Freeze Break Request - give compose fedmsg certs to s390-koji01

[Pierre-Yves Chibon]

On Mon, Aug 03, 2015 at 11:43:47AM -0400, Ralph Bean wrote:
> The s390 koji hub was rebuilt and ansibilized shortly before freeze
> set in.  It had a fedmsg_certs dictionary defined in the koji ansible
> group which gave it the certs it needed for koji stuff, but it was
> missing an extra cert definition for the compose process it carries
> out.
> 
> This patch over writes that original var with a setup specific to the
> s390 node.
> 
> Can I get two +1s to push this out?
> 
> 
> diff --git a/inventory/host_vars/s390-koji01.qa.fedoraproject.org b/inventory/host_vars/s390-koji01.qa.fedoraproject.org
> index 795fa9f..e355230 100644
> --- a/inventory/host_vars/s390-koji01.qa.fedoraproject.org
> +++ b/inventory/host_vars/s390-koji01.qa.fedoraproject.org
> @@ -34,3 +34,41 @@ koji_server_url: "http://s390.koji.fedoraproject.org/kojihub"
>  koji_weburl: "http://s390.koji.fedoraproject.org/koji"
>  
>  fedmsg_koji_instance: s390
> +
> +# Overload the fedmsg_certs definition from the ansible koji group, since the
> +# s390 hub *also* does compose stuff, not just koji stuff.
> +fedmsg_certs:
> +- service: shell
> +  owner: root
> +  group: sysadmin
> +- service: koji
> +  owner: root
> +  group: apache
> +  can_send:
> +  - buildsys.build.state.change
> +  - buildsys.package.list.change
> +  - buildsys.repo.done
> +  - buildsys.repo.init
> +  - buildsys.rpm.sign
> +  - buildsys.tag
> +  - buildsys.task.state.change
> +  - buildsys.untag
> +- service: bodhi
> +  owner: root
> +  group: masher
> +  can_send:
> +  - compose.branched.complete
> +  - compose.branched.mash.complete
> +  - compose.branched.mash.start
> +  - compose.branched.pungify.complete
> +  - compose.branched.pungify.start
> +  - compose.branched.rsync.complete
> +  - compose.branched.rsync.start
> +  - compose.branched.start
> +  - compose.epelbeta.complete
> +  - compose.rawhide.complete
> +  - compose.rawhide.mash.complete
> +  - compose.rawhide.mash.start
> +  - compose.rawhide.rsync.complete
> +  - compose.rawhide.rsync.start
> +  - compose.rawhide.start

+1 as well,

Pierre
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 181 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20150803/17070685/attachment.sig>