diff --git a/roles/copr/mbs/files/module_build_service.py b/roles/copr/mbs/files/module_build_service.py new file mode 100644 index 0000000000..b12d8d5725 --- /dev/null +++ b/roles/copr/mbs/files/module_build_service.py @@ -0,0 +1,48 @@ +import os + +config = { + # Just for dev. + "validate_signatures": False, + + # Talk to the relay, so things also make it to composer.stg in our dev env + "active": True, + + # Since we're in active mode, we don't need to declare any of our own + # passive endpoints. This placeholder value needs to be here for the tests + # to pass in Jenkins, though. \o/ + "endpoints": { + "fedora-infrastructure": [ + # Just listen to staging for now, not to production (spam!) +"tcp://hub.fedoraproject.org:9940" + ], + }, + + # Start of code signing configuration + # 'sign_messages': True, + # 'validate_signatures': True, + # 'crypto_backend': 'x509', + # 'crypto_validate_backends': ['x509'], + # 'ssldir': '/opt/module_build_service/pki', + # 'crl_location': 'http://localhost/crl/ca.crl', + # 'crl_cache': '/etc/pki/fedmsg/crl.pem', + # 'crl_cache_expiry': 10, + # 'ca_cert_location': 'http://localhost/crl/ca.crt', + # 'ca_cert_cache': '/etc/pki/fedmsg/ca.crt', + # 'ca_cert_cache_expiry': 0, # Never expires + # 'certnames': { + # 'module_build_service.localhost': 'localhost' + # } + # End of code signing configuration +} + +# developer's instance (docker/vagrant/...) +if 'MODULE_BUILD_SERVICE_DEVELOPER_ENV' in os.environ and \ + os.environ['MODULE_BUILD_SERVICE_DEVELOPER_ENV'].lower() in ( + '1', 'on', 'true', 'y', 'yes'): + config['endpoints']['relay_outbound'] = ["tcp://fedmsg-relay:2001"] + config['relay_inbound'] = ["tcp://fedmsg-relay:2003"] +else: + # These configuration values are reasonable for most other configurations. + config['endpoints']['relay_outbound'] = ["tcp://127.0.0.1:4001"] + config['relay_inbound'] = ["tcp://127.0.0.1:2003"] + diff --git a/roles/copr/mbs/tasks/main.yml b/roles/copr/mbs/tasks/main.yml index 7c71934247..536a784dc9 100644 --- a/roles/copr/mbs/tasks/main.yml +++ b/roles/copr/mbs/tasks/main.yml @@ -51,18 +51,8 @@ - /etc/fedmsg.d/relay.py - /etc/fedmsg.d/ssl.py - -- name: Don't listen to fedora-infra stg hub - lineinfile: - dest: /etc/fedmsg.d/module_build_service.py - regexp: '"tcp://stg.fedoraproject.org:9940"' - line: '#"tcp://stg.fedoraproject.org:9940"' - -- name: Listen to fedora-infra hub - lineinfile: - dest: /etc/fedmsg.d/module_build_service.py - regexp: '\#"tcp://hub.fedoraproject.org:9940"' - line: '"tcp://hub.fedoraproject.org:9940"' +- name: setup module_build_service + copy: src=module_build_service.py dest=/etc/fedmsg.d/module_build_service.py mode=0644 user=root group=root - name: Listen to copr-be-dev lineinfile: