Deploy account is defined in saltmaster role but used in devserver role too
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	dereckson
	Jan 23 2020, 07:09

Description

To provide software in devserver role, some Git repositories are cloned using the SSH key belonging to the deploy account.

But this deploy account is defined in saltmaster role, as the intended workflow was:

declare your repository to deploy as a submodule of rSTAGING
update repo in /opt/salt/staging
deploy from there

The current trend is to clone repository directly on the server to avoid IO performance issues with large amount of files.

A solution has to be found to this problem, for example:

investigate if gitfs performs well (but why to have every file on every server?)
create deploy as a part of the core

Same problem for webserver-wwwroot51 unit (roles/devserver/webserver-wwwroot51/).

Revisions and Commits

rOPS Nasqueron Operations
	D3032	rOPS6817329915b7 Provide the "deploy" account for roles needing it

Related Objects

Mentioned In: rOPS6817329915b7: Provide the "deploy" account for roles needing it
rOPS43904679b026: Allow Jenkins CD to publish static sites
D2414: Allow Jenkins CD to publish static sites
T1559: Figure how to deploy automatically /var/51-wwwroot credentials

Event Timeline

dereckson created this task.Jan 23 2020, 07:09

dereckson mentioned this in T1559: Figure how to deploy automatically /var/51-wwwroot credentials.Jan 25 2020, 04:09

dereckson updated the task description. (Show Details)Jan 25 2020, 04:13

Furthermore, Jenkins CD uses the deploy account to publish static website updates on Ysul through:

stage('Publish') {
    steps {
        echo 'Deploying....'
        sshPublisher(
            failOnError: true,
            publishers: [
                sshPublisherDesc(
                    configName: 'ysul-deploy',
                    verbose: true,
                    transfers: [
                        sshTransfer(
                            sourceFiles: '**',
                            remoteDirectory: 'api.nasqueron.org',
                            cleanRemote: true,
                        )
                    ]
                )
            ]
        )
    }
}

dereckson mentioned this in D2414: Allow Jenkins CD to publish static sites.Sep 9 2021, 21:50

dereckson mentioned this in rOPS43904679b026: Allow Jenkins CD to publish static sites.Sep 9 2021, 22:54

dereckson moved this task from Backlog to Ops on the Technical debt board.Sep 12 2021, 11:57

Account is now provided to the roles defined in _modules/node.py for the method node.has_deployment.

dereckson mentioned this in rOPS6817329915b7: Provide the "deploy" account for roles needing it.Apr 16 2023, 20:11

Deploy account is defined in saltmaster role but used in devserver role tooClosed, ResolvedPublicActions

Description

Revisions and Commits

Related Objects

Event Timeline

Deploy account is defined in saltmaster role but used in devserver role too
Closed, ResolvedPublic
Actions