Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

All koji hubs have their own principal

Browse source 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
Patrick Uiterwijk 2016-12-15 01:34:04 +00:00
parent d9f002c064
commit 6a9098d59f
1 changed files with 4 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

9
roles/koji_hub/templates/hub.conf.j2
View file

@ -6,34 +6,33 @@ DBUser = koji
{% if inventory_hostname.startswith('koji') %}
DBHost = db-koji01
DBPass = {{ kojiPassword }}
AuthPrincipal = host/koji{{env_suffix}}.fedoraproject.org
{% elif inventory_hostname == 's390-koji01.s390.fedoraproject.org' %}
DBHost = db-s390-koji01
DBPass = {{ s390kojiPassword }}
AuthPrincipal = host/s390.koji.fedoraproject.org
{% elif inventory_hostname == 'arm-koji01.qa.fedoraproject.org' %}
DBHost = db-arm-koji01
DBPass = {{ armkojiPassword }}
AuthPrincipal = host/arm.koji.fedoraproject.org
{% elif inventory_hostname == 'ppc-koji01.ppc.fedoraproject.org' %}
DBHost = db-ppc-koji01
DBPass = {{ ppckojiPassword }}
AuthPrincipal = host/ppc.koji.fedoraproject.org
{% endif %}
KojiDir = /mnt/koji
MemoryWarnThreshold = 10000
MaxRequestLength = 83886080
# Kerb auth
{% if env == "staging" %}
AuthPrincipal = host/koji.stg.fedoraproject.org
HostPrincipalFormat = compile/%s@STG.FEDORAPROJECT.ORG
{% else %}
AuthPrincipal = host/koji.fedoraproject.org
HostPrincipalFormat = compile/%s@FEDORAPROJECT.ORG
{% endif %}
AuthKeytab = /etc/koji-hub/koji-hub.keytab
{% if env == "staging" %}
{% if inventory_hostname.startswith('koji') %}
ProxyPrincipals = modularity@STG.FEDORAPROJECT.ORG,HTTP/koji.stg.fedoraproject.org@STG.FEDORAPROJECT.ORG
{% endif %}
{% else %}
ProxyPrincipals = HTTP/koji.fedoraproject.org@FEDORAPROJECT.ORG,sigul/sign-bridge01.phx2.fedoraproject.org@FEDORAPROJECT.ORG
{% endif %}