ansible/playbooks/openshift-apps/the-new-hotness.yml
Aurélien Bompard d884a0f8ba
Use the combined RabbitMQ CA cert in the clients
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-04-11 15:15:45 +02:00

104 lines
3.3 KiB
YAML

---
- name: Make the app be real
hosts: os_control_stg[0]:os_control[0]
user: root
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles:
- role: rabbit/queue
queue_username: the-new-hotness{{ env_suffix }}
queue_name: the-new-hotness{{ env_suffix }}
queue_routing_keys:
- "org.release-monitoring.*.anitya.project.version.update.v2"
- "org.release-monitoring.*.anitya.project.version.update"
- "org.release-monitoring.*.anitya.project.map.new"
- "org.fedoraproject.*.buildsys.task.state.change"
queue_thresholds:
warning: 10
critical: 100
user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.hotness\..*
- role: openshift/project
project_app: the-new-hotness
project_description: Fedora-messaging consumer that listens to the-new-hotness.org and files bugzilla bugs in response.
project_appowners:
- zlopez
- role: openshift/keytab
keytab_app: the-new-hotness
keytab_key: koji-keytab
keytab_secret_name: the-new-hotness-keytab
keytab_service: the-new-hotness
keytab_host: "release-monitoring.org"
when: env == "production"
- role: openshift/keytab
keytab_app: the-new-hotness
keytab_key: koji-keytab
keytab_secret_name: the-new-hotness-keytab
keytab_service: the-new-hotness
keytab_host: "stg.release-monitoring.org"
when: env == "staging"
- role: openshift/secret-file
secret_file_app: the-new-hotness
secret_file_secret_name: the-new-hotness-fedora-messaging-ca
secret_file_key: fedora-messaging-the-new-hotness-ca.crt
secret_file_privatefile: "rabbitmq/{{env}}/ca-combined.crt"
- role: openshift/secret-file
secret_file_app: the-new-hotness
secret_file_secret_name: the-new-hotness-fedora-messaging-key
secret_file_key: fedora-messaging-the-new-hotness.key
secret_file_privatefile: "rabbitmq/{{env}}/pki/private/the-new-hotness{{env_suffix}}.key"
- role: openshift/secret-file
secret_file_app: the-new-hotness
secret_file_secret_name: the-new-hotness-fedora-messaging-cert
secret_file_key: fedora-messaging-the-new-hotness.crt
secret_file_privatefile: "rabbitmq/{{env}}/pki/issued/the-new-hotness{{env_suffix}}.crt"
- role: openshift/object
object_app: the-new-hotness
object_file: imagestream.yml
object_objectname: imagestream.yml
- role: openshift/object
object_app: the-new-hotness
object_file: service.yml
object_objectname: service.yml
- role: openshift/object
object_app: the-new-hotness
object_template: buildconfig.yml.j2
object_objectname: buildconfig.yml
- role: openshift/object
object_app: the-new-hotness
object_template: configmap.yml.j2
object_objectname: configmap.yml
- role: openshift/start-build
start_build_app: the-new-hotness
start_build_buildname: the-new-hotness-build
start_build_objectname: the-new-hotness-build
tags:
- never
- build
- role: openshift/object
object_app: the-new-hotness
object_template: deploymentconfig.yml.j2
object_objectname: deploymentconfig.yml
- role: openshift/rollout
rollout_app: the-new-hotness
rollout_dcname: the-new-hotness
tags:
- never
- rollout