Obtain AFS creds in docs promote
Obtain and destroy an afs token before attempting to write to AFS. This also adds a new secret with the keytab for a new opendev afs service principal. Change-Id: Ia76f288b894b396effe72ec66eb49237f3f6cea6
This commit is contained in:
parent
d9056897f7
commit
fc233e2194
|
@ -28,6 +28,9 @@
|
||||||
when: "zuul.branch != 'master'"
|
when: "zuul.branch != 'master'"
|
||||||
set_fact:
|
set_fact:
|
||||||
publication_dir: "{{ zuul.branch }}"
|
publication_dir: "{{ zuul.branch }}"
|
||||||
|
- name: Get an AFS token
|
||||||
|
include_role:
|
||||||
|
name: create-afs-token
|
||||||
- name: Create publication directory
|
- name: Create publication directory
|
||||||
file:
|
file:
|
||||||
path: "/afs/.openstack.org/project/opendev.org/docs/{{ zuul.project.name }}/"
|
path: "/afs/.openstack.org/project/opendev.org/docs/{{ zuul.project.name }}/"
|
||||||
|
@ -42,3 +45,6 @@
|
||||||
vars:
|
vars:
|
||||||
afs_source: "{{ zuul.executor.work_root }}/docs/"
|
afs_source: "{{ zuul.executor.work_root }}/docs/"
|
||||||
afs_target: "/afs/.openstack.org/project/opendev.org/docs/{{ zuul.project.name }}/{{ publication_dir }}"
|
afs_target: "/afs/.openstack.org/project/opendev.org/docs/{{ zuul.project.name }}/{{ publication_dir }}"
|
||||||
|
- name: Destroy AFS token
|
||||||
|
include_role:
|
||||||
|
name: destroy-afs-token
|
||||||
|
|
19
zuul.yaml
19
zuul.yaml
|
@ -72,6 +72,22 @@
|
||||||
jVFWkZZRprDU6/5zgZPTLHOfz00IoMbGBKWSfvuOhF5l6VpSC3JVvcRd6/bivUq/1XkzP
|
jVFWkZZRprDU6/5zgZPTLHOfz00IoMbGBKWSfvuOhF5l6VpSC3JVvcRd6/bivUq/1XkzP
|
||||||
uMv41vSFc4Kac1KmgAi96zglyRkzQgYVtLVNYyKbuLhVfx4U34mal/05sU3/MI=
|
uMv41vSFc4Kac1KmgAi96zglyRkzQgYVtLVNYyKbuLhVfx4U34mal/05sU3/MI=
|
||||||
|
|
||||||
|
- secret:
|
||||||
|
name: opendev-zuul-docs
|
||||||
|
data:
|
||||||
|
keytab: !encrypted/pkcs1-oaep
|
||||||
|
- nFyEj6IMXdp7UZwOQz9qAi6IlcKILCCzUqoNbchto7g2Uv8D/ZGdDU3DT+KV6ziWtv2d/
|
||||||
|
WBXQFjsCjE66SXpAUvtcGxj/rVqFGlayOb2WbOeo4+WvrFusNycVIs55R7I0vYyFzidZl
|
||||||
|
FVNP3+5Uv8N54mhFEVMudZdBO8aCwNftea5A2lLdZL/bnK071bzCKNYZAuDI/2j1VOsKx
|
||||||
|
JT346KdP3vqmyokqo+OxFE6QfbFHLTMgZigId3bkK01lpI0TBY2Wiv4rF76ErQWe/eghB
|
||||||
|
yOwrO1Oh2kkHADsrjrJ3rKGI8ZkWpgYIxKExXH9IAedbYaWhz7unvVrjUVjR/QIySv/u7
|
||||||
|
dENCrZhx2zd429eOjUHD+NmHisWoOQnvOVfiYBFbEPL9uAC+ek7fDxB3/9z3ok6KPv9f8
|
||||||
|
XLMNS63cQgPjYJP6kOqjrV/FXLl30SS3ikV0wVI2ErqYn3R2ukOccKJaF4uV9HCf+/mKt
|
||||||
|
0Uz89b0sUTzL5JkFYz/PhdqRVGwjjRNYahQb+QzWkxw/AgNS8Pdl/ijffx5DXAY5oKnJD
|
||||||
|
Jpyp6oXA+W+qefPPqQlxa9EbP3emwVf/HWUdCjlCw+GjDz730P94Xd8ie6KiGq3ywYtFn
|
||||||
|
EuJvheVCAYjlq4lwshfNIysNA8WePvAze9T5DpVl1MayR7b1KC+R/7wM6xUCbw=
|
||||||
|
service_name: service/opendev-zuul@OPENSTACK.ORG
|
||||||
|
|
||||||
- job:
|
- job:
|
||||||
name: base
|
name: base
|
||||||
parent: null
|
parent: null
|
||||||
|
@ -244,6 +260,9 @@
|
||||||
run: playbooks/docs/promote.yaml
|
run: playbooks/docs/promote.yaml
|
||||||
nodeset:
|
nodeset:
|
||||||
nodes: []
|
nodes: []
|
||||||
|
secrets:
|
||||||
|
- secret: opendev-zuul-docs
|
||||||
|
name: afs
|
||||||
|
|
||||||
- project:
|
- project:
|
||||||
check:
|
check:
|
||||||
|
|
Loading…
Reference in New Issue