mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-03-20 03:57:02 +08:00
3c12ef6aa9
Normally it's just a nitpick to not have trailing spaces on variables. However, for some things like mac address, it really matters. Bunches of buildhw's were failing ansibile because they were passing "mac address " to linux-system-roles networking and ansible was going 'huh, nope, I can't find that mac address here at all'. So, just blow all the tailing spaces away to avoid any other variables that hit this. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
62 lines
2.0 KiB
Plaintext
62 lines
2.0 KiB
Plaintext
---
|
|
# Define resources for this group of hosts here.
|
|
lvm_size: 20000
|
|
mem_size: 4096
|
|
num_cpus: 1
|
|
|
|
# for systems that do not match the above - specify the same parameter in
|
|
# the host_vars/$hostname file
|
|
|
|
tcp_ports: [ 3000, 3001 ]
|
|
|
|
ipa_host_group: bugzilla2fedmsg
|
|
ipa_host_group_desc: Service to bridge Bugzilla events into fedmsg
|
|
ipa_client_shell_groups:
|
|
- sysadmin-datanommer
|
|
- sysadmin-noc
|
|
- sysadmin-veteran
|
|
ipa_client_sudo_groups:
|
|
- sysadmin-datanommer
|
|
|
|
# These are consumed by a task in roles/fedmsg/base/main.yml
|
|
fedmsg_certs:
|
|
- service: shell
|
|
owner: root
|
|
group: sysadmin
|
|
can_send:
|
|
- logger.log
|
|
- service: bugzilla2fedmsg
|
|
owner: root
|
|
group: fedmsg
|
|
can_send:
|
|
- bugzilla.bug.new
|
|
- bugzilla.bug.update
|
|
|
|
# for fedora-messaging
|
|
username: "bugzilla2fedmsg{{ env_suffix }}"
|
|
|
|
# For the MOTD
|
|
csi_security_category: Low
|
|
csi_primary_contact: Fedmsg admins - sysadmin-datanommer-members@fedoraproject.org
|
|
csi_purpose: Run the bugzilla2fedmsg bridge to forward RH messages onto fedmsg
|
|
csi_relationship: |
|
|
A 'moksha-hub' daemon is the only thing really running here. (Don't confuse
|
|
that with the 'fedmsg-hub' running on most of our other backend machines.)
|
|
|
|
The bugzilla2fedmsg package provides a plugin to the moksha-hub that
|
|
connects out over the STOMP protocol to a 'fabric' of JBOSS FUSE brokers
|
|
living in the Red Hat DMZ. We authenticate with a cert/key pair that is
|
|
kept in /etc/pki/fedmsg/. Those brokers should push bugzilla events over
|
|
STOMP to our moksha-hub daemon. When a message arrives, we query bugzilla
|
|
about the change to get some 'more interesting' data to stuff in our
|
|
payload, then we sign the message using a fedmsg cert and fire it off to the
|
|
rest of our bus.
|
|
|
|
This service has no database, no memcached usage. It depends on those STOMP
|
|
brokers and being able to query bugzilla.rh.com.
|
|
|
|
STOMP config: /etc/moksha/production.ini
|
|
fedmsg config: /etc/fedmsg.d/
|
|
certs: /etc/pki/fedmsg
|
|
code: /usr/lib/python2.7/site-packages/bugzilla2fedmsg.py
|