primer commit

vars/credentials.yaml

@@ -0,0 +1,20 @@
+$ANSIBLE_VAULT;1.1;AES256
+34666536376534346332353761373632616231633137393735323834323935373338353439316366
+3233633036366138356563323737646365313137386135620a643663623866613162303134663836
+61336336333334393362653436653636313230386364343065643133376436343765373366626139
+3436636136353136620a663363633637323064316566356133353836643338303433356661386334
+33383432396463373738343831316661376132336332313764643666353136623639306139373036
+34373661633365336163393436633931643661643930396361666561383639373639333361366434
+61326137323666663663386262373638613532333761393166396461616361326666353638316437
+31663737363966376333303333643563306139663339313239343263346231643261393739303238
+30373865393830643631656463373732613032326165366338613362366439326435343632343636
+36353962316565313330363763636466356238396164393436643537386464363439336230353838
+66383766316435373130313835336531383438636235383534633337653536626635626165376533
+33343935656635306336666263373136303530396161363164363365646531343830636264626666
+37633438623463306466353966343261383934366236396433343139386461336536656561366165
+37383963626162653138653866303731653434303266353138616162636232376134363533383763
+66393034636432383966633535386161646430653265623464653264633439666363313062363232
+35653263366461336439306537393533396333646166333263376233366332393865633839316537
+36656337356561313234346633626435396138353862393266356436376636653137356665623865
+35316337393464353364626138653966633932316561623763323037313530656435343465386264
+663835356535363635633730633236386431

vars/default.yaml

@@ -0,0 +1,93 @@
+---
+# General Koji Settings
+koji_build_tag: mxos0
+koji_hub_fqdn: cs10-koji-00.mx-os
+koji_admin_user: kojiadmin
+koji_url: "https://{{ koji_hub_fqdn }}/koji"
+koji_profile: koji
+
+# Host FQDNs
+kojid_fqdn: cs10-koji-03.mx-os
+koji_db_host: cs10-koji-01.mx-os
+koji_nfs_host: cs10-koji-02.mx-os
+
+# Paths & Directories
+koji_top_dir: /mnt/koji
+koji_pki_dir: "{{ playbook_dir }}/certs"
+kojid_work_dir: /mnt/koji/work
+koji_remote_pki_dir: /etc/pki/koji
+koji_hub_config_dir: /etc/koji-hub/hub.conf.d
+koji_web_config_dir: /etc/kojiweb
+koji_client_config_file: /etc/koji.conf.d/ansible-settings.conf
+koji_remote_kojira_conf_path: /etc/kojira/kojira.conf
+koji_remote_kojihub_httpd_conf_path: /etc/httpd/conf.d/kojihub.conf
+koji_remote_kojiweb_httpd_conf_path: /etc/httpd/conf.d/kojiweb.conf
+
+# Certificate Paths (Remote)
+koji_hub_cert_path: /etc/pki/koji/kojihub.crt
+koji_hub_key_path: /etc/pki/koji/kojihub.key
+koji_admin_cert_path: /etc/pki/koji/kojiadmin.pem
+koji_admin_key_path: /etc/pki/koji/kojiadmin.key
+kojid_crt_path: /etc/pki/koji/kojid.crt
+kojid_key_path: /etc/pki/koji/kojid.key
+kojid_pem_path: /etc/pki/koji/kojid.pem
+kojira_cert_path: /etc/pki/koji/kojira.pem
+koji_remote_ca_trust_path: /etc/pki/ca-trust/source/anchors/koji_ca.crt
+
+# Certificate Settings
+koji_ca_name: "koji_ca"
+koji_cert_expiration_days: 3650 # 10 years
+koji_cert_key_size: 4096
+koji_cert_country: "MX"
+koji_cert_state: "Mexico"
+koji_cert_locality: "Mexico City"
+koji_cert_organization: "MxOS"
+koji_cert_organizational_unit: "Infraestructura"
+
+# Certificate Generation List
+koji_certs_to_generate:
+  - name: kojihub
+    cn: "{{ koji_hub_fqdn }}"
+    is_user: false
+    is_server: true
+  - name: kojiweb
+    cn: "{{ koji_hub_fqdn }}"
+    is_user: false
+    is_server: true
+  - name: kojira
+    cn: kojira
+    is_user: false
+  - name: kojid
+    cn: "{{ kojid_fqdn }}"
+    is_user: false
+  - name: kojiadmin
+    cn: kojiadmin
+    is_user: true
+  - name: postgresql
+    cn: "{{ koji_db_host }}"
+    is_user: false
+    is_server: true
+
+# File Permissions
+koji_pki_dir_mode: "0755"
+koji_pki_file_mode: "0644"
+koji_pki_private_key_mode: "0600"
+koji_client_dir_mode: "0700"
+koji_client_file_mode: "0600"
+
+# Kojid Specific Settings
+kojid_max_jobs: 2
+kojid_mock_user: kojid
+kojid_vendor: Fundación MxOS
+kojid_packager: Koji
+kojid_distribution: MxOS
+kojid_allowed_scms: git.mx-os.mx:/MxOS/rpms/*
+kojid_allowed_scms_use_config: true
+kojid_allowed_scms_use_policy: false
+kojid_smtp_host: mail.mx-os.mx
+kojid_smtp_user: kojid@cd10-koji-03.mx-os
+kojid_from_addr: Koji Build System <kojid@cd10-koji-03.mx-os>
+
+# HTTPD/Web Paths
+httpd_ssl_config_file: /etc/httpd/conf.d/ssl.conf
+koji_hub_httpd_config_file: /etc/httpd/conf.d/kojihub.conf