On Mon, Aug 03, 2015 at 11:43:47AM -0400, Ralph Bean wrote:

The s390 koji hub was rebuilt and ansibilized shortly before freeze set in. It had a fedmsg_certs dictionary defined in the koji ansible group which gave it the certs it needed for koji stuff, but it was missing an extra cert definition for the compose process it carries out.

This patch over writes that original var with a setup specific to the s390 node.

Can I get two +1s to push this out?

diff --git a/inventory/host_vars/s390-koji01.qa.fedoraproject.org b/inventory/host_vars/s390-koji01.qa.fedoraproject.org index 795fa9f..e355230 100644 --- a/inventory/host_vars/s390-koji01.qa.fedoraproject.org +++ b/inventory/host_vars/s390-koji01.qa.fedoraproject.org @@ -34,3 +34,41 @@ koji_server_url: "http://s390.koji.fedoraproject.org/kojihub" koji_weburl: "http://s390.koji.fedoraproject.org/koji"

fedmsg_koji_instance: s390

+# Overload the fedmsg_certs definition from the ansible koji group, since the +# s390 hub *also* does compose stuff, not just koji stuff. +fedmsg_certs: +- service: shell

• owner: root
• group: sysadmin

+- service: koji

• owner: root
• group: apache
• can_send:
• • buildsys.build.state.change
• • buildsys.package.list.change
• • buildsys.repo.done
• • buildsys.repo.init
• • buildsys.rpm.sign
• • buildsys.tag
• • buildsys.task.state.change
• • buildsys.untag

+- service: bodhi

• owner: root
• group: masher
• can_send:
• • compose.branched.complete
• • compose.branched.mash.complete
• • compose.branched.mash.start
• • compose.branched.pungify.complete
• • compose.branched.pungify.start
• • compose.branched.rsync.complete
• • compose.branched.rsync.start
• • compose.branched.start
• • compose.epelbeta.complete
• • compose.rawhide.complete
• • compose.rawhide.mash.complete
• • compose.rawhide.mash.start
• • compose.rawhide.rsync.complete
• • compose.rawhide.rsync.start
• • compose.rawhide.start

+1 as well,

Pierre