Freeze Break Request - Declare fedmsg cert for mm2 backend

[Ralph Bean]

First one of the season!

We're getting a traceback from fedmsg-logger in the
mm2_get_internet2_netblocks script on mm-backend01.  It is complaining
that it can't find the cert it needs.

Here's a patch to our ansible repo that will tell it to use the cert
that's already on the system in that context:

Can I get two +1s to apply this and push it out to mm-backend01?

diff --git a/roles/fedmsg/base/templates/ssl.py.j2
b/roles/fedmsg/base/templates/ssl.py.j2
index aebc481..ab3e6c3 100644
--- a/roles/fedmsg/base/templates/ssl.py.j2
+++ b/roles/fedmsg/base/templates/ssl.py.j2
@@ -182,9 +182,10 @@ config = dict(
 
         ("mirrormanager2.mm-frontend01",
"mirrormanager2-mm-frontend01.%s" % suffix),
         ("shell.mm-frontend01", "shell-mm-frontend01.%s" % suffix),
-        ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
         ("shell.mm-crawler01", "shell-mm-crawler01.%s" % suffix),
         ("shell.mm-crawler02", "shell-mm-crawler02.%s" % suffix),
+        ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
+        ("mirrormanager.mm-backend01", "shell-mm-backend01.%s" %
suffix),
 
         ("shell.anitya-frontend01",
"shell-anitya-frontend01.fedoraproject.org"),
         ("anitya.anitya-frontend01",
"anitya-anitya-frontend01.fedoraproject.org"),

[Kevin Fenzi]

+1

kevin

[Pierre-Yves Chibon]

On Tue, May 12, 2015 at 08:10:37PM -0400, Ralph Bean wrote:
>  First one of the season!
>  
>  We're getting a traceback from fedmsg-logger in the
>  mm2_get_internet2_netblocks script on mm-backend01.  It is complaining
>  that it can't find the cert it needs.
>  
>  Here's a patch to our ansible repo that will tell it to use the cert
>  that's already on the system in that context:
>  
>  Can I get two +1s to apply this and push it out to mm-backend01?
>  
>  diff --git a/roles/fedmsg/base/templates/ssl.py.j2
> b/roles/fedmsg/base/templates/ssl.py.j2
>  index aebc481..ab3e6c3 100644
>  --- a/roles/fedmsg/base/templates/ssl.py.j2
>  +++ b/roles/fedmsg/base/templates/ssl.py.j2
>  @@ -182,9 +182,10 @@ config = dict(
>   
>           ("mirrormanager2.mm-frontend01",
> "mirrormanager2-mm-frontend01.%s" % suffix),
>           ("shell.mm-frontend01", "shell-mm-frontend01.%s" % suffix),
>  -        ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
>           ("shell.mm-crawler01", "shell-mm-crawler01.%s" % suffix),
>           ("shell.mm-crawler02", "shell-mm-crawler02.%s" % suffix),
>  +        ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
>  +        ("mirrormanager.mm-backend01", "shell-mm-backend01.%s" %
> suffix),
>   
>           ("shell.anitya-frontend01",
> "shell-anitya-frontend01.fedoraproject.org"),
>           ("anitya.anitya-frontend01",
> "anitya-anitya-frontend01.fedoraproject.org"), 
+1 as well

Pierre

[Ralph Bean]

On Wed, May 13, 2015 at 07:49:19AM +0200, Pierre-Yves Chibon wrote:
>  On Tue, May 12, 2015 at 08:10:37PM -0400, Ralph Bean wrote:
>  > First one of the season!
>  > 
>  > We're getting a traceback from fedmsg-logger in the
>  > mm2_get_internet2_netblocks script on mm-backend01.  It is complaining
>  > that it can't find the cert it needs.
>  > 
>  > Here's a patch to our ansible repo that will tell it to use the cert
>  > that's already on the system in that context:
>  > 
>  > Can I get two +1s to apply this and push it out to mm-backend01?
>  > 
>  > diff --git a/roles/fedmsg/base/templates/ssl.py.j2
> b/roles/fedmsg/base/templates/ssl.py.j2
>  > index aebc481..ab3e6c3 100644
>  > --- a/roles/fedmsg/base/templates/ssl.py.j2
>  > +++ b/roles/fedmsg/base/templates/ssl.py.j2
>  > @@ -182,9 +182,10 @@ config = dict(
>  >  
>  >          ("mirrormanager2.mm-frontend01",
> "mirrormanager2-mm-frontend01.%s" % suffix),
>  >          ("shell.mm-frontend01", "shell-mm-frontend01.%s" %
> suffix),
>  > -        ("shell.mm-backend01", "shell-mm-backend01.%s" %
> suffix),
>  >          ("shell.mm-crawler01", "shell-mm-crawler01.%s" %
> suffix),
>  >          ("shell.mm-crawler02", "shell-mm-crawler02.%s" %
> suffix),
>  > +        ("shell.mm-backend01", "shell-mm-backend01.%s" %
> suffix),
>  > +        ("mirrormanager.mm-backend01", "shell-mm-backend01.%s"
> % suffix),
>  >  
>  >          ("shell.anitya-frontend01",
> "shell-anitya-frontend01.fedoraproject.org"),
>  >          ("anitya.anitya-frontend01",
> "anitya-anitya-frontend01.fedoraproject.org"),
>  
>  +1 as well
>  
>  Pierre 
Thanks!  This has been all pushed out now.