## DO NOT SORT THIS FILE ALPHABETICALLY! IT IS ORGANIZED BY TOPIC AREA!

# here we keep variables that are the same between prod and lab
# openQA servers. these are mostly things that are set as variables
# in the plays so we can change them over time and also so the plays
# can be used for non-infra deployments.
ipa_client_shell_groups:
  - fi-apprentice
  - sysadmin-noc
  - sysadmin-qa
  - sysadmin-veteran
ipa_client_sudo_groups:
  - sysadmin-qa
ipa_host_group: openqa-servers
ipa_host_group_desc: OpenQA servers

# fedora-messaging email error reporting settings
openqa_amqp_mailto: ["adamwill@fedoraproject.org", "lruzicka@fedoraproject.org"]

# fedora-messaging general settings
# we need this for all our fedora-messaging consumers as they are not
# allowed to create queues on the infra AMQP broker, by broker config
openqa_amqp_passive: true
openqa_amqp_publisher_exchange: "amq.topic"
openqa_amqp_smtp: bastion

# fedora-messaging identity and certificate settings
openqa_amqp_prod_cacertfile: "/etc/fedora-messaging/cacert.pem"
openqa_amqp_prod_certfile: "/etc/pki/fedora-messaging/{{ openqa_amqp_prod_username }}-cert.pem"
openqa_amqp_prod_keyfile: "/etc/pki/fedora-messaging/{{ openqa_amqp_prod_username }}-key.pem"
openqa_amqp_prod_url: "amqps://{{ openqa_amqp_prod_username }}:@rabbitmq.fedoraproject.org/%2Fpubsub"
openqa_amqp_prod_username: "openqa"
openqa_amqp_stg_cacertfile: "/etc/fedora-messaging/stg-cacert.pem"
openqa_amqp_stg_certfile: "/etc/pki/fedora-messaging/{{ openqa_amqp_stg_username }}-cert.pem"
openqa_amqp_stg_keyfile: "/etc/pki/fedora-messaging/{{ openqa_amqp_stg_username }}-key.pem"
openqa_amqp_stg_url: "amqps://{{ openqa_amqp_stg_username }}:@rabbitmq.stg.fedoraproject.org/%2Fpubsub"
openqa_amqp_stg_username: "openqa.stg"

# the "this" variables used hereafter are defined in the non-generic group_vars
# files as pointers back to the appropriate ones above. we have this setup
# because sometimes the stg deployment needs to listen on prod,
# so sometimes we use the "this" vars and sometimes we just use the prod ones.

# fedora-messaging publisher settings (for openQA itself)
openqa_amqp_publisher_cacertfile: "{{ openqa_amqp_this_cacertfile }}"
openqa_amqp_publisher_certfile: "{{ openqa_amqp_this_certfile }}"
openqa_amqp_publisher_keyfile: "{{ openqa_amqp_this_keyfile }}"
openqa_amqp_publisher_prefix: org.fedoraproject.{{ deployment_type }}
openqa_amqp_publisher_url: "{{ openqa_amqp_this_url }}"

# fedora-messaging job scheduler settings: most of these are the same
# for prod and stg as they use the same account to listen for prod
# messages on prod rabbitmq. Only the queue names differs.
openqa_amqp_scheduler_cert: "{{ openqa_amqp_prod_certfile }}"
openqa_amqp_scheduler_key: "{{ openqa_amqp_prod_keyfile }}"
openqa_amqp_scheduler_routing_keys: ["org.fedoraproject.prod.pungi.compose.status.change", "org.fedoraproject.prod.bodhi.update.status.testing.koji-build-group.build.complete", "org.fedoraproject.prod.coreos.build.state.change"]
openqa_amqp_scheduler_url: "{{ openqa_amqp_prod_url }}"

# fedora-messaging reporter settings (for both wiki/resultsdb reporters)
openqa_amqp_reporter_cacert: "{{ openqa_amqp_this_cacertfile }}"
openqa_amqp_reporter_cert: "{{ openqa_amqp_this_certfile }}"
openqa_amqp_reporter_key: "{{ openqa_amqp_this_keyfile }}"
openqa_amqp_reporter_url: "{{ openqa_amqp_this_url }}"

# fedora-messaging resultsdb reporter settings
openqa_amqp_resultsdb_reporter_queue: "{{ openqa_amqp_this_username }}_resultsdb_reporter"
openqa_amqp_resultsdb_reporter_routing_keys:
  - "org.fedoraproject.{{ deployment_type }}.openqa.job.done"
  - "org.fedoraproject.{{ deployment_type }}.openqa.job.create"
  - "org.fedoraproject.{{ deployment_type }}.openqa.job.restart"

# fedora-messaging wiki reporter settings
openqa_amqp_wiki_reporter_queue: "{{ openqa_amqp_this_username }}_wiki_reporter"
openqa_amqp_wiki_reporter_routing_keys: ["org.fedoraproject.{{ deployment_type }}.openqa.job.done"]

openqa_assetsize: 500
openqa_assetsize_aarch64: 350
openqa_assetsize_updates: 250
# stg and prod use the same database server
openqa_dbhost: db-openqa01.iad2.fedoraproject.org
openqa_email: adamwill@fedoraproject.org
openqa_fullname: Adam Williamson
openqa_hostname: localhost
openqa_nickname: adamwill
openqa_userid: http://adamwill.id.fedoraproject.org/
primary_auth_source: ipa
# http and NFS
tcp_ports: [80, 2049]