opendev/system-config
Code Issues Proposed changes
52943f7094
system-config/playbooks/service-review-dev.yaml

20 lines
1.2 KiB
YAML
Raw Normal View History

Add review-dev01.opendev.org Add a new review-dev server on the opendev domain with LE support enabled. Depends-On: https://review.opendev.org/705661 Change-Id: Ie32124cd617e9986602301f230e83bb138524fdf
2020-02-04 07:01:55 -06:00
- hosts: "review-dev:!disabled"
name: "Configure gerrit on review-dev"
Run a gerrit container on review-dev01 This runs gerrit in a container on review-dev01 using podman. Remove an unused web_server.py file that we found from copying it from puppet to ansible. Change-Id: I399d3cf8471bc8063022b0db0ff81718b2ee2941
2019-01-31 09:26:38 -08:00
roles:
Switch back to docker for gerrit and nodepool-builder We rolled out review-dev with podman and it worked fine for us. It worked less fine for nodepool-builder, although we still might be able to solve it. Maybe right now isn't the time to do this switch. Gitea, gitea-lb and zuul-registry all use docker instead of podman. The only thing running with podman right now is review-dev. We can do a manual cleanup of podman there before runnign this to keep things simple: - stop gerrit service - uninstall podman and podman-compose - uninstall podman ppa config - uninstall pip3 Then let ansible install docker and docker compose up. Story: #2007407 Task: #39062 Change-Id: I9bf99b18559d49d11ba99a96f02a4a45a4f65a86
2020-03-14 11:05:31 -05:00
- install-docker
Run a gerrit container on review-dev01 This runs gerrit in a container on review-dev01 using podman. Remove an unused web_server.py file that we found from copying it from puppet to ansible. Change-Id: I399d3cf8471bc8063022b0db0ff81718b2ee2941
2019-01-31 09:26:38 -08:00
- role: gerrit
gerrit_ssh_rsa_key_contents: "{{ gerrit_dev_ssh_rsa_key_contents }}"
gerrit_ssh_rsa_pubkey_contents: "{{ gerrit_dev_ssh_rsa_pubkey_contents }}"
Plumb through secure.config contents While we're in there - fix a misspelling. Remove auth.restTokenPrivateKey from config file. It hasn't been used since 2.6: https://gerrit-review.googlesource.com/c/gerrit/+/70770 Change-Id: I94405cf870d57780b86f30c2bddb573ff15c05bc
2019-10-29 12:03:01 +09:00
gerrit_project_ssh_rsa_key_contents: "{{ gerrit_dev_project_ssh_rsa_key_contents }}"
gerrit_project_ssh_rsa_pubkey_contents: "{{ gerrit_dev_project_ssh_rsa_pubkey_contents }}"
gerrit_replication_ssh_rsa_key_contents: "{{ gerrit_dev_replication_ssh_rsa_key_contents }}"
gerrit_replication_ssh_rsa_pubkey_contents: "{{ gerrit_dev_replication_ssh_rsa_pubkey_contents }}"
Run a gerrit container on review-dev01 This runs gerrit in a container on review-dev01 using podman. Remove an unused web_server.py file that we found from copying it from puppet to ansible. Change-Id: I399d3cf8471bc8063022b0db0ff81718b2ee2941
2019-01-31 09:26:38 -08:00
gerrit_database_config_section: "{{ gerrit_dev_database_config_section }}"
Add launchpadlib credentials to gerrit ansible Gerrit needs to be able to update bugs on launchpad. For that we need credentials. Change-Id: I967ee8715e03298a2ab021f37e17dc5fbde6fee6
2019-10-25 11:59:05 +09:00
gerrit_lp_access_token: "{{ gerrit_dev_lp_access_token }}"
gerrit_lp_access_secret: "{{ gerrit_dev_lp_access_secret }}"
gerrit_lp_consumer_key: "{{ gerrit_dev_lp_consumer_key }}"
Plumb through storyboard hiera data NOTE: We should update storyboard-dev to be driven by letsencrypt first, otherwise we need to plumb in the self-signed cert, which gets weird with needing to import it for java which in this case is in the container image, meaning we either need to bind-mount java certs in or build it in to the image. Change-Id: Ida9dd15ca8262925c54579660fe9c16e2b573907
2019-10-29 10:27:33 +09:00
gerrit_storyboard_token: "{{ gerrit_dev_storyboard_token }}"
Plumb through secure.config contents While we're in there - fix a misspelling. Remove auth.restTokenPrivateKey from config file. It hasn't been used since 2.6: https://gerrit-review.googlesource.com/c/gerrit/+/70770 Change-Id: I94405cf870d57780b86f30c2bddb573ff15c05bc
2019-10-29 12:03:01 +09:00
gerrit_email_private_key: "{{ gerrit_dev_email_private_key }}"
gerrit_mysql_host: "{{ gerrit_dev_mysql_host }}"
gerrit_mysql_password: "{{ gerrit_dev_mysql_password }}"
Copy Permalink