From 1318b9d8024ad0cbfd7ab176644672f359064823 Mon Sep 17 00:00:00 2001
From: Mohammed Naser <mnaser@vexxhost.com>
Date: Fri, 10 Apr 2020 10:40:38 -0400
Subject: [PATCH] opendev-upload-git-mirror: add job

This adds a job which runs in trusted context that can do mirroring
directly from the executor without needing a node.

Change-Id: Iaa471b8bc374c5aaf0d9efe0d47ab9d6f22bf78a
---
 playbooks/upload-git-mirror/run.yaml |  4 +++
 zuul.d/jobs.yaml                     | 37 ++++++++++++++++++++++++++++
 2 files changed, 41 insertions(+)
 create mode 100644 playbooks/upload-git-mirror/run.yaml

diff --git a/playbooks/upload-git-mirror/run.yaml b/playbooks/upload-git-mirror/run.yaml
new file mode 100644
index 0000000..0ce5ab2
--- /dev/null
+++ b/playbooks/upload-git-mirror/run.yaml
@@ -0,0 +1,4 @@
+- hosts: localhost
+  roles:
+    - name: upload-git-mirror
+      git_mirror_repository: "{{ git_mirror_credentials.target_repository }}"
diff --git a/zuul.d/jobs.yaml b/zuul.d/jobs.yaml
index 6489b78..5c11652 100644
--- a/zuul.d/jobs.yaml
+++ b/zuul.d/jobs.yaml
@@ -494,3 +494,40 @@
     secrets:
       - secret: opendev-pypi
         name: pypi_info
+
+- job:
+    name: opendev-upload-git-mirror
+    description: |
+      Mirrors a tested project repository to a remote git server.  This is a
+      nodeless version of the job in zuul-jobs, defined here since this job's
+      playbook must be in a trusted repo.
+
+      .. zuul:jobvar:: git_mirror_credentials
+        :type: dict
+
+        This is expected to be a Zuul secret with these keys:
+
+        .. zuul:jobvar:: user
+
+          SSH user for the remote git repository
+
+        .. zuul:jobvar:: host
+
+          SSH host for the remote git repository
+
+        .. zuul:jobvar:: ssh_key
+
+          Literal private key contents.
+          Should start with something like ``-----BEGIN RSA PRIVATE KEY-----``.
+
+        .. zuul:jobvar:: host_key
+
+          SSH host key of the remote git server.
+          Can be obtained with ``ssh-keyscan -H <host>``.
+
+        .. zuul:jobvar:: target_repository
+
+          Path of the remote git repository
+    run: playbooks/upload-git-mirror/run.yaml
+    nodeset:
+      nodes: []