Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | README.mdwn: Document GitLab CI runners setupdocument-ci | Sam Thursfield | 2017-10-04 | 1 | -0/+36 |
| | |||||
* | README.mdwn: No need to update SSL certificates for the obsolete services | Sam Thursfield | 2017-10-04 | 1 | -26/+1 |
| | |||||
* | README.mdwn: Remove "creating new repos" sectionkill-obsolete | Sam Thursfield | 2017-10-04 | 1 | -33/+0 |
| | | | | | We now use GitLab for Git hosting, so it's pretty obvious how to create repos. | ||||
* | README.mdwn: Update intro | Sam Thursfield | 2017-10-04 | 1 | -8/+8 |
| | | | | We no longer want everything to be hosted on Baserock eventually. | ||||
* | Remove vestigial Opengrok system | Sam Thursfield | 2017-10-04 | 8 | -261/+0 |
| | | | | This never got finished. Try http://codesearch.debian.net/ :-) | ||||
* | Remove definitions for obsolete systems | Sam Thursfield | 2017-10-04 | 86 | -3216/+0 |
| | | | | | | | Some of these systems are still up for now, but their demise has ben announced: https://listmaster.pepperfish.net/pipermail/baserock-dev-baserock.org/2017-September/013812.html | ||||
* | README.mdwn: Remove documentation for obsolete systems | Sam Thursfield | 2017-10-04 | 1 | -309/+0 |
| | |||||
* | Merge branch 'sam/jonathanmaw-ostree-access' into 'master' | Pedro Alvarez Piedehierro | 2017-09-29 | 2 | -0/+2 |
|\ | | | | | | | | | Give Jonathan Maw push access to ostree.baserock.org See merge request baserock/infrastructure!7 | ||||
| * | Give Jonathan Maw push access to ostree.baserock.org | Sam Thursfield | 2017-09-29 | 2 | -0/+2 |
|/ | | | | | Jonathan has done an armv8l64 bootstrap with BuildStream and I want to get all of those artifacts into our cache. | ||||
* | Merge branch 'sam/update-ostree' into 'master' | Sam Thursfield | 2017-07-21 | 4 | -1/+34 |
|\ | | | | | | | | | baserock_ostree: Update for changes in BuildStream See merge request !6 | ||||
| * | baserock_ostree: Update for changes in BuildStreamsam/update-ostree | Sam Thursfield | 2017-07-21 | 4 | -1/+34 |
|/ | | | | | | | | | We now need a timer job to update the summary file, see: https://buildstream.gitlab.io/buildstream/artifacts.html#summary-file-updates I also updated BuildStream which changes the artifact push protocol. Sadly the protocol isn't versioned yet so old versions will now fail to push with weird errors. | ||||
* | Merge branch 'sam/ostree' into 'master' | Pedro Alvarez Piedehierro | 2017-07-13 | 18 | -1150/+1360 |
|\ | | | | | | | | | Add ostree.baserock.org definitions See merge request !5 | ||||
| * | baserock_ostree: Add the private GitLab CI key (encrypted)sam/ostree | Sam Thursfield | 2017-07-13 | 1 | -0/+167 |
| | | |||||
| * | baserock_ostree: Enable write access | Sam Thursfield | 2017-07-13 | 7 | -2/+37 |
| | | | | | | | | | | | | | | | | | | | | | | So far this is limited to the existing Baserock ops team, and a new key that I will try to install into our GitLab CI configuration so that build runners can push artifacts. We don't to hand out access too widely because we currently don't do any verification that the submitted artifacts actually corresponds to the cache key that it's supposed to. This is fine as long as access is limited to autobuilders that we control and trusted developers. | ||||
| * | firewall.yml: Open morph-cache-server port on git-server security group | Sam Thursfield | 2017-07-13 | 1 | -1/+11 |
| | | | | | | | | | | | | This is used by YBD for resolving remote Git commit SHA1s to tree SHA1s. Previously the port was opened by the shared-artifact-cache security group, but it no longer is. | ||||
| * | Add ostree.baserock.org system | Sam Thursfield | 2017-07-13 | 12 | -787/+911 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | This is a new instance that can be used as an artifact cache by the BuildStream build tool. Anyone can download artifacts over HTTPS. Those given SSH access to the machine can write to the artifact cache (this will likely be limited to automated build machines). DNS is now set to point cache.baserock.org and ostree.baserock.org to the HAProxy frontend. The SSL certificate for the frontend-haproxy system has been regenerated to include the cache.baserock.org and ostree.baserock.org domains. | ||||
| * | firewall.yml: Update to use OpenStack modules from Ansible 2.0 | Sam Thursfield | 2017-07-13 | 2 | -351/+262 |
| | | | | | | | | Previously we depended on 3rd party openstack-ansible-modules. | ||||
| * | Remove obsolete hosts | Sam Thursfield | 2017-07-12 | 1 | -4/+0 |
| | | |||||
| * | README.mdwn: Remove Masons | Sam Thursfield | 2017-07-12 | 1 | -33/+0 |
| | | | | | | | | | | | | These are obsolete, see: https://listmaster.pepperfish.net/pipermail/baserock-dev-baserock.org/2017-January/013765.html | ||||
| * | README.mdwn: Replace Yum with DNF | Sam Thursfield | 2017-07-12 | 1 | -1/+1 |
|/ | |||||
* | Merge branch 'pedro/no-push-notifications' into 'master' | Pedro Alvarez Piedehierro | 2017-05-22 | 2 | -6/+6 |
|\ | | | | | | | | | Pedro/no push notifications See merge request !3 | ||||
| * | baserock_bots: restart bot, to update changes in serverpedro/no-push-notifications | Pedro Alvarez Piedehierro | 2017-05-22 | 1 | -2/+2 |
| | | |||||
| * | baserock_bots: Disable push notifications for Baserock | Pedro Alvarez Piedehierro | 2017-05-22 | 1 | -4/+4 |
|/ | |||||
* | Merge branch 'pedro/gitlab-bot-multichannel' into 'master' | Pedro Alvarez Piedehierro | 2017-05-22 | 2 | -9/+45 |
|\ | | | | | | | | | baserock_bots: configure Gitlab bot for Baserock too See merge request !2 | ||||
| * | baserock_bots: configure Gitlab bot for Baserock toopedro/gitlab-bot-multichannel | Pedro Alvarez Piedehierro | 2017-05-22 | 2 | -9/+45 |
|/ | |||||
* | Merge branch 'pedro/ssl-may-2017' into 'master' | Pedro Alvarez Piedehierro | 2017-05-21 | 19 | -1626/+1884 |
|\ | | | | | | | | | Pedro/ssl may 2017 See merge request !1 | ||||
| * | Fixes for SSL keys generation/deployment | Pedro Alvarez Piedehierro | 2017-05-20 | 2 | -2/+19 |
| | | |||||
| * | Update SSL certs | Pedro Alvarez Piedehierro | 2017-05-20 | 17 | -1624/+1865 |
|/ | |||||
* | Add Ansible scripts for Gitlab IRC bot | Pedro Alvarez Piedehierro | 2017-05-15 | 4 | -0/+98 |
| | |||||
* | Update certificates in Gerrit instance | Pedro Alvarez | 2017-05-02 | 2 | -8/+11 |
| | |||||
* | Apply manually changes from previous commit for frontend.pem | Pedro Alvarez | 2017-05-02 | 2 | -59/+96 |
| | |||||
* | Ensure all certificate files needed are created | Pedro Alvarez | 2017-05-02 | 3 | -8/+16 |
| | |||||
* | certs: Make spec.bo and docs.bo part of the frontend cert | Pedro Alvarez | 2017-03-22 | 4 | -679/+685 |
| | |||||
* | baserock_frontend: Prepare to redirect spec and docs subdomains | Pedro Alvarez Piedehierro | 2017-03-22 | 1 | -3/+10 |
| | | | | This will let us use easily more SSL certs from our HAProxy instance | ||||
* | Add dnsapi.config.txt file for SSL generation | Pedro Alvarez | 2017-03-17 | 1 | -0/+6 |
| | |||||
* | Remove old SSL certificate files | Pedro Alvarez | 2017-03-17 | 3 | -285/+0 |
| | |||||
* | Add notes for SSL certs generation and setup | Pedro Alvarez | 2017-03-17 | 1 | -0/+97 |
| | |||||
* | baserock_storyboard: Update for new SSL certs | Pedro Alvarez | 2017-03-17 | 1 | -3/+3 |
| | |||||
* | ansible.cfg: Allow Ansible tmpfiles to be readable by any user | Pedro Alvarez | 2017-03-17 | 1 | -1/+2 |
| | | | | | | This worksaround an issue with newer versions of Ansible. See https://docs.ansible.com/ansible/become.html#becoming-an-unprivileged-user for more information. | ||||
* | baserock_frontend: Update for new SSL certs | Pedro Alvarez | 2017-03-17 | 1 | -8/+5 |
| | |||||
* | baserock_trove: Adapt for new certs | Pedro Alvarez | 2017-03-17 | 2 | -6/+6 |
| | |||||
* | Add new SSL certs | Pedro Alvarez | 2017-03-17 | 8 | -0/+1674 |
| | |||||
* | Add letsencrypt Root certificate | Pedro Alvarez | 2017-03-17 | 1 | -0/+58 |
| | | | | | Combination of "ISRG Root X1" and "Encrypt Authority X3" certificates downloaded from https://letsencrypt.org/certificates/ | ||||
* | baserock_frontend: Remove acl rules for deprecated servers | Pedro Alvarez | 2017-03-17 | 1 | -18/+0 |
| | |||||
* | Start logging #buildstream in GimpNet | Pedro Alvarez | 2017-02-02 | 2 | -4/+13 |
| | |||||
* | Upgrade Gerrit to 2.13.1 | Pedro Alvarez | 2016-10-06 | 1 | -1/+1 |
| | | | | Change-Id: I144f449a22cdcae6967bacf5f3c08ce660a998d8 | ||||
* | Add #cip in Freenode to irclogs | Pedro Alvarez | 2016-09-19 | 2 | -1/+4 |
| | | | | Change-Id: Iccbaedfcfde6025f0f76959771c59f4615ecc0e8 | ||||
* | Add #trustable in Freenode to irclogs | Pedro Alvarez | 2016-09-15 | 2 | -1/+3 |
| | | | | Change-Id: I8b974008f4c4c487c3386131993b442f936eb146 | ||||
* | Use Ansible Vaults to contain secret files/variables | Pedro Alvarez | 2016-08-15 | 17 | -7/+539 |
| | | | | | | | | | | Having them in files lying around in a local repository is dangerous, they could be commited and pushed by accident. Also, having these files in a mail is not good either, and makes this repository complicated to use for us. Change-Id: I644e1fb8228e3cb081a004547abaf654e9c449b7 | ||||
* | baserock_storyboard: Upgrade Ansible role to 2.1.0 | Pedro Alvarez | 2016-07-19 | 1 | -1/+1 |
| | | | | | | | This new version allows configuring the instance with comments edition. Change-Id: I1b889b630f72e17588f332f31d6f9f1a45d5cb7c |