releng: add config.toml and certs for pungi fedora-messaging

This is needed on compose-rawhide01 at least to have pungi emit
fedora-messages about it's compose progress.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

roles/releng/tasks/main.yml

@@ -197,6 +197,46 @@
   copy: src="epel8-playground" dest=/etc/cron.d/epel8-playground
   when: inventory_hostname.startswith('branched-composer.iad2')
 
+- name: Deploy the fedora-messaging CA
+  copy:
+    src: "{{ private }}/files/rabbitmq/{{env}}/pki/ca.crt"
+    dest: /etc/pki/fedora-messaging/rabbitmq-ca.crt
+    mode: 0644
+    owner: apache
+    group: apache
+  tags:
+  - bodhi
+
+- name: Deploy the fedora-messaging cert
+  copy:
+    src: "{{ private }}/files/rabbitmq/{{env}}/pki/issued/pungi{{env_suffix}}.crt"
+    dest: /etc/pki/fedora-messaging/rabbitmq-pungi.crt
+    mode: 0644
+    owner: apache
+    group: apache
+  tags:
+  - bodhi
+
+- name: Deploy the fedora-messaging key
+  copy:
+    src: "{{ private }}/files/rabbitmq/{{env}}/pki/private/bodhi{{env_suffix}}.key"
+    dest: /etc/pki/fedora-messaging/rabbitmq-pungi.key
+    mode: 0600
+    owner: apache
+    group: apache
+  tags:
+
+- name: Install fedora-messaging config
+  template:
+    src: fedora-messaging.toml.j2
+    dest: /etc/fedora-messaging/config.toml
+    owner: apache
+    group: apache
+    mode: 0600
+  tags:
+  - config
+  - releng
+
 - name: install compose /etc/httpd/conf.d/compose.conf file
   copy: >
     src="compose.conf"

roles/releng/templates/fedora-messaging.toml.j2

@@ -0,0 +1,37 @@
+amqp_url = "amqps://pungi{{ env_suffix }}:@rabbitmq{{ env_suffix }}.fedoraproject.org/%2Fpubsub"
+
+{% if env == "staging" %}
+topic_prefix = "org.fedoraproject.stg"
+{% else %}
+topic_prefix = "org.fedoraproject.prod"
+{% endif %}
+
+publish_exchange = "amq.topic"
+passive_declares = true
+
+[tls]
+ca_cert = "/etc/pki/rabbitmq/ca/rabbitmq-ca.crt"
+keyfile = "/etc/pki/rabbitmq/key/rabbitmq-pungi.key"
+certfile = "/etc/pki/rabbitmq/crt/rabbitmq-pungi.crt"
+
+[client_properties]
+app = "pungi"
+
+[qos]
+prefetch_size = 0
+prefetch_count = 25
+
+[log_config]
+version = 1
+disable_existing_loggers = true
+[log_config.formatters.simple]
+format = "%(asctime)s [%(name)s %(levelname)s] %(message)s"
+datefmt = "%Y-%m-%d %H:%M:%S"
+[log_config.handlers.console]
+class = "logging.StreamHandler"
+formatter = "simple"
+stream = "ext://sys.stdout"
+[log_config.loggers.fedora_messaging]
+level = "INFO"
+propagate = false
+handlers = ["console"]