Puppet Class: profile::zuul::executor

Defined in:
modules/profile/manifests/zuul/executor.pp

Overview

SPDX-License-Identifier: Apache-2.0 new zuul (T393873) - executors

Parameters:

  • web_port (Stdlib::Port) (defaults to: lookup('profile::zuul::executor::web_port'))
  • main_nodes (Array[Stdlib::Fqdn]) (defaults to: lookup('zuul_main_nodes'))
  • image_version (String) (defaults to: lookup('profile::zuul::executor::image_version'))
  • service_ensure (Wmflib::Ensure) (defaults to: lookup('profile::zuul::executor::service_ensure')) 


3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
 
# File 'modules/profile/manifests/zuul/executor.pp', line 3

class profile::zuul::executor(
    Stdlib::Port $web_port = lookup('profile::zuul::executor::web_port'),
    Array[Stdlib::Fqdn] $main_nodes = lookup('zuul_main_nodes'),
    String $image_version = lookup('profile::zuul::executor::image_version'),
    Wmflib::Ensure $service_ensure = lookup('profile::zuul::executor::service_ensure'),
){

    wmflib::dir::mkdir_p('/etc/zuul/ssh')

    file { '/etc/zuul/ssh/id_rsa':
        ensure  => present,
        owner   => 'root',
        group   => 'zuul',
        mode    => '0440',
        content => secret('zuul/id_rsa'),
        require => User['zuul'],
    }

    $host_ip = $facts['networking']['ip']

    firewall::service { 'zuul-web-from-main-nodes':
        proto  => 'tcp',
        port   => $web_port,
        srange => $main_nodes,
    }

    systemd::service { 'zuul-executor':
        ensure    => $service_ensure,
        content   => systemd_template('zuul-executor'),
        require   => File['/etc/zuul/zuul.conf'],
        subscribe => File['/etc/zuul/zuul.conf'],
    }
}