Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

inventory / playbooks: remove a bunch of old cloud hosts that will be powered off tomorrow

Browse source 
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2020-02-26 20:18:19 +00:00 • committed by Pierre-Yves Chibon
parent 83f0c19f07
commit 1f91973595
51 changed files with 3 additions and 1087 deletions
Download patch file Download diff file Expand all files Collapse all files

32
inventory/builders
View file

@ -248,38 +248,6 @@ buildvm-ppc64le-31.ppc.fedoraproject.org
bkernel03.phx2.fedoraproject.org
bkernel04.phx2.fedoraproject.org
#
# These are misc
#
[arm03]
#arm03-builder00.arm.fedoraproject.org
#arm03-builder01.arm.fedoraproject.org
#arm03-builder02.arm.fedoraproject.org
#arm03-builder03.arm.fedoraproject.org
# These are in use as arm03-qa00 - 03
#arm03-builder04.arm.fedoraproject.org
#arm03-builder05.arm.fedoraproject.org
#arm03-builder06.arm.fedoraproject.org
#arm03-builder07.arm.fedoraproject.org
# These are in use as arm03-packager01-02
#arm03-builder08.arm.fedoraproject.org
#arm03-builder09.arm.fedoraproject.org
# These are off currently
#arm03-builder10.arm.fedoraproject.org
#arm03-builder11.arm.fedoraproject.org
#arm03-builder12.arm.fedoraproject.org
#arm03-builder13.arm.fedoraproject.org
#arm03-builder14.arm.fedoraproject.org
#arm03-builder15.arm.fedoraproject.org
#arm03-builder16.arm.fedoraproject.org
#arm03-builder17.arm.fedoraproject.org
#arm03-builder18.arm.fedoraproject.org
#arm03-builder19.arm.fedoraproject.org
#arm03-builder20.arm.fedoraproject.org
#arm03-builder21.arm.fedoraproject.org
#arm03-builder22.arm.fedoraproject.org
#arm03-builder23.arm.fedoraproject.org
# These hosts get the runroot plugin installed.
# They should be added to their own 'compose' channel in the koji db
# .. and they should not appear in the default channel for builds.

25
inventory/cloud
View file

@ -22,37 +22,12 @@ fed-cloud15.cloud.fedoraproject.org
fed-cloud-ppc02.cloud.fedoraproject.org
virthost-aarch64-os01.fedorainfracloud.org
virthost-aarch64-os02.fedorainfracloud.org
virthost-cloud01.fedorainfracloud.org
virthost-os01.fedorainfracloud.org
virthost-os02.fedorainfracloud.org
virthost-os03.fedorainfracloud.org
storinator01.fedorainfracloud.org
##
## Clients
##
arm03-packager00.cloud.fedoraproject.org
arm03-packager01.cloud.fedoraproject.org
arm03-qa00.cloud.fedoraproject.org
arm03-qa01.cloud.fedoraproject.org
cloud-noc01.cloud.fedoraproject.org
developer.fedorainfracloud.org
#el6-test.fedorainfracloud.org
#el7-test.fedorainfracloud.org
#f30-test.fedorainfracloud.org
#f31-test.fedorainfracloud.org
#f32-test.fedorainfracloud.org
#aarch64-test01.fedorainfracloud.org
#aarch64-test02.fedorainfracloud.org
fedora-bootstrap.fedorainfracloud.org
happinesspackets.fedorainfracloud.org
happinesspackets-stg.fedorainfracloud.org
#simple-koji-ci-prod.fedorainfracloud.org
ppc64le-test.fedorainfracloud.org
upstreamfirst.fedorainfracloud.org
##
## New Community Hardware
##

7
inventory/group_vars/arm_packager
View file

@ -1,7 +0,0 @@
---
fas_client_groups: packager,upstream-test
freezes: false
sudoers: "{{ private }}/files/sudo/arm-packager-sudoers"
sudoers_main: nopasswd
host_group: cloud
ansible_ifcfg_blacklist: true

8
inventory/group_vars/arm_qa
View file

@ -1,8 +0,0 @@
---
fas_client_groups: sysadmin-qa,arm-qa,qa
freezes: false
sudoers: "{{ private }}/files/sudo/arm-qa-sudoers"
sudoers_main: nopasswd
libdir: /usr/lib
host_group: cloud
ansible_ifcfg_blacklist: true

7
inventory/group_vars/maintainer_test_oldcloud
View file

@ -1,7 +0,0 @@
---
fas_client_groups: packager,upstream-test
freezes: false
sudoers: "{{ private }}/files/sudo/arm-packager-sudoers"
sudoers_main: nopasswd
host_group: cloud
ansible_ifcfg_blacklist: true

39
inventory/host_vars/arm-hub01.qa.fedoraproject.org
View file

@ -1,39 +0,0 @@
# Even though this host has not yet been ansibilized, we need this definition
# here so that other hosts know that it is allowed to send the following fedmsg
# messages.
# Note that it can do both compose messages and koji messages
fedmsg_certs:
- service: shell
owner: root
group: root
- service: koji
owner: root
group: apache
can_send:
- buildsys.build.state.change
- buildsys.package.list.change
- buildsys.repo.done
- buildsys.repo.init
- buildsys.rpm.sign
- buildsys.tag
- buildsys.task.state.change
- buildsys.untag
- service: bodhi
owner: root
group: masher
can_send:
- compose.branched.complete
- compose.branched.mash.complete
- compose.branched.mash.start
- compose.branched.pungify.complete
- compose.branched.pungify.start
- compose.branched.rsync.complete
- compose.branched.rsync.start
- compose.branched.start
- compose.epelbeta.complete
- compose.rawhide.complete
- compose.rawhide.mash.complete
- compose.rawhide.mash.start
- compose.rawhide.rsync.complete
- compose.rawhide.rsync.start
- compose.rawhide.start

7
inventory/host_vars/arm01-builder22.arm.fedoraproject.org
View file

@ -1,7 +0,0 @@
---
koji_server_url: "https://koji.stg.fedoraproject.org/kojihub"
koji_weburl: "https://koji.stg.fedoraproject.org/koji"
koji_topurl: "https://kojipkgs.stg.fedoraproject.org/"
datacenter: staging
koji_hub_nfs: "fedora_koji"
freezes: false

7
inventory/host_vars/arm01-builder23.arm.fedoraproject.org
View file

@ -1,7 +0,0 @@
---
koji_server_url: "https://koji.stg.fedoraproject.org/kojihub"
koji_weburl: "https://koji.stg.fedoraproject.org/koji"
koji_topurl: "https://kojipkgs.stg.fedoraproject.org/"
datacenter: staging
koji_hub_nfs: "fedora_koji"
freezes: false

3
inventory/host_vars/arm01-retrace01.arm.fedoraproject.org
View file

@ -1,3 +0,0 @@
---
# This is a 32bit host
libdir: /usr/lib

2
inventory/host_vars/arm02-builder21.arm.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
koji_hub_nfs: "fedora_koji"

2
inventory/host_vars/arm02-builder23.arm.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
koji_hub_nfs: "fedora_koji"

2
inventory/host_vars/arm04-builder00.arm.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
koji_hub_nfs: "fedora_koji"

2
inventory/host_vars/arm04-builder01.arm.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
koji_hub_nfs: "fedora_koji"

13
inventory/host_vars/blockerbugs-dev.cloud.fedoraproject.org
View file

@ -1,13 +0,0 @@
---
instance_type: m1.medium
image: "{{ el6_qcow_id }}"
keypair: fedora-admin
security_group: webserver,all-icmp-persistent,default
zone: nova
hostbase: blockerbugs-dev-
public_ip: 209.132.184.200
root_auth_users: tflink frantisekz islamgulov
description: blockerbugs-dev
tcp_ports: ['22', '80', '443']
volumes: ['-d /dev/vdb vol-00000021']
datacenter: cloud

2
inventory/host_vars/cn-aarch64-01.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.25

2
inventory/host_vars/cn-aarch64-02.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.26

2
inventory/host_vars/cn-x86-64-01-03.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.11

2
inventory/host_vars/cn-x86-64-01-04.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.12

2
inventory/host_vars/cn-x86-64-01-05.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.13

2
inventory/host_vars/cn-x86-64-01-06.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.14

2
inventory/host_vars/cn-x86-64-01-07.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.15

2
inventory/host_vars/cn-x86-64-01-08.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.16

2
inventory/host_vars/cn-x86-64-02-01.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.17

2
inventory/host_vars/cn-x86-64-02-02.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.18

2
inventory/host_vars/cn-x86-64-02-03.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.19

2
inventory/host_vars/control01.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.5

2
inventory/host_vars/control02.cloud.fedoraproject.org
View file

@ -1,2 +0,0 @@
---
eth1_ip: 172.23.1.6

18
inventory/host_vars/developer.fedorainfracloud.org
View file

@ -1,18 +0,0 @@
---
image: "{{ fedora28_x86_64 }}"
instance_type: m1.large
keypair: fedora-admin-20130801
security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
zone: nova
tcp_ports: [22, 80, 443]
inventory_tenant: persistent
inventory_instance_name: developer
hostbase: developer
public_ip: 209.132.184.102
root_auth_users: asamalik jstribny phracek pvalena
description: Fedora Developer web site.
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"

21
inventory/host_vars/fedimg-dev.fedorainfracloud.org
View file

@ -1,21 +0,0 @@
instance_type: m1.medium
image: rhel7-20141015
keypair: fedora-admin-20130801
security_group: default,ssh-anywhere-persistent,all-icmp-persistent
zone: nova
tcp_ports: [22, 80, 443]
inventory_tenant: persistent
inventory_instance_name: fedimg-dev
hostbase: fedimg-dev
public_ip: 209.132.184.106
root_auth_users: sayanchowdhury
description: fedimg development instance
volumes:
- volume_id: 54463268-6c72-434b-9215-1fde1ddff030
device: /dev/vdb
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"

18
inventory/host_vars/fedora-bootstrap.fedorainfracloud.org
View file

@ -1,18 +0,0 @@
---
image: "{{ fedora25_x86_64 }}"
instance_type: m1.large
keypair: fedora-admin-20130801
security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
zone: nova
tcp_ports: [22, 80, 443]
inventory_tenant: persistent
inventory_instance_name: fedora-bootstrap
hostbase: fedora-bootstrap
public_ip: 209.132.184.216
root_auth_users: jcapik
description: Fedora Bootstrap project web
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"

30
inventory/host_vars/happinesspackets-stg.fedorainfracloud.org
View file

@ -1,30 +0,0 @@
---
image: CentOS-7-x86_64-GenericCloud-1503
instance_type: m1.medium
keypair: fedora-admin-20130801
security_group: ssh-anywhere-persistent,all-icmp-persistent,default,web-80-anywhere-persistent,default,web-443-anywhere-persistent
zone: nova
tcp_ports: [22,80,443]
inventory_tenant: persistent
inventory_instance_name: happinesspackets-stg
hostbase: happinesspackets-stg
public_ip: 209.132.184.123
root_auth_users: jonatoni algogator jflory7 bee2502
description: happinesspackets stg, infra ticket 7053
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"
fedmsg_certs:
- service: shell
owner: root
group: root
can_send:
- happinesspacket.send
- service: happinesspackets
owner: root
group: root
can_send:
- happinesspacket.send

30
inventory/host_vars/happinesspackets.fedorainfracloud.org
View file

@ -1,30 +0,0 @@
---
image: CentOS-7-x86_64-GenericCloud-1503
instance_type: m1.medium
keypair: fedora-admin-20130801
security_group: ssh-anywhere-persistent,all-icmp-persistent,default,web-80-anywhere-persistent,default,web-443-anywhere-persistent
zone: nova
tcp_ports: [22,80,443]
inventory_tenant: persistent
inventory_instance_name: happinesspackets
hostbase: happinesspackets
public_ip: 209.132.184.58
root_auth_users: jonatoni algogator jflory7 bee2502
description: happinesspackets dev, infra ticket 6690
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"
fedmsg_certs:
- service: shell
owner: root
group: root
can_send:
- happinesspacket.send
- service: happinesspackets
owner: root
group: root
can_send:
- happinesspacket.send

19
inventory/host_vars/libravatar-stg.fedorainfracloud.org
View file

@ -1,19 +0,0 @@
---
instance_type: m1.medium
image: "{{ fedora28_x86_64 }}"
keypair: fedora-admin-20130801
security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
zone: nova
hostbase: libravatar-stg-
public_ip: 209.132.184.138
root_auth_users: clime oliver nipos tleguern sumpfralle
description: libravatar staging server
tcp_ports: ['22', '80', '443']
# volumes: libravatar-data
volumes: [ {volume_id: '09d22a3e-7a54-4870-bcc0-409069b960f6', device: '/dev/vdb'} ]
inventory_tenant: persistent
# name of machine in OpenStack
inventory_instance_name: libravatar-stg
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"

19
inventory/host_vars/libravatar.fedorainfracloud.org
View file

@ -1,19 +0,0 @@
---
instance_type: ms1.large
image: "{{ fedora28_x86_64 }}"
keypair: fedora-admin-20130801
security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
zone: nova
hostbase: libravatar-
public_ip: 209.132.184.237
root_auth_users: clime oliver nipos tleguern sumpfralle
description: libravatar production server
tcp_ports: ['22', '80', '443']
# volumes: libravatar-data
volumes: [ {volume_id: 'a000b415-7720-417f-ae07-67c42c22c604', device: '/dev/vdc'} ]
inventory_tenant: persistent
# name of machine in OpenStack
inventory_instance_name: libravatar
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"

17
inventory/host_vars/ppc64le-test.fedorainfracloud.org
View file

@ -1,17 +0,0 @@
---
image: Fedora-Cloud-Base-30-20190925.0.ppc64le
instance_type: ms1.medium
keypair: fedora-admin-20130801
security_group: ssh-anywhere-maintainertest,web-80-anywhere-maintainertest,default,web-443-anywhere-maintainertest,all-icmp-maintainertest
zone: nova
tcp_ports: [22]
inventory_tenant: maintainertest
inventory_instance_name: ppc64le-test
hostbase: ppc64le-test
public_ip: 209.132.184.213
description: ppc64le-test instance
cloud_networks:
# maintainertest-net
- net-id: "a512d096-3fa2-49cc-b989-d43ca687f91d"

18
inventory/host_vars/respins.fedorainfracloud.org
View file

@ -1,18 +0,0 @@
---
image: rhel7-20141015
instance_type: m1.medium
keypair: fedora-admin-20130801
security_group: wide-open-persistent,default,all-icmp-persistent
zone: nova
tcp_ports: [22, 6969]
inventory_tenant: persistent
inventory_instance_name: respins
hostbase: respins
public_ip: 209.132.184.60
root_auth_users: dmossor linuxmodder jbwillia nb
description: respins instance
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"

18
inventory/host_vars/telegram-irc.fedorainfracloud.org
View file

@ -1,18 +0,0 @@
---
image: "{{ fedora27_x86_64 }}"
instance_type: m1.medium
keypair: fedora-admin-20130801
security_group: ssh-anywhere-persistent,all-icmp-persistent,default
zone: nova
tcp_ports: [22]
inventory_tenant: persistent
inventory_instance_name: telegram-irc
hostbase: telegram-irc
public_ip: 209.132.184.151
root_auth_users: jflory7
description: telegram to irc gateway machine
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"

78
inventory/host_vars/testdays.fedorainfracloud.org
View file

@ -1,78 +0,0 @@
---
image: 'rhel7-20141015'
instance_type: m1.small
keypair: fedora-admin-20130801
security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
zone: nova
tcp_ports: [22, 80, 443]
inventory_tenant: persistent
inventory_instance_name: testdays
hostbase: testdays
public_ip: 209.132.184.107
root_auth_users: tflink jskladan frantisekz
description: fedora testdays instance
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"
freezes: false
############################################################
# postgresql_server
############################################################
shared_buffers: "32MB"
effective_cache_size: "256MB"
db_backup_dir: ['/backups']
dbs_to_backup:
- testdays
- resultsdb
############################################################
# standard qa-app-style settings
############################################################
external_hostname: testdays.fedorainfracloud.org
deployment_type: 'local'
############################################################
# resultsdb
############################################################
resultsdb_db_host_machine: "{{ public_ip }}"
resultsdb_db_host: 127.0.0.1
resultsdb_db_port: 5432
resultsdb_endpoint: 'resultsdb_api'
resultsdb_db_name: resultsdb_testdays
resultsdb_db_user: "{{ testdays_testdays_db_user }}"
resultsdb_db_password: "{{ testdays_testdays_db_password }}"
resultsdb_secret_key: "{{ testdays_resultsdb_secretkey }}"
allowed_hosts:
- 127.0.0.1
############################################################
# resultsdb_frontend
############################################################
resultsdb_frontend_secret_key: "{{ testdays_resultsdb_frontend_secretkey }}"
resultsdb_fe_endpoint: "resultsdb"
############################################################
# testdays
############################################################
testdays_db_host: "{{ public_ip }}"
testdays_db_port: 5432
testdays_endpoint: ''
testdays_db_name: testdays
testdays_db_user: "{{ testdays_testdays_db_user }}"
testdays_db_password: "{{ testdays_testdays_db_password }}"
testdays_secret_key: "{{ testdays_testdays_secretkey }}"

180
inventory/host_vars/upstreamfirst.fedorainfracloud.org
View file

@ -1,180 +0,0 @@
---
############################################################
# Persistent Cloud
############################################################
instance_type: m1.medium
image: CentOS-7-x86_64-GenericCloud-1503
keypair: fedora-admin-20130801
zone: nova
inventory_tenant: persistent
inventory_instance_name: upstreamfirst
hostbase: upstreamfirst
public_ip: 209.132.184.153
root_auth_users: tflink roshi
description: upstream-first pagure server
security_group: ssh-anywhere-persistent,web-443-anywhere-persistent,web-80-anywhere-persistent,default,all-icmp-persistent,mail-25-anywhere-persistent,allow-nagios-persistent,fedmsg-relay-persistent,pagure-ports
volumes:
- volume_id: 81c1cb3e-5fb0-4abd-a252-b0102f1378de
device: /dev/vdc
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"
############################################################
# General configuration
############################################################
tcp_ports: [ 22, 25, 80, 443, 9418,
# this is used for postgres access from docker
5432,
# Used for the eventsource server
8088,
# This is for the pagure public fedmsg relay
9940]
baseiptables: false
external_hostname: 'upstreamfirst.fedorainfracloud.org'
############################################################
# Backup
############################################################
dbs_to_backup:
- postgres
- pagure
host_backup_targets:
- '/backups'
- '/srv/git'
############################################################
# PostgreSQL configuration
############################################################
shared_buffers: "1GB"
effective_cache_size: "6GB"
small_postgres_instance: true
############################################################
# ufmonitor config
############################################################
#
ufmonitor_db_host: "172.17.0.1"
ufmonitor_db_name: "ufmonitor"
ufmonitor_db_user: "ufmonitor"
ufmonitor_db_password: "{{ upstreamfirst_ufmonitor_db_pass }}"
ufmonitor_config_path: "/etc/sysconfig/ufmonitor"
ufmonitor_home: "/var/www/ufmonitor"
############################################################
# Pagure Config
############################################################
new_pagure_db_admin_user: "{{ upstreamfirst_pagure_db_admin_user }}"
new_pagure_db_admin_pass: "{{ upstreamfirst_pagure_db_admin_pass }}"
new_pagure_db_user: "{{ upstreamfirst_pagure_db_user }}"
new_pagure_db_pass: "{{ upstreamfirst_pagure_db_pass }}"
# there are two db hosts here to work around the pg_hba that's in postgres_server
# we need to delegate postgres admin commands to a host that is remote from where
# this playbook is run but have to use localhost for the application to run in the
# case where we're using a local postgres instance
new_pagure_db_host: "127.0.0.1"
new_pagure_db_command_host: "{{ inventory_hostname }}"
new_pagure_db_name: "{{ upstreamfirst_pagure_db_name }}"
new_pagure_secret_key: "{{ upstreamfirst_pagure_db_admin_user }}"
new_pagure_secret_salt_email: "{{ upstreamfirst_pagure_secret_salt_email }}"
pagure_admin_email: 'tflink@fedoraproject.org'
pagure_ssh_host_pubkey: 'ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/bYFmX8pthJHcM2J85+mmN8pGJ/EJMcsdwoazihcooIBONcUazYF/BVV5/3nK7H3shq2nLR7vmdd2NuFHOPNsaAMK6nlADEg2tsKMC3UHHnwo1/iIO21pvf7+w2KIKCNIhiYA70W1aIxFBMZ7oo0VXjZ19PBwg6huAh0CBrLBP+XU4QN6LgLd87T5qMN/7g/QVqDforeoL8NUSQXMfzYNbxXPdRvMc5vbEMS/QNu5I8Ycu6FDqChnWc5Qd2orVCNreEMKwkgW27+FTpxzAnq3avotb0Cv1WuZjd8q402ldvp+ELcS8WHc+Mx41KaR//QTlSIYeX4OlcX/pl6C+Sdz'
# ssh-keygen -lf /etc/ssh/ssh_host_rsa_key.pub
pagure_ssh_host_fingerprint: '2048 6b:d8:48:27:5a:11:d1:14:e0:c1:91:23:45:c7:fb:6d (RSA)'
# awk '{print $2}' /etc/ssh/ssh_host_rsa_key.pub | base64 -d | sha256sum -b | awk '{print $1}' | xxd -r -p | base64_
pagure_ssh_host_sha256: 'SHA256:ggRdzg+ugyR6WIzeiuyASAdEHf+HG5yZqJJIu/YTtHI='
new_pagure_admin_groups: ['sysadmin-main', 'sysadmin-qa']
pagure_instance_name: "Upstream First Pagure"
pagure_theme_static_dir: "/var/www/upstreamfirst-paguretheme/static"
pagure_theme_template_dir: "/var/www/upstreamfirst-paguretheme/templates"
stunnel_service: "eventsource"
stunnel_source_port: 8088
stunnel_destination_port: 8080
# not doing anything with fedmsg right now
## These are consumed by a task in roles/fedmsg/base/main.yml
#fedmsg_certs:
#- service: shell
# owner: root
# group: sysadmin
# can_send:
# - logger.log
#- service: pagure
# owner: git
# group: apache
# can_send:
# - pagure.issue.assigned.added
# - pagure.issue.assigned.reset
# - pagure.issue.comment.added
# - pagure.issue.dependency.added
# - pagure.issue.dependency.removed
# - pagure.issue.edit
# - pagure.issue.new
# - pagure.issue.tag.added
# - pagure.issue.tag.removed
# - pagure.project.edit
# - pagure.project.forked
# - pagure.project.new
# - pagure.project.tag.edited
# - pagure.project.tag.removed
# - pagure.project.user.added
# - pagure.pull-request.closed
# - pagure.pull-request.comment.added
# - pagure.pull-request.flag.added
# - pagure.pull-request.flag.updated
# - pagure.request.assigned.added
# - pagure.pull-request.new
#
#fedmsg_prefix: io.pagure
#fedmsg_env: stg
fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-qa,sysadmin-veteran,sysadmin-upstreamfirst
freezes: false
#env: pagure-staging
#postfix_group: vpn.pagure-stg
# Configuration for the git-daemon/server
git_group: git
git_port: 9418
git_server: /usr/libexec/git-core/git-daemon
git_server_args: --export-all --syslog --inetd --verbose
git_basepath: /srv/git/repositories
git_daemon_user: git
# For the MOTD
csi_security_category: Low
csi_primary_contact: Fedora admins - admin@fedoraproject.org
csi_purpose: Stage testcases being submitted upstream to Fedora
csi_relationship: |
There are a few things running here:
- The apache/mod_wsgi app for pagure
- This host relies on:
- A postgres db server running locally
- Things that rely on this host:
- nothing currently

19
inventory/host_vars/waiverdb-dev.fedorainfracloud.org
View file

@ -1,19 +0,0 @@
---
image: "{{ fedora25_x86_64 }}"
instance_type: m1.medium
keypair: fedora-admin-20130801
security_group: ssh-anywhere-persistent,all-icmp-persistent,default,web-80-anywhere-persistent,web-443-anywhere-persistent
zone: nova
tcp_ports: [22, 80, 443]
inventory_tenant: persistent
inventory_instance_name: waverdb-dev
hostbase: waverdb-dev
public_ip: 209.132.184.51
root_auth_users: mjia
description: waverdb development instance
deployment_type: dev
cloud_networks:
# persistent-net
- net-id: "67b77354-39a4-43de-b007-bb813ac5c35f"

30
inventory/inventory
View file

@ -18,14 +18,6 @@ qa-prod01.qa.fedoraproject.org
[qa_stg]
qa-stg01.qa.fedoraproject.org:222
[arm_packager]
arm03-packager00.cloud.fedoraproject.org
arm03-packager01.cloud.fedoraproject.org
[arm_qa]
arm03-qa00.cloud.fedoraproject.org
arm03-qa01.cloud.fedoraproject.org
[rabbitmq]
rabbitmq01.phx2.fedoraproject.org
rabbitmq02.phx2.fedoraproject.org
@ -999,28 +991,13 @@ pdc-backend02.stg.phx2.fedoraproject.org
pdc-backend03.stg.phx2.fedoraproject.org
[persistent_cloud]
# Fedora Bootstrap VM
fedora-bootstrap.fedorainfracloud.org
# developer ticket 4876
developer.fedorainfracloud.org
# iddev
iddev.fedorainfracloud.org
# respins
respins.fedorainfracloud.org
# upstreamfirst - ticket 6066
upstreamfirst.fedorainfracloud.org
# exists in aws, we don't manage it.
#respins01.fedorainfracloud.org
# koji simple ci development - ticket 6419
simple-koji-ci-prod.fedorainfracloud.org
# telegram-irc bridge machine - ticket 6781
telegram-irc.fedorainfracloud.org
# Happiness packets
happinesspackets.fedorainfracloud.org
happinesspackets-stg.fedorainfracloud.org
#
# These are in the new cloud
#
testdays.fedorainfracloud.org
[maintainer_test]
f30-test.fedorainfracloud.org
@ -1030,9 +1007,6 @@ rawhide-test.fedorainfracloud.org
el6-test.fedorainfracloud.org
el7-test.fedorainfracloud.org
[maintainer_test_oldcloud]
ppc64le-test.fedorainfracloud.org
[aarch64_test]
aarch64-test01.fedorainfracloud.org
aarch64-test02.fedorainfracloud.org

6
master.yml
View file

@ -12,7 +12,6 @@
##
## group playbooks
##
- import_playbook: /srv/web/infra/ansible/playbooks/groups/arm-qa.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/backup-server.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/badges-backend.yml
- import_playbook: /srv/web/infra/ansible/playbooks/groups/badges-web.yml
@ -115,10 +114,5 @@
- import_playbook: /srv/web/infra/ansible/playbooks/hosts/cloud-noc01.cloud.fedoraproject.org.yml
- import_playbook: /srv/web/infra/ansible/playbooks/hosts/data-analysis01.phx2.fedoraproject.org.yml
- import_playbook: /srv/web/infra/ansible/playbooks/hosts/developer.fedorainfracloud.org.yml
- import_playbook: /srv/web/infra/ansible/playbooks/hosts/fedora-bootstrap.fedorainfracloud.org.yml
- import_playbook: /srv/web/infra/ansible/playbooks/hosts/grobisplitter01.phx2.fedoraproject.org.yml
- import_playbook: /srv/web/infra/ansible/playbooks/hosts/iddev.fedorainfracloud.org.yml
- import_playbook: /srv/web/infra/ansible/playbooks/hosts/respins.fedorainfracloud.org.yml
- import_playbook: /srv/web/infra/ansible/playbooks/hosts/testdays.fedorainfracloud.org.yml
- import_playbook: /srv/web/infra/ansible/playbooks/hosts/upstreamfirst.fedorainfracloud.org.yml

30
playbooks/groups/arm-qa.yml
View file

@ -1,30 +0,0 @@
- import_playbook: "/srv/web/infra/ansible/playbooks/include/happy_birthday.yml myhosts=arm_qa"
- name: Setup arm-qa hosts
hosts: arm_qa
user: root
gather_facts: True
tags:
- arm-qa
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
pre_tasks:
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
roles:
- base
- rkhunter
- hosts
- fas_client
- sudo
tasks:
# this is how you include other task lists
- import_tasks: "{{ tasks_path }}/motd.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

4
playbooks/groups/maintainer-test.yml
View file

@ -25,10 +25,8 @@
- name: set hostname (required by some services, at least postfix need it)
hostname: name="{{inventory_hostname}}"
- import_playbook: "/srv/web/infra/ansible/playbooks/include/happy_birthday.yml myhosts=arm_packager"
- name: Setup maintainer test hosts
hosts: arm_packager:maintainer_test:aarch64_test:maintainer_test_oldcloud
hosts: maintainer_test:aarch64_test:maintainer_test_oldcloud
gather_facts: True
tags:
- maintainer-test

32
playbooks/hosts/developer.fedorainfracloud.org.yml
View file

@ -1,32 +0,0 @@
- name: check/create instance
hosts: developer.fedorainfracloud.org
gather_facts: False
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/web/infra/ansible/vars/fedora-cloud.yml
- /srv/private/ansible/files/openstack/passwords.yml
tasks:
- import_tasks: "{{ tasks_path }}/persistent_cloud.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"
- name: setup all the things
hosts: developer.fedorainfracloud.org
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/private/ansible/files/openstack/passwords.yml
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
tasks:
- import_tasks: "{{ tasks_path }}/cloud_setup_basic.yml"
- name: set hostname (required by some services, at least postfix need it)
hostname: name="{{inventory_hostname}}"
roles:
- basessh

47
playbooks/hosts/fedora-bootstrap.fedorainfracloud.org.yml
View file

@ -1,47 +0,0 @@
- name: check/create instance
hosts: fedora-bootstrap.fedorainfracloud.org
gather_facts: False
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/web/infra/ansible/vars/fedora-cloud.yml
- /srv/private/ansible/files/openstack/passwords.yml
tasks:
- import_tasks: "{{ tasks_path }}/persistent_cloud.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"
- name: setup all the things
hosts: fedora-bootstrap.fedorainfracloud.org
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/private/ansible/files/openstack/passwords.yml
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
pre_tasks:
- import_tasks: "{{ tasks_path }}/cloud_setup_basic.yml"
- name: set hostname (required by some services, at least postfix need it)
hostname: name="{{inventory_hostname}}"
roles:
- basessh
tasks:
- name: add packages
package: state=present name={{ item }}
with_items:
- httpd
- php
- mariadb-server
- mariadb
- mod_ssl
- wget
- unzip
- name: enable httpd service
service: name=httpd enabled=yes state=started

45
playbooks/hosts/happinesspackets-stg.fedorainfracloud.org.yml
View file

@ -1,45 +0,0 @@
- name: check/create instance
hosts: happinesspackets_stg.fedorainfracloud.org
gather_facts: False
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/web/infra/ansible/vars/fedora-cloud.yml
- /srv/private/ansible/files/openstack/passwords.yml
tasks:
- import_tasks: "{{ tasks_path }}/persistent_cloud.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"
- name: setup all the things
hosts: happinesspackets_stg.fedorainfracloud.org
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/private/ansible/files/openstack/passwords.yml
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
pre_tasks:
- import_tasks: "{{ tasks_path }}/cloud_setup_basic.yml"
- name: set hostname (required by some services, at least postfix need it)
hostname: name="{{inventory_hostname}}"
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
roles:
- basessh
- { role: fedmsg/base,
when: deployment_type == "prod" }
# Set up for fedora-messaging
- { role: rabbit/user,
username: "happipstgfedorainfracloud{{ env_suffix }}"}
- { role: letsencrypt, site_name: 'happinesspackets-stg.fedorainfracloud.org' }
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

45
playbooks/hosts/happinesspackets.fedorainfracloud.org.yml
View file

@ -1,45 +0,0 @@
- name: check/create instance
hosts: happinesspackets.fedorainfracloud.org
gather_facts: False
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/web/infra/ansible/vars/fedora-cloud.yml
- /srv/private/ansible/files/openstack/passwords.yml
tasks:
- import_tasks: "{{ tasks_path }}/persistent_cloud.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"
- name: setup all the things
hosts: happinesspackets.fedorainfracloud.org
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/private/ansible/files/openstack/passwords.yml
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
pre_tasks:
- import_tasks: "{{ tasks_path }}/cloud_setup_basic.yml"
- name: set hostname (required by some services, at least postfix need it)
hostname: name="{{inventory_hostname}}"
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
roles:
- basessh
- { role: fedmsg/base,
when: deployment_type == "prod" }
# Set up for fedora-messaging
- { role: rabbit/user,
username: "happipfedorainfracloud{{ env_suffix }}"}
- { role: letsencrypt, site_name: 'happinesspackets.fedorainfracloud.org' }
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

40
playbooks/hosts/telegram-irc.fedorainfracloud.org.yml
View file

@ -1,40 +0,0 @@
- name: check/create instance
hosts: telegram_irc.fedorainfracloud.org
gather_facts: False
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/web/infra/ansible/vars/fedora-cloud.yml
- /srv/private/ansible/files/openstack/passwords.yml
tasks:
- import_tasks: "{{ tasks_path }}/persistent_cloud.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"
- name: setup all the things
hosts: telegram_irc.fedorainfracloud.org
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/private/ansible/files/openstack/passwords.yml
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
pre_tasks:
- import_tasks: "{{ tasks_path }}/cloud_setup_basic.yml"
- name: set hostname (required by some services, at least postfix need it)
hostname: name="{{inventory_hostname}}"
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
roles:
- basessh
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

53
playbooks/hosts/testdays.fedorainfracloud.org.yml
View file

@ -1,53 +0,0 @@
---
- name: check/create instance
hosts: testdays.fedorainfracloud.org
gather_facts: False
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/web/infra/ansible/vars/fedora-cloud.yml
- /srv/private/ansible/files/openstack/passwords.yml
tasks:
- import_tasks: "{{ tasks_path }}/persistent_cloud.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"
- name: setup all the things
hosts: testdays.fedorainfracloud.org
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/private/ansible/files/openstack/passwords.yml
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
pre_tasks:
- import_tasks: "{{ tasks_path }}/cloud_setup_basic.yml"
- name: set hostname (required by some services, at least postfix need it)
hostname: name="{{inventory_hostname}}"
roles:
- basessh
- postgresql_server
- name: configure resultsdb and testdays
hosts: testdays.fedorainfracloud.org
user: root
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles:
- { role: taskotron/resultsdb-backend, tags: ['resultsdb-be'] }
- { role: taskotron/resultsdb-frontend, tags: ['resultsdb-fe'] }
- { role: testdays, tags: ['testdays'] }
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

91
playbooks/hosts/upstreamfirst.fedorainfracloud.org.yml
View file

@ -1,91 +0,0 @@
- name: check/create instance
hosts: upstreamfirst.fedorainfracloud.org
gather_facts: False
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
- /srv/web/infra/ansible/vars/fedora-cloud.yml
- /srv/private/ansible/files/openstack/passwords.yml
tasks:
- import_tasks: "{{ tasks_path }}/persistent_cloud.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"
- name: do base configuration
hosts: upstreamfirst.fedorainfracloud.org
user: root
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles:
- base
- rkhunter
- nagios_client
- hosts
- fas_client
- sudo
- collectd/base
- postgresql_server
- certbot
pre_tasks:
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
tasks:
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
- import_tasks: "{{ tasks_path }}/motd.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"
- name: deploy pagure
hosts: upstreamfirst.fedorainfracloud.org
user: root
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"
# pre_tasks:
# - name: install fedmsg-relay
# package: name=fedmsg-relay state=present
# tags:
# - pagure
# - pagure/fedmsg
# - name: and start it
# service: name=fedmsg-relay state=started
# tags:
# - pagure
# - pagure/fedmsg
#
roles:
- pagure/upstreamfirst-frontend
# - pagure/fedmsg
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"
- name: deploy ufmonitor
hosts: upstreamfirst.fedorainfracloud.org
user: root
gather_facts: True
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml"
roles:
- { role: ufmonitor, tags: ['ufmonitor'] }
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"