summaryrefslogtreecommitdiffstats
path: root/playbooks
Commit message (Collapse)AuthorAgeFilesLines
...
* Keytabs owned by rootPatrick Uiterwijk2016-11-231-4/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* These are rolesPatrick Uiterwijk2016-11-231-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Give keytabs to OSBS cluster for kojiPatrick Uiterwijk2016-11-231-0/+24
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* turn 'filterlist' into 'imagelist', using productmdAdam Williamson2016-11-231-0/+1
| | | | | | | | | | | | | | | | | This adopts https://pagure.io/quick-fedora-mirror/pull-request/27 and adapts to it, so we get `imagelist` files rather than `filterlist` files (see recent commits for this). The rationale is more fully explained in that PR (and in PR #26 also) - on further inspection it turns out that we have to filter out an awful lot of extensions to create small filterlists for all three modules, and I'm worried that other file extensions may appear in the future and cause the filterlists to suddenly get bigger again. Instead, we have create-filelist use the productmd constant that defines valid image formats, and only include files that match those formats in the list. The downside of this approach is we have to ensure productmd on all the systems that run `create-filelist` is kept up to date if the list of valid image formats changes.
* Issue HTTP cert for pkgsPatrick Uiterwijk2016-11-231-0/+7
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Bodhi frontends also need access to koji, so give them keytabs tooPatrick Uiterwijk2016-11-232-2/+14
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Use existing bodhi.fp.o dns entryPatrick Uiterwijk2016-11-231-4/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Create a shared keytab for both backendsPatrick Uiterwijk2016-11-231-1/+11
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Generate bodhi/ service keytabsPatrick Uiterwijk2016-11-231-0/+5
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* release day commit: readd prerelease redirect, add cloud to atomic redirect, ↵Kevin Fenzi2016-11-224-51/+75
| | | | add latest cloud image redirects, setup alt site for websites
* adjust regex here to handle lang hopefullyKevin Fenzi2016-11-211-1/+1
|
* add cloud to atomic download redirect for stgKevin Fenzi2016-11-211-0/+7
|
* add cloud to atomic redirect in stagingKevin Fenzi2016-11-211-0/+7
|
* set prerelease redirect in staging and comment removing it for tomorrow in ↵Kevin Fenzi2016-11-212-97/+97
| | | | both prod and stg
* prepare modernpaste01.phx2Ricky Elrod2016-11-211-5/+5
| | | | Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
* remove dell-fx boxes from build group. remove dell-fx boxes from virthost groupStephen Smoogen2016-11-141-1/+1
|
* Revert "testing registry uri in staging OSBS"Adam Miller2016-11-143-6/+6
| | | | This reverts commit ef6ad2cf1e4d9b45082b45ce2da6d500f8192019.
* do not install the pagure on pkgs02.stgKevin Fenzi2016-11-111-1/+1
|
* fix fedora dnsmasq config path for osbs nodesAdam Miller2016-11-111-1/+1
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* testing registry uri in staging OSBSAdam Miller2016-11-113-6/+6
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* Add www.getfedora.org in as a server alias.Kevin Fenzi2016-11-111-0/+1
|
* apply fixes from Patrick for OSBS node dnsmasq and proxy iptablesAdam Miller2016-11-081-0/+12
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* add systemctl daemon-reload handler for osbs docker unitAdam Miller2016-11-071-0/+4
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* add handler to restart docker service when firewall rules are changedAdam Miller2016-11-071-0/+9
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* osbs-nodes-stg is handled by osbs-cluster playbook nowKevin Fenzi2016-11-071-1/+1
|
* fix missing whitespace typo in osbs-clusterAdam Miller2016-11-071-1/+1
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* docker bridge interface firewall rules for osbs overlay cluster networkAdam Miller2016-11-071-0/+11
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* add osbs old build cleanup for openshift clusterAdam Miller2016-11-071-0/+6
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* semi colin is no longer used for host/group seperator. Only use :Kevin Fenzi2016-11-043-10/+10
|
* builders: run keytab/service after kojid is installed because it needs ↵Peter Robinson2016-11-032-5/+5
| | | | /etc/kojid/ to be there
* Allow specifying krb_builder to setup a builder as using krbPatrick Uiterwijk2016-11-031-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* remove un-needed debug from osbs-clusterAdam Miller2016-11-011-2/+0
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* In ansible 2.2 always_run is depreciated. Switch to check_mode.Kevin Fenzi2016-11-0124-55/+55
|
* only refresh image streams on the osbs masterAdam Miller2016-11-011-1/+19
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* use git module version (not refspec) in ansible-ansible-openshift-ansibleAdam Miller2016-11-011-1/+1
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* While mentioned in the dependencies let's be explicit about git/checksPierre-Yves Chibon2016-11-011-0/+1
|
* set osbs-control hosts to use ansible pipeliningAdam Miller2016-10-311-1/+6
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* update openshift-ansible refspec to latest 3.3.x releaseAdam Miller2016-10-311-1/+1
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* make sure docker-storage-config conf is in place before openshift deployAdam Miller2016-10-311-9/+10
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* This is brokenPatrick Uiterwijk2016-10-311-17/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Temporarily disable keytab on nocs until fixedPatrick Uiterwijk2016-10-311-8/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* don't need port 8443 for builder_openshift_url in scale-out, it's proxied to 443Adam Miller2016-10-313-4/+4
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* add a handler to restart NM if needed in osbs cluster nodesAdam Miller2016-10-311-0/+8
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* enable NM on osbs-cluster nodes for cluster dns inside overlay networkAdam Miller2016-10-311-0/+16
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* Added a script to create staging modules when requested.Ralph Bean2016-10-311-0/+74
| | | | For https://pagure.io/fedora-infrastructure/issue/5543
* Create keytab for koschei/hostPatrick Uiterwijk2016-10-311-0/+6
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* fix builder_openshift_url for osbs in stagingAdam Miller2016-10-283-4/+4
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* osbs: fix conditional on atomic-reactor tarball hardlink from rpm for buildrootAdam Miller2016-10-281-1/+1
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* remove old buildroot docker image before building new one in handlerAdam Miller2016-10-281-1/+1
| | | | Signed-off-by: Adam Miller <admiller@redhat.com>
* Delegate_to and vars files conflictPatrick Uiterwijk2016-10-281-0/+17
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>