#4690 [ansible] Update Koschei playbook
Closed: Fixed None Opened 4 years ago by mizdebsk.

= problem =
Currently Koschei playbook only installs basic operating system, but does not setup Koschei itself.

= enhancement recommendation =
Attached patch updates Playbook to do additional steps:

- add koschei tag
- yum-install koschei package
- add extra fedorapeople repo
- enable and start Koschei services
- install Koschei config file
- restart services on config update
- install Koji certificates
- avoid explicitly cleaning yum metadata
- add alembic DB migration

The patch depends on two private variables ({{{koschei_pgsql_password}}} and {{{koschei_flask_secret_key}}}) which need to be added to private Koschei variables when applying the patch. I've put contents of these variables in {{{/root/koschei-private-ansible-vars}}} file on {{{koschei.cloud.fedoraproject.org}}}.

Note that deployment of Koji certificate is implemented, but currently disabled ({{{cert: false}}}) because Koji certificate for Koschei hasn't been generated yet (see [https://fedorahosted.org/rel-eng/ticket/5941 releng ticket 5941]).


One nitpick: can you avoid using 'restarted' ? That restarts the service every time the playbook is run. Better to use a handler and only restart it when a config file it needs to re-read is changed, etc...

Replying to [comment:1 kevin]:

One nitpick: can you avoid using 'restarted' ? That restarts the service every time the playbook is run. Better to use a handler and only restart it when a config file it needs to re-read is changed, etc...

It is a handler, but I put it directly in Koschei playbook instead of {{{handlers/restart_services.yml}}}.

oh, indeed I misread. ;)

ok, will apply

Login to comment on this ticket.

Metadata