copr: update infrastructure password

https://pagure.io/fedora-infrastructure/issue/8555

roles/copr/backend/tasks/main.yml

@@ -225,6 +225,7 @@
   - restart copr-backend
   tags:
   - config
+  - copr_infrastructure_password
 
 - name: create messaging config directory
   file: dest=/etc/copr/msgbuses state=directory owner=copr group=copr mode=0700

roles/copr/backend/templates/copr-be.conf.j2

@@ -8,7 +8,13 @@ frontend_base_url={{ frontend_base_url }}
 
 # must have same value as BACKEND_PASSWORD from have frontend in /etc/copr/copr.conf
 # default is PASSWORDHERE but you really should change it. really.
+{% if env == 'production' %}
 frontend_auth={{ copr_backend_password }}
+{% elif devel %}
+frontend_auth={{ copr_backend_password_dev }}
+{% else %}
+frontend_auth={{ copr_backend_password_stg }}
+{% endif %}
 
 # For each build group set:
 #   name - name of the group (will be shown in the worker process name)

roles/copr/dist_git/tasks/main.yml

@@ -40,6 +40,7 @@
   template: src=copr-dist-git.conf.j2 dest=/etc/copr/copr-dist-git.conf mode=0644
   tags:
   - config
+  - copr_infrastructure_password
 
 - name: set git variables for copr-dist-git user
   copy: src=".gitconfig" dest="/home/copr-dist-git/.gitconfig"

roles/copr/dist_git/templates/copr-dist-git.conf.j2

@@ -5,7 +5,13 @@ frontend_base_url={{frontend_base_url}}
 
 # must have same value as BACKEND_PASSWORD from have frontend in /etc/copr/copr.conf
 # default is PASSWORDHERE but you really should change it. really.
+{% if env == 'production' %}
 frontend_auth={{ copr_backend_password }}
+{% elif devel %}
+frontend_auth={{ copr_backend_password_dev }}
+{% else %}
+frontend_auth={{ copr_backend_password_stg }}
+{% endif %}
 
 # where import logs should be stored
 per_task_log_dir=/var/lib/copr-dist-git/per-task-logs/

roles/copr/frontend-cloud/tasks/main.yml

@@ -56,6 +56,7 @@
   - restart copr-fe-fedora-messaging-reader
   tags:
   - config
+  - copr_infrastructure_password
 
 - name: enable and start redis  # TODO: .service in copr-backend should depend on redis
   service: name=redis enabled=yes state=started

roles/copr/frontend-cloud/templates/copr.conf

@@ -11,7 +11,14 @@ WHOOSHEE_MIN_STRING_LEN = 2
 WHOOSHEE_WRITER_TIMEOUT = 10
 
 SECRET_KEY = '{{ copr_secret_key }}'
+{% if env == 'production' %}
 BACKEND_PASSWORD = '{{ copr_backend_password  }}'
+{% elif devel %}
+BACKEND_PASSWORD = '{{ copr_backend_password_dev }}'
+{% else %}
+BACKEND_PASSWORD = '{{ copr_backend_password_stg }}'
+{% endif %}
+
 BACKEND_BASE_URL = '{{ backend_base_url }}'
 
 # restrict access to a set of users