Obtain AFS creds in docs promote

Obtain and destroy an afs token before attempting to write to AFS.
This also adds a new secret with the keytab for a new opendev
afs service principal.

Change-Id: Ia76f288b894b396effe72ec66eb49237f3f6cea6
This commit is contained in:
James E. Blair 2019-03-22 14:31:13 -07:00
parent d9056897f7
commit fc233e2194
2 changed files with 25 additions and 0 deletions

View File

@ -28,6 +28,9 @@
when: "zuul.branch != 'master'"
set_fact:
publication_dir: "{{ zuul.branch }}"
- name: Get an AFS token
include_role:
name: create-afs-token
- name: Create publication directory
file:
path: "/afs/.openstack.org/project/opendev.org/docs/{{ zuul.project.name }}/"
@ -42,3 +45,6 @@
vars:
afs_source: "{{ zuul.executor.work_root }}/docs/"
afs_target: "/afs/.openstack.org/project/opendev.org/docs/{{ zuul.project.name }}/{{ publication_dir }}"
- name: Destroy AFS token
include_role:
name: destroy-afs-token

View File

@ -72,6 +72,22 @@
jVFWkZZRprDU6/5zgZPTLHOfz00IoMbGBKWSfvuOhF5l6VpSC3JVvcRd6/bivUq/1XkzP
uMv41vSFc4Kac1KmgAi96zglyRkzQgYVtLVNYyKbuLhVfx4U34mal/05sU3/MI=
- secret:
name: opendev-zuul-docs
data:
keytab: !encrypted/pkcs1-oaep
- nFyEj6IMXdp7UZwOQz9qAi6IlcKILCCzUqoNbchto7g2Uv8D/ZGdDU3DT+KV6ziWtv2d/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=
service_name: service/opendev-zuul@OPENSTACK.ORG
- job:
name: base
parent: null
@ -244,6 +260,9 @@
run: playbooks/docs/promote.yaml
nodeset:
nodes: []
secrets:
- secret: opendev-zuul-docs
name: afs
- project:
check: