3eceba5749
This converts the reprepro configuration from our existing puppet to Ansible. This takes a more direct approach; the templating done by the puppet version started simple but over the years grew several different options to handle various use-cases. This means you not only had to understand the rather obscure reprepro configuration, but then *also* figure out how to translate that from our puppet template layers. Here the configuration files are kept directly (they were copied from the existing mirror-update.openstack.org) and deployed with some light wrapper tasks in reprepro/tasks/utils which avoids most duplication. Note the initial cron jobs are left disabled so we can run some manual testing before letting it go automatically. Change-Id: I96a9ff1efbf51c4164621028b7a3a1e2e1077d5c
17 lines
377 B
YAML
17 lines
377 B
YAML
- name: Copy keys remotely
|
|
copy:
|
|
src: 'keys/{{ item.file }}'
|
|
dest: '/etc/reprepro-gpg-keys/{{ item.file }}'
|
|
owner: root
|
|
group: root
|
|
mode: 0644
|
|
loop: '{{ _keys }}'
|
|
|
|
- name: Import gpg keys
|
|
include_role:
|
|
name: import-gpg-key
|
|
vars:
|
|
gpg_key_id: '{{ item.key_id }}'
|
|
gpg_key_asc: '/etc/reprepro-gpg-keys/{{ item.file }}'
|
|
loop: '{{ _keys }}'
|