diff --git a/playbooks/manual/openshift-fix-nfs-file-perms.yml b/playbooks/manual/openshift-fix-nfs-file-perms.yml new file mode 100644 index 0000000000..f5bb63bf9a --- /dev/null +++ b/playbooks/manual/openshift-fix-nfs-file-perms.yml @@ -0,0 +1,47 @@ +# This playbook fixes the file permissions on NFS mounted volumes in case of OpenShift userid change, which happens on datacenter moves or when openshift is reinstalled. +# +# It can take quite some time as there are a lot of files to check on these volumes +# + +- name: Fix file permissions on value + hosts: value:value_stg + user: root + gather_facts: false + vars_files: + - /srv/web/infra/ansible/vars/global.yml + - /srv/private/ansible/vars.yml + - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml + - /srv/web/infra/ansible/roles/openshift-apps/maubot/vars/main.yml + + tasks: + - name: Fix meeting logs permissions + ansible.builtin.file: + path: /srv/web/meetbot + state: directory + owner: "{{ openshift_user_id }}" + group: "{{ openshift_user_id }}" + recurse: true + +- name: Fix file permissions on sundries + hosts: sundries[0] + user: root + gather_facts: false + vars_files: + - /srv/web/infra/ansible/vars/global.yml + - /srv/private/ansible/vars.yml + - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml + - /srv/web/infra/ansible/roles/openshift-apps/fedora-packages-static/vars/main.yml + + tasks: + - name: Fix file permissions + ansible.builtin.file: + path: /srv/{{item}} + state: directory + owner: "{{ openshift_user_id }}" + group: "{{ openshift_user_id }}" + recurse: true + with_items: + - solr-storage + - fedora-packages-static-storage + - fedora-packages-static-db-storage + diff --git a/playbooks/openshift-apps/fedora-packages-static.yml b/playbooks/openshift-apps/fedora-packages-static.yml index 3f0940367b..59ba49a687 100644 --- a/playbooks/openshift-apps/fedora-packages-static.yml +++ b/playbooks/openshift-apps/fedora-packages-static.yml @@ -1,27 +1,4 @@ --- -- name: Fix mounted file permissions - hosts: sundries[0] - user: root - gather_facts: false - vars_files: - - /srv/web/infra/ansible/vars/global.yml - - /srv/private/ansible/vars.yml - - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - - /srv/web/infra/ansible/roles/openshift-apps/fedora-packages-static/vars/main.yml - - tasks: - - name: Fix file permissions - ansible.builtin.file: - path: /srv/{{item}} - state: directory - owner: "{{ openshift_user_id }}" - group: "{{ openshift_user_id }}" - recurse: true - with_items: - - solr-storage - - fedora-packages-static-storage - - fedora-packages-static-db-storage - - name: Make fedora-packages-static hosts: os_control[0]:os_control_stg[0] user: root diff --git a/playbooks/openshift-apps/maubot.yml b/playbooks/openshift-apps/maubot.yml index 3a0e7c1e37..226cc17081 100644 --- a/playbooks/openshift-apps/maubot.yml +++ b/playbooks/openshift-apps/maubot.yml @@ -21,25 +21,6 @@ owner: maubot encoding: UTF-8 -- name: Fix meeting logs permissions - hosts: value:value_stg - user: root - gather_facts: false - vars_files: - - /srv/web/infra/ansible/vars/global.yml - - /srv/private/ansible/vars.yml - - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - - /srv/web/infra/ansible/roles/openshift-apps/maubot/vars/main.yml - - tasks: - - name: Fix meeting logs permissions - ansible.builtin.file: - path: /srv/web/meetbot - state: directory - owner: "{{ openshift_user_id }}" - group: "{{ openshift_user_id }}" - recurse: true - - name: Make the app be real hosts: os_control_stg:os_control user: root