Replace toddlers with poddlers in prod

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
This commit is contained in:
Aurélien Bompard 2024-12-10 10:03:52 +01:00
parent fe1c5c0e62
commit 8d6026a6aa
No known key found for this signature in database
GPG key ID: 31584CFEB9BF64AD
2 changed files with 375 additions and 381 deletions

View file

@ -1,386 +1,13 @@
{% if env != 'staging' %}
---
apiVersion: batch/v1
kind: CronJob
metadata:
name: playtime-packager-bugzilla-sync
spec:
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
concurrencyPolicy: Forbid
schedule: "0 */6 * * *"
startingDeadlineSeconds: 500
jobTemplate:
spec:
template:
metadata:
labels:
parent: "cron_playtime_toddlers"
spec:
restartPolicy: Never
containers:
- name: toddlers
image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "packager_bugzilla_sync"]
env:
- name: PYTHONPATH
value: "/code"
volumeMounts:
- name: toddlers-secret-volume
mountPath: /etc/fedora-messaging
readOnly: true
- name: fedora-messaging-ca-volume
mountPath: /etc/pki/rabbitmq/ca
readOnly: true
- name: fedora-messaging-key-volume
mountPath: /etc/pki/rabbitmq/key
readOnly: true
- name: fedora-messaging-cert-volume
mountPath: /etc/pki/rabbitmq/cert
readOnly: true
volumes:
- name: toddlers-secret-volume
secret:
secretName: toddlers-secret
- name: fedora-messaging-ca-volume
secret:
secretName: toddlers-fedora-messaging-ca
- name: fedora-messaging-key-volume
secret:
secretName: toddlers-fedora-messaging-key
- name: fedora-messaging-cert-volume
secret:
secretName: toddlers-fedora-messaging-crt
---
apiVersion: batch/v1
kind: CronJob
metadata:
name: playtime-check-email-overrides
spec:
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
concurrencyPolicy: Forbid
schedule: "0 6 * * *"
startingDeadlineSeconds: 500
jobTemplate:
spec:
template:
metadata:
labels:
parent: "cron_playtime_toddlers"
spec:
restartPolicy: Never
containers:
- name: toddlers
image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "check_email_overrides"]
env:
- name: PYTHONPATH
value: "/code"
volumeMounts:
- name: toddlers-secret-volume
mountPath: /etc/fedora-messaging
readOnly: true
- name: fedora-messaging-ca-volume
mountPath: /etc/pki/rabbitmq/ca
readOnly: true
- name: fedora-messaging-key-volume
mountPath: /etc/pki/rabbitmq/key
readOnly: true
- name: fedora-messaging-cert-volume
mountPath: /etc/pki/rabbitmq/cert
readOnly: true
volumes:
- name: toddlers-secret-volume
secret:
secretName: toddlers-secret
- name: fedora-messaging-ca-volume
secret:
secretName: toddlers-fedora-messaging-ca
- name: fedora-messaging-key-volume
secret:
secretName: toddlers-fedora-messaging-key
- name: fedora-messaging-cert-volume
secret:
secretName: toddlers-fedora-messaging-crt
---
apiVersion: batch/v1
kind: CronJob
metadata:
name: playtime-clean-retired-packages
spec:
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
concurrencyPolicy: Forbid
schedule: "0 8 1 * *"
startingDeadlineSeconds: 500
jobTemplate:
spec:
template:
metadata:
labels:
parent: "cron_playtime_toddlers"
spec:
restartPolicy: Never
containers:
- name: toddlers
image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "clean_retired_packages"]
env:
- name: PYTHONPATH
value: "/code"
volumeMounts:
- name: toddlers-secret-volume
mountPath: /etc/fedora-messaging
readOnly: true
- name: fedora-messaging-ca-volume
mountPath: /etc/pki/rabbitmq/ca
readOnly: true
- name: fedora-messaging-key-volume
mountPath: /etc/pki/rabbitmq/key
readOnly: true
- name: fedora-messaging-cert-volume
mountPath: /etc/pki/rabbitmq/cert
readOnly: true
volumes:
- name: toddlers-secret-volume
secret:
secretName: toddlers-secret
- name: fedora-messaging-ca-volume
secret:
secretName: toddlers-fedora-messaging-ca
- name: fedora-messaging-key-volume
secret:
secretName: toddlers-fedora-messaging-key
- name: fedora-messaging-cert-volume
secret:
secretName: toddlers-fedora-messaging-crt
---
apiVersion: batch/v1
kind: CronJob
metadata:
name: playtime-packagers-without-bugzilla
spec:
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
concurrencyPolicy: Forbid
schedule: "0 7 * * *"
startingDeadlineSeconds: 500
jobTemplate:
spec:
template:
metadata:
labels:
parent: "cron_playtime_toddlers"
spec:
restartPolicy: Never
containers:
- name: toddlers
image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "packagers_without_bugzilla"]
env:
- name: PYTHONPATH
value: "/code"
volumeMounts:
- name: toddlers-secret-volume
mountPath: /etc/fedora-messaging
readOnly: true
- name: fedora-messaging-ca-volume
mountPath: /etc/pki/rabbitmq/ca
readOnly: true
- name: fedora-messaging-key-volume
mountPath: /etc/pki/rabbitmq/key
readOnly: true
- name: fedora-messaging-cert-volume
mountPath: /etc/pki/rabbitmq/cert
readOnly: true
volumes:
- name: toddlers-secret-volume
secret:
secretName: toddlers-secret
- name: fedora-messaging-ca-volume
secret:
secretName: toddlers-fedora-messaging-ca
- name: fedora-messaging-key-volume
secret:
secretName: toddlers-fedora-messaging-key
- name: fedora-messaging-cert-volume
secret:
secretName: toddlers-fedora-messaging-crt
---
apiVersion: batch/v1
kind: CronJob
metadata:
name: playtime-distgit-bugzilla-sync
spec:
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
concurrencyPolicy: Forbid
schedule: "0 */12 * * *"
startingDeadlineSeconds: 500
jobTemplate:
spec:
template:
metadata:
labels:
parent: "cron_playtime_toddlers"
spec:
restartPolicy: Never
containers:
- name: toddlers
image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "distgit_bugzilla_sync"]
env:
- name: PYTHONPATH
value: "/code"
volumeMounts:
- name: toddlers-secret-volume
mountPath: /etc/fedora-messaging
readOnly: true
- name: fedora-messaging-ca-volume
mountPath: /etc/pki/rabbitmq/ca
readOnly: true
- name: fedora-messaging-key-volume
mountPath: /etc/pki/rabbitmq/key
readOnly: true
- name: fedora-messaging-cert-volume
mountPath: /etc/pki/rabbitmq/cert
readOnly: true
volumes:
- name: toddlers-secret-volume
secret:
secretName: toddlers-secret
- name: fedora-messaging-ca-volume
secret:
secretName: toddlers-fedora-messaging-ca
- name: fedora-messaging-key-volume
secret:
secretName: toddlers-fedora-messaging-key
- name: fedora-messaging-cert-volume
secret:
secretName: toddlers-fedora-messaging-crt
---
apiVersion: batch/v1
kind: CronJob
metadata:
name: playtime-pagure-fas-groups-sync
spec:
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
concurrencyPolicy: Forbid
schedule: "0 4 * * *"
startingDeadlineSeconds: 500
jobTemplate:
spec:
template:
metadata:
labels:
parent: "cron_playtime_toddlers"
spec:
restartPolicy: Never
containers:
- name: toddlers
image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "pagure_fas_groups_sync"]
env:
- name: PYTHONPATH
value: "/code"
volumeMounts:
- name: toddlers-secret-volume
mountPath: /etc/fedora-messaging
readOnly: true
- name: fedora-messaging-ca-volume
mountPath: /etc/pki/rabbitmq/ca
readOnly: true
- name: fedora-messaging-key-volume
mountPath: /etc/pki/rabbitmq/key
readOnly: true
- name: fedora-messaging-cert-volume
mountPath: /etc/pki/rabbitmq/cert
readOnly: true
volumes:
- name: toddlers-secret-volume
secret:
secretName: toddlers-secret
- name: fedora-messaging-ca-volume
secret:
secretName: toddlers-fedora-messaging-ca
- name: fedora-messaging-key-volume
secret:
secretName: toddlers-fedora-messaging-key
- name: fedora-messaging-cert-volume
secret:
secretName: toddlers-fedora-messaging-crt
---
apiVersion: batch/v1
kind: CronJob
metadata:
name: playtime-koji-block-retired
spec:
successfulJobsHistoryLimit: 3
failedJobsHistoryLimit: 3
concurrencyPolicy: Forbid
schedule: "30 5 * * *"
startingDeadlineSeconds: 500
jobTemplate:
spec:
template:
metadata:
labels:
parent: "cron_playtime_toddlers"
spec:
restartPolicy: Never
containers:
- name: toddlers
image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "koji_block_retired"]
env:
- name: PYTHONPATH
value: "/code"
volumeMounts:
- name: toddlers-secret-volume
mountPath: /etc/fedora-messaging
readOnly: true
- name: fedora-messaging-ca-volume
mountPath: /etc/pki/rabbitmq/ca
readOnly: true
- name: fedora-messaging-key-volume
mountPath: /etc/pki/rabbitmq/key
readOnly: true
- name: fedora-messaging-cert-volume
mountPath: /etc/pki/rabbitmq/cert
readOnly: true
volumes:
- name: toddlers-secret-volume
secret:
secretName: toddlers-secret
- name: fedora-messaging-ca-volume
secret:
secretName: toddlers-fedora-messaging-ca
- name: fedora-messaging-key-volume
secret:
secretName: toddlers-fedora-messaging-key
- name: fedora-messaging-cert-volume
secret:
secretName: toddlers-fedora-messaging-crt
{% else %}
## Replaced by Poddlers ##
# ---
# apiVersion: batch/v1
# kind: CronJob
# metadata:
# name: playtime-check-commit-rights
# name: playtime-packager-bugzilla-sync
# spec:
# successfulJobsHistoryLimit: 3
# failedJobsHistoryLimit: 3
# concurrencyPolicy: Forbid
# schedule: "0 8 */2 * *"
# schedule: "0 */6 * * *"
# startingDeadlineSeconds: 500
# jobTemplate:
# spec:
@ -393,7 +20,7 @@ spec:
# containers:
# - name: toddlers
# image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
# command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "check-commit-rights"]
# command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "packager_bugzilla_sync"]
# env:
# - name: PYTHONPATH
# value: "/code"
@ -423,6 +50,60 @@ spec:
# - name: fedora-messaging-cert-volume
# secret:
# secretName: toddlers-fedora-messaging-crt
#
# ---
# apiVersion: batch/v1
# kind: CronJob
# metadata:
# name: playtime-check-email-overrides
# spec:
# successfulJobsHistoryLimit: 3
# failedJobsHistoryLimit: 3
# concurrencyPolicy: Forbid
# schedule: "0 6 * * *"
# startingDeadlineSeconds: 500
# jobTemplate:
# spec:
# template:
# metadata:
# labels:
# parent: "cron_playtime_toddlers"
# spec:
# restartPolicy: Never
# containers:
# - name: toddlers
# image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
# command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "check_email_overrides"]
# env:
# - name: PYTHONPATH
# value: "/code"
# volumeMounts:
# - name: toddlers-secret-volume
# mountPath: /etc/fedora-messaging
# readOnly: true
# - name: fedora-messaging-ca-volume
# mountPath: /etc/pki/rabbitmq/ca
# readOnly: true
# - name: fedora-messaging-key-volume
# mountPath: /etc/pki/rabbitmq/key
# readOnly: true
# - name: fedora-messaging-cert-volume
# mountPath: /etc/pki/rabbitmq/cert
# readOnly: true
# volumes:
# - name: toddlers-secret-volume
# secret:
# secretName: toddlers-secret
# - name: fedora-messaging-ca-volume
# secret:
# secretName: toddlers-fedora-messaging-ca
# - name: fedora-messaging-key-volume
# secret:
# secretName: toddlers-fedora-messaging-key
# - name: fedora-messaging-cert-volume
# secret:
# secretName: toddlers-fedora-messaging-crt
#
# ---
# apiVersion: batch/v1
# kind: CronJob
@ -475,4 +156,321 @@ spec:
# - name: fedora-messaging-cert-volume
# secret:
# secretName: toddlers-fedora-messaging-crt
{% endif %}
#
# ---
# apiVersion: batch/v1
# kind: CronJob
# metadata:
# name: playtime-packagers-without-bugzilla
# spec:
# successfulJobsHistoryLimit: 3
# failedJobsHistoryLimit: 3
# concurrencyPolicy: Forbid
# schedule: "0 7 * * *"
# startingDeadlineSeconds: 500
# jobTemplate:
# spec:
# template:
# metadata:
# labels:
# parent: "cron_playtime_toddlers"
# spec:
# restartPolicy: Never
# containers:
# - name: toddlers
# image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
# command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "packagers_without_bugzilla"]
# env:
# - name: PYTHONPATH
# value: "/code"
# volumeMounts:
# - name: toddlers-secret-volume
# mountPath: /etc/fedora-messaging
# readOnly: true
# - name: fedora-messaging-ca-volume
# mountPath: /etc/pki/rabbitmq/ca
# readOnly: true
# - name: fedora-messaging-key-volume
# mountPath: /etc/pki/rabbitmq/key
# readOnly: true
# - name: fedora-messaging-cert-volume
# mountPath: /etc/pki/rabbitmq/cert
# readOnly: true
# volumes:
# - name: toddlers-secret-volume
# secret:
# secretName: toddlers-secret
# - name: fedora-messaging-ca-volume
# secret:
# secretName: toddlers-fedora-messaging-ca
# - name: fedora-messaging-key-volume
# secret:
# secretName: toddlers-fedora-messaging-key
# - name: fedora-messaging-cert-volume
# secret:
# secretName: toddlers-fedora-messaging-crt
#
#
# ---
# apiVersion: batch/v1
# kind: CronJob
# metadata:
# name: playtime-distgit-bugzilla-sync
# spec:
# successfulJobsHistoryLimit: 3
# failedJobsHistoryLimit: 3
# concurrencyPolicy: Forbid
# schedule: "0 */12 * * *"
# startingDeadlineSeconds: 500
# jobTemplate:
# spec:
# template:
# metadata:
# labels:
# parent: "cron_playtime_toddlers"
# spec:
# restartPolicy: Never
# containers:
# - name: toddlers
# image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
# command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "distgit_bugzilla_sync"]
# env:
# - name: PYTHONPATH
# value: "/code"
# volumeMounts:
# - name: toddlers-secret-volume
# mountPath: /etc/fedora-messaging
# readOnly: true
# - name: fedora-messaging-ca-volume
# mountPath: /etc/pki/rabbitmq/ca
# readOnly: true
# - name: fedora-messaging-key-volume
# mountPath: /etc/pki/rabbitmq/key
# readOnly: true
# - name: fedora-messaging-cert-volume
# mountPath: /etc/pki/rabbitmq/cert
# readOnly: true
# volumes:
# - name: toddlers-secret-volume
# secret:
# secretName: toddlers-secret
# - name: fedora-messaging-ca-volume
# secret:
# secretName: toddlers-fedora-messaging-ca
# - name: fedora-messaging-key-volume
# secret:
# secretName: toddlers-fedora-messaging-key
# - name: fedora-messaging-cert-volume
# secret:
# secretName: toddlers-fedora-messaging-crt
# ---
# apiVersion: batch/v1
# kind: CronJob
# metadata:
# name: playtime-pagure-fas-groups-sync
# spec:
# successfulJobsHistoryLimit: 3
# failedJobsHistoryLimit: 3
# concurrencyPolicy: Forbid
# schedule: "0 4 * * *"
# startingDeadlineSeconds: 500
# jobTemplate:
# spec:
# template:
# metadata:
# labels:
# parent: "cron_playtime_toddlers"
# spec:
# restartPolicy: Never
# containers:
# - name: toddlers
# image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
# command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "pagure_fas_groups_sync"]
# env:
# - name: PYTHONPATH
# value: "/code"
# volumeMounts:
# - name: toddlers-secret-volume
# mountPath: /etc/fedora-messaging
# readOnly: true
# - name: fedora-messaging-ca-volume
# mountPath: /etc/pki/rabbitmq/ca
# readOnly: true
# - name: fedora-messaging-key-volume
# mountPath: /etc/pki/rabbitmq/key
# readOnly: true
# - name: fedora-messaging-cert-volume
# mountPath: /etc/pki/rabbitmq/cert
# readOnly: true
# volumes:
# - name: toddlers-secret-volume
# secret:
# secretName: toddlers-secret
# - name: fedora-messaging-ca-volume
# secret:
# secretName: toddlers-fedora-messaging-ca
# - name: fedora-messaging-key-volume
# secret:
# secretName: toddlers-fedora-messaging-key
# - name: fedora-messaging-cert-volume
# secret:
# secretName: toddlers-fedora-messaging-crt
# ---
# apiVersion: batch/v1
# kind: CronJob
# metadata:
# name: playtime-koji-block-retired
# spec:
# successfulJobsHistoryLimit: 3
# failedJobsHistoryLimit: 3
# concurrencyPolicy: Forbid
# schedule: "30 5 * * *"
# startingDeadlineSeconds: 500
# jobTemplate:
# spec:
# template:
# metadata:
# labels:
# parent: "cron_playtime_toddlers"
# spec:
# restartPolicy: Never
# containers:
# - name: toddlers
# image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
# command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "koji_block_retired"]
# env:
# - name: PYTHONPATH
# value: "/code"
# volumeMounts:
# - name: toddlers-secret-volume
# mountPath: /etc/fedora-messaging
# readOnly: true
# - name: fedora-messaging-ca-volume
# mountPath: /etc/pki/rabbitmq/ca
# readOnly: true
# - name: fedora-messaging-key-volume
# mountPath: /etc/pki/rabbitmq/key
# readOnly: true
# - name: fedora-messaging-cert-volume
# mountPath: /etc/pki/rabbitmq/cert
# readOnly: true
# volumes:
# - name: toddlers-secret-volume
# secret:
# secretName: toddlers-secret
# - name: fedora-messaging-ca-volume
# secret:
# secretName: toddlers-fedora-messaging-ca
# - name: fedora-messaging-key-volume
# secret:
# secretName: toddlers-fedora-messaging-key
# - name: fedora-messaging-cert-volume
# secret:
# secretName: toddlers-fedora-messaging-crt
#
# {% else %}
# ## Replaced by Poddlers ##
# # ---
# # apiVersion: batch/v1
# # kind: CronJob
# # metadata:
# # name: playtime-check-commit-rights
# # spec:
# # successfulJobsHistoryLimit: 3
# # failedJobsHistoryLimit: 3
# # concurrencyPolicy: Forbid
# # schedule: "0 8 */2 * *"
# # startingDeadlineSeconds: 500
# # jobTemplate:
# # spec:
# # template:
# # metadata:
# # labels:
# # parent: "cron_playtime_toddlers"
# # spec:
# # restartPolicy: Never
# # containers:
# # - name: toddlers
# # image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
# # command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "check-commit-rights"]
# # env:
# # - name: PYTHONPATH
# # value: "/code"
# # volumeMounts:
# # - name: toddlers-secret-volume
# # mountPath: /etc/fedora-messaging
# # readOnly: true
# # - name: fedora-messaging-ca-volume
# # mountPath: /etc/pki/rabbitmq/ca
# # readOnly: true
# # - name: fedora-messaging-key-volume
# # mountPath: /etc/pki/rabbitmq/key
# # readOnly: true
# # - name: fedora-messaging-cert-volume
# # mountPath: /etc/pki/rabbitmq/cert
# # readOnly: true
# # volumes:
# # - name: toddlers-secret-volume
# # secret:
# # secretName: toddlers-secret
# # - name: fedora-messaging-ca-volume
# # secret:
# # secretName: toddlers-fedora-messaging-ca
# # - name: fedora-messaging-key-volume
# # secret:
# # secretName: toddlers-fedora-messaging-key
# # - name: fedora-messaging-cert-volume
# # secret:
# # secretName: toddlers-fedora-messaging-crt
# # ---
# # apiVersion: batch/v1
# # kind: CronJob
# # metadata:
# # name: playtime-clean-retired-packages
# # spec:
# # successfulJobsHistoryLimit: 3
# # failedJobsHistoryLimit: 3
# # concurrencyPolicy: Forbid
# # schedule: "0 8 1 * *"
# # startingDeadlineSeconds: 500
# # jobTemplate:
# # spec:
# # template:
# # metadata:
# # labels:
# # parent: "cron_playtime_toddlers"
# # spec:
# # restartPolicy: Never
# # containers:
# # - name: toddlers
# # image: image-registry.openshift-image-registry.svc:5000/toddlers/toddlers:latest
# # command: ["/usr/bin/python3", "/code/toddlers/playtime.py", "clean_retired_packages"]
# # env:
# # - name: PYTHONPATH
# # value: "/code"
# # volumeMounts:
# # - name: toddlers-secret-volume
# # mountPath: /etc/fedora-messaging
# # readOnly: true
# # - name: fedora-messaging-ca-volume
# # mountPath: /etc/pki/rabbitmq/ca
# # readOnly: true
# # - name: fedora-messaging-key-volume
# # mountPath: /etc/pki/rabbitmq/key
# # readOnly: true
# # - name: fedora-messaging-cert-volume
# # mountPath: /etc/pki/rabbitmq/cert
# # readOnly: true
# # volumes:
# # - name: toddlers-secret-volume
# # secret:
# # secretName: toddlers-secret
# # - name: fedora-messaging-ca-volume
# # secret:
# # secretName: toddlers-fedora-messaging-ca
# # - name: fedora-messaging-key-volume
# # secret:
# # secretName: toddlers-fedora-messaging-key
# # - name: fedora-messaging-cert-volume
# # secret:
# # secretName: toddlers-fedora-messaging-crt

View file

@ -7,12 +7,8 @@ metadata:
service: toddlers
name: toddlers
spec:
{% if env != 'staging' %}
replicas: 3
{% else %}
## Replaced by Poddlers ##
replicas: 0
{% endif %}
selector:
app: toddlers
deploymentconfig: toddlers