static: add releases.openstack.org site

This adds the site to publish from

 /afs/openstack.org/project/releases.openstack.org

Change-Id: Ia91deb9a51441ac9974137ed39fc5a185689a11c
Task: #37724
Story: #2006598
This commit is contained in:
Ian Wienand 2020-02-21 10:14:05 +11:00
parent 8ae783ac5a
commit 047eae459d
5 changed files with 70 additions and 2 deletions

View File

@ -11,6 +11,8 @@ letsencrypt_certs:
- security.openstack.org
static01-specs-openstack-org:
- specs.openstack.org
static01-releases-openstack-org:
- releases.openstack.org
static01-tarballs-opendev-org:
- tarballs.opendev.org
static01-tarballs-openstack-org:

View File

@ -50,6 +50,9 @@
- name: letsencrypt updated static01-security-openstack-org
include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
- name: letsencrypt updated static01-releases-openstack-org
include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml
- name: letsencrypt updated static01-tarballs-opendev-org
include_tasks: roles/letsencrypt-create-certs/handlers/restart_apache.yaml

View File

@ -0,0 +1,41 @@
Define AFS_ROOT /afs/openstack.org/project/releases.openstack.org
<VirtualHost *:80>
ServerName releases.openstack.org
RewriteEngine On
RewriteRule ^/(.*) https://releases.openstack.org/$1 [last,redirect=permanent]
LogLevel warn
ErrorLog /var/log/apache2/releases.openstack.org_error.log
CustomLog /var/log/apache2/releases.openstack.org_access.log combined
ServerSignature Off
</VirtualHost>
<IfModule mod_ssl.c>
<VirtualHost *:443>
ServerName releases.openstack.org
DocumentRoot ${AFS_ROOT}
SSLCertificateFile /etc/letsencrypt-certs/releases.openstack.org/releases.openstack.org.cer
SSLCertificateKeyFile /etc/letsencrypt-certs/releases.openstack.org/releases.openstack.org.key
SSLCertificateChainFile /etc/letsencrypt-certs/releases.openstack.org/ca.cer
SSLProtocol All -SSLv2 -SSLv3
# Note: this list should ensure ciphers that provide forward secrecy
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:!AES256:!aNULL:!eNULL:!MD5:!DSS:!PSK:!SRP
SSLHonorCipherOrder on
<Directory ${AFS_ROOT}>
Options Indexes FollowSymLinks MultiViews
AllowOverrideList Redirect RedirectMatch
Satisfy Any
Require all granted
</Directory>
LogLevel warn
ErrorLog /var/log/apache2/releases.openstack.org_error.log
CustomLog /var/log/apache2/releases.openstack.org_access.log combined
ServerSignature Off
</VirtualHost>
</IfModule>

View File

@ -167,3 +167,19 @@
creates: /etc/apache2/sites-enabled/50-service-types.openstack.org
notify:
- Reload apache2
# releases.openstack.org
- name: Install releases.openstack.org
copy:
src: 50-releases.openstack.org.conf
dest: /etc/apache2/sites-available/
owner: root
group: root
mode: 0644
- name: Enable releases.openstack.org
command: a2ensite 50-releases.openstack.org
args:
creates: /etc/apache2/sites-enabled/50-releases.openstack.org
notify:
- Reload apache2

View File

@ -54,14 +54,20 @@ def test_tarballs_opendev_org(host):
# An old file that should be present
assert 'nova-12.0.0.tar.gz' in cmd.stdout
def test_specs_opendev_org(host):
def test_specs_openstack_org(host):
cmd = host.run('curl --insecure '
'--resolve specs.openstack.org:443:127.0.0.1 '
'https://specs.openstack.org/specs.opml')
assert 'OpenStack Specs Feeds' in cmd.stdout
def test_service_types_opendev_org(host):
def test_service_types_openstack_org(host):
cmd = host.run('curl --insecure '
'--resolve service-types.openstack.org:443:127.0.0.1 '
'https://service-types.openstack.org')
assert 'OpenStack Service Types Authority Data' in cmd.stdout
def test_releases_openstack_org(host):
cmd = host.run('curl --insecure '
'--resolve releases.openstack.org:443:127.0.0.1 '
'https://releases.openstack.org')
assert 'OpenStack Releases: OpenStack Releases' in cmd.stdout