Unless I am mistaken, I believe CBS is not connected to fedora-messaging (unlike Fedora's and CentOS-Stream's koji instances), could we look at enabling this?
This would be most useful for some of the automation that the automotive SIG is working on.
Thanks in advance ! :)
Correct, cbs is only sending messages on the mqtt bus as that's how it triggers the sign+push process. Normally that should be trivial (and non disruptive) to send to both mqtt and fedora-messaging. Let's just plan and create ticket at the Fedora infra side to have the topic/settings/certs and then implement that.
@bstinson : do you see any issue with that ? we should probably just ensure that we don't overlap with the exiting topics for centos stream koji instances.
Metadata Update from @arrfab: - Issue tagged with: cbs, feature-request, high-gain, medium-trouble
I can create the certs, do we want stg and prod?
Metadata Update from @pingou: - Issue untagged with: cbs, feature-request, high-gain, medium-trouble
Metadata Update from @pingou: - Issue tagged with: cbs, feature-request, high-gain, medium-trouble
I have generated the certs, do you have access to them? If not, how can I send them to you?
we should probably just ensure that we don't overlap with the exiting topics for centos stream koji instances.
Def +1, for this I was thinking that maybe we could make the topic_prefix be something like: org.centos.prod/stg.cbs which would then show as: org.centos.prod/stg.cbs.buildsys....
topic_prefix
org.centos.prod/stg.cbs
org.centos.prod/stg.cbs.buildsys....
What do you think?
I'd say this is fine for cbs.centos.org as long as we then document it. As said, our current role already supports fedora-messaging (https://github.com/CentOS/ansible-role-kojihub/blob/master/defaults/main.yml#L187) as it's configured for the stream 9 kojihub. So let's have a +1 from @bstinson and then we can sync about the cert/key pass over and we'll just update ansible/git inventory and replay the role (which means a small downtime to restart kojihub)
:thumbsup: for enabling fedora-messaging in CBS, and to the topic prefixes @pingou outlined
@pingou you can send me the TLS files over gpg encrypted email or contact me to securely drop them in a central place we both have access to. We can then just push the needed config change
Metadata Update from @arrfab: - Issue assigned to arrfab
Metadata Update from @arrfab: - Issue priority set to: Waiting on Reporter (was: Needs Review)
the following git commit to ansible triggered the config change :
* 7be9dd2 - (HEAD -> master, origin/master, origin/HEAD) Enabling fedora-messaging notifications for cbs #650 (7 minutes ago) <Fabian Arrotin>
And it's already live : https://apps.fedoraproject.org/datagrepper/v2/search?category=cbs
Metadata Update from @arrfab: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.