From b6bf597a91ef0344dc6c53e684c92c6939699e02 Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Wed, 30 Apr 2025 09:44:39 -0700 Subject: [PATCH] riscv secondary koji: add manual script to generate builder keytabs This script will generate a list of builder keytabs and place them on the riscv secondary hub where they can be distributed to builders. Signed-off-by: Kevin Fenzi --- playbooks/manual/riscv-keytabs.yml | 46 ++++++++++++++++++++++++++++++ 1 file changed, 46 insertions(+) create mode 100644 playbooks/manual/riscv-keytabs.yml diff --git a/playbooks/manual/riscv-keytabs.yml b/playbooks/manual/riscv-keytabs.yml new file mode 100644 index 0000000000..06769df7c4 --- /dev/null +++ b/playbooks/manual/riscv-keytabs.yml @@ -0,0 +1,46 @@ +- name: make some keytabs + hosts: riscv-koji01.iad2.fedoraproject.org + + vars_files: + - /srv/web/infra/ansible/vars/global.yml + - "/srv/private/ansible/vars.yml" + - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml + + tasks: + + - name: create directory to store keytabs + ansible.builtin.file: + state: directory + path: /etc/builder-keytabs + mode: "700" + owner: root + group: root + + - name: make all the keytabs for builders + include_role: + name: keytab/service + vars: + kt_location: "/etc/builder-keytabs/{{ item }}.keytab" + service: compile-riscv + host: "{{ item }}" + with_items: + - buildhw-riscv-01.fedoraproject.org + - buildhw-riscv-02.fedoraproject.org + - buildhw-riscv-03.fedoraproject.org + - buildhw-riscv-04.fedoraproject.org + - buildhw-riscv-05.fedoraproject.org + - buildhw-riscv-06.fedoraproject.org + - buildhw-riscv-07.fedoraproject.org + - buildhw-riscv-08.fedoraproject.org + - buildhw-riscv-09.fedoraproject.org + - buildhw-riscv-10.fedoraproject.org + - buildhw-riscv-11.fedoraproject.org + - buildhw-riscv-12.fedoraproject.org + - buildhw-riscv-13.fedoraproject.org + - buildhw-riscv-14.fedoraproject.org + - buildhw-riscv-15.fedoraproject.org + - buildhw-riscv-16.fedoraproject.org + - buildhw-riscv-17.fedoraproject.org + - buildhw-riscv-18.fedoraproject.org + - buildhw-riscv-19.fedoraproject.org + - buildhw-riscv-20.fedoraproject.org