Hello all, I've been doing some work on the Fedora RelEng Automation[0][1] lately and I've gotten to a point that I have some Ansible playbooks that I'd like to test but I need to be able to run them somewhere in the Fedora Infrastructure as they will need to be able to touch various Release Engineering related systems (at least compose machines to begin with).
I'd like advisement from the Infrastructure Team on how best to move forward with this. I'm happy to do the leg work, I just need some guidance to make sure I'm complying with Infra standards.
Thank you, -AdamM
[0] - https://pagure.io/releng-automation [1] - https://fedoraproject.org/wiki/Changes/ReleaseEngineeringAutomationWorkflowE...
On Tue, 30 Aug 2016 15:25:53 -0500 Adam Miller maxamillion@fedoraproject.org wrote:
Hello all, I've been doing some work on the Fedora RelEng Automation[0][1] lately and I've gotten to a point that I have some Ansible playbooks that I'd like to test but I need to be able to run them somewhere in the Fedora Infrastructure as they will need to be able to touch various Release Engineering related systems (at least compose machines to begin with).
I'd like advisement from the Infrastructure Team on how best to move forward with this. I'm happy to do the leg work, I just need some guidance to make sure I'm complying with Infra standards.
Well, I am assuming it needs to run as root on those machines?
If so, the only place it can really run is batcave01.
I suppose we could setup something to pull from the pagure repo and allow whoever needs to ability to run playbooks against that repo?
kevin
On Wed, Aug 31, 2016 at 3:31 PM, Kevin Fenzi kevin@scrye.com wrote:
On Tue, 30 Aug 2016 15:25:53 -0500 Adam Miller maxamillion@fedoraproject.org wrote:
Hello all, I've been doing some work on the Fedora RelEng Automation[0][1] lately and I've gotten to a point that I have some Ansible playbooks that I'd like to test but I need to be able to run them somewhere in the Fedora Infrastructure as they will need to be able to touch various Release Engineering related systems (at least compose machines to begin with).
I'd like advisement from the Infrastructure Team on how best to move forward with this. I'm happy to do the leg work, I just need some guidance to make sure I'm complying with Infra standards.
Well, I am assuming it needs to run as root on those machines?
If so, the only place it can really run is batcave01.
I suppose we could setup something to pull from the pagure repo and allow whoever needs to ability to run playbooks against that repo?
That would be perfect, even allowing for these to run via rbac-playbook for testing would be great. Ultimately I'd like to be able to run these without human interaction via ansibull, but I suspect that will be bigger discussion around security implications.
-AdamM
kevin
infrastructure mailing list infrastructure@lists.fedoraproject.org https://lists.fedoraproject.org/admin/lists/infrastructure@lists.fedoraproje...
infrastructure@lists.fedoraproject.org
-
Adam Miller -
Kevin Fenzi