mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-05-01 22:11:01 +08:00
2ec055db6f
This will unify all the handlers to use first uppercase letter for ansible-lint to stop complaining. I went through all `notify:` occurrences and fixed them by running ``` set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep -rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g" ``` Then I went through all the changes and removed the ones that wasn't expected to be changed. Fixes https://pagure.io/fedora-infrastructure/issue/12391 Signed-off-by: Michal Konecny <mkonecny@redhat.com>
138 lines
3.8 KiB
YAML
138 lines
3.8 KiB
YAML
---
|
|
# Tasks to set up fedmsg-gateway-slave
|
|
|
|
|
|
- name: Install needed packages
|
|
ansible.builtin.package:
|
|
state: present
|
|
name:
|
|
- fedmsg-gateway
|
|
- stunnel
|
|
tags:
|
|
- packages
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
when: (ansible_distribution == 'RedHat' and ansible_distribution_major_version|int < 8) or (ansible_distribution_major_version|int < 30 and ansible_distribution == 'Fedora')
|
|
|
|
- name: Install needed packages in a python 3 manner
|
|
ansible.builtin.package:
|
|
state: present
|
|
name:
|
|
- python3-fedmsg
|
|
- stunnel
|
|
tags:
|
|
- packages
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
when: (ansible_distribution_major_version|int >= 30 and ansible_distribution == 'Fedora') or (ansible_distribution == 'RedHat' and ansible_distribution_major_version|int >= 8)
|
|
|
|
|
|
# - name: Apply fixing patch
|
|
# patch: src=fixup.patch dest=/usr/lib/python2.7/site-packages/fedmsg/consumers/__init__.py
|
|
# tags:
|
|
# - packages
|
|
# - fedmsg/gateway
|
|
# - patch
|
|
|
|
- name: Copy in empty endpoints.py and gateway.py
|
|
ansible.builtin.copy: src={{item}} dest=/etc/fedmsg.d/{{item}}
|
|
with_items:
|
|
- endpoints.py
|
|
- gateway.py
|
|
tags:
|
|
- fedmsgdconfig
|
|
- fedmsg
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
|
|
- name: Install /etc/fedmsg.d/fedmsg-gateway-slave.py
|
|
ansible.builtin.template: src={{ item.file }}
|
|
dest={{ item.dest }}
|
|
owner=root group=root mode=0644
|
|
with_items:
|
|
- { file: fedmsg-gateway-slave.py.j2, dest: /etc/fedmsg.d/fedmsg-gateway-slave.py }
|
|
tags:
|
|
- fedmsgdconfig
|
|
- fedmsg
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
|
|
|
|
# Stunnel specific bits
|
|
|
|
- name: Create directories
|
|
ansible.builtin.file: path=/etc/{{ item }} state=directory
|
|
with_items:
|
|
- stunnel
|
|
tags:
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
|
|
- name: Install stunnel service definition
|
|
ansible.builtin.copy: src=stunnel.service
|
|
dest=/usr/lib/systemd/system/stunnel.service
|
|
owner=root group=root mode=0644
|
|
notify:
|
|
- Reload systemd
|
|
- Restart stunnel
|
|
tags:
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
|
|
- name: Ensure old stunnel init file is gone
|
|
ansible.builtin.file: dest=/etc/init.d/stunnel/stunnel.init state=absent
|
|
tags:
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
|
|
- name: Install stunnel.conf
|
|
ansible.builtin.template: src={{ item.file }}
|
|
dest={{ item.dest }}
|
|
owner=root group=root mode=0600
|
|
with_items:
|
|
- { file: stunnel-conf.j2, dest: /etc/stunnel/stunnel.conf }
|
|
notify: Restart stunnel
|
|
tags:
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
|
|
- name: Put our combined cert in place
|
|
ansible.builtin.copy: >
|
|
src={{private}}/files/httpd/wildcard-2024.fedoraproject.org.combined.cert
|
|
dest=/etc/pki/tls/certs/wildcard-2024.fedoraproject.org.combined.cert
|
|
owner=root group=root mode=0644
|
|
notify: Restart stunnel
|
|
tags:
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
|
|
- name: Start the gateway for raw zeromq traffic
|
|
service: name=fedmsg-gateway state=started enabled=yes
|
|
tags:
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
when: (ansible_distribution == 'RedHat' and ansible_distribution_major_version|int < 8) or (ansible_distribution_major_version|int < 30 and ansible_distribution == 'Fedora')
|
|
|
|
- name: Start the gateway for raw zeromq traffic
|
|
service: name=fedmsg-gateway-3 state=started enabled=yes
|
|
tags:
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
when: (ansible_distribution_major_version|int >= 30 and ansible_distribution == 'Fedora') or (ansible_distribution == 'RedHat' and ansible_distribution_major_version|int >= 8)
|
|
|
|
- name: Start stunnel for websockets traffic
|
|
service: name=stunnel state=started enabled=yes
|
|
tags:
|
|
- fedmsg/gateway
|
|
- fedmsg/gateway/slave
|
|
|
|
- name: Ensure that nrpe has rights to monitor us
|
|
user:
|
|
name: nrpe
|
|
append: yes
|
|
groups:
|
|
- fedmsg
|
|
ignore_errors: true
|
|
tags:
|
|
- fedmsgmonitor
|