James E. Blair 535b7162a1 Move Zuul SQL connection to "database"
The sql connection is no longer supported, we need to use "database"
instead.  The corresponding hostvars change has already been made
on bridge.

Change-Id: Ibcac56568f263bd50b2be43baa26c8c514c5272b
2022-01-27 16:46:32 -08:00

107 lines
2.7 KiB
Django/Jinja

[gearman]
server={{ gearman_server }}
check_job_registration=true
ssl_ca=/etc/zuul/ssl/gearman-ca.pem
ssl_cert=/etc/zuul/ssl/gearman-client.pem
{% if gearman_client_ssl_key is defined -%}
ssl_key=/etc/zuul/ssl/gearman-client.key
{% endif -%}
[gearman_server]
start=true
log_config=/etc/zuul/gearman-logging.conf
ssl_ca=/etc/zuul/ssl/gearman-ca.pem
{% if gearman_server_ssl_cert is defined -%}
ssl_cert=/etc/zuul/ssl/gearman-server.pem
{% endif -%}
{% if gearman_server_ssl_key is defined -%}
ssl_key=/etc/zuul/ssl/gearman-server.key
{% endif -%}
[scheduler]
tenant_config=/etc/zuul/main.yaml
log_config=/etc/zuul/logging.conf
state_dir=/var/lib/zuul
relative_priority=true
[fingergw]
user=zuul
[zookeeper]
hosts={% for host in groups['zookeeper'] %}{{ (hostvars[host].public_v4) }}:2281{% if not loop.last %},{% endif %}{% endfor %}
tls_cert=/etc/zuul/certs/cert.pem
tls_key=/etc/zuul/keys/key.pem
tls_ca=/etc/zuul/certs/cacert.pem
session_timeout=40
[keystore]
{% if zuul_keystore_password is defined -%}
password={{ zuul_keystore_password }}
{% endif -%}
[database]
{% if zuul_database_uri is defined -%}
dburi={{ zuul_database_uri }}
{% endif -%}
[statsd]
server=graphite.opendev.org
[merger]
git_dir=/var/lib/zuul/git
log_config=/etc/zuul/merger-logging.conf
git_user_email=zuul@opendev.org
git_user_name=OpenDev Zuul
git_timeout=600
[executor]
manage_ansible=false
log_config=/etc/zuul/executor-logging.conf
job_dir=/var/lib/zuul/builds
variables=/opt/project-config/zuul/site-variables.yaml
private_key_file=/var/lib/zuul/ssh/nodepool_id_rsa
trusted_ro_paths=/etc/openafs:/etc/ssl/certs:/var/lib/zuul/ssh
trusted_rw_paths=/afs
untrusted_ro_paths=/etc/ssl/certs
disk_limit_per_job=5000
sigterm_method=stop
[web]
log_config=/etc/zuul/web-logging.conf
listen_address=127.0.0.1
listen_port=9000
status_url=https://zuul.openstack.org
root=https://zuul.opendev.org
[auth local]
driver=HS256
allow_authz_override=true
realm=zuul.opendev.org
client_id=zuul.opendev.org
issuer_id=zuul.opendev.org
secret={{ zuul_local_auth_secret }}
[auth keycloak]
default=true
driver=OpenIDConnect
realm=zuul
issuer_id=https://keycloak.opendev.org/auth/realms/zuul
client_id=zuul
{% for connection in zuul_connections -%}
[connection "{{ connection['name'] }}"]
{% for key, value in connection.items() -%}
{{ key }}={{ value }}
{% endfor -%}
{% for connection_secret in zuul_connection_secrets -%}
{% if connection_secret['name'] == connection['name'] -%}
{% for key, value in connection_secret.items() -%}
{% if key != 'name' -%}
{{ key }}={{ value }}
{% endif -%}{# if key #}
{% endfor -%}{# for key, value in connection_secret #}
{% endif -%}{# if connection_secret['name'] #}
{% endfor -%}{# for connection_secret #}
{% endfor -%}{# for connection #}