbix: remove incorrect run_once directives from proxy monitoring
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 11:33:34 +01:00
69612dffe5
Zabbix: Add the rest of the previous commit that got missed
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 11:30:27 +01:00
e3d9be210e
Zabbix: Move internal proxy checks from Nagios
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 11:08:35 +01:00
bc2f608f4c
Zabbix: add trigger for one-off httpcheck items
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 09:44:55 +01:00
c0d5169f58
Zabbix: remove some unused checks
...
Signed-off-by: Greg Sutcliffe <fedora@emeraldreverie.org>
2026-05-28 09:37:45 +01:00
Jan Matufka
d77168ff0c
logdetective: service, dependency on nvidia-cdi
...
- for persistent deployment
Signed-off-by: Jan Matufka <jmatufka@redhat.com>
2026-05-28 08:15:50 +00:00
Jan Matufka
2e2abbedac
nvidia-cdi: create a role
...
Signed-off-by: Jan Matufka <jmatufka@redhat.com>
2026-05-28 08:15:50 +00:00
