Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

inventory/copr: drop unused hosts/vars

Browse source 
The non-aws variant is not used for a looong time.  It just confuses
contributors now.  The stg is not used either.
This commit is contained in:
Pavel Raiskup 2022-12-04 15:01:27 +01:00
parent 70530bf832
commit 2667ac065f
16 changed files with 9 additions and 213 deletions
Download patch file Download diff file Expand all files Collapse all files

21
inventory/group_vars/copr
View file

@ -1,21 +0,0 @@
---
_forward_src: "forward"
backend_base_url: "https://download.copr.fedorainfracloud.org"
builders:
# max|max_spawn|max_prealloc
aws:
aarch64: [20, 10, 10]
armhfp: [20, 5, 5]
x86_64: [100, 20, 30]
copr_aws_region: us-east-1
# don't forget to update ip in ./copr-keygen, due to custom firewall rules
# eth0, eth1
copr_backend_ips: ["172.25.33.79", "172.25.82.25"]
datacenter: cloud
devel: false
dist_git_base_url: "copr-dist-git.fedorainfracloud.org"
frontend_base_url: "https://copr.fedorainfracloud.org"
keygen_host: "172.25.33.75"
postfix_maincf: "postfix/main.cf/main.cf.copr"
resolvconf: "resolv.conf/cloud"

24
inventory/group_vars/copr_back
View file

@ -1,24 +0,0 @@
---
# copr_builder_image_name: "Fedora-Cloud-Base-20141203-21"
copr_builder_flavor_name: "ms2.builder"
copr_builder_key_name: "buildsys"
copr_builder_network_name: "copr-net"
copr_builder_security_groups: "ssh-anywhere-copr,default,ssh-from-persistent-copr"
copr_nova_auth_url: "https://fedorainfracloud.org:5000/v2.0"
copr_nova_tenant_id: "5d99f099b7fe4b0387f0352f6301ba6a"
copr_nova_tenant_name: "copr"
copr_nova_username: "copr"
csi_primary_contact: "msuchy (mirek), frostyx, praiskup IRC #fedora-admin, #fedora-buildsys"
csi_purpose: Provide the backend for copr (3rd party packages)
csi_relationship: |
- Backend: Management of copr cloud infrastructure (OpenStack).
- Small frontend with copr's public stats
# These variables are pushed into /etc/system_identification by the base role.
# Groups and individual hosts should override them with specific info.
# See http://infrastructure.fedoraproject.org/csi/security-policy/
csi_security_category: High
do_sign: "true"
frontend_base_url: "https://copr.fedorainfracloud.org"
nrpe_procs_crit: 2500
nrpe_procs_warn: 2200
spawn_in_advance: "true"

29
inventory/group_vars/copr_back_dev
View file

@ -1,29 +0,0 @@
---
copr_builder_flavor_name: "ms2.builder"
copr_builder_image_name: "builder-f24"
copr_builder_key_name: "buildsys"
copr_builder_network_name: "coprdev-net"
copr_builder_security_groups: "ssh-anywhere-coprdev,default,ssh-from-persistent-coprdev"
copr_nova_auth_url: "https://fedorainfracloud.org:5000/v2.0"
copr_nova_tenant_id: "a6ff2158641c439a8426d7facab45437"
copr_nova_tenant_name: "coprdev"
copr_nova_username: "copr"
csi_primary_contact: "msuchy (mirek), frostyx, praiskup IRC #fedora-admin, #fedora-buildsys"
csi_purpose: Provide the testing environment of copr's backend
csi_relationship: This host is the testing environment for the cloud infrastructure of copr's backend
# These variables are pushed into /etc/system_identification by the base role.
# Groups and individual hosts should override them with specific info.
# See http://infrastructure.fedoraproject.org/csi/security-policy/
csi_security_category: Moderate
do_sign: "true"
frontend_base_url: "https://copr.stg.fedoraproject.org"
# consumed by roles/copr/certbot
letsencrypt:
certificates:
copr-be-dev.cloud.fedoraproject.org:
challenge_dir: /var/lib/copr/public_html
domains:
- copr-be-dev.cloud.fedoraproject.org
mail: copr-devel@lists.fedorahosted.org
predefined_deploy_script: lighttpd
spawn_in_advance: "false"

20
inventory/group_vars/copr_back_stg
View file

@ -1,20 +0,0 @@
---
copr_builder_flavor_name: "ms2.builder"
copr_builder_image_name: "builder-f24"
copr_builder_key_name: "buildsys"
copr_builder_network_name: "coprdev-net"
copr_builder_security_groups: "ssh-anywhere-coprdev,default,ssh-from-persistent-coprdev"
copr_nova_auth_url: "https://fedorainfracloud.org:5000/v2.0"
copr_nova_tenant_id: "a6ff2158641c439a8426d7facab45437"
copr_nova_tenant_name: "coprdev"
copr_nova_username: "copr"
csi_primary_contact: "msuchy (mirek), frostyx, praiskup IRC #fedora-admin, #fedora-buildsys"
csi_purpose: Provide the testing environment of copr's backend
csi_relationship: This host is the testing environment for the cloud infrastructure of copr's backend
# These variables are pushed into /etc/system_identification by the base role.
# Groups and individual hosts should override them with specific info.
# See http://infrastructure.fedoraproject.org/csi/security-policy/
csi_security_category: Moderate
do_sign: "true"
resolvconf: "resolv.conf/cloud"
spawn_in_advance: "false"

22
inventory/group_vars/copr_dev
View file

@ -1,22 +0,0 @@
---
#_forward-src: "{{ files }}/copr/forward-dev"
_forward_src: "forward_dev"
backend_base_url: "https://download.copr-dev.fedorainfracloud.org"
builders:
# max|max_spawn|max_prealloc
aws:
aarch64: [5, 2, 2]
armhfp: [3, 1, 1]
x86_64: [20, 5, 5]
copr_aws_region: us-east-1
# don't forget to update ip in ./copr-keygen-stg, due to custom firewall rules
# eth0, eth1
copr_backend_ips: ["172.25.33.80", "172.25.144.254"]
devel: true
dist_git_base_url: "copr-dist-git-dev.fedorainfracloud.org"
frontend_base_url: "https://copr.stg.fedoraproject.org"
keygen_host: "172.25.33.73"
postfix_maincf: "postfix/main.cf/main.cf.copr"
resolvconf: "resolv.conf/cloud"
services_disabled: true

13
inventory/group_vars/copr_dist_git
View file

@ -1,13 +0,0 @@
---
datacenter: cloud
freezes: false
# consumed by roles/copr/certbot
letsencrypt:
certificates:
copr-dist-git.fedorainfracloud.org:
challenge_dir: /var/www/html
domains:
- copr-dist-git.fedorainfracloud.org
mail: copr-devel@lists.fedorahosted.org
predefined_deploy_script: httpd
tcp_ports: [22, 80, 443]

14
inventory/group_vars/copr_dist_git_dev
View file

@ -1,14 +0,0 @@
---
datacenter: cloud
devel: true
freezes: false
# consumed by roles/copr/certbot
letsencrypt:
certificates:
copr-dist-git-dev.fedorainfracloud.org:
challenge_dir: /var/www/html
domains:
- copr-dist-git-dev.fedorainfracloud.org
mail: copr-devel@lists.fedorahosted.org
predefined_deploy_script: httpd
tcp_ports: [22, 80, 443]

5
inventory/group_vars/copr_dist_git_stg
View file

@ -1,5 +0,0 @@
---
datacenter: cloud
freezes: false
resolvconf: "resolv.conf/cloud"
tcp_ports: [22, 80, 443]

26
inventory/group_vars/copr_hypervisor
View file

@ -1,26 +0,0 @@
---
csi_primary_contact: Fedora Admins - admin@fedoraproject.org
csi_purpose: Host guest virtual machines.
csi_relationship: |
- Guests on this host will be inaccessible if the host is down.
- This host will be required by any application with a virtual machine running on it, therefore, if this host is down those applications will be impacted.
csi_security_category: High
dist_git_base_url: https://example.com/unset
freezes: false
frontend_base_url: https://exmaple.com/unset
ipa_client_shell_groups:
- sysadmin-copr
ipa_client_sudo_groups:
- sysadmin-copr
ipa_host_group: vmhost-copr
ipa_host_group_desc: VM hosts for COPR
nagios_Check_Services:
raid: true
nrpe_procs_crit: 1500
nrpe_procs_warn: 1400
postfix_group: copr
postfix_maincf: "postfix/main.cf/main.cf.copr"
primary_auth_source: ipa
rpm_vendor_copr_name: unset vendor
virthost: true
vpn: true

6
inventory/group_vars/copr_keygen
View file

@ -1,6 +0,0 @@
---
# http + signd dest ports
custom_rules: ['-A INPUT -p tcp -m tcp -s 172.25.33.79 --dport 80 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 172.25.82.25 --dport 80 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 172.25.33.79 --dport 5167 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 172.25.82.25 --dport 5167 -j ACCEPT']
datacenter: cloud
freezes: false
tcp_ports: [22]

7
inventory/group_vars/copr_keygen_dev
View file

@ -1,7 +0,0 @@
---
copr_hostbase: copr-keygen-dev
# http + signd dest ports
custom_rules: ['-A INPUT -p tcp -m tcp -s 172.25.33.80 --dport 80 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 172.25.33.80 --dport 5167 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 172.25.144.254 --dport 80 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 172.25.144.254 --dport 5167 -j ACCEPT']
datacenter: cloud
freezes: false
tcp_ports: []

8
inventory/group_vars/copr_keygen_stg
View file

@ -1,8 +0,0 @@
---
copr_hostbase: copr-keygen-stg
# http + signd dest ports
custom_rules: ['-A INPUT -p tcp -m tcp -s 172.25.33.49 --dport 80 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 209.132.184.44 --dport 80 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 172.25.33.49 --dport 5167 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 209.132.184.44 --dport 5167 -j ACCEPT']
datacenter: cloud
freezes: false
resolvconf: "resolv.conf/cloud"
tcp_ports: []

9
inventory/group_vars/copr_stg
View file

@ -1,9 +0,0 @@
---
#_forward-src: "{{ files }}/copr/forward-dev"
_forward_src: "forward_dev"
backend_base_url: "https://copr-be-stg.fedorainfracloud.org"
# don't forget to update ip in ./copr-keygen-stg, due to custom firewall rules
copr_backend_ips: ["172.25.33.49", "209.132.184.44"]
devel: false
dist_git_base_url: "copr-dist-git-stg.fedorainfracloud.org"
keygen_host: "172.25.33.51"

6
playbooks/groups/copr-backend.yml
View file

@ -1,5 +1,5 @@
- name: check/create instance - name: check/create instance
hosts: copr_back_dev:copr_back_stg:copr_back:copr_back_dev_aws:copr_back_aws hosts: copr_back_dev_aws:copr_back_aws
user: root user: root
gather_facts: False gather_facts: False
@ -24,7 +24,7 @@
- swap_file_size_mb is defined - swap_file_size_mb is defined
- name: cloud basic setup - name: cloud basic setup
hosts: copr_back_dev:copr_back_stg:copr_back:copr_back_dev_aws:copr_back_aws hosts: copr_back_dev_aws:copr_back_aws
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
@ -44,7 +44,7 @@
# when: env != 'production' # when: env != 'production'
- name: provision instance - name: provision instance
hosts: copr_back_dev:copr_back_stg:copr_back:copr_back_dev_aws:copr_back_aws hosts: copr_back_dev_aws:copr_back_aws
user: root user: root
gather_facts: True gather_facts: True

6
playbooks/groups/copr-dist-git.yml
View file

@ -1,5 +1,5 @@
- name: check/create instance - name: check/create instance
hosts: copr_dist_git_dev:copr_dist_git_stg:copr_dist_git:copr_dist_git_dev_aws:copr_dist_git_aws hosts: copr_dist_git_dev_aws:copr_dist_git_aws
user: root user: root
gather_facts: False gather_facts: False
@ -19,7 +19,7 @@
when: datacenter == 'aws' when: datacenter == 'aws'
- name: cloud basic setup - name: cloud basic setup
hosts: copr_dist_git_dev:copr_dist_git_stg:copr_dist_git:copr_dist_git_dev_aws:copr_dist_git_aws hosts: copr_dist_git_dev_aws:copr_dist_git_aws
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
@ -40,7 +40,7 @@
when: datacenter != "aws" when: datacenter != "aws"
- name: provision instance - name: provision instance
hosts: copr_dist_git_dev:copr_dist_git_stg:copr_dist_git:copr_dist_git_dev_aws:copr_dist_git_aws hosts: copr_dist_git_dev_aws:copr_dist_git_aws
user: root user: root
gather_facts: True gather_facts: True

6
playbooks/groups/copr-keygen.yml
View file

@ -1,5 +1,5 @@
- name: check/create instance - name: check/create instance
hosts: copr_keygen_dev:copr_keygen_stg:copr_keygen:copr_keygen_dev_aws:copr_keygen_aws hosts: copr_keygen_dev_aws:copr_keygen_aws
gather_facts: False gather_facts: False
vars_files: vars_files:
@ -28,7 +28,7 @@
when: facts is failed when: facts is failed
- name: cloud basic setup - name: cloud basic setup
hosts: copr_keygen_dev:copr_keygen_stg:copr_keygen:copr_keygen_dev_aws:copr_keygen_aws hosts: copr_keygen_dev_aws:copr_keygen_aws
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
@ -44,7 +44,7 @@
when: datacenter != "aws" when: datacenter != "aws"
- name: provision instance - name: provision instance
hosts: copr_keygen_dev:copr_keygen_stg:copr_keygen:copr_keygen_dev_aws:copr_keygen_aws hosts: copr_keygen_dev_aws:copr_keygen_aws
gather_facts: True gather_facts: True
vars_files: vars_files: