Fix the python requirements. Add the ability to map in etcd client certs and ca.

buildman/manager/ephemeral.py

@@ -149,11 +149,14 @@ class EphemeralBuilderManager(BaseManager):
 
     etcd_host = self._manager_config.get('ETCD_HOST', '127.0.0.1')
     etcd_port = self._manager_config.get('ETCD_PORT', 2379)
+    etcd_auth = self._manager_config.get('ETCD_CERT_AND_KEY', None)
+    etcd_ca_cert = self._manager_config.get('ETCD_CA_CERT', None)
     logger.debug('Connecting to etcd on %s:%s', etcd_host, etcd_port)
 
     worker_threads = self._manager_config.get('ETCD_WORKER_THREADS', 5)
     self._async_thread_executor = ThreadPoolExecutor(worker_threads)
-    self._etcd_client = AsyncWrapper(self._etcd_client_klass(host=etcd_host, port=etcd_port),
+    self._etcd_client = AsyncWrapper(self._etcd_client_klass(host=etcd_host, port=etcd_port,
+                                                             cert=etcd_auth, ca_cert=etcd_ca_cert),
                                      executor=self._async_thread_executor)
 
     self._watch_etcd(ETCD_BUILDER_PREFIX, self._handle_builder_expiration)

buildman/manager/executor.py

@@ -53,22 +53,18 @@ class BuilderExecutor(object):
     return 'ws://{0}:'
 
   def generate_cloud_config(self, realm, token, coreos_channel, manager_hostname,
-                            quay_username=None, quay_password=None, etcd_token=None):
+                            quay_username=None, quay_password=None):
     if quay_username is None:
       quay_username = self.executor_config['QUAY_USERNAME']
 
     if quay_password is None:
       quay_password = self.executor_config['QUAY_PASSWORD']
 
-    if etcd_token is None:
-      etcd_token = self.executor_config['ETCD_DISCOVERY_TOKEN']
-
     return TEMPLATE.render(
         realm=realm,
         token=token,
         quay_username=quay_username,
         quay_password=quay_password,
-        etcd_token=etcd_token,
         manager_hostname=manager_hostname,
         coreos_channel=coreos_channel,
     )

buildman/templates/cloudconfig.yaml

@@ -13,12 +13,6 @@ coreos:
     reboot-strategy: off
     group: {{ coreos_channel }}
 
-  etcd:
-    discovery: https://discovery.etcd.io/{{ etcd_token }}
-    # multi-region and multi-cloud deployments need to use $public_ipv4
-    addr: $private_ipv4:4001
-    peer-addr: $private_ipv4:7001
-
   units:
     - name: quay-builder.service
       command: start