#11395 Please create secrets for copr-pulp and copr-pulp-dev instances
Closed: Fixed with Explanation 10 months ago by kevin. Opened 10 months ago by frostyx.

Describe what you would like us to do:

Can you please create some secrets for our copr-pulp instances, that I could use in the playbooks? I need two of them:

Password for the pulp admin:
- https://docs.pulpproject.org/pulp_installer/roles/pulp_database_config/#role-variables (see pulp_default_admin_password)
- Please generate any string that would qualify as a good enough password
- I would like to use it as {{ copr_pulp_default_admin_password }}

Secret key:
- https://docs.pulpproject.org/pulp_installer/helper_roles/pulp_common/?h=secret#pulp_settings-variables (see secret_key row)
- It will be used as a Django secret key, which should be a random string of 50 characters
- I would like to use it as {{ copr_pulp_secret_key }}

I need one set of these secrets for copr-pulp.aws.fedoraproject.org and one set for copr-pulp-dev.aws.fedoraproject.org

When do you need this to be done by? (YYYY/MM/DD)

At your convenience

Thank you very much


Metadata Update from @phsmoura:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: medium-gain, medium-trouble, ops

10 months ago

Metadata Update from @kevin:
- Issue assigned to kevin

10 months ago

Done.

Note that variables are global, there's no seperate ones for dev/stg/prod...

so I made the dev ones include _dev (ie, copr_dev_pulp_default_admin_password and copr_dev_pulp_secret_key)
If you want different names for those, let me know.

Metadata Update from @kevin:
- Issue close_status updated to: Fixed with Explanation
- Issue status updated to: Closed (was: Open)

10 months ago

Note that variables are global, there's no seperate ones for dev/stg/prod...

I didn't realize that. No problem though, thank you very much.

So, I finally tried to use it

  vars:
    pulp_settings:
      secret_key: "{{ copr_dev_pulp_secret_key }}"

but I am getting

'copr_dev_pulp_secret_key' is undefined\n\n

Did I use it incorrectly?

You're missing:

 vars_files:
   - /srv/web/infra/ansible/vars/global.yml
   - "/srv/private/ansible/vars.yml"

For that play/section? it needs that to include the private vars.

I thought I had them but I had them only for a different play.
Thank you, after using the var_files everything works as expected.

Login to comment on this ticket.

Metadata
Boards 1
ops Status: Backlog