1
0
Fork 0
forked from infra/ansible

Add some tags

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2026-06-10 10:27:38 +02:00
commit fc72ee6a93
Signed by untrusted user: abompard
GPG key ID: 31584CFEB9BF64AD
9 changed files with 65 additions and 0 deletions

View file

@ -317,6 +317,7 @@
tags:
- config
- bodhi
- fedora-messaging
- name: Create /etc/pki/fedora-messaging
ansible.builtin.file:
@ -327,6 +328,7 @@
state: directory
tags:
- bodhi
- fedora-messaging
- name: Deploy the fedora-messaging CA
ansible.builtin.copy:
@ -337,6 +339,7 @@
group: apache
tags:
- bodhi
- fedora-messaging
- name: Deploy the fedora-messaging cert
ansible.builtin.copy:
@ -347,6 +350,7 @@
group: apache
tags:
- bodhi
- fedora-messaging
- name: Deploy the fedora-messaging key
ansible.builtin.copy:
@ -357,18 +361,21 @@
group: apache
tags:
- bodhi
- fedora-messaging
- name: Let the ftpsync user also read the fedora-messaging config
acl: path=/etc/fedora-messaging/config.toml entity=ftpsync etype=user permissions=r-x state=present
tags:
- config
- bodhi
- fedora-messaging
- name: Let the ftpsync user also read the fedora-messaging key
ansible.builtin.command: /usr/bin/setfacl -m user:ftpsync:rx /etc/pki/fedora-messaging/bodhi-key.pem
tags:
- config
- bodhi
- fedora-messaging
- name: Make a mnt/koji link
ansible.builtin.file: state=link src=/mnt/fedora_koji/koji dest=/mnt/koji force=yes
@ -385,6 +392,7 @@
tags:
- bodhi
- config
- fedora-messaging
- name: Configure fm-consumer@.service to run as apache
ansible.builtin.copy:
@ -398,6 +406,7 @@
tags:
- bodhi
- config
- fedora-messaging
- name: Setup the Celery service
ansible.builtin.copy:
@ -427,6 +436,7 @@
- bodhi-celery
tags:
- bodhi
- fedora-messaging
- name: Set up koji profile
ansible.builtin.template: src=kojiprofile.conf dest=/etc/koji.conf.d/bodhi.conf

View file

@ -146,6 +146,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
# as noted elsewhere, we are reusing the openqa user and creds for
# convenience while the roles are all run on the same system, and
@ -160,6 +161,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
# This is kinda icky, as there's no intrinsic reason the group geekotest
# should exist so far as this role is concerned. But as we run this role
@ -175,6 +177,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
- name: Configure fedora-messaging check-compose consumer
ansible.builtin.template: src=check-compose.toml.j2 dest=/etc/fedora-messaging/check-compose.toml owner=root group=root mode=0640
@ -182,6 +185,7 @@
- Restart check-compose
tags:
- config
- fedora-messaging
- name: Install config file
ansible.builtin.template: src=check-compose.conf.j2 dest=/etc/check-compose.conf mode=0644
@ -190,3 +194,5 @@
- name: Enable and start fedora-messaging check-compose consumer
service: name=fm-consumer@check-compose enabled=yes state=started
tags:
- fedora-messaging

View file

@ -113,6 +113,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
# We always use the openQA production cert and key here for now; we
# don't really need a separate identity for fedora_nightlies.
@ -126,6 +127,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
# This is kinda icky, as there's no intrinsic reason the group geekotest
# should exist so far as this role is concerned. But as we run this role
@ -141,6 +143,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
- name: Configure fedora-messaging fedora_nightlies
ansible.builtin.template: src=fedora_nightlies.toml.j2 dest=/etc/fedora-messaging/fedora_nightlies.toml owner=root group=root mode=0640
@ -148,7 +151,10 @@
- Restart fedora_nightlies
tags:
- config
- fedora-messaging
- name: Enable and start fedora-messaging fedora_nightlies
service: name=fm-consumer@fedora_nightlies enabled=yes state=started
when: not fedora_nightlies_disabled|bool
tags:
- fedora-messaging

View file

@ -41,6 +41,7 @@
tags:
- config
- mirror_forge_ansible
- fedora-messaging
- name: Deploy forge/rabbitmq certificate
ansible.builtin.copy: src={{ item.src }}
@ -76,6 +77,7 @@
tags:
- config
- mirror_forge_ansible
- fedora-messaging
# Install the script

View file

@ -41,6 +41,7 @@
tags:
- config
- mirror_pagure_ansible
- fedora-messaging
- name: Deploy pagure/rabbitmq certificate
ansible.builtin.copy: src={{ item.src }}
@ -76,6 +77,7 @@
tags:
- config
- mirror_pagure_ansible
- fedora-messaging
# Install the script

View file

@ -273,6 +273,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
- name: Deploy the Fedora infra fedora-messaging cert
ansible.builtin.copy:
@ -284,6 +285,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
- name: Deploy the Fedora infra fedora-messaging key
ansible.builtin.copy:
@ -295,6 +297,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
- name: Deploy the Fedora infra fedora-messaging prod cert on stg (for stg consumers that listen on prod)
ansible.builtin.copy:
@ -306,6 +309,7 @@
when: "deployment_type is defined and deployment_type == 'stg'"
tags:
- config
- fedora-messaging
- name: Deploy the Fedora infra fedora-messaging prod key on stg (for stg consumers that listen on prod)
ansible.builtin.copy:
@ -317,6 +321,7 @@
when: "deployment_type is defined and deployment_type == 'stg'"
tags:
- config
- fedora-messaging
- name: Configure fedora-messaging scheduler
ansible.builtin.template: src=fedora_openqa_scheduler.toml.j2 dest=/etc/fedora-messaging/fedora_openqa_scheduler.toml owner=root group=root mode=0640
@ -325,6 +330,7 @@
when: "openqa_amqp_scheduler_queue is defined and openqa_amqp_scheduler_queue"
tags:
- config
- fedora-messaging
- name: Configure fedora-messaging wiki reporter
ansible.builtin.template: src=fedora_openqa_wiki_reporter.toml.j2 dest=/etc/fedora-messaging/fedora_openqa_wiki_reporter.toml owner=root group=root mode=0640
@ -333,6 +339,7 @@
when: "openqa_amqp_wiki_reporter_queue is defined and openqa_amqp_wiki_reporter_queue"
tags:
- config
- fedora-messaging
- name: Configure fedora-messaging ResultsDB reporter
ansible.builtin.template: src=fedora_openqa_resultsdb_reporter.toml.j2 dest=/etc/fedora-messaging/fedora_openqa_resultsdb_reporter.toml owner=root group=root mode=0640
@ -341,27 +348,38 @@
when: "openqa_amqp_resultsdb_reporter_queue is defined and openqa_amqp_resultsdb_reporter_queue"
tags:
- config
- fedora-messaging
- name: Enable and start fedora-messaging scheduler service
service: name=fm-consumer@fedora_openqa_scheduler enabled=yes state=started
when: "openqa_amqp_scheduler_queue is defined and openqa_amqp_scheduler_queue"
tags:
- fedora-messaging
- name: Enable and start fedora-messaging wiki reporter service
service: name=fm-consumer@fedora_openqa_wiki_reporter enabled=yes state=started
when: "openqa_amqp_wiki_reporter_queue is defined and openqa_amqp_wiki_reporter_queue"
tags:
- fedora-messaging
- name: Enable and start fedora-messaging ResultsDB reporter service
service: name=fm-consumer@fedora_openqa_resultsdb_reporter enabled=yes state=started
when: "openqa_amqp_resultsdb_reporter_queue is defined and openqa_amqp_resultsdb_reporter_queue"
tags:
- fedora-messaging
- name: Create directory for consumer service config drop-in
ansible.builtin.file: path=/etc/systemd/system/fm-consumer@.service.d state=directory owner=root group=root mode=0755
tags:
- fedora-messaging
# This slows restarts of fm-consumer@ to every 60 seconds, instead of
# near-instantly; this avoids huge floods of errors when resultsdb
# or the wiki go down for a bit
- name: Consumer service config drop-in to slow down restarts
ansible.builtin.copy: src=fmconsumer.restartsec.conf dest=/etc/systemd/system/fm-consumer@.service.d/10-restartsec.conf owner=root group=root mode=0644
tags:
- fedora-messaging
- name: Set up cron job to schedule live-respins jobs
ansible.builtin.copy: src=schedule-live-respins.cron dest=/etc/cron.hourly/schedule-live-respins owner=root group=root mode=0755
@ -385,3 +403,5 @@
# the missing reports
- name: Set up cron job to find and submit missing results to resultsdb
ansible.builtin.copy: src=report-blocked.cron dest=/etc/cron.daily/report-blocked owner=root group=root mode=0755
tags:
- config

View file

@ -300,6 +300,7 @@
tags:
- config
- planet_server
- fedora-messaging
- name: Deploy the fedora-messaging CA
ansible.builtin.copy:
@ -311,6 +312,7 @@
tags:
- config
- planet_server
- fedora-messaging
- name: Deploy the fedora-messaging cert
ansible.builtin.copy:
@ -322,6 +324,7 @@
tags:
- config
- planet_server
- fedora-messaging
- name: Deploy the fedora-messaging key
ansible.builtin.copy:
@ -333,6 +336,7 @@
tags:
- config
- planet_server
- fedora-messaging
- name: Install fedora-messaging config
ansible.builtin.template:
@ -344,3 +348,4 @@
tags:
- config
- planet_server
- fedora-messaging

View file

@ -355,6 +355,7 @@
tags:
- config
- releng
- fedora-messaging
- name: Deploy the fedora-messaging CA
ansible.builtin.copy:
@ -366,6 +367,7 @@
tags:
- config
- releng
- fedora-messaging
- name: Deploy the fedora-messaging cert
ansible.builtin.copy:
@ -377,6 +379,7 @@
tags:
- config
- releng
- fedora-messaging
- name: Deploy the fedora-messaging key
ansible.builtin.copy:
@ -388,6 +391,7 @@
tags:
- config
- releng
- fedora-messaging
- name: Install fedora-messaging config
ansible.builtin.template:
@ -399,6 +403,7 @@
tags:
- config
- releng
- fedora-messaging
- name: Install compose /etc/httpd/conf.d/compose.conf file
ansible.builtin.copy:

View file

@ -164,6 +164,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
# as noted elsewhere, we are reusing the openqa user and creds for
# convenience while the roles are all run on the same system, and
@ -178,6 +179,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
# This is kinda icky, as there's no intrinsic reason the group geekotest
# should exist so far as this role is concerned. But as we run this role
@ -193,6 +195,7 @@
when: "deployment_type is defined"
tags:
- config
- fedora-messaging
- name: Create python-bugzilla configuration directory
ansible.builtin.file:
@ -217,6 +220,7 @@
- Restart relvalconsumer
tags:
- config
- fedora-messaging
- name: Configure fedora-messaging relvalamiconsumer
ansible.builtin.template: src=relvalamiconsumer.toml.j2 dest=/etc/fedora-messaging/relvalamiconsumer.toml owner=root group=root mode=0640
@ -224,11 +228,16 @@
- Restart relvalamiconsumer
tags:
- config
- fedora-messaging
- name: Enable and start fedora-messaging relvalconsumer
service: name=fm-consumer@relvalconsumer enabled=yes state=started
when: not relvalconsumer_disabled|bool
tags:
- fedora-messaging
- name: Enable and start fedora-messaging relvalamiconsumer
service: name=fm-consumer@relvalamiconsumer enabled=yes state=started
when: not relvalamiconsumer_disabled|bool
tags:
- fedora-messaging