infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions
ansible/inventory/group_vars/copr_back_dev

47 lines
1.7 KiB
Text
Raw Normal View History

Unify copr prod and dev playbooks
2014-09-05 15:38:22 +02:00
---
[WIP] Copr playbooks refactoring using ansible roles, new role for copr-keygen
2014-10-10 12:35:14 +02:00
_lighttpd_conf_src: "lighttpd/lighttpd_dev.conf"
[copr] backend: new options in /etc/copr/copr-be.conf
2014-11-25 18:51:28 +01:00
Fixup copr-back
2015-06-23 08:40:19 +00:00
copr_nova_auth_url: "https://fedorainfracloud.org:5000/v2.0"
copr: use correct tenant id
2015-11-06 13:23:23 +01:00
copr_nova_tenant_id: "a6ff2158641c439a8426d7facab45437"
[copr] moving to the new cloud ...
2015-04-02 12:59:59 +02:00
copr_nova_tenant_name: "coprdev"
[copr] moving to the new cloud; joined copr-be.conf src template
2015-04-02 15:19:52 +02:00
copr_nova_username: "copr"
[copr] moving to the new cloud ...
2015-04-02 12:59:59 +02:00
builder images for copr updated
2016-07-12 19:13:54 +02:00
copr_builder_image_name: "builder-f24"
use tmpfs for mock chroot's as outlined here: http://miroslav.suchy.cz/blog/archives/2015/05/28/increase_mock_performance_-_build_packages_in_memory/index.html
2015-06-01 17:53:41 +02:00
copr_builder_flavor_name: "ms2.builder"
[copr] wrong group_vars, fix
2015-04-03 18:04:56 +02:00
copr_builder_network_name: "coprdev-net"
[copr] pass key_name to builder pb
2015-04-03 17:02:53 +02:00
copr_builder_key_name: "buildsys"
[copr][backend] different security groups for builder VMs in copr and coprdev
2015-05-19 15:43:37 +02:00
copr_builder_security_groups: "ssh-anywhere-coprdev,default,ssh-from-persistent-coprdev"
[copr] moving to the new cloud ...
2015-04-02 12:59:59 +02:00
copr: builders: cut the image name definition to group_vars This will allow us to temporarily affect staging instance only, and test that the images are actually OK. We should though put the timestamp to the image name.
2019-08-11 19:12:24 +02:00
copr_builder_images:
copr: be-dev: update images once more - configure mock to use --pipe for nspawn, 07c2ef652 - raise FILENO in nspawn, 91b83023b
2020-01-17 14:25:11 +01:00
x86_64: copr-builder-x86_64-f31-20200117_120726
ppc64le: copr-builder-ppc64le-f31-20200117_132023
copr: previous F31 aarch64 builder image was created incorrectly
2019-11-26 14:12:56 +01:00
aarch64: copr-builder-20191126_114948
copr: aws x86_64 spawner playbook
2019-11-19 13:57:21 +01:00
aws:
copr: aws-builders: fixed-up /var/lib/copr-rpmbuild dirs
2020-01-17 15:26:51 +01:00
x86_64: ami-009d97ed84d6b6fba # copr-builder-x86_64-f31-20200117_142517
aarch64: ami-05694f6d50e78cb91 # copr-builder-aarch64-f31-20200117_142544
copr: builders: cut the image name definition to group_vars This will allow us to temporarily affect staging instance only, and test that the images are actually OK. We should though put the timestamp to the image name.
2019-08-11 19:12:24 +02:00
[copr][backend] enable gpg sign for backend
2015-08-03 13:17:26 +02:00
do_sign: "true"
[copr] backend: add "spawn_in_advance" variables into group_vars
2014-11-26 15:19:22 +01:00
copr: use correct tenant id
2015-11-06 13:23:23 +01:00
spawn_in_advance: "false"
Switch `frontend_base_url` on dev to https copr-fe-dev now forces https, so the communication be-dev -> fe-dev stopped working because of http links in our config.
2019-01-11 14:37:24 +01:00
frontend_base_url: "https://copr-fe-dev.cloud.fedoraproject.org"
Add CSI vars from Juan Jimenez-Anca. Thanks!
2015-11-20 20:19:56 +00:00
copr: backend: flip to /usr/bin/python3 ansible interpreter
2019-06-06 08:58:07 +02:00
Add CSI vars from Juan Jimenez-Anca. Thanks!
2015-11-20 20:19:56 +00:00
# These variables are pushed into /etc/system_identification by the base role.
# Groups and individual hosts should override them with specific info.
# See http://infrastructure.fedoraproject.org/csi/security-policy/
csi_security_category: Moderate
remove clime from Copr primary contacts
2019-04-01 10:16:08 +02:00
csi_primary_contact: "msuchy (mirek), frostyx, dturecek, praiskup IRC #fedora-admin, #fedora-buildsys"
Add CSI vars from Juan Jimenez-Anca. Thanks!
2015-11-20 20:19:56 +00:00
csi_purpose: Provide the testing environment of copr's backend
csi_relationship: This host is the testing environment for the cloud infrastructure of copr's backend
copr: rework letsencrypt We need two-phase configuration for Let's Encrypt: 1. initialize; the letsencrypt automation, this is happening only once per VM (when it is spawned) 2. periodic; using certbot-renew.timer. Both those phases are now wrapped into copr/certbot role. Phase 1. needs to be done before the web-server is started (so include the role on appropriate place in the playbook), so we can do 'certbot --standalone' (bounds to port 80). Phase 2. is accomplished using the running web-server, using 'certbot renew --webroot'. If (and only if) the certificate is renewed, web server needs to be restarted (and lighttpd needs to have post-processed certificate format). So we also need the deploy hook script in hand (two actually, lighttpd/httpd) so 'certbot renew' automatically does what we expect it to do.
2019-07-19 11:01:40 +02:00
# consumed by roles/copr/certbot
letsencrypt:
predefined_deploy_script: lighttpd
certificates:
copr-be-dev.cloud.fedoraproject.org:
domains:
- copr-be-dev.cloud.fedoraproject.org
challenge_dir: /var/lib/copr/public_html
mail: copr-devel@lists.fedorahosted.org
Copy permalink