opendev/system-config
Code Issues Proposed changes
system-config/playbooks/roles
History
Jeremy Stanley 36e1de0d5c Block access to Gitea's archive feature 
Crawlers have been hitting the archive URLs in Gitea, which can
result in massive cached archive files filling the disk faster than
the daily cron clears them out. This feature is an attractive
nuisance anyway for many projects, particularly Python-based source
repositories for which users mistakenly assume that a tarball of the
worktree is a suitable substitute for an sdist package, which leads
to a lot of confusion if build backends like PBR or setuptools-scm
are relied on.

Fortunately, Gitea now has a way to turn off this functionality. Add
a test to make sure these URLs return a 404 in order to prevent any
accidental future regression. Disable the archive cleanup cron as
well, since it's just a no-op at this point.

Change-Id: I0912243f40f2101bf1f3133fbf306def10aa5f83
2025-06-05 19:51:02 +00:00
..
accessbot
Revert "Move system-config irc bots into quay.io"
2023-05-24 13:17:54 -07:00
add-inventory-known-hosts
bridge: Disable writing known_hosts files
2022-11-21 15:29:56 +11:00
afs-release
afs-release: better info when can not get lockfile
2022-10-11 10:53:02 +11:00
afsmon
Install python3-venv for venv creation on mirror-update
2025-05-28 15:13:32 -07:00
apache-ua-filter
Block another bogus crawler user agent
2025-01-17 15:35:32 +00:00
base
Increase message_linelength_limit to 1G
2025-01-27 17:15:53 +00:00
borg-backup
Handle borg 1.2 rc 1 for warnings behavior
2025-01-21 15:41:07 -08:00
borg-backup-server
Merge "Skip purged borg backups during backup pruning"
2024-11-25 18:44:02 +00:00
codesearch
Publish hound container images to quay
2025-04-11 08:17:16 -07:00
configure-kubectl
Configure .kube/config on bridge
2019-02-06 15:43:19 -08:00
configure-openstacksdk
Cleanup leftover inmotion configs
2024-06-20 09:52:50 -07:00
create-venv
Fix task name to reflect correct distro
2024-07-09 09:12:13 +10:00
disable-puppet-agent
Stop running mcollective
2020-05-05 15:00:04 -05:00
dstat-logger
dstat-logger: redirect stdout to /dev/null
2021-03-24 22:23:13 +00:00
edit-secrets-script
edit-secrets: configure gpg-agent/emacs
2022-11-03 10:07:20 +11:00
etherpad
Deploy mariadb for etherpad from opendev's quay mirror
2025-01-28 12:56:36 -08:00
gerrit
Merge "Drop docker-compose version specifier for Gerrit"
2025-04-24 21:00:45 +00:00
gerritbot
Revert "Move pull external IRC bot images from quay.io"
2023-05-24 13:42:47 -07:00
gitea
Block access to Gitea's archive feature
2025-06-05 19:51:02 +00:00
gitea-git-repos
gitea-git-repos: remove #!/usr/bin/env python
2022-11-23 08:26:28 +11:00
gitea-lb
gitea-haproxy: issue liveness check to HEAD /
2022-03-08 09:46:59 +11:00
gitea-set-org-logos
Update gitea to 1.19.3
2023-05-03 14:42:08 -07:00
grafana
Cleanup docker-compose.yaml versions in Noble services
2025-03-20 09:32:28 -07:00
graphite
Switch from netcat to netcat-openbsd package
2025-05-28 09:48:02 -07:00
haproxy
Fix haproxy access to rsyslogd on Noble
2025-02-13 08:30:37 -08:00
import-gpg-key
reprepro: convert to Ansible
2020-10-19 14:06:57 +11:00
install-ansible
Remove review02 from the inventory
2025-04-21 11:07:22 -07:00
install-ansible-roles
Mark .git dirs safe when marking ansible roles safe for git
2024-06-10 08:15:44 -07:00
install-apt-repo
Vendor the apt repo gpg keys used for Zuul
2020-05-20 13:17:09 -07:00
install-borg
Use newer borgbackup on Ubuntu Noble
2025-01-17 07:54:54 -08:00
install-certcheck
Generate ssl check list directly from letsencrypt variables
2020-05-20 14:27:14 +10:00
install-docker
Add option to force docker.io addresses to IPv4
2025-03-06 15:47:56 +00:00
install-kubectl
Remove snap cleanup tasks
2020-04-16 12:45:36 -05:00
install-launch-node
Deduplicate Rackspace control plane API keys
2024-03-12 19:17:09 +00:00
install-podman
Run a gerrit container on review-dev01
2019-10-29 08:29:17 +09:00
iptables
iptables: handle hosts in allowed groups not having an ipv6 address
2023-01-12 21:48:22 +11:00
jaeger
Cleanup docker-compose.yaml versions in Noble services
2025-03-20 09:32:28 -07:00
jitsi-meet
Notify meetpad users when someone is recording
2025-04-11 14:48:47 -07:00
kerberos-kdc
Merge "kerberos-kdc: quote some integers to avoid string/int confusion"
2021-03-22 22:56:26 +00:00
keycloak
Fix keycloak container restart handler
2025-02-05 09:29:24 -08:00
letsencrypt-acme-sh-install
Only update acme.sh if necessary
2024-11-06 09:32:21 -08:00
letsencrypt-config-certcheck
Add more LE debugging info to our Ansible role
2024-04-05 13:40:14 -07:00
letsencrypt-create-certs
Remove review02 from the inventory
2025-04-21 11:07:22 -07:00
letsencrypt-install-txt-record
dns: abstract names
2023-04-19 09:53:10 +10:00
letsencrypt-request-certs
letsencrypt-request-certs: refactor certcheck list
2022-11-23 08:26:28 +11:00
limnoria
Revert "Move system-config irc bots into quay.io"
2023-05-24 13:17:54 -07:00
lodgeit
Cleanup docker-compose.yaml versions in Noble services
2025-03-20 09:32:28 -07:00
logrotate
Cleanup opensuse mirroring configs entirely
2024-03-18 15:49:43 -07:00
mailman3
Rotate mailman-core logs
2025-04-29 19:42:35 +00:00
mariadb
Switch standalone mariadb to opendevmirror hosted mariadb image
2025-01-28 15:46:51 -08:00
master-nameserver
bind9 : drop obsolete option for later versions
2023-03-09 16:37:32 +11:00
matrix-eavesdrop
Restart matrix-eavesdrop when config changes
2023-08-24 12:59:13 -07:00
matrix-gerritbot
Report Zuul events for WanderTracks repos
2024-06-11 08:30:11 -07:00
mirror
Add MariaDB community repository to cache mirrors
2024-12-23 15:14:09 +00:00
mirror-update
Goodbye EPEL 7 and 8 mirroring
2024-12-12 18:40:33 +00:00
nameserver
nameserver: Allow master server to notify via ipv6
2020-10-28 09:26:14 +00:00
nodepool-base
nodepool-base: use ipv4 ZK addresses if we don't have an ipv6 address
2023-01-12 21:50:17 +11:00
nodepool-builder
Remove nb01, nb02, and nb04 from config management
2025-03-20 09:29:16 -07:00
nodepool-launcher
Cleanup nl01, nl02, nl03, nl04
2025-03-24 12:58:12 -07:00
openafs-db-server
openafs-<db|file>-server: fix role name
2021-02-10 13:49:12 +11:00
openafs-file-server
openafs-<db|file>-server: fix role name
2021-02-10 13:49:12 +11:00
openafs-server-config
Retire mordred as infra-root
2022-12-06 11:04:08 -06:00
opendev-ca
Correct internal tracing server cert name
2022-09-28 10:38:41 -07:00
pip3
Add support for python3.8 get-pip.py on focal
2025-04-29 16:22:10 -07:00
ptgbot
Revert "Move pull external IRC bot images from quay.io"
2023-05-24 13:42:47 -07:00
puppet-run
puppet: don't run module install steps multiple times
2020-09-03 09:23:05 +10:00
puppet-setup-ansible
install-ansible: move install_modules.sh to puppet-setup-ansible
2020-09-03 09:28:16 +10:00
rax-dns-backup
rax-dns-backup: fix parsing
2022-11-21 11:44:07 +11:00
refstack
Switch refstack to opendevmirror hosted mariadb image
2025-01-28 15:39:43 -08:00
registry
Fix registry container name in pruning cron job
2024-11-25 08:30:13 -08:00
reprepro
Add Epoxy UCA to mirrors
2025-04-01 19:16:07 +02:00
root-keys
roles: Add README.rst and lint
2018-08-23 21:34:42 +10:00
run-selenium
Pull the selenium standalone-firefox image from quay
2025-03-04 07:32:46 -08:00
static
Host a redirect for api.openstack.org
2024-05-14 19:49:32 +00:00
statusbot
Revert "Move pull external IRC bot images from quay.io"
2023-05-24 13:42:47 -07:00
sync-project-config
Revert "Update to tip of master in periodic jobs"
2022-11-03 16:40:54 +11:00
vos-release
Add missing newline in vos_release.sudo
2019-11-21 19:08:30 +00:00
zookeeper
Switch from netcat to netcat-openbsd package
2025-05-28 09:48:02 -07:00
zuul
Use a dedicated zuul launcher temp dir on /opt
2025-02-17 15:15:27 -08:00
zuul-executor
Stop adding duplicate OpenAFS PPA on executors
2023-06-06 23:45:46 +00:00
zuul-launcher
Use a dedicated zuul launcher temp dir on /opt
2025-02-17 15:15:27 -08:00
zuul-lb
Do more robust checks against zuul-web with haproxy
2022-03-04 14:17:51 -08:00
zuul-merger
Switch zuul container images to quay.io
2023-04-26 10:40:30 -07:00
zuul-preview
Switch zuul container images to quay.io
2023-04-26 10:40:30 -07:00
zuul-scheduler
Add clouds.yaml to zuul schedulers
2024-10-14 11:32:49 -07:00
zuul-status-backup
Add --fail flag to zuul status backup curl
2020-04-28 08:33:05 -05:00
zuul-user
Split eavesdrop into its own playbook
2020-04-23 14:34:28 -05:00
zuul-web
Mount /etc/openstack in zuul-web
2025-01-26 06:46:22 -08:00
set-hostname
Split eavesdrop into its own playbook
2020-04-23 14:34:28 -05:00