Good bye hosted03. A parting glass to your long service!

This commit is contained in:
Kevin Fenzi 2017-04-11 18:31:22 +00:00
parent 306e0b7b26
commit 96774f04f5
4 changed files with 0 additions and 94 deletions

View file

@ -1,29 +0,0 @@
# Even though the hosted nodes are still deployed with puppet, we have this
# definition here so that the fedmsg authz policy can be generated correctly.
# ... when we eventually fully ansibilize these hosts, just fill out the rest of
# this file with the other vars we need. --threebean
fedmsg_certs:
- service: shell
owner: root
group: sysadmin
can_send:
- logger.log
- service: trac
owner: root
group: apache
can_send:
- trac.ticket.delete
- trac.ticket.new
- trac.ticket.update
- trac.wiki.page.delete
- trac.wiki.page.new
- trac.wiki.page.rename
- trac.wiki.page.update
- trac.wiki.page.version.delete
- service: git
owner: root
group: cla_done
can_send:
- trac.git.receive

View file

@ -1,4 +0,0 @@
---
host_backup_targets: ['/srv']
fedmsg_fqdn: hosted03.vpn.fedoraproject.org

View file

@ -1,52 +0,0 @@
# requires --extra-vars "{'repos': ['yokan.git', 'yumex.git']}"
- name: Install the fedmsg hook into a number of fedorahosted git repos
hosts: hosted03.fedoraproject.org
user: root
vars:
prefix: /srv/git/
chained: /hooks/post-receive-chained.d
fedmsg_hook: /usr/local/share/git/hooks/post-receive-fedorahosted-fedmsg
chained_hook: /usr/share/git-core/post-receive-chained
tasks:
# XXX - @puiterwijk - I did run that playbook recently. and it has just one
# bug: if you don't have the email post-receive hook when you run it, you'll
# need to make the symlink yourself, or you'll get bugged on every push :-)
# First -- a sanity check. We want this to fail and stop the playbook if
# someone typoed and reponame. The "command" here claims that it "creates" a
# file. That is not actually true, but it tells ansible to not bother running
# the command *if* that creates= file is already present. Its a hackaround to
# make this task idempotent.
- name: make sure the git repos exist in the first place
command: /bin/ls {{ prefix }}{{ item }} creates={{ prefix }}{{ item }}
with_items: "{{ repos }}"
- name: ensure there is a post-receive-chained.d/ directory
file: >
state=directory
path="{{ prefix }}{{ item }}{{ chained }}/"
with_items: "{{ repos }}"
- name: move the old post-receive email hook into the chained dir
command: >
/bin/mv "{{ prefix }}{{ item }}/hooks/post-receive" "{{ prefix }}{{ item }}{{ chained }}/post-receive-email"
removes="{{ prefix }}{{ item }}/hooks/post-receive"
creates="{{ prefix }}{{ item }}{{ chained }}/post-receive-email"
with_items: "{{ repos }}"
- name: symlink the fedmsg hook into the chained dir
file: >
path="{{ prefix }}{{ item }}{{ chained }}/post-receive-fedmsg"
src={{ fedmsg_hook }}
state=link
with_items: "{{ repos }}"
- name: symlink in the chained hook redirector
file: >
path="{{ prefix }}{{ item }}/hooks/post-receive"
src={{ chained_hook }}
state=link
with_items: "{{ repos }}"

View file

@ -18,15 +18,6 @@ config = dict(
("{{cert.get('alias', cert['service'])}}.{{inventory_hostname_short}}", "{{cert['service']}}-{{fedmsg_fqdn | default(inventory_hostname)}}"),
{% endfor %}
] + [
# This is the beginning of the static list. We should eventually remove
# this.
("git.hosted03", "git-hosted03.vpn.fedoraproject.org"),
("git.hosted04", "git-hosted04.vpn.fedoraproject.org"),
("trac.hosted03", "trac-hosted03.vpn.fedoraproject.org"),
("trac.hosted04", "trac-hosted04.vpn.fedoraproject.org"),
("shell.hosted03", "shell-hosted03.vpn.fedoraproject.org"),
("shell.hosted04", "shell-hosted04.vpn.fedoraproject.org"),
] + [
("shell.anitya-frontend01", "shell-anitya-frontend01.vpn.fedoraproject.org"),
("anitya.anitya-frontend01", "anitya-anitya-frontend01.vpn.fedoraproject.org"),
("shell.anitya-backend01", "shell-anitya-backend01.vpn.fedoraproject.org"),