Paul Belanger 9167794c34
Add support to manage SSL cert
Since gear support SSL certs, add in some support to place them into
the SSL folder.  It is possible we might want to move this into an
ansible role, but for now it seems minimal to support it.

Change-Id: I5a3097a6026f648c6dbabb1e26e6a4d201f68c1c
Signed-off-by: Paul Belanger <pabelanger@redhat.com>
2018-04-03 22:36:28 -04:00

181 lines
6.6 KiB
YAML

# Copyright 2015 Red Hat, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
---
# tasks/main.yaml
zuul_task_manager:
- pre
- install
- config
- service
# tasks/config.yaml
zuul_user_name: zuul
zuul_user_group: zuul
zuul_user_home: /var/lib/zuul
zuul_file_layout_dest: /etc/zuul/config/
zuul_file_layout_group: "{{ zuul_user_group }}"
zuul_file_layout_mode: 0755
zuul_file_layout_owner: "{{ zuul_user_name }}"
zuul_file_layout_src: etc/zuul/config/
zuul_file_gearman_logging_conf_dest: /etc/zuul/gearman-logging.conf
zuul_file_gearman_logging_conf_group: "{{ zuul_user_group }}"
zuul_file_gearman_logging_conf_mode: 0644
zuul_file_gearman_logging_conf_owner: "{{ zuul_user_name }}"
zuul_file_gearman_logging_conf_src: etc/zuul/gearman-logging.conf
zuul_file_gearman_ssl_ca_content:
zuul_file_gearman_ssl_ca_dest: /etc/zuul/ssl/root-ca.pem
zuul_file_gearman_ssl_ca_group: "{{ zuul_user_group }}"
zuul_file_gearman_ssl_ca_mode: 0644
zuul_file_gearman_ssl_ca_owner: "{{ zuul_user_name }}"
zuul_file_gearman_ssl_ca_src: etc/zuul/ssl/root-ca.pem
zuul_file_gearman_ssl_cert_content:
zuul_file_gearman_ssl_cert_dest: /etc/zuul/ssl/client.pem
zuul_file_gearman_ssl_cert_group: "{{ zuul_user_group }}"
zuul_file_gearman_ssl_cert_mode: 0644
zuul_file_gearman_ssl_cert_owner: "{{ zuul_user_name }}"
zuul_file_gearman_ssl_cert_src: etc/zuul/ssl/client.pem
zuul_file_gearman_ssl_key_content:
zuul_file_gearman_ssl_key_dest: /etc/zuul/ssl/client.key
zuul_file_gearman_ssl_key_group: "{{ zuul_user_group }}"
zuul_file_gearman_ssl_key_mode: 0600
zuul_file_gearman_ssl_key_owner: "{{ zuul_user_name }}"
zuul_file_gearman_ssl_key_src: etc/zuul/ssl/client.key
zuul_file_executor_logging_conf_dest: /etc/zuul/executor-logging.conf
zuul_file_executor_logging_conf_group: "{{ zuul_user_group }}"
zuul_file_executor_logging_conf_mode: 0644
zuul_file_executor_logging_conf_owner: "{{ zuul_user_name }}"
zuul_file_executor_logging_conf_src: etc/zuul/executor-logging.conf
zuul_file_fingergw_logging_conf_dest: /etc/zuul/fingergw-logging.conf
zuul_file_fingergw_logging_conf_group: "{{ zuul_user_group }}"
zuul_file_fingergw_logging_conf_mode: 0644
zuul_file_fingergw_logging_conf_owner: "{{ zuul_user_name }}"
zuul_file_fingergw_logging_conf_src: etc/zuul/fingergw-logging.conf
zuul_file_merger_logging_conf_dest: /etc/zuul/merger-logging.conf
zuul_file_merger_logging_conf_group: "{{ zuul_user_group }}"
zuul_file_merger_logging_conf_mode: 0644
zuul_file_merger_logging_conf_owner: "{{ zuul_user_name }}"
zuul_file_merger_logging_conf_src: etc/zuul/merger-logging.conf
zuul_file_scheduler_logging_conf_dest: /etc/zuul/scheduler-logging.conf
zuul_file_scheduler_logging_conf_group: "{{ zuul_user_group }}"
zuul_file_scheduler_logging_conf_mode: 0644
zuul_file_scheduler_logging_conf_owner: "{{ zuul_user_name }}"
zuul_file_scheduler_logging_conf_src: etc/zuul/scheduler-logging.conf
zuul_file_web_logging_conf_dest: /etc/zuul/web-logging.conf
zuul_file_web_logging_conf_group: "{{ zuul_user_group }}"
zuul_file_web_logging_conf_mode: 0644
zuul_file_web_logging_conf_owner: "{{ zuul_user_name }}"
zuul_file_web_logging_conf_src: etc/zuul/web-logging.conf
zuul_file_zuul_conf_dest: /etc/zuul/zuul.conf
zuul_file_zuul_conf_group: "{{ zuul_user_group }}"
zuul_file_zuul_conf_mode: 0644
zuul_file_zuul_conf_owner: "{{ zuul_user_name }}"
zuul_file_zuul_conf_src: etc/zuul/zuul.conf
# tasks/install.yaml
zuul_git_dest: "{{ ansible_user_dir }}/src/git.openstack.org/openstack-infra/zuul"
zuul_git_uri: https://git.openstack.org/openstack-infra/zuul
zuul_git_version: master
# zuul_git_update:
zuul_install_method: git
zuul_pip_name: zuul
# zuul_pip_executable:
# zuul_pip_extra_args:
# zuul_pip_version:
# zuul_pip_virtualenv_python
# zuul_pip_virtualenv:
# tasks/service.yaml
zuul_file_zuul_executor_service_manage: true
zuul_file_zuul_executor_service_group: root
zuul_file_zuul_executor_service_owner: root
zuul_file_zuul_executor_service_config_manage: true
zuul_file_zuul_executor_service_config_group: root
zuul_file_zuul_executor_service_config_owner: root
zuul_file_zuul_fingergw_service_manage: true
zuul_file_zuul_fingergw_service_group: root
zuul_file_zuul_fingergw_service_owner: root
zuul_file_zuul_fingergw_service_config_manage: true
zuul_file_zuul_fingergw_service_config_group: root
zuul_file_zuul_fingergw_service_config_owner: root
zuul_file_zuul_merger_service_manage: true
zuul_file_zuul_merger_service_group: root
zuul_file_zuul_merger_service_owner: root
zuul_file_zuul_merger_service_config_manage: true
zuul_file_zuul_merger_service_config_group: root
zuul_file_zuul_merger_service_config_owner: root
zuul_file_zuul_scheduler_service_manage: true
zuul_file_zuul_scheduler_service_group: root
zuul_file_zuul_scheduler_service_owner: root
zuul_file_zuul_scheduler_service_config_manage: true
zuul_file_zuul_scheduler_service_config_group: root
zuul_file_zuul_scheduler_service_config_owner: root
zuul_file_zuul_web_service_manage: true
zuul_file_zuul_web_service_group: root
zuul_file_zuul_web_service_owner: root
zuul_file_zuul_web_service_config_manage: true
zuul_file_zuul_web_service_config_group: root
zuul_file_zuul_web_service_config_owner: root
zuul_service_zuul_executor_daemon_reload: yes
zuul_service_zuul_executor_enabled: yes
zuul_service_zuul_executor_manage: true
zuul_service_zuul_executor_name: zuul-executor.service
zuul_service_zuul_executor_state: started
zuul_service_zuul_fingergw_daemon_reload: yes
zuul_service_zuul_fingergw_enabled: yes
zuul_service_zuul_fingergw_manage: true
zuul_service_zuul_fingergw_name: zuul-fingergw.service
zuul_service_zuul_fingergw_state: started
zuul_service_zuul_merger_daemon_reload: yes
zuul_service_zuul_merger_enabled: yes
zuul_service_zuul_merger_manage: true
zuul_service_zuul_merger_name: zuul-merger.service
zuul_service_zuul_merger_state: started
zuul_service_zuul_scheduler_daemon_reload: yes
zuul_service_zuul_scheduler_enabled: yes
zuul_service_zuul_scheduler_manage: true
zuul_service_zuul_scheduler_name: zuul-scheduler.service
zuul_service_zuul_scheduler_state: started
zuul_service_zuul_web_daemon_reload: yes
zuul_service_zuul_web_enabled: yes
zuul_service_zuul_web_manage: true
zuul_service_zuul_web_name: zuul-web.service
zuul_service_zuul_web_state: started