c49d5d6f2b
Allow post-review jobs running under system-config and project-config to ssh into bridge in order to run Ansible. Change-Id: I841f87425349722ee69e2f4265b99b5ee0b5a2c8
19 lines
533 B
YAML
19 lines
533 B
YAML
- hosts: bridge.openstack.org
|
|
name: "Bridge: configure the bastion host"
|
|
become: true
|
|
roles:
|
|
- pip3
|
|
- install-ansible
|
|
- root-keys
|
|
- ansible-cron
|
|
- cloud-launcher-cron
|
|
tasks:
|
|
- name: Allow Zuul to trigger Ansible
|
|
authorized_key:
|
|
state: present
|
|
user: root
|
|
key: "{{ item }}"
|
|
loop:
|
|
- "https://zuul.openstack.org/api/project-ssh-key/openstack-infra/system-config.pub"
|
|
- "https://zuul.openstack.org/api/project-ssh-key/openstack-infra/project-config.pub"
|