#650 Connect CBS to fedora-messaging
Closed: Fixed 2 years ago by arrfab. Opened 2 years ago by pingou.

Unless I am mistaken, I believe CBS is not connected to fedora-messaging (unlike Fedora's and CentOS-Stream's koji instances), could we look at enabling this?

This would be most useful for some of the automation that the automotive SIG is working on.

Thanks in advance ! :)


Correct, cbs is only sending messages on the mqtt bus as that's how it triggers the sign+push process.
Normally that should be trivial (and non disruptive) to send to both mqtt and fedora-messaging.
Let's just plan and create ticket at the Fedora infra side to have the topic/settings/certs and then implement that.

@bstinson : do you see any issue with that ? we should probably just ensure that we don't overlap with the exiting topics for centos stream koji instances.

Metadata Update from @arrfab:
- Issue tagged with: cbs, feature-request, high-gain, medium-trouble

2 years ago

I can create the certs, do we want stg and prod?

Metadata Update from @pingou:
- Issue untagged with: cbs, feature-request, high-gain, medium-trouble

2 years ago

Metadata Update from @pingou:
- Issue tagged with: cbs, feature-request, high-gain, medium-trouble

2 years ago

I have generated the certs, do you have access to them? If not, how can I send them to you?

we should probably just ensure that we don't overlap with the exiting topics for centos stream koji instances.

Def +1, for this I was thinking that maybe we could make the topic_prefix be something like: org.centos.prod/stg.cbs which would then show as: org.centos.prod/stg.cbs.buildsys....

What do you think?

I'd say this is fine for cbs.centos.org as long as we then document it.
As said, our current role already supports fedora-messaging (https://github.com/CentOS/ansible-role-kojihub/blob/master/defaults/main.yml#L187) as it's configured for the stream 9 kojihub.
So let's have a +1 from @bstinson and then we can sync about the cert/key pass over and we'll just update ansible/git inventory and replay the role (which means a small downtime to restart kojihub)

:thumbsup: for enabling fedora-messaging in CBS, and to the topic prefixes @pingou outlined

@pingou you can send me the TLS files over gpg encrypted email or contact me to securely drop them in a central place we both have access to.
We can then just push the needed config change

Metadata Update from @arrfab:
- Issue assigned to arrfab

2 years ago

Metadata Update from @arrfab:
- Issue priority set to: Waiting on Reporter (was: Needs Review)

2 years ago

the following git commit to ansible triggered the config change :

* 7be9dd2 - (HEAD -> master, origin/master, origin/HEAD) Enabling fedora-messaging notifications for cbs #650 (7 minutes ago) <Fabian Arrotin>

And it's already live : https://apps.fedoraproject.org/datagrepper/v2/search?category=cbs

Metadata Update from @arrfab:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Login to comment on this ticket.

Metadata
Boards 1
CBS Status: Backlog