ansible/inventory/group_vars/autosign

39 lines
1.3 KiB
Text
Raw Normal View History

2014-05-23 16:48:59 +00:00
---
# Define resources for this group of hosts here.
lvm_size: 30000
mem_size: 2048
num_cpus: 2
# for systems that do not match the above - specify the same parameter in
# the host_vars/$hostname file
# Make connections from signing bridges stateless, they break sigul connections
# https://bugzilla.redhat.com/show_bug.cgi?id=1283364
custom_rules: ['-A INPUT --proto tcp --sport 44334 --source sign-bridge01.phx2.fedoraproject.org,secondary-bridge01.phx2.fedoraproject.org -j ACCEPT']
ansible_ifcfg_whitelist:
- eth0
- eth1
2014-05-23 16:48:59 +00:00
fas_client_groups: sysadmin-releng
2014-06-24 23:57:09 +02:00
host_group: autosign
2015-02-02 15:18:04 +00:00
fedmsg_error_recipients:
- puiterwijk@fedoraproject.org
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3"
2015-02-02 15:18:04 +00:00
# For the MOTD
csi_security_category: High
csi_primary_contact: Release Engineering - rel-eng@lists.fedoraproject.org
2015-06-05 10:12:53 +02:00
csi_purpose: Automatically sign Rawhide and Branched packages
2015-02-02 15:18:04 +00:00
csi_relationship: |
2015-06-05 10:12:53 +02:00
This host will run the autosigner.py script which should automatically sign
new rawhide and branched builds. It listens to koji over fedmsg for
2015-02-02 15:18:04 +00:00
notifications of new builds, and then asks sigul, the signing server, to
sign the rpms and store the new rpm header back in Koji.
The script[1] currently runs in the foreground from a git checkout.
[1] https://pagure.io/releng/blob/master/f/scripts/autosigner.py