Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

add stg builders in createrepo channel ability to see repos so they can run newrepos ok. ticket 5646

Browse source
This commit is contained in:
Kevin Fenzi 2016-12-23 18:43:43 +00:00
parent 63f3ec7ed6
commit ce797cb39e
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
roles/kojipkgs/files/squid.conf
View file

@ -38,6 +38,8 @@ acl Safe_ports port 443 # https
acl CONNECT method CONNECT
acl our_sites dstdomain kojipkgs.fedoraproject.org kojipkgs01.phx2.fedoraproject.org
acl phx2 src 10.5.125.0/24 10.5.127.0/24 10.5.129.0/24
# The stg builders in the createrepo channel need access to repos
acl phx2-stg src 10.5.126.14/32 10.5.126.223/32 10.5.126.224/32 10.5.126.225/32 10.5.126.226/32
acl pdc src 10.5.126.134/32
acl repo_url urlpath_regex -i ^/repo/
acl kojipkgs urlpath_regex -i \.(rpm|log|sig)$
@ -48,8 +50,9 @@ acl compose urlpath_regex -i ^/compose/
# Here is where we use the above acls
#
# Allow phx2 to repos dir and deny everyone else
# Allow phx2 and stg builders in the createrepo channel to repos dir and deny everyone else
http_access allow phx2 repo_url
http_access allow phx2-stg repo_url
http_access deny repo_url
# Only allow cachemanager from localhost