Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Death to all trailing whitespace.

Browse source
This commit is contained in:
Kevin Fenzi 2016-08-08 19:36:31 +00:00
parent fd129648ae
commit 04a52b8667
131 changed files with 311 additions and 311 deletions
Download patch file Download diff file Expand all files Collapse all files

10
playbooks/check-for-nonvirt-updates.yml
View file

@ -1,11 +1,11 @@
#
# simple playbook to check all hosts and see how many updates they have pending.
# simple playbook to check all hosts and see how many updates they have pending.
# It could be a lot faster if we didn't gather facts, but we need that for yum vs dnf checking
#
# If you want a pretty sorted list, you need to post process the output here with something
# like:
# like:
#
# time ansible-playbook check-for-updates.yml | grep msg\": | awk -F: '{print $2}' | sort
# time ansible-playbook check-for-updates.yml | grep msg\": | awk -F: '{print $2}' | sort
#
- name: check for updates
@ -18,12 +18,12 @@
- name: check for updates (yum)
yum: list=updates update_cache=true
register: yumoutput
when: ansible_distribution_major_version|int < 22 and ansible_virtualization_role == 'host'
when: ansible_distribution_major_version|int < 22 and ansible_virtualization_role == 'host'
- name: check for updates (dnf)
dnf: list=updates
register: dnfoutput
when: ansible_distribution_major_version|int > 21 and ansible_virtualization_role == 'host'
when: ansible_distribution_major_version|int > 21 and ansible_virtualization_role == 'host'
- debug: msg="{{ inventory_hostname}} {{ yumoutput.results|length }}"
when: yumoutput is defined and yumoutput.results|length > 0

6
playbooks/check-for-updates.yml
View file

@ -1,11 +1,11 @@
#
# simple playbook to check all hosts and see how many updates they have pending.
# simple playbook to check all hosts and see how many updates they have pending.
# It could be a lot faster if we didn't gather facts, but we need that for yum vs dnf checking
#
# If you want a pretty sorted list, you need to post process the output here with something
# like:
# like:
#
# time ansible-playbook check-for-updates.yml | grep msg\": | awk -F: '{print $2}' | sort
# time ansible-playbook check-for-updates.yml | grep msg\": | awk -F: '{print $2}' | sort
#
- name: check for updates

8
playbooks/check-host.yml
View file

@ -77,7 +77,7 @@
- check
- services
- name: output loaded inactive service list systemctl
- name: output loaded inactive service list systemctl
shell: echo {{loaded_inactive_services_systemctl.stdout_lines}} >> {{temp_dir.stdout}}/liservices
when: loaded_inactive_services_systemctl is defined and loaded_inactive_services_systemctl.rc == 0
changed_when: False
@ -181,7 +181,7 @@
- check
- selinux
- name: Show Boot SELinux mode
- name: Show Boot SELinux mode
shell: echo "SELinux boots to {{ ansible_selinux.config_mode }} mode " >> {{temp_dir.stdout}}/selinux
when: ansible_selinux.status != "disabled"
changed_when: False
@ -246,7 +246,7 @@
changed_when: False
register: file_diff
when: last_dir is defined and last_dir.stdout != ""
- name: display diff
debug: var=file_diff.stdout_lines
ignore_errors: True
@ -263,7 +263,7 @@
file: path={{localchanges.stdout}} state=absent
changed_when: False
# handlers:
# - include: "{{ handlers }}/restart_services.yml"
# - include: "restart_services.yml"

4
playbooks/cloud_prep.yml
View file

@ -1,11 +1,11 @@
# restricted to run on cloud instances only
- hosts: 209.132.184.*
user: root
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
tasks:
- include: "{{ tasks }}/cloud_setup_basic.yml"

6
playbooks/death_to_postfix.yml
View file

@ -9,13 +9,13 @@
tasks:
- name: Try to stop postfix cleanly.
service: name=postfix state=stopped
# This doesn't really remove the pid file.. but we say it does so ansible only runs it if the pid file is there..
- name: Really kill postfix master process
command: pkill -u root master removes=/var/spool/postfix/pid/master.pid
- name: Clean up old pid lock file.
command: rm /var/spool/postfix/pid/master.pid removes=/var/spool/postfix/pid/master.pid
- name: Try to start postfix cleanly
service: name=postfix state=started

2
playbooks/destroy_cloud_inst.yml
View file

@ -16,7 +16,7 @@
- name: pause for 30s before doing it
pause: seconds=30 prompt="Destroying vm now {{ target }}, abort if this is wrong"
- name: find the instance id from the builder
command: curl -s http://169.254.169.254/latest/meta-data/instance-id
register: instanceid

2
playbooks/destroy_virt_inst.yml
View file

@ -26,7 +26,7 @@
- name: pause for 30s before doing it
pause: seconds=30 prompt="Destroying (and lvremove for) vm now {{ target }}, abort if this is wrong"
- name: destroy the vm
virt: name={{ inventory_hostname }} command=destroy
delegate_to: "{{ vmhost }}"

2
playbooks/fix_arm_soc.yml
View file

@ -1,6 +1,6 @@
#
# This playbook power cycles an arm soc, sets time and runs playbook on it.
#
#
# requires -e "target=arm0N-builderXX.arm.fedoraproject.org" -l arm0N-builderXX.arm.fedoraproject.org
- name: power cycle instance

4
playbooks/groups/autosign.yml
View file

@ -1,6 +1,6 @@
# create a new autosign server
#
# This server looks for rawhide builds and requests they be signed.
# This server looks for rawhide builds and requests they be signed.
#
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=autosign"
@ -9,7 +9,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/backup-server.yml
View file

@ -8,7 +8,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/badges-backend.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -46,7 +46,7 @@
- role: collectd/fedmsg-service
process: fedmsg-hub
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"

2
playbooks/groups/badges-web.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/batcave.yml
View file

@ -32,7 +32,7 @@
- { role: nfs/client, mnt_dir: '/srv/web/pub', nfs_src_dir: 'fedora_ftp/fedora.redhat.com/pub' }
- { role: nfs/client, mnt_dir: '/mnt/fedora/app', nfs_src_dir: 'fedora_app/app' }
tasks:
- include: "{{ tasks }}/yumrepos.yml"
- include: "{{ tasks }}/2fa_client.yml"

2
playbooks/groups/beaker-virthosts.yml
View file

@ -9,7 +9,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/beaker.yml
View file

@ -9,7 +9,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/blockerbugs.yml
View file

@ -9,7 +9,7 @@
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles:
- base
- hosts

4
playbooks/groups/bodhi-backend.yml
View file

@ -1,13 +1,13 @@
# create a new bodhi-backend system
#
# This group makes bodhi-backend servers.
# They are used by releng to push updates with bodhi.
# They are used by releng to push updates with bodhi.
# They also run some misc releng scripts.
#
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=bodhi-backend:bodhi-backend-stg"
# Once the instance exists, configure it.
# Once the instance exists, configure it.
- name: make bodhi-backend server system
hosts: bodhi-backend:bodhi-backend-stg

6
playbooks/groups/bugyou.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -37,7 +37,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -60,7 +60,7 @@
- role: collectd/fedmsg-service
process: fedmsg-hub
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/bugzilla2fedmsg.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -43,7 +43,7 @@
- role: collectd/fedmsg-service
process: moksha-hub
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"

4
playbooks/groups/busgateway.yml
View file

@ -5,7 +5,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -49,7 +49,7 @@
process: fedmsg-gateway
- role: collectd/fedmsg-activation
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"

8
playbooks/groups/darkserver-backend.yml
View file

@ -5,7 +5,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -14,7 +14,7 @@
- yum: name=libsemanage-python state=present
- name: "Set SElinux booleans"
seboolean: name=httpd_can_network_connect_db state=yes persistent=yes
seboolean: name=httpd_can_network_connect_db state=yes persistent=yes
roles:
- base
@ -42,7 +42,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -58,7 +58,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/darkserver-web.yml
View file

@ -5,7 +5,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -14,7 +14,7 @@
- yum: name=libsemanage-python state=present
- name: "Set SElinux booleans"
seboolean: name=httpd_can_network_connect_db state=yes persistent=yes
seboolean: name=httpd_can_network_connect_db state=yes persistent=yes
roles:
- base

8
playbooks/groups/darkserver.yml
View file

@ -5,7 +5,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -13,10 +13,10 @@
pre_tasks:
- name: "Add koji to hosts file"
lineinfile: dest=/etc/hosts line="10.5.125.36 koji koji.fedoraproject.org" state=present
lineinfile: dest=/etc/hosts line="10.5.125.36 koji koji.fedoraproject.org" state=present
- yum: name=libsemanage-python state=present
- name: "Set SElinux booleans"
seboolean: name=httpd_can_network_connect_db state=yes persistent=yes
seboolean: name=httpd_can_network_connect_db state=yes persistent=yes
roles:
- base
@ -31,7 +31,7 @@
- role: apache
- darkserver
tasks:
- include: "{{ tasks }}/yumrepos.yml"
- include: "{{ tasks }}/2fa_client.yml"

2
playbooks/groups/datagrepper.yml
View file

@ -7,7 +7,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/dns.yml
View file

@ -7,7 +7,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/download.yml
View file

@ -62,10 +62,10 @@
- name: install bc so last-sync works.
yum: pkg=bc state=present
when: inventory_hostname == 'download-ib01.fedoraproject.org'
handlers:
- include: "{{ handlers }}/restart_services.yml"

2
playbooks/groups/fas.yml
View file

@ -7,7 +7,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/fas3.yml
View file

@ -7,7 +7,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/fedimg.yml
View file

@ -8,7 +8,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -55,7 +55,7 @@
- role: collectd/fedmsg-service
process: fedmsg-hub
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/fedocal.yml
View file

@ -5,7 +5,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -36,7 +36,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"

2
playbooks/groups/gallery.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/github2fedmsg.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/groups/hotness.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -63,7 +63,7 @@
- role: collectd/fedmsg-service
process: fedmsg-hub
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/ipa.yml
View file

@ -5,7 +5,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/ipsilon.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/keyserver.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -26,7 +26,7 @@
- { role: openvpn/client,
when: env != "staging" }
- apache
- keyserver
- keyserver
tasks:
- include: "{{ tasks }}/yumrepos.yml"

2
playbooks/groups/logserver.yml
View file

@ -31,7 +31,7 @@
#
# We exclude some dirs from restorecon on updates on logservers as they are very large
# and it takes a long long time to run restorecon over them.
# and it takes a long long time to run restorecon over them.
#
- name: exclude some directories from selinux relabeling on updates
copy: src="{{ files }}/logserver/fixfiles_exclude_dirs" dest=/etc/selinux/fixfiles_exclude_dirs owner=root mode=0644

4
playbooks/groups/mariadb-server.yml
View file

@ -4,14 +4,14 @@
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=db03.phx2.fedoraproject.org:db03.stg.phx2.fedoraproject.org"
# Once the instance exists, configure it.
# Once the instance exists, configure it.
- name: configure mariadb server system
hosts: db03.phx2.fedoraproject.org:db03.stg.phx2.fedoraproject.org
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/mdapi.yml
View file

@ -5,7 +5,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -53,7 +53,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"

2
playbooks/groups/mirrorlist2.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/noc.yml
View file

@ -5,7 +5,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -36,7 +36,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/notifs-backend.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -60,7 +60,7 @@
- role: collectd/fedmsg-service
process: fedmsg-hub
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/notifs-web.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/openqa.yml
View file

@ -1,6 +1,6 @@
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=openqa:openqa-stg"
- name: setup base openqa host
- name: setup base openqa host
hosts: openqa:openqa-stg
user: root
gather_facts: True

2
playbooks/groups/openstack-compute-nodes.yml
View file

@ -4,7 +4,7 @@
hosts: openstack-compute
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/RedHat.yml

4
playbooks/groups/people.yml
View file

@ -8,7 +8,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -81,7 +81,7 @@
SSLCertificateChainFile: wildcard-2014.fedorapeople.org.intermediate.cert
- people
tasks:
- include: "{{ tasks }}/yumrepos.yml"
- include: "{{ tasks }}/2fa_client.yml"

4
playbooks/groups/pkgs.yml
View file

@ -27,8 +27,8 @@
- git/server
- git/hooks
- clamav
- { role: nfs/client, when: env != "staging", mnt_dir: '/srv/cache/lookaside', nfs_src_dir: 'fedora_sourcecache', nfs_mount_opts='rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4' }
- { role: nfs/client, when: env == "staging", mnt_dir: '/srv/cache/lookaside_prod', nfs_src_dir: 'fedora_sourcecache', nfs_mount_opts='ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4' }
- { role: nfs/client, when: env != "staging", mnt_dir: '/srv/cache/lookaside', nfs_src_dir: 'fedora_sourcecache', nfs_mount_opts='rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4' }
- { role: nfs/client, when: env == "staging", mnt_dir: '/srv/cache/lookaside_prod', nfs_src_dir: 'fedora_sourcecache', nfs_mount_opts='ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4' }
- role: distgit
tags: distgit
- { role: hosts, when: env == "staging" }

4
playbooks/groups/postgresql-server.yml
View file

@ -4,14 +4,14 @@
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=db-datanommer02.phx2.fedoraproject.org:db-qa01.qa.fedoraproject.org:db-koji01.phx2.fedoraproject.org:db-fas01.stg.phx2.fedoraproject.org:db-fas01.phx2.fedoraproject.org:db01.phx2.fedoraproject.org:db01.stg.phx2.fedoraproject.org:db-s390-koji01.qa.fedoraproject.org:db-arm-koji01.qa.fedoraproject.org:db-ppc-koji01.ppc.fedoraproject.org"
# Once the instance exists, configure it.
# Once the instance exists, configure it.
- name: configure postgresql server system
hosts: db-datanommer02.phx2.fedoraproject.org:db-qa01.qa.fedoraproject.org:db-koji01.phx2.fedoraproject.org:db-fas01.stg.phx2.fedoraproject.org:db-fas01.phx2.fedoraproject.org:db01.phx2.fedoraproject.org:db01.stg.phx2.fedoraproject.org:db-s390-koji01.qa.fedoraproject.org:db-arm-koji01.qa.fedoraproject.org:db-ppc-koji01.ppc.fedoraproject.org
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/proxies.yml
View file

@ -149,7 +149,7 @@
- reload httpd
#
# If this is an initial deployment, make sure docs are synced over.
# If this is an initial deployment, make sure docs are synced over.
# Do not count these as changed ever
#
- name: make sure docs are synced. This could take a very very very logtime to finish

4
playbooks/groups/resultsdb-dev.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -40,7 +40,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/resultsdb-prod.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/resultsdb-stg.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -40,7 +40,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

8
playbooks/groups/secondary.yml
View file

@ -20,11 +20,11 @@
- download
- rsyncd
- sudo
- { role: nfs/client,
mnt_dir: '/srv/pub/archive',
- { role: nfs/client,
mnt_dir: '/srv/pub/archive',
nfs_src_dir: 'fedora_ftp/fedora.redhat.com/pub/archive' }
- { role: nfs/client,
mnt_dir: '/srv/pub/alt',
- { role: nfs/client,
mnt_dir: '/srv/pub/alt',
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4",
nfs_src_dir: 'fedora_ftp/fedora.redhat.com/pub/alt' }
- { role: nfs/client,

8
playbooks/groups/sign-bridge.yml
View file

@ -2,9 +2,9 @@
# NOTE: this assumes the boxes are already up and are accessible
# NOTE: most of these vars_path come from group_vars/sign or from hostvars
#
# FURTHER NOTE: some of These machines run day to day with sshd disabled/off.
# Access is via management interface only. This playbook does initial setup.
# Please check with rel-eng before doing anything here.
# FURTHER NOTE: some of These machines run day to day with sshd disabled/off.
# Access is via management interface only. This playbook does initial setup.
# Please check with rel-eng before doing anything here.
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=sign-bridge"
@ -13,7 +13,7 @@
user: root
gather_facts: true
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/smtp-mm.yml
View file

@ -7,7 +7,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/groups/statscache.yml
View file

@ -9,7 +9,7 @@
hosts: statscache:statscache-stg
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -35,7 +35,7 @@
hosts: statscache-web:statscache-web-stg
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -52,7 +52,7 @@
hosts: statscache-backend:statscache-backend-stg
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/groups/summershum.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -63,7 +63,7 @@
- role: collectd/fedmsg-service
process: fedmsg-hub
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/sundries.yml
View file

@ -1,6 +1,6 @@
# create a new sundries server
#
# These servers run a number of smaller apps that don't merit their own instances.
# These servers run a number of smaller apps that don't merit their own instances.
#
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=sundries:sundries-stg"
@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/groups/tagger.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -58,7 +58,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/taskotron-client-hosts.yml
View file

@ -9,7 +9,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -68,4 +68,4 @@
handlers:
- include: "{{ handlers }}/restart_services.yml"

4
playbooks/groups/taskotron-dev.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -40,7 +40,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/groups/taskotron.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -42,7 +42,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -64,7 +64,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/torrent.yml
View file

@ -5,7 +5,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/twisted-buildbots.yml
View file

@ -24,7 +24,7 @@
- include: "{{ tasks }}/cloud_setup_basic.yml"
- name: set hostname (required by some services, at least postfix need it)
hostname: name="{{inventory_hostname}}"
tasks:
- name: add twisted key

2
playbooks/groups/virthost.yml
View file

@ -7,7 +7,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/wiki.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/zanata2fedmsg.yml
View file

@ -10,7 +10,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

8
playbooks/host_update.yml
View file

@ -7,11 +7,11 @@
hosts: "{{ target }}"
gather_facts: false
user: root
tasks:
tasks:
- name: expire-caches
command: yum clean expire-cache
- name: yum -y {{ yumcommand }}
command: yum -y {{ yumcommand }}
async: 7200
@ -26,7 +26,7 @@
command: /usr/bin/test -f /usr/bin/rkhunter
register: rkhunter
ignore_errors: true
- name: run rkhunter --propupd
command: /usr/bin/rkhunter --propupd
when: rkhunter|success

4
playbooks/hosts/artboard.fedorainfracloud.org.yml
View file

@ -94,7 +94,7 @@
tags:
- artboard
- name: make artboard subdir
- name: make artboard subdir
file: path=/srv/persist/artboard mode=0755 state=directory
tags:
- artboard
@ -112,7 +112,7 @@
notify: reload httpd
tags:
- artboard
- name: startup apache
service: name=httpd state=started
tags:

4
playbooks/hosts/blockerbugs-dev.cloud.fedoraproject.org.yml
View file

@ -3,7 +3,7 @@
user: root
gather_facts: False
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
@ -19,7 +19,7 @@
- tcp_ports: [22, 80, 443]
- udp_ports: []
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/hosts/cloud-noc01.cloud.fedoraproject.org.yml
View file

@ -5,7 +5,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/hosts/data-analysis01.phx2.fedoraproject.org.yml
View file

@ -4,7 +4,7 @@
hosts: data-analysis01.phx2.fedoraproject.org
user: root
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
@ -77,9 +77,9 @@
- name: setup mysql items
file: path=/srv/mysql state=directory mode=0770 owner=mysql group=mysql setype=mysqld_db_t
- name: semanage mysql tree
command: /usr/sbin/semanage fcontext -a -t mysqld_db_t "/srv/mysql(/.*)?"
##

12
playbooks/hosts/fed-cloud09.cloud.fedoraproject.org.yml
View file

@ -101,7 +101,7 @@
state=present
regexp="^.*INPUT.*172\.24\.0\.10/24.*tcp.*{{ item }}.*ACCEPT"
insertbefore="^.*INPUT.*RELATED,ESTABLISHED.*ACCEPT"
line="-A INPUT -s 172.24.0.10/24 -p tcp -m multiport --dports {{ item }} -m comment --comment \"added by fedora-infra ansible\" -j ACCEPT"
line="-A INPUT -s 172.24.0.10/24 -p tcp -m multiport --dports {{ item }} -m comment --comment \"added by fedora-infra ansible\" -j ACCEPT"
backup=yes
with_items:
- 80,443
@ -278,7 +278,7 @@
# http://docs.openstack.org/icehouse/install-guide/install/yum/content/basics-queue.html
# https://openstack.redhat.com/Securing_services#qpid
#### FIXME
#### FIXME
- lineinfile: dest=/etc/rabbitmq/rabbitmq-env.conf regexp="^RABBITMQ_NODE_PORT=" state="absent"
- service: name=rabbitmq-server state=started
@ -461,7 +461,7 @@
- ini_file: dest=/etc/cinder/api-paste.ini section="filter:authtoken" option=auth_protocol value=https
- ini_file: dest=/etc/cinder/api-paste.ini section="filter:authtoken" option=service_host value={{ controller_publicname }}
- ini_file: dest=/etc/cinder/api-paste.ini section="filter:authtoken" option=cafile value=/etc/pki/tls/certs/fedorainfracloud.org.digicert.pem
- ini_file: dest=/etc/neutron/neutron.conf section=keystone_authtoken option=auth_uri value=https://{{ controller_publicname }}:5000
- ini_file: dest=/etc/neutron/neutron.conf section=keystone_authtoken option=auth_protocol value=https
- ini_file: dest=/etc/neutron/neutron.conf section=keystone_authtoken option=auth_host value={{ controller_publicname }}
@ -500,7 +500,7 @@
# enable stunell to neutron
- shell: cat /etc/pki/tls/certs/fedorainfracloud.org.pem /etc/pki/tls/certs/fedorainfracloud.org.digicert.pem /etc/pki/tls/private/fedorainfracloud.org.key > /etc/haproxy/fedorainfracloud.org.combined
- file: path=/etc/haproxy/fedorainfracloud.org.combined owner=haproxy mode=644
- file: path=/etc/haproxy/fedorainfracloud.org.combined owner=haproxy mode=644
- copy: src={{ files }}/fedora-cloud/haproxy.cfg dest=/etc/haproxy/haproxy.cfg mode=644 owner=root group=root
# first OS have to free ports so haproxy can bind it, then we start OS on modified ports
#- shell: openstack-service stop
@ -952,7 +952,7 @@
- { name: pythonbots, cidr: '172.25.128.1/20', gateway: '172.25.128.1' }
- { name: qa, cidr: '172.25.112.1/20', gateway: '172.25.112.1' }
- { name: scratch, cidr: '172.25.64.1/20', gateway: '172.25.64.1' }
- { name: transient, cidr: '172.25.48.1/20', gateway: '172.25.48.1' }
- { name: transient, cidr: '172.25.48.1/20', gateway: '172.25.48.1' }
- { name: openshift, cidr: '172.25.160.1/20', gateway: '172.25.160.1' }
- name: "Connect router's interface to the TENANT-subnet"
neutron_router_interface:
@ -1222,7 +1222,7 @@
- shell: source /root/keystonerc_admin && nova quota-update --instances 40 --cores 80 --ram 300000 --floating-ips 10 --security-groups 20 {{ TENANT_ID.stdout }}
#
# Note that we set manually the amount of volumes for this tenant to 20 in the web interface.
# Note that we set manually the amount of volumes for this tenant to 20 in the web interface.
# nova quota-update cannot do so.
#
- shell: source /root/keystonerc_admin && keystone tenant-list | grep 'persistent ' | awk '{print $2}'

2
playbooks/hosts/fedora-hubs-dev.yml
View file

@ -3,7 +3,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/hosts/lists-dev.fedorainfracloud.org.yml
View file

@ -97,7 +97,7 @@
gather_facts: no
become: yes
become_user: postgres
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"
@ -123,7 +123,7 @@
- name: setup mailman and hyperkitty
hosts: lists-dev.fedorainfracloud.org
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"
@ -169,4 +169,4 @@
handlers:
- include: "{{ handlers }}/restart_services.yml"
- name: reload aliases
command: newaliases
command: newaliases

4
playbooks/hosts/shogun-ca.cloud.fedoraproject.org.yml
View file

@ -3,7 +3,7 @@
user: root
gather_facts: False
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
@ -16,7 +16,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/include/proxies-certificates.yml
View file

@ -14,7 +14,7 @@
roles:
- role: httpd/mod_ssl
- role: httpd/certificate
name: wildcard-2014.fedoraproject.org
SSLCertificateChainFile: wildcard-2014.fedoraproject.org.intermediate.cert

4
playbooks/include/proxies-redirects.yml
View file

@ -50,7 +50,7 @@
- role: httpd/redirectmatch
name: codecs
website: codecs.fedoraproject.org
regex: ^.*/(.*openh264.*.rpm$)
regex: ^.*/(.*openh264.*.rpm$)
target: http://ciscobinary.openh264.org/$1
- role: httpd/redirectmatch
@ -246,7 +246,7 @@
#
# When there is no prerelease we redirect the prerelease urls
# back to the main release.
# back to the main release.
# This should be disabled when there is a prerelease
- role: httpd/redirectmatch

4
playbooks/include/proxies-websites.yml
View file

@ -133,7 +133,7 @@
- www.projectofedora.org
- www.getfedora.com
- getfedora.com
- role: httpd/website
name: admin.fedoraproject.org
server_aliases: [admin.stg.fedoraproject.org]
@ -379,7 +379,7 @@
- www.389tcp.org
ssl: false
cert_name: "{{wildcard_cert_name}}"
- role: httpd/website
name: whatcanidoforfedora.org
server_aliases:

2
playbooks/manual/kernel-qa.yml
View file

@ -7,7 +7,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/manual/qadevel.yml
View file

@ -1,6 +1,6 @@
# create a new qadevel server
#
# This server looks for rawhide builds and requests they be signed.
# This server looks for rawhide builds and requests they be signed.
#
- name: make qadevel server
@ -8,7 +8,7 @@
user: root
gather_facts: False
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -24,7 +24,7 @@
user: root
gather_facts: True
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

8
playbooks/manual/sign-vault.yml
View file

@ -2,9 +2,9 @@
# NOTE: this assumes the boxes are already up and are accessible
# NOTE: most of these vars_path come from group_vars/sign or from hostvars
#
# FURTHER NOTE: some of These machines run day to day with sshd disabled/off.
# Access is via management interface only. This playbook does initial setup.
# Please check with rel-eng before doing anything here.
# FURTHER NOTE: some of These machines run day to day with sshd disabled/off.
# Access is via management interface only. This playbook does initial setup.
# Please check with rel-eng before doing anything here.
- name: make sign-vault server vm (secondary and stg only)
hosts: secondary-vault01.phx2.fedoraproject.org:sign-vault01.stg.phx2.fedoraproject.org
@ -27,7 +27,7 @@
user: root
gather_facts: true
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/rdiff-backup.yml
View file

@ -10,7 +10,7 @@
serial: 10
# host_backup_targets set in host_vars or group_vars
# global_backup_targets can be defined in vars, group_vars/all or anywhere
# take the 'echo' out below for it to actually run
# take the 'echo' out below for it to actually run
# FIXME - see how this copes with timeouts
# FIXME - storing/reporting results and output?
# FIXME - coping with errors?

2
playbooks/rkhunter_only.yml
View file

@ -9,7 +9,7 @@
command: /usr/bin/test -f /usr/bin/rkhunter
register: rkhunter
ignore_errors: true
- name: run rkhunter --propupd
command: /usr/bin/rkhunter --propupd
when: rkhunter|success

4
playbooks/rkhunter_update.yml
View file

@ -7,7 +7,7 @@
tasks:
- name: expire-caches
command: yum clean expire-cache
- name: yum -y {{ yumcommand }}
command: yum -y {{ yumcommand }}
async: 7200
@ -17,7 +17,7 @@
command: /usr/bin/test -f /usr/bin/rkhunter
register: rkhunter
ignore_errors: true
- name: run rkhunter --propupd
command: /usr/bin/rkhunter --propupd
when: rkhunter|success

4
playbooks/run_pkgdb_sync_git.yml
View file

@ -1,11 +1,11 @@
# Run `pkgdb2branch` on
# Run `pkgdb2branch` on
#
#To update from testing, adjust as follow:
# --extra-vars="package='pkg1:pkg2:pkg3'"
- name: run pkgdb_sync_git_branches.py
hosts: pkgs01.phx2.fedoraproject.org
hosts: pkgs01.phx2.fedoraproject.org
user: root
serial: 25
gather_facts: False

4
playbooks/set_root_auth_keys.yml
View file

@ -4,7 +4,7 @@
user: root
gather_facts: False
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -14,5 +14,5 @@
tasks:
- name: add root keys for sysadmin-main and other allowed users
action: authorized_key user=root key={{ item }}
with_lines:
with_lines:
- "{{ auth_keys_from_fas}} @sysadmin-main {{ root_auth_users }}"

14
playbooks/transient_cloud_instance.yml
View file

@ -1,16 +1,16 @@
#
# setup a transient instance in the Fedora infrastructure private cloud
#
# This playbook is used to spin up a transient instance for someone to test something.
# In particular transient instances will all be terminated at least by the next
# maint window for the cloud, but ideally people will terminate instances they
# are done using.
# This playbook is used to spin up a transient instance for someone to test something.
# In particular transient instances will all be terminated at least by the next
# maint window for the cloud, but ideally people will terminate instances they
# are done using.
#
# If you have an application or longer term item that should always be around
# please use the persistent playbook instead.
#
# You MUST pass a name to it, ie: -e 'name=somethingdescriptive'
# You can optionally override defaults by passing any of the following:
# You can optionally override defaults by passing any of the following:
# image=imagename (default is centos70_x86_64)
# instance_type=some instance type (default is m1.small)
# root_auth_users='user1 user2 user3' (default is sysadmin-main group)
@ -58,10 +58,10 @@
- name: provision instance
hosts: tmp_just_created
gather_facts: True
environment:
environment:
ANSIBLE_HOST_KEY_CHECKING: False
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/update-proxy-dns.yml
View file

@ -7,7 +7,7 @@
hosts: "{{ proxies }}"
user: root
serial: 1
vars_files:
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -48,7 +48,7 @@
- name: Push our changes back
local_action: command git push chdir={{tmp.stdout}}
when: nodns is not defined or not "true" in nodns
- name: Destroy our temporary clone of /git/dns/ in /var/tmp/dns-checkout....
local_action: file dest={{tmp.stdout}} state=absent
when: nodns is not defined or not "true" in nodns

6
playbooks/vhost_reboot.yml
View file

@ -1,6 +1,6 @@
#
# This playbook lets you safely reboot a virthost and all it's guests.
#
# This playbook lets you safely reboot a virthost and all it's guests.
#
# requires --extra-vars="target=somevhost fqdn"
# Might add nodns=true or nonagios=true to the extra vars
@ -13,7 +13,7 @@
# third play, reboot the vhost
# wait for vhost to come back
# TODO: Figure out how to compare virt info pre and post boot.
# TODO: Figure out how to compare virt info pre and post boot.
- name: find instances
hosts: "{{ target }}"

2
playbooks/vhost_update.yml
View file

@ -1,4 +1,4 @@
# This playboook updates a virthost and all it's guests.
# This playboook updates a virthost and all it's guests.
#
# requires --extra-vars="target=somevhostname yumcommand=update"
# Might add nodns=true or nonagios=true at extra-vars

2
roles/ansible-server/tasks/main.yml
View file

@ -22,7 +22,7 @@
- ansible-server
#
# TODO:
# cgit?
# cgit?
# rbac-playbook?
# zodbot notifications?
#

10
roles/apache/tasks/main.yml
View file

@ -29,9 +29,9 @@
tags:
- service
- apache
# install hash randomization hotfix
- name: hotfix - copy over new httpd init script
- name: hotfix - copy over new httpd init script
copy: src="{{ files }}/hotfix/httpd/httpd.init" dest=/etc/init.d/httpd
owner=root group=root mode=0755
notify:
@ -65,7 +65,7 @@
template: src="{{ files }}/httpd/headers.conf.j2" dest=/etc/httpd/conf.d/headers.conf
notify:
- reload apache
tags:
tags:
- config
- apache
@ -73,10 +73,10 @@
template: src="{{ files }}/httpd/apachestatus.conf" dest=/etc/httpd/conf.d/apachestatus.conf
notify:
- reload apache
tags:
tags:
- config
- apache
- name: setup logrotate to our needs
copy: src="{{ files }}/httpd/httpd.logrotate" dest=/etc/logrotate.d/httpd
tags:

4
roles/ask/tasks/main.yml
View file

@ -1,6 +1,6 @@
---
#
# Setup askbot for ask.fedoraproject.org site.
# Setup askbot for ask.fedoraproject.org site.
#
- name: install needed packages
yum: pkg={{ item }} state=present
@ -106,7 +106,7 @@
copy: >
src={{ item }} dest=/etc/cron.d/{{ item }}
owner=root group=root mode=0644
with_items:
with_items:
- cron-ask-send-reminders
- cron-post-office-send-mail
- cron-post-office-send-daily

2
roles/awstats/tasks/main.yml
View file

@ -26,4 +26,4 @@
- awstats
#- name: set up http configs for awstats on dataserver

8
roles/base/tasks/main.yml
View file

@ -61,7 +61,7 @@
with_items:
- "{{ ansible_interfaces }}"
notify:
# - restart NetworkManager
# - restart NetworkManager
- reload NetworkManager-connections
- apply interface-changes
when: (virthost is not defined) and (not item.startswith('tun')) and (not item.startswith('virbr')) and (not item.startswith('vnet')) and (hostvars[inventory_hostname]['ansible_' + item.replace('-','_')]['type'] == 'ether') and (ansible_distribution_major_version|int >=7) and hostvars[inventory_hostname]['ansible_' + item.replace('-','_')]['active'] and nmclitest|success and ( not ansible_ifcfg_blacklist ) and ( ansible_ifcfg_whitelist is not defined or item in ansible_ifcfg_whitelist )
@ -324,7 +324,7 @@
- base
#
# Blacklist the cdc_ether module as we don't want it loading mgmt usb0 and spewing to logs.
# Blacklist the cdc_ether module as we don't want it loading mgmt usb0 and spewing to logs.
#
- name: Blacklist cdc_ether module
copy: src=blacklist-cdc_ether.conf dest=/etc/modprobe.d/blacklist-cdc_ether.conf
@ -350,7 +350,7 @@
owner=root
group=root
mode=644
when: env == 'staging'
when: env == 'staging'
tags:
- base
- config
@ -365,7 +365,7 @@
owner=root
group=root
mode=644
when: env == 'production'
when: env == 'production'
tags:
- base
- config

12
roles/batcave/tasks/main.yml
View file

@ -70,7 +70,7 @@
- config
#
#
# This is our ansible master, setup ansible
#
@ -80,12 +80,12 @@
- batcave
- config
- name: run daily logview report for ansible actions.
- name: run daily logview report for ansible actions.
copy: src=logview.cron dest=/etc/cron.daily/logview.cron mode=0755
tags:
- batcave
- config
- name: setup cron for daily ticketkey reollover
copy: src=ticketkey.cron dest=/etc/cron.daily/ticketkey.cron mode=0755
tags:
@ -187,7 +187,7 @@
- config
#
# This script checks all the virthosts and logs what guests they are running.
# This script checks all the virthosts and logs what guests they are running.
#
- name: install vmdiff.sh cron
@ -286,8 +286,8 @@
- config
#
# Setup geoip scripts.
# Other machines pull current geoip data from here.
# Setup geoip scripts.
# Other machines pull current geoip data from here.
#
- name: Install geoip download databases script

2
roles/bugzilla2fedmsg/tasks/main.yml
View file

@ -39,7 +39,7 @@
dest=/etc/moksha/production.ini
owner=fedmsg
group=fedmsg
mode=0640
mode=0640
notify:
- restart moksha-hub
tags:

2
roles/datagrepper/tasks/main.yml
View file

@ -41,7 +41,7 @@
- packages
- datagrepper
- name: setting up httpd config
- name: setting up httpd config
template: src=datagrepper-app.conf dest=/etc/httpd/conf.d/datagrepper.conf owner=root group=root
notify:
- reload httpd

2
roles/debug_env/tasks/main.yml
View file

@ -1,5 +1,5 @@
#
# This role can be added to a playbook to dump out all
# This role can be added to a playbook to dump out all
# the env from ansible to see what variables and facts are.
# Taken from https://coderwall.com/p/13lh6w
#

Some files were not shown because too many files have changed in this diff Show more