From d2ed67db1cc2fbb74d60bdac9a62e9aac411570e Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Wed, 29 May 2024 13:12:58 -0700 Subject: [PATCH] kanban.qa: add site to proxies. We have to use letsencrypt here because this is not a direct fedoraproject.org site, so it can't use our wildcard cert. This may break our certbot setup, but will give it a try. Signed-off-by: Kevin Fenzi --- playbooks/include/proxies-reverseproxy.yml | 11 +++++++++++ playbooks/include/proxies-websites.yml | 8 ++++++++ 2 files changed, 19 insertions(+) diff --git a/playbooks/include/proxies-reverseproxy.yml b/playbooks/include/proxies-reverseproxy.yml index 408f26807f..88914f60d5 100644 --- a/playbooks/include/proxies-reverseproxy.yml +++ b/playbooks/include/proxies-reverseproxy.yml @@ -925,3 +925,14 @@ keephost: true ocp4: true tags: openscanhub + + - role: httpd/reverseproxy + website: kanban.qa.fedoraproject.org + destname: kanban + balancer_name: apps-ocp + balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_stg, ocp_nodes) }}" + targettype: openshift + keephost: true + ocp4: true + tags: + - kanban diff --git a/playbooks/include/proxies-websites.yml b/playbooks/include/proxies-websites.yml index 64f1139594..305219589d 100644 --- a/playbooks/include/proxies-websites.yml +++ b/playbooks/include/proxies-websites.yml @@ -1179,3 +1179,11 @@ cert_name: "{{wildcard_cert_name}}" tags: - openscanhub + + - role: httpd/website + site_name: "kanban.qa{{ env_suffix }}.fedoraproject.org" + ssl: true + sslonly: true + certbot: true + tags: + - kanban