#6441 need a way to send messages to a stg messagebus
Closed: Fixed None Opened 8 years ago by lkocman.

Hello team,

I'd like to have a way how to send messages from tooling that modularity works on (git checkouts) to stg messagebus.

we are using two hosts for modularity

  • composer.stg.phx2.fedoraproject.org ( I don't have root access == can't read certs == can't send w messages) this host is required for composes

  • modularity.fedorainfracloud.org (172.25.32.128) got root access, but it's not configured for fedmsg at all

I guess what I need is to get configuration + certs for modularity.fedorainfracloud.org or either root permissions or alternative way to be able to send messages from composer.

I'd appreciate any help.

Thanks


Just to note that threebean should have root access to host trough fedora@modularity.fedorainfracloud.org

OK, lkocman told me:

1) they do need messages from modularity.fedorainfracloud.org to be received on composer.stg

2) they do need messages from composer.stg to be received on modularity.fedorainfracloud.org

Here's my recommendation:

For the first part,

1) we run a fedmsg-relay on modularity.fedorainfracloud.org port 4001. This effectively gives it its own "bus", kind of like debian's bus.

2) we then add an entry to the endpoints.py file for composer.stg only so that it subscribes to this "external" bus, and will get messages from there.

3) they won't be signed, so we'll need to also disable message signature validation on composer.stg

4) that should do it.

on the second part

1) pungi running on composer.stg needs to sign and send messages, so I'll create a new cert, just for this dev work, only in staging, and have the key owned by the modularity-wg group.

2) that will allow dev users on the box to sign messages as their own users without having to have any sudo rights.

3) those messages from pungi on composer.stg will make it onto the stg-wide stg bus and will be published externally at tcp://stg.fedoraproject.org:9940, signed with valid (for staging) certs.

4) whatever needs to listen to that, can listen to that.

OK, I think this is done.

Metadata Update from @lkocman:
- Issue assigned to ralph
- Issue set to the milestone: Fedora 25 Alpha

7 years ago

Log in to comment on this ticket.

Metadata