infra/tickets

Fork 1

Please provide access to private AMQP and personalised queue for eln-cxs-bootstrap-sync service #13226

New issue

Closed

opened 2026-03-25 20:50:33 +00:00 by ckelley · 7 comments

ckelley commented

2026-03-25 20:50:33 +00:00

Description of request

Please provide access to private AMQP and personalised queue for eln-cxs-bootstrap-sync service - a new service used to synchronise code/sources from ELN to CentOS Stream. We are currently using a non-persistent queue and wish to move to using a more resilient one.

CC @sgallagh

### Description of request Please provide access to private AMQP and personalised queue for `eln-cxs-bootstrap-sync service` - a new service used to synchronise code/sources from ELN to CentOS Stream. We are currently using a non-persistent queue and wish to move to using a more resilient one. CC @sgallagh

sgallagh commented

2026-03-25 21:01:37 +00:00

Probably we should just be uncommenting

 # ELN CS BEGIN
 #
 # - name: Eln cs queue
 #  run_once: true
 #  include_role:
 #    name: rabbit/queue
 #  vars:
 #    queue_username: distrobuildsync-cs
 #    user_sent_topics: ^$
 #    queue_name: distrobuildsync-cs
 #    # TTL: 10 days (in miliseconds)
 #    queue_message_ttl: 864000000
 #    queue_routing_keys:
 #      - "#.buildsys.repo.init"
 #      - "#.buildsys.repo.done"
 #      - "#.buildsys.tag"
 #
 # ELN END

and adjusting the routing keys that are needed.

@ckelley Do you need anything besides *.buildsys.tag?

Probably we should just be uncommenting https://forge.fedoraproject.org/infra/ansible/src/commit/5e2de036c0330df26f4ac17593ab79c66b3cbf31/roles/rabbitmq_cluster/tasks/apps.yml#L164-181 and adjusting the routing keys that are needed. @ckelley Do you need anything besides `*.buildsys.tag`?

ckelley commented

2026-03-25 21:16:59 +00:00

Author

@ckelley Do you need anything besides *.buildsys.tag?

No we only react to tagging events.

> @ckelley Do you need anything besides `*.buildsys.tag`? No we only react to tagging events.

smoliicek added the

labels

2026-03-26 19:06:35 +00:00

kevin commented

2026-03-31 23:14:37 +00:00

Owner

If someone could make a PR out of this we can look at getting a freeze break and applying it.

Or basically just copying that task and calling it eln-cxs-bootstrap-sync if you prefer.

If no one else gets to it, I can try and do a pr sometime...

If someone could make a PR out of this we can look at getting a freeze break and applying it. Or basically just copying that task and calling it eln-cxs-bootstrap-sync if you prefer. If no one else gets to it, I can try and do a pr sometime...

sgallagh referenced this issue from a commit

2026-05-08 15:31:57 +00:00

amqp: Add queue for ELN->CS sync

sgallagh referenced this issue from infra/ansible

2026-05-08 15:32:22 +00:00

amqp: Add queue for ELN->CS sync #3339

sgallagh commented

2026-05-08 15:34:39 +00:00

@kevin wrote in #13226 (comment):

If someone could make a PR out of this we can look at getting a freeze break and applying it.

infra/ansible#3339

Or basically just copying that task and calling it eln-cxs-bootstrap-sync if you prefer.

If no one else gets to it, I can try and do a pr sometime...

@ckelley will also need the client certificates generated and delivered securely.

@kevin wrote in https://forge.fedoraproject.org/infra/tickets/issues/13226#issuecomment-598681: > If someone could make a PR out of this we can look at getting a freeze break and applying it. https://forge.fedoraproject.org/infra/ansible/pulls/3339 > Or basically just copying that task and calling it eln-cxs-bootstrap-sync if you prefer. > > If no one else gets to it, I can try and do a pr sometime... @ckelley will also need the client certificates generated and delivered securely.

❤️ 1

kevin referenced this issue from a commit

2026-05-08 18:41:02 +00:00

amqp: Add queue for ELN->CS sync

kevin closed this issue

2026-05-08 18:41:02 +00:00

kevin commented

2026-05-08 18:42:31 +00:00

Owner

ok, merged the pr and deploying...

I can get the cert, whats the best way to get it to you @ckelley ?

bitwarden send
gpg encrypted email
something else

ok, merged the pr and deploying... I can get the cert, whats the best way to get it to you @ckelley ? 1. bitwarden send 2. gpg encrypted email 3. something else

ckelley commented

2026-05-08 19:56:58 +00:00

Author

@kevin wrote in #13226 (comment):

ok, merged the pr and deploying...

I can get the cert, whats the best way to get it to you @ckelley ?

bitwarden send

gpg encrypted email

something else

Bitwarden please, thanks @kevin!

@kevin wrote in https://forge.fedoraproject.org/infra/tickets/issues/13226#issuecomment-698943: > ok, merged the pr and deploying... > > I can get the cert, whats the best way to get it to you @ckelley ? > > 1. bitwarden send > 2. gpg encrypted email > 3. something else Bitwarden please, thanks @kevin!

kevin commented

2026-05-08 20:38:49 +00:00

Owner

bitwarden send sent.