#7257 RFR : Fedora Product Definition Center (FPDC) in Openshift
Opened a year ago by cverna. Modified 2 months ago

  • Describe what you need us to do:

I would like to setup a Openshift project for FPDC and use S2I to automatically build from commit. For now only staging is needed.

  • When do you need this? (YYYY/MM/DD)
    Whenever possible.

Security officer: @puiterwijk

Phase I

  • Software: FPDC (Django Rest Framework + Postgresql db)
  • Advantage for Fedora: Central point of information for releng
  • Sponsor: need one

Phase II

Phase III

  • SOP link: To be written
  • Audit request: Requesting audit here.
  • Audit timeline: Whenever Patrick has time, for now there isn't much code :smile:

Phase IV

  • Ansible playbooks: See attachement

0001-FPDC-Openshift-configuration.patch

  • Fully rebuilt from ansible: yes
  • Production goal: Nov 2018

Metadata Update from @cverna:
- Issue tagged with: request-for-resources

a year ago

I'd be happy to move this along...

Metadata Update from @kevin:
- Issue assigned to kevin
- Issue priority set to: Waiting on Assignee (was: Needs Review)

a year ago

ok, I commited the patch, added some vars and got to:

fatal: [os-master01.stg.phx2.fedoraproject.org]: FAILED! => {"changed": true, "cmd": "oc -n fpdc start-build fpdc-build", "delta": "0:00:00.135800", "end": "2018-09-20 21:47:54.423727", "msg": "non-zero return code", "rc": 1, "start": "2018-09-20 21:47:54.287927", "stderr": "The ImageStreamTag \"python:3.6\" is invalid: from: Error resolving ImageStreamTag python:3.6 in namespace fpdc: imagestreams.image.openshift.io \"python\" not found", "stderr_lines": ["The ImageStreamTag \"python:3.6\" is invalid: from: Error resolving ImageStreamTag python:3.6 in namespace fpdc: imagestreams.image.openshift.io \"python\" not found"], "stdout": "", "stdout_lines": []}

So, I think that image is not correct or we are not pulling from wherever it is. ;)

/me happy to help as well on this

ok, I commited the patch, added some vars and got to:
fatal: [os-master01.stg.phx2.fedoraproject.org]: FAILED! => {"changed": true, "cmd": "oc -n fpdc start-build fpdc-build", "delta": "0:00:00.135800", "end": "2018-09-20 21:47:54.423727", "msg": "non-zero return code", "rc": 1, "start": "2018-09-20 21:47:54.287927", "stderr": "The ImageStreamTag \"python:3.6\" is invalid: from: Error resolving ImageStreamTag python:3.6 in namespace fpdc: imagestreams.image.openshift.io \"python\" not found", "stderr_lines": ["The ImageStreamTag \"python:3.6\" is invalid: from: Error resolving ImageStreamTag python:3.6 in namespace fpdc: imagestreams.image.openshift.io \"python\" not found"], "stdout": "", "stdout_lines": []}
So, I think that image is not correct or we are not pulling from wherever it is. ;)

It was missing the openshift namespace to fetch the image. Could I have the permission to rbac the following playbook playbooks/openshift-apps/fpdc.yml

And thanks @kevin and @pingou for helping with that :bow:

In order to deploy production I need a fpdc_secret_key secret variable to be defined, this is the django secret key, so it should a long random string.

Also to enable the github hook to the stg instance I would need a fpdc_github_secret secret variable,, this is also a long random string.

fpdc_secret_key has been created

fpdc_secret_key has been created

Thanks, for my record there is a stg_fpdc_secret_key and stg_fpdc_github_secret available

Added:

fpdc_github_secret and stg_fpdc_github_secret and setup the database in prod.

Things we still need (at least):

  • Security Audit
  • SOPs if any

So I have started to move fpdc in staging to use Kinto (https://github.com/Kinto/kinto) to be able to create the database I need to have Postgresql 9.4 and in stg we are running 9.2. Is there a db server available with 9.4 ?

Login to comment on this ticket.

Metadata