Merge branch 'master' of /git/ansible

inventory/group_vars/mbs-frontend

@@ -24,8 +24,8 @@ fas_client_groups: sysadmin-noc,sysadmin-releng
 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
 - service: mbs
-  owner: root
+  owner: fedmsg
-  group: apache 
+  group: fedmsg
   can_send:
   - mbs.module.state.change
   # Only the backend sends this message..

inventory/group_vars/mbs-frontend-stg

@@ -24,8 +24,8 @@ fas_client_groups: sysadmin-noc,sysadmin-releng
 # These are consumed by a task in roles/fedmsg/base/main.yml
 fedmsg_certs:
 - service: mbs
-  owner: root
+  owner: fedmsg
-  group: apache 
+  group: fedmsg
   can_send:
   - mbs.module.state.change
   # Only the backend sends this message..

playbooks/clear_memcached.yml

@@ -1,5 +1,5 @@
 - name: clear memcache
-  hosts: memcached
+  hosts: memcached:memcached-stg
   serial: 1
 
   tasks:

roles/mbs/common/tasks/main.yml

@@ -15,6 +15,15 @@
   - mbs
   - mbs/common
 
+- name: kill development config
+  file: path=/etc/fedmsg.d/module_build_service.py state=absent
+  notify:
+  - restart apache
+  - restart fedmsg-hub
+  tags:
+  - mbs
+  - mbs/common
+
 - name: copy app configuration
   template: >
     src=config.py dest=/etc/module-build-service/config.py
@@ -26,6 +35,17 @@
   - mbs
   - mbs/common
 
+- name: copy fedmsg configuration
+  template: >
+    src=mbs-fedmsg.py dest=/etc/fedmsg.d/mbs-fedmsg.py
+    owner=root group=fedmsg mode=0644
+  notify:
+  - restart apache
+  - restart fedmsg-hub
+  tags:
+  - mbs
+  - mbs/common
+
 - name: copy client secrets
   template: >
     src=client_secrets.json.{{env}} dest=/etc/module-build-service/client_secrets.json

roles/mbs/common/templates/mbs-fedmsg.py

@@ -0,0 +1,7 @@
+import socket
+
+config = {
+    # So that the MBS can find it's cert in /etc/fedmsg.d/ssl.py
+    'cert_prefix': 'mbs',
+    'name': 'mbs-%s' % socket.gethostname(),
+}

roles/mbs/frontend/tasks/main.yml

@@ -4,7 +4,7 @@
 - name: disable the scheduler on the frontend
   copy: >
     src={{ item }} dest=/etc/fedmsg.d/{{ item }}
-    owner=apache group=apache mode=0600
+    owner=fedmsg group=fedmsg mode=0644
   with_items:
   - mbs-scheduler.py
   notify:
@@ -41,6 +41,7 @@
   with_items:
   - httpd_can_network_connect_db
   - httpd_can_network_memcache
+  - httpd_can_network_connect
   - httpd_can_sendmail
   tags:
   - mbs

roles/opendkim/files/opendkim.conf

@@ -131,3 +131,7 @@ OversignHeaders	From
 ##  caching service. Useful if the nameserver being used by the filter is
 ##  not local.
 # QueryCache	yes
+#
+# We need to increase the default header size because notifs adds a X-fedmsg header for
+# each message in a digest.
+MaximumHeaders 262144

roles/openqa/dispatcher/templates/schedule.conf.j2

@@ -13,6 +13,8 @@ prod_rdb_report: true
 resultsdb_url: http://resultsdb-stg01.qa.fedoraproject.org/resultsdb_api/api/v2.0/
 wiki_hostname: stg.fedoraproject.org
 [consumers]
+# as we use the production scheduler
+prod_oqa_hostname: localhost
 stg_oqa_hostname: localhost
 stg_oqa_baseurl: https://{{ external_hostname|default(ansible_nodename) }}
 stg_wiki_hostname: stg.fedoraproject.org