I'd be happy to move this along...

ok, I commited the patch, added some vars and got to:

fatal: [os-master01.stg.phx2.fedoraproject.org]: FAILED! => {"changed": true, "cmd": "oc -n fpdc start-build fpdc-build", "delta": "0:00:00.135800", "end": "2018-09-20 21:47:54.423727", "msg": "non-zero return code", "rc": 1, "start": "2018-09-20 21:47:54.287927", "stderr": "The ImageStreamTag \"python:3.6\" is invalid: from: Error resolving ImageStreamTag python:3.6 in namespace fpdc: imagestreams.image.openshift.io \"python\" not found", "stderr_lines": ["The ImageStreamTag \"python:3.6\" is invalid: from: Error resolving ImageStreamTag python:3.6 in namespace fpdc: imagestreams.image.openshift.io \"python\" not found"], "stdout": "", "stdout_lines": []}

So, I think that image is not correct or we are not pulling from wherever it is. ;)

/me happy to help as well on this

ok, I commited the patch, added some vars and got to:
fatal: [os-master01.stg.phx2.fedoraproject.org]: FAILED! => {"changed": true, "cmd": "oc -n fpdc start-build fpdc-build", "delta": "0:00:00.135800", "end": "2018-09-20 21:47:54.423727", "msg": "non-zero return code", "rc": 1, "start": "2018-09-20 21:47:54.287927", "stderr": "The ImageStreamTag \"python:3.6\" is invalid: from: Error resolving ImageStreamTag python:3.6 in namespace fpdc: imagestreams.image.openshift.io \"python\" not found", "stderr_lines": ["The ImageStreamTag \"python:3.6\" is invalid: from: Error resolving ImageStreamTag python:3.6 in namespace fpdc: imagestreams.image.openshift.io \"python\" not found"], "stdout": "", "stdout_lines": []}
So, I think that image is not correct or we are not pulling from wherever it is. ;)

It was missing the openshift namespace to fetch the image. Could I have the permission to rbac the following playbook playbooks/openshift-apps/fpdc.yml

And thanks @kevin and @pingou for helping with that :bow:

In order to deploy production I need a fpdc_secret_key secret variable to be defined, this is the django secret key, so it should a long random string.

Also to enable the github hook to the stg instance I would need a fpdc_github_secret secret variable,, this is also a long random string.

fpdc_secret_key has been created

fpdc_secret_key has been created

Thanks, for my record there is a stg_fpdc_secret_key and stg_fpdc_github_secret available

Added:

fpdc_github_secret and stg_fpdc_github_secret and setup the database in prod.

Things we still need (at least):

• Security Audit
• SOPs if any

I have opened a PR for review for the SOP --> https://pagure.io/infra-docs/pull-request/131

So I have started to move fpdc in staging to use Kinto (https://github.com/Kinto/kinto) to be able to create the database I need to have Postgresql 9.4 and in stg we are running 9.2. Is there a db server available with 9.4 ?

Let's close that, and we can create a new ticket when we are in place to try to deploy Kinto.