forked from infra/ansible
Add some tags
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
parent
da11627a6e
commit
fc72ee6a93
9 changed files with 65 additions and 0 deletions
|
|
@ -317,6 +317,7 @@
|
|||
tags:
|
||||
- config
|
||||
- bodhi
|
||||
- fedora-messaging
|
||||
|
||||
- name: Create /etc/pki/fedora-messaging
|
||||
ansible.builtin.file:
|
||||
|
|
@ -327,6 +328,7 @@
|
|||
state: directory
|
||||
tags:
|
||||
- bodhi
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the fedora-messaging CA
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -337,6 +339,7 @@
|
|||
group: apache
|
||||
tags:
|
||||
- bodhi
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the fedora-messaging cert
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -347,6 +350,7 @@
|
|||
group: apache
|
||||
tags:
|
||||
- bodhi
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the fedora-messaging key
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -357,18 +361,21 @@
|
|||
group: apache
|
||||
tags:
|
||||
- bodhi
|
||||
- fedora-messaging
|
||||
|
||||
- name: Let the ftpsync user also read the fedora-messaging config
|
||||
acl: path=/etc/fedora-messaging/config.toml entity=ftpsync etype=user permissions=r-x state=present
|
||||
tags:
|
||||
- config
|
||||
- bodhi
|
||||
- fedora-messaging
|
||||
|
||||
- name: Let the ftpsync user also read the fedora-messaging key
|
||||
ansible.builtin.command: /usr/bin/setfacl -m user:ftpsync:rx /etc/pki/fedora-messaging/bodhi-key.pem
|
||||
tags:
|
||||
- config
|
||||
- bodhi
|
||||
- fedora-messaging
|
||||
|
||||
- name: Make a mnt/koji link
|
||||
ansible.builtin.file: state=link src=/mnt/fedora_koji/koji dest=/mnt/koji force=yes
|
||||
|
|
@ -385,6 +392,7 @@
|
|||
tags:
|
||||
- bodhi
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Configure fm-consumer@.service to run as apache
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -398,6 +406,7 @@
|
|||
tags:
|
||||
- bodhi
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Setup the Celery service
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -427,6 +436,7 @@
|
|||
- bodhi-celery
|
||||
tags:
|
||||
- bodhi
|
||||
- fedora-messaging
|
||||
|
||||
- name: Set up koji profile
|
||||
ansible.builtin.template: src=kojiprofile.conf dest=/etc/koji.conf.d/bodhi.conf
|
||||
|
|
|
|||
|
|
@ -146,6 +146,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
# as noted elsewhere, we are reusing the openqa user and creds for
|
||||
# convenience while the roles are all run on the same system, and
|
||||
|
|
@ -160,6 +161,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
# This is kinda icky, as there's no intrinsic reason the group geekotest
|
||||
# should exist so far as this role is concerned. But as we run this role
|
||||
|
|
@ -175,6 +177,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Configure fedora-messaging check-compose consumer
|
||||
ansible.builtin.template: src=check-compose.toml.j2 dest=/etc/fedora-messaging/check-compose.toml owner=root group=root mode=0640
|
||||
|
|
@ -182,6 +185,7 @@
|
|||
- Restart check-compose
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Install config file
|
||||
ansible.builtin.template: src=check-compose.conf.j2 dest=/etc/check-compose.conf mode=0644
|
||||
|
|
@ -190,3 +194,5 @@
|
|||
|
||||
- name: Enable and start fedora-messaging check-compose consumer
|
||||
service: name=fm-consumer@check-compose enabled=yes state=started
|
||||
tags:
|
||||
- fedora-messaging
|
||||
|
|
|
|||
|
|
@ -113,6 +113,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
# We always use the openQA production cert and key here for now; we
|
||||
# don't really need a separate identity for fedora_nightlies.
|
||||
|
|
@ -126,6 +127,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
# This is kinda icky, as there's no intrinsic reason the group geekotest
|
||||
# should exist so far as this role is concerned. But as we run this role
|
||||
|
|
@ -141,6 +143,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Configure fedora-messaging fedora_nightlies
|
||||
ansible.builtin.template: src=fedora_nightlies.toml.j2 dest=/etc/fedora-messaging/fedora_nightlies.toml owner=root group=root mode=0640
|
||||
|
|
@ -148,7 +151,10 @@
|
|||
- Restart fedora_nightlies
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Enable and start fedora-messaging fedora_nightlies
|
||||
service: name=fm-consumer@fedora_nightlies enabled=yes state=started
|
||||
when: not fedora_nightlies_disabled|bool
|
||||
tags:
|
||||
- fedora-messaging
|
||||
|
|
|
|||
|
|
@ -41,6 +41,7 @@
|
|||
tags:
|
||||
- config
|
||||
- mirror_forge_ansible
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy forge/rabbitmq certificate
|
||||
ansible.builtin.copy: src={{ item.src }}
|
||||
|
|
@ -76,6 +77,7 @@
|
|||
tags:
|
||||
- config
|
||||
- mirror_forge_ansible
|
||||
- fedora-messaging
|
||||
|
||||
|
||||
# Install the script
|
||||
|
|
|
|||
|
|
@ -41,6 +41,7 @@
|
|||
tags:
|
||||
- config
|
||||
- mirror_pagure_ansible
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy pagure/rabbitmq certificate
|
||||
ansible.builtin.copy: src={{ item.src }}
|
||||
|
|
@ -76,6 +77,7 @@
|
|||
tags:
|
||||
- config
|
||||
- mirror_pagure_ansible
|
||||
- fedora-messaging
|
||||
|
||||
|
||||
# Install the script
|
||||
|
|
|
|||
|
|
@ -273,6 +273,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the Fedora infra fedora-messaging cert
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -284,6 +285,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the Fedora infra fedora-messaging key
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -295,6 +297,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the Fedora infra fedora-messaging prod cert on stg (for stg consumers that listen on prod)
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -306,6 +309,7 @@
|
|||
when: "deployment_type is defined and deployment_type == 'stg'"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the Fedora infra fedora-messaging prod key on stg (for stg consumers that listen on prod)
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -317,6 +321,7 @@
|
|||
when: "deployment_type is defined and deployment_type == 'stg'"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Configure fedora-messaging scheduler
|
||||
ansible.builtin.template: src=fedora_openqa_scheduler.toml.j2 dest=/etc/fedora-messaging/fedora_openqa_scheduler.toml owner=root group=root mode=0640
|
||||
|
|
@ -325,6 +330,7 @@
|
|||
when: "openqa_amqp_scheduler_queue is defined and openqa_amqp_scheduler_queue"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Configure fedora-messaging wiki reporter
|
||||
ansible.builtin.template: src=fedora_openqa_wiki_reporter.toml.j2 dest=/etc/fedora-messaging/fedora_openqa_wiki_reporter.toml owner=root group=root mode=0640
|
||||
|
|
@ -333,6 +339,7 @@
|
|||
when: "openqa_amqp_wiki_reporter_queue is defined and openqa_amqp_wiki_reporter_queue"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Configure fedora-messaging ResultsDB reporter
|
||||
ansible.builtin.template: src=fedora_openqa_resultsdb_reporter.toml.j2 dest=/etc/fedora-messaging/fedora_openqa_resultsdb_reporter.toml owner=root group=root mode=0640
|
||||
|
|
@ -341,27 +348,38 @@
|
|||
when: "openqa_amqp_resultsdb_reporter_queue is defined and openqa_amqp_resultsdb_reporter_queue"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Enable and start fedora-messaging scheduler service
|
||||
service: name=fm-consumer@fedora_openqa_scheduler enabled=yes state=started
|
||||
when: "openqa_amqp_scheduler_queue is defined and openqa_amqp_scheduler_queue"
|
||||
tags:
|
||||
- fedora-messaging
|
||||
|
||||
- name: Enable and start fedora-messaging wiki reporter service
|
||||
service: name=fm-consumer@fedora_openqa_wiki_reporter enabled=yes state=started
|
||||
when: "openqa_amqp_wiki_reporter_queue is defined and openqa_amqp_wiki_reporter_queue"
|
||||
tags:
|
||||
- fedora-messaging
|
||||
|
||||
- name: Enable and start fedora-messaging ResultsDB reporter service
|
||||
service: name=fm-consumer@fedora_openqa_resultsdb_reporter enabled=yes state=started
|
||||
when: "openqa_amqp_resultsdb_reporter_queue is defined and openqa_amqp_resultsdb_reporter_queue"
|
||||
tags:
|
||||
- fedora-messaging
|
||||
|
||||
- name: Create directory for consumer service config drop-in
|
||||
ansible.builtin.file: path=/etc/systemd/system/fm-consumer@.service.d state=directory owner=root group=root mode=0755
|
||||
tags:
|
||||
- fedora-messaging
|
||||
|
||||
# This slows restarts of fm-consumer@ to every 60 seconds, instead of
|
||||
# near-instantly; this avoids huge floods of errors when resultsdb
|
||||
# or the wiki go down for a bit
|
||||
- name: Consumer service config drop-in to slow down restarts
|
||||
ansible.builtin.copy: src=fmconsumer.restartsec.conf dest=/etc/systemd/system/fm-consumer@.service.d/10-restartsec.conf owner=root group=root mode=0644
|
||||
tags:
|
||||
- fedora-messaging
|
||||
|
||||
- name: Set up cron job to schedule live-respins jobs
|
||||
ansible.builtin.copy: src=schedule-live-respins.cron dest=/etc/cron.hourly/schedule-live-respins owner=root group=root mode=0755
|
||||
|
|
@ -385,3 +403,5 @@
|
|||
# the missing reports
|
||||
- name: Set up cron job to find and submit missing results to resultsdb
|
||||
ansible.builtin.copy: src=report-blocked.cron dest=/etc/cron.daily/report-blocked owner=root group=root mode=0755
|
||||
tags:
|
||||
- config
|
||||
|
|
|
|||
|
|
@ -300,6 +300,7 @@
|
|||
tags:
|
||||
- config
|
||||
- planet_server
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the fedora-messaging CA
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -311,6 +312,7 @@
|
|||
tags:
|
||||
- config
|
||||
- planet_server
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the fedora-messaging cert
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -322,6 +324,7 @@
|
|||
tags:
|
||||
- config
|
||||
- planet_server
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the fedora-messaging key
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -333,6 +336,7 @@
|
|||
tags:
|
||||
- config
|
||||
- planet_server
|
||||
- fedora-messaging
|
||||
|
||||
- name: Install fedora-messaging config
|
||||
ansible.builtin.template:
|
||||
|
|
@ -344,3 +348,4 @@
|
|||
tags:
|
||||
- config
|
||||
- planet_server
|
||||
- fedora-messaging
|
||||
|
|
|
|||
|
|
@ -355,6 +355,7 @@
|
|||
tags:
|
||||
- config
|
||||
- releng
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the fedora-messaging CA
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -366,6 +367,7 @@
|
|||
tags:
|
||||
- config
|
||||
- releng
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the fedora-messaging cert
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -377,6 +379,7 @@
|
|||
tags:
|
||||
- config
|
||||
- releng
|
||||
- fedora-messaging
|
||||
|
||||
- name: Deploy the fedora-messaging key
|
||||
ansible.builtin.copy:
|
||||
|
|
@ -388,6 +391,7 @@
|
|||
tags:
|
||||
- config
|
||||
- releng
|
||||
- fedora-messaging
|
||||
|
||||
- name: Install fedora-messaging config
|
||||
ansible.builtin.template:
|
||||
|
|
@ -399,6 +403,7 @@
|
|||
tags:
|
||||
- config
|
||||
- releng
|
||||
- fedora-messaging
|
||||
|
||||
- name: Install compose /etc/httpd/conf.d/compose.conf file
|
||||
ansible.builtin.copy:
|
||||
|
|
|
|||
|
|
@ -164,6 +164,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
# as noted elsewhere, we are reusing the openqa user and creds for
|
||||
# convenience while the roles are all run on the same system, and
|
||||
|
|
@ -178,6 +179,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
# This is kinda icky, as there's no intrinsic reason the group geekotest
|
||||
# should exist so far as this role is concerned. But as we run this role
|
||||
|
|
@ -193,6 +195,7 @@
|
|||
when: "deployment_type is defined"
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Create python-bugzilla configuration directory
|
||||
ansible.builtin.file:
|
||||
|
|
@ -217,6 +220,7 @@
|
|||
- Restart relvalconsumer
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Configure fedora-messaging relvalamiconsumer
|
||||
ansible.builtin.template: src=relvalamiconsumer.toml.j2 dest=/etc/fedora-messaging/relvalamiconsumer.toml owner=root group=root mode=0640
|
||||
|
|
@ -224,11 +228,16 @@
|
|||
- Restart relvalamiconsumer
|
||||
tags:
|
||||
- config
|
||||
- fedora-messaging
|
||||
|
||||
- name: Enable and start fedora-messaging relvalconsumer
|
||||
service: name=fm-consumer@relvalconsumer enabled=yes state=started
|
||||
when: not relvalconsumer_disabled|bool
|
||||
tags:
|
||||
- fedora-messaging
|
||||
|
||||
- name: Enable and start fedora-messaging relvalamiconsumer
|
||||
service: name=fm-consumer@relvalamiconsumer enabled=yes state=started
|
||||
when: not relvalamiconsumer_disabled|bool
|
||||
tags:
|
||||
- fedora-messaging
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue