summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* GNOME Backups: enable backups on sdkbuilder, webapps3Andrea Veri2016-11-253-2/+6
|
* RHBZ only wants emailPatrick Uiterwijk2016-11-251-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* When we enable openidc, let's also install itPatrick Uiterwijk2016-11-251-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Enable OIDC in productionPatrick Uiterwijk2016-11-251-4/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Setup RHBZ BetaPatrick Uiterwijk2016-11-251-0/+5
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Install mod_auth_gssapiPatrick Uiterwijk2016-11-241-2/+13
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Switch epylog to krb5Patrick Uiterwijk2016-11-242-5/+14
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Install the right plugin for nagios gssapiPatrick Uiterwijk2016-11-241-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Switch nagios over to krbPatrick Uiterwijk2016-11-243-22/+16
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Start moving nagios to direct krbPatrick Uiterwijk2016-11-241-0/+6
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Close this onePatrick Uiterwijk2016-11-241-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Someone else also got annoyed by .stg all over the placePatrick Uiterwijk2016-11-241-22/+8
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Non-staging gets non-staging keytabPatrick Uiterwijk2016-11-241-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* This remember for X days is no longer workingPatrick Uiterwijk2016-11-241-10/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Effectively disable session locking. Its useless anywayPatrick Uiterwijk2016-11-241-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Sessions duration cut by 4Patrick Uiterwijk2016-11-241-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* This differs for prod vs stgPatrick Uiterwijk2016-11-242-2/+6
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Ipsilon 2.0 is in prodPatrick Uiterwijk2016-11-241-6/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* This should be lowercasePatrick Uiterwijk2016-11-241-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Deploy GSSAPI for Ipsilon in stgPatrick Uiterwijk2016-11-242-1/+29
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Some more packages needed for IpsilonPatrick Uiterwijk2016-11-241-0/+3
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Issue keytabs for IpsilonPatrick Uiterwijk2016-11-241-0/+12
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Pkgs actually has a keytab for pkgsPatrick Uiterwijk2016-11-241-1/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* buildmaster and buildslaves: install policycoreutils-python-utils for semanageMartin Krizek2016-11-242-0/+3
|
* imagefactory-client: install missing dep, gitMartin Krizek2016-11-241-3/+4
|
* taskotron-client: enable virtlogd on f24+Martin Krizek2016-11-241-1/+8
|
* taskotron-client: create buildslaves group before it's usedMartin Krizek2016-11-241-4/+4
|
* fix typo causing syntax error for osbs-cluster playbookAdam Miller2016-11-231-1/+1
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* Add forgotten cPatrick Uiterwijk2016-11-231-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* fix osbs-client role templatingAdam Miller2016-11-232-12/+15
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* make the osbs_url variable name consistently named everywhereAdam Miller2016-11-237-7/+7
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* enable maxamillion's atomic-reactor copr for STG osbs buildroot for testingAdam Miller2016-11-231-1/+2
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* set osbs to use krb5 for koji auth instead of ssl certsAdam Miller2016-11-236-17/+69
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* Cert auth to staging koji is now historyPatrick Uiterwijk2016-11-231-22/+21
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Make the osbs keytab go to the nodesPatrick Uiterwijk2016-11-231-10/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* correct lockfile nameKevin Fenzi2016-11-231-1/+1
|
* This is also env-dependantPatrick Uiterwijk2016-11-231-1/+5
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Seems IPA masters need a different krb5 confPatrick Uiterwijk2016-11-232-0/+57
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* use common lock file for things that update fedora/secondary fullfiletimelistsKevin Fenzi2016-11-233-3/+3
|
* Drop common_scripts taskKevin Fenzi2016-11-233-14/+0
|
* fix spacing on with_fileglobKevin Fenzi2016-11-231-1/+1
|
* Deploy keytab after master is provisionedPatrick Uiterwijk2016-11-231-24/+24
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* create-filelist: also skip the imagelist when making othersAdam Williamson2016-11-231-0/+2
| | | | | add the imagelist's name to skip_files as we do for the other two files. tibbs is committing the same change to upstream.
* Keytabs owned by rootPatrick Uiterwijk2016-11-231-4/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* These are rolesPatrick Uiterwijk2016-11-231-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Give keytabs to OSBS cluster for kojiPatrick Uiterwijk2016-11-231-0/+24
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* turn 'filterlist' into 'imagelist', using productmdAdam Williamson2016-11-235-20/+32
| | | | | | | | | | | | | | | | | This adopts https://pagure.io/quick-fedora-mirror/pull-request/27 and adapts to it, so we get `imagelist` files rather than `filterlist` files (see recent commits for this). The rationale is more fully explained in that PR (and in PR #26 also) - on further inspection it turns out that we have to filter out an awful lot of extensions to create small filterlists for all three modules, and I'm worried that other file extensions may appear in the future and cause the filterlists to suddenly get bigger again. Instead, we have create-filelist use the productmd constant that defines valid image formats, and only include files that match those formats in the list. The downside of this approach is we have to ensure productmd on all the systems that run `create-filelist` is kept up to date if the list of valid image formats changes.
* Issue HTTP cert for pkgsPatrick Uiterwijk2016-11-231-0/+7
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Bodhi frontends also need access to koji, so give them keytabs tooPatrick Uiterwijk2016-11-232-2/+14
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Use existing bodhi.fp.o dns entryPatrick Uiterwijk2016-11-231-4/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>