Infrastructure/ansible
5
0
Fork 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions

[yaml-lint] fix yamllint errors and warnings on plabooks

Browse source 
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
This commit is contained in:
Ryan Lercho 2024-11-25 18:24:56 +10:00
parent 4ffa8cd38e
commit 2cf38c1f17
204 changed files with 1210 additions and 1046 deletions
Download patch file Download diff file Expand all files Collapse all files

1
playbooks/check-for-nonvirt-updates.yml
View file

@ -8,6 +8,7 @@
# time ansible-playbook check-for-updates.yml | grep msg\": | awk -F: '{print $2}' | sort
#
---
- name: check for updates (EL)
hosts: virt_host:&distro_RedHat
gather_facts: false

1
playbooks/check-for-updates.yml
View file

@ -8,6 +8,7 @@
# time ansible-playbook check-for-updates.yml | grep msg\": | awk -F: '{print $2}' | sort
#
---
- name: check for updates
hosts: distro_RedHat:distro_CentOS:!ocp*:!worker*
gather_facts: false

78
playbooks/check-host.yml
View file

@ -12,11 +12,11 @@
- name: create temp dir for collecting info
shell: mktemp -d
register: temp_dir
changed_when: False
changed_when: false
- name: Get list of active loaded services with systemctl
shell: '/bin/systemctl -t service --no-legend | egrep "loaded active" | tr -s " " | cut -d " " -f1'
changed_when: False
changed_when: false
when: ansible_distribution_major_version|int >= 29 and ansible_distribution == 'Fedora'
register: loaded_active_services_systemctl
tags:
@ -25,7 +25,7 @@
- name: Get list of active loaded services with systemctl
shell: '/bin/systemctl -t service --no-legend | egrep "loaded active" | tr -s " " | cut -d " " -f1'
changed_when: False
changed_when: false
when: ansible_distribution_major_version|int > 6 and ansible_distribution == 'RedHat'
register: loaded_active_services_systemctl
tags:
@ -34,7 +34,7 @@
- name: Get list of inactive loaded services with systemctl
shell: '/bin/systemctl -t service --no-legend | egrep -v "loaded active" | tr -s " " | cut -d " " -f1'
changed_when: False
changed_when: false
when: ansible_distribution_major_version|int >= 29 and ansible_distribution == 'Fedora'
register: loaded_inactive_services_systemctl
tags:
@ -43,7 +43,7 @@
- name: Get list of inactive loaded services with systemctl
shell: '/bin/systemctl -t service --no-legend | egrep -v "loaded active" | tr -s " " | cut -d " " -f1'
changed_when: False
changed_when: false
when: ansible_distribution_major_version|int > 6 and ansible_distribution == 'RedHat'
register: loaded_inactive_services_systemctl
tags:
@ -53,7 +53,7 @@
- name: Get list of enabled services with chkconfig at current runlevel
shell: "chkconfig | grep \"`runlevel | cut -d ' ' -f 2`:on\" | awk '{print $1}'"
changed_when: False
changed_when: false
when: ansible_distribution_major_version|int <= 6 and ansible_distribution == 'RedHat'
register: enabled_services_chkconfig
tags:
@ -62,7 +62,7 @@
- name: Get list of disabled services with chkconfig at current runlevel
shell: "chkconfig | grep \"`runlevel | cut -d ' ' -f 2`:off\" | awk '{print $1}'"
changed_when: False
changed_when: false
when: ansible_distribution_major_version|int <= 6 and ansible_distribution == 'RedHat'
register: disabled_services_chkconfig
tags:
@ -73,7 +73,7 @@
- name: output enabled service list chkconfig
shell: echo {{enabled_services_chkconfig.stdout_lines}} >> {{temp_dir.stdout}}/eservices
when: enabled_services_chkconfig is defined and enabled_services_chkconfig.rc == 0
changed_when: False
changed_when: false
tags:
- check
- services
@ -81,7 +81,7 @@
- name: output disabled loaded service list chkconfig
shell: echo {{disabled_services_chkconfig.stdout_lines}} >> {{temp_dir.stdout}}/dservices
when: disabled_services_chkconfig is defined and disabled_services_chkconfig.rc == 0
changed_when: False
changed_when: false
tags:
- check
- services
@ -90,7 +90,7 @@
- name: output loaded active service list systemctl
shell: echo {{loaded_active_services_systemctl.stdout_lines}} >> {{temp_dir.stdout}}/laservices
when: loaded_active_services_systemctl is defined and loaded_active_services_systemctl.rc == 0
changed_when: False
changed_when: false
tags:
- check
- services
@ -98,7 +98,7 @@
- name: output loaded inactive service list systemctl
shell: echo {{loaded_inactive_services_systemctl.stdout_lines}} >> {{temp_dir.stdout}}/liservices
when: loaded_inactive_services_systemctl is defined and loaded_inactive_services_systemctl.rc == 0
changed_when: False
changed_when: false
tags:
- check
- services
@ -108,14 +108,14 @@
script: needs-updates --host {{ inventory_hostname }}
register: list_update
delegate_to: 127.0.0.1
changed_when: False
changed_when: false
tags:
- check
- updates
- name: Show pending updates
shell: echo {{list_update.stdout_lines}} >> {{temp_dir.stdout}}/pending_updates
changed_when: False
changed_when: false
tags:
- check
- updates
@ -123,14 +123,14 @@
- name: Get processes that need restarting
shell: needs-restarting
register: needs_restarting
changed_when: False
changed_when: false
tags:
- check
- restart
- name: Show processes that need restarting
shell: echo {{needs_restarting.stdout_lines}} >> {{temp_dir.stdout}}/needing_restart
changed_when: False
changed_when: false
tags:
- check
- restart
@ -138,7 +138,7 @@
- name: Get locally changed files from the rpm package
shell: rpm_tmp_var=`mktemp` && ! rpm -Va 2>/dev/null > $rpm_tmp_var && [[ -s $rpm_tmp_var ]] && echo $rpm_tmp_var warn=no
register: localchanges
changed_when: False
changed_when: false
tags:
- check
- fileverify
@ -146,7 +146,7 @@
- name: Get locally changed files (excluding config files)
command: "egrep -v ' c /' {{ localchanges.stdout }}"
register: rpm_va_nc
changed_when: False
changed_when: false
when: localchanges is defined and localchanges.stdout != ""
tags:
- check
@ -155,7 +155,7 @@
- name: Show locally changed files (excluding config files)
shell: echo {{rpm_va_nc.stdout_lines}} >> {{temp_dir.stdout}}/local_changed
when: rpm_va_nc.stdout != ""
changed_when: False
changed_when: false
tags:
- check
- fileverify
@ -164,14 +164,14 @@
command: "egrep ' c /' {{ localchanges.stdout }}"
register: rpm_va_c
when: localchanges is defined and localchanges.stdout != ""
changed_when: False
changed_when: false
tags:
- check
- fileverify
- name: 'Whitelist - Show locally changed files (config files)'
shell: echo {{rpm_va_c.stdout_lines}} >> {{temp_dir.stdout}}/local_config_changed
changed_when: False
changed_when: false
when: rpm_va_c.stdout != ""
tags:
- check
@ -180,21 +180,21 @@
- name: Check if using iptables
shell: /sbin/iptables -S
register: iptablesn
changed_when: False
changed_when: false
tags:
- check
- iptables
- name: Show iptables rules
shell: echo "{{iptablesn.stdout_lines}}" >> {{ temp_dir.stdout }}/iptables
changed_when: False
changed_when: false
tags:
- check
- iptables
- name: Show current SELinux status
shell: echo "SELinux is {{ ansible_selinux.status }} for this System" >> {{temp_dir.stdout}}/selinux
changed_when: False
changed_when: false
tags:
- check
- selinux
@ -202,7 +202,7 @@
- name: Show Boot SELinux mode
shell: echo "SELinux boots to {{ ansible_selinux.config_mode }} mode " >> {{temp_dir.stdout}}/selinux
when: ansible_selinux.status != "disabled"
changed_when: False
changed_when: false
tags:
- check
- selinux
@ -210,7 +210,7 @@
- name: Show Current SELinux mode
shell: echo "SELinux currently is in {{ ansible_selinux.mode }} mode" >> {{temp_dir.stdout}}/selinux
when: ansible_selinux.status != "disabled"
changed_when: False
changed_when: false
tags:
- check
- selinux
@ -218,7 +218,7 @@
- name: Match current SELinux status with boot status
shell: echo "SElinux Current and Boot modes are in sync" >> {{temp_dir.stdout}}/selinux
when: ansible_selinux.status != "disabled" and ansible_selinux.config_mode == ansible_selinux.mode
changed_when: False
changed_when: false
tags:
- check
- selinux
@ -227,7 +227,7 @@
- name: misMatch current SELinux status with boot status
shell: echo "SElinux Current and Boot modes are NOT in sync" >> {{temp_dir.stdout}}/selinux
when: ansible_selinux.status != "disabled" and ansible_selinux.config_mode != ansible_selinux.mode
changed_when: False
changed_when: false
tags:
- check
- selinux
@ -235,51 +235,51 @@
- name: resolve last persisted dir - if one is present
local_action: shell ls -d -1 {{datadir_prfx_path}}/{{inventory_hostname}}-* 2>/dev/null | sort -r | head -1
register: last_dir
changed_when: False
ignore_errors: True
changed_when: false
ignore_errors: true
- name: get file list
shell: ls -1 {{temp_dir.stdout}}/*
register: file_list
changed_when: False
changed_when: false
- name: get timestamp
shell: "date +%Y-%m-%d-%H-%M-%S"
register: timestamp
changed_when: False
changed_when: false
- name: create persisting-state directory
local_action: file path=/{{datadir_prfx_path}}/{{inventory_hostname}}-{{timestamp.stdout}} state=directory
changed_when: False
changed_when: false
- name: fetch file list
fetch: src={{item}} dest=/{{datadir_prfx_path}}/{{inventory_hostname}}-{{timestamp.stdout}}/ flat=true
with_items: "{{file_list.stdout_lines}}"
changed_when: False
changed_when: false
- name: diff the new files with last ones presisted
local_action: shell for file in {{datadir_prfx_path}}/{{inventory_hostname}}-{{timestamp.stdout}}/*; do filename=$(basename $file); diff {{datadir_prfx_path}}/{{inventory_hostname}}-{{timestamp.stdout}}/$filename {{last_dir.stdout.strip(':')}}/$filename; done
ignore_errors: True
changed_when: False
ignore_errors: true
changed_when: false
register: file_diff
when: last_dir is defined and last_dir.stdout != ""
- name: display diff
debug: var=file_diff.stdout_lines
ignore_errors: True
changed_when: False
ignore_errors: true
changed_when: false
when: file_diff is defined
# clean up: can also be put as handlers
- name: clean remote temp dir
file: path={{temp_dir.stdout}} state=absent
changed_when: False
changed_when: false
- name: clean rpm temp file
file: path={{localchanges.stdout}} state=absent
changed_when: False
changed_when: false
# handlers:

1
playbooks/checks_log_failed_services.yml
View file

@ -1,6 +1,7 @@
#
# This playbook lets you safely display systemd logs for failed services
---
- hosts: mirrorlist_proxies
gather_facts: false

1
playbooks/clear_memcached.yml
View file

@ -1,3 +1,4 @@
---
- name: clear memcache
hosts: memcached:memcached-stg
serial: 1

1
playbooks/clear_varnish.yml
View file

@ -1,3 +1,4 @@
---
- name: clear varnish cache
hosts: proxies
user: root

1
playbooks/death_to_postfix.yml
View file

@ -1,6 +1,7 @@
# requires --extra-vars="target='host1:host2:group'"
# thanks threebean on this.
---
- name: kills postfix which has been left around alive after update.
hosts: "{{ target }}"
user: root

1
playbooks/destroy_virt_inst.yml
View file

@ -9,6 +9,7 @@
# requires --extra-vars="target=hostspec"
---
- name: destroy and undefine vm
hosts: "{{ target }}"
user: root

3
playbooks/groups/backup-server.yml
View file

@ -3,10 +3,11 @@
# NOTE: make sure there is room/space for this instance on the buildvmhost
# NOTE: most of these vars_path come from group_vars/backup_server or from hostvars
---
- name: make backup server system
hosts: backup
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

4
playbooks/groups/bastion.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "bastion"
@ -5,7 +6,7 @@
- name: make the boxen be real for real
hosts: bastion
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -34,4 +35,3 @@
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

3
playbooks/groups/batcave.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "batcave"
@ -5,7 +6,7 @@
- name: make the box be real
hosts: batcave
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/bodhi-backend.yml
View file

@ -5,6 +5,7 @@
# They also run some misc releng scripts.
#
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "bodhi_backend:bodhi_backend_stg"
@ -14,7 +15,7 @@
- name: make bodhi-backend server system
hosts: bodhi_backend:bodhi_backend_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/build-kcs.yml
View file

@ -3,10 +3,11 @@
# Creation of the system is done by a different process so is not
# covered by this playbook.
---
- name: enable an ephemeral builder
hosts: build_x86_kcs:build_x86_kcs_stg
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/buildhw.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/happy_birthday.yml"
vars:
myhosts: "buildhw:bkernel"
@ -5,7 +6,7 @@
- name: make koji builder(s) on raw hw
hosts: buildhw:bkernel
remote_user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/buildvm-osbuild.yml
View file

@ -1,5 +1,6 @@
# create a new osbuild worker
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "buildvm_osbuild_ppc64le:buildvm_osbuild_ppc64le_staging"
@ -7,7 +8,7 @@
- name: make osbuild-worker
hosts: buildvm_osbuild_ppc64le:buildvm_osbuild_ppc64le_staging
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/buildvm.yml
View file

@ -3,6 +3,7 @@
# NOTE: make sure there is room/space for this builder on the buildvmhost
# NOTE: most of these vars_path come from group_vars/buildvm or from hostvars
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "buildvm:buildvm_stg:buildvm_aarch64:buildvm_ppc64le:buildvm_ppc64le_stg:buildvm_aarch64_stg:buildvm_s390x_kvm"
@ -10,7 +11,7 @@
- name: make koji builder(s)
hosts: buildvm:buildvm_stg:buildvm_aarch64:buildvm_ppc64le:buildvm_ppc64le_stg:buildvm_aarch64_stg:buildvm_s390x:buildvm_s390x_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -86,7 +87,7 @@
tags:
- varnish
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -104,7 +105,7 @@
tags:
- sshfs
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/busgateway.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "busgateway:busgateway_stg"
@ -5,7 +6,7 @@
- name: dole out the generic configuration
hosts: busgateway:busgateway_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -36,11 +37,11 @@
- name: dole out the service-specific config
hosts: busgateway:busgateway_stg
user: root
gather_facts: True
gather_facts: true
roles:
- role: fedmsg/hub
enable_websocket_server: True
enable_websocket_server: true
- role: fedmsg/relay
- role: fedmsg/gateway
- role: collectd/fedmsg-service

5
playbooks/groups/centos-ipa-client.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "centos_ipa_client_stg"
@ -5,7 +6,7 @@
- name: make the boxes be realen
hosts: centos_ipa_client_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -21,5 +22,3 @@
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

3
playbooks/groups/certgetter.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "certgetter"
@ -5,7 +6,7 @@
- name: make the box be real
hosts: certgetter
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/copr-backend.yml
View file

@ -1,7 +1,8 @@
---
- name: check/create instance
hosts: copr_back_dev_aws:copr_back_aws
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -25,7 +26,7 @@
- name: cloud basic setup
hosts: copr_back_dev_aws:copr_back_aws
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
@ -45,7 +46,7 @@
- name: provision instance
hosts: copr_back_dev_aws:copr_back_aws
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/copr-dist-git.yml
View file

@ -1,7 +1,8 @@
---
- name: check/create instance
hosts: copr_dist_git_dev_aws:copr_dist_git_aws
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -20,7 +21,7 @@
- name: cloud basic setup
hosts: copr_dist_git_dev_aws:copr_dist_git_aws
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
@ -41,7 +42,7 @@
- name: provision instance
hosts: copr_dist_git_dev_aws:copr_dist_git_aws
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/copr-frontend.yml
View file

@ -1,7 +1,8 @@
---
- name: check/create instance
hosts: copr_front_dev_aws:copr_front_aws
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -25,7 +26,7 @@
- name: cloud basic setup
hosts: copr_front_dev_aws:copr_front_aws
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
@ -41,7 +42,7 @@
- name: provision instance
hosts: copr_front_dev_aws:copr_front_aws
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/copr-hypervisor.yml
View file

@ -1,7 +1,8 @@
---
- name: Setup copr hypervisor hosts
hosts: copr_hypervisor
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

9
playbooks/groups/copr-keygen.yml
View file

@ -1,6 +1,7 @@
---
- name: check/create instance
hosts: copr_keygen_dev_aws:copr_keygen_aws
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -20,7 +21,7 @@
- name: gather facts
setup:
check_mode: no
ignore_errors: True
ignore_errors: true
register: facts
- name: install python2 and dnf stuff
raw: dnf -y install python-dnf libselinux-python yum
@ -28,7 +29,7 @@
- name: cloud basic setup
hosts: copr_keygen_dev_aws:copr_keygen_aws
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
@ -44,7 +45,7 @@
- name: provision instance
hosts: copr_keygen_dev_aws:copr_keygen_aws
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

2
playbooks/groups/copr-pulp.yml
View file

@ -53,7 +53,7 @@
copy:
content: "{{ copr_dev_pulp_default_admin_password }}"
dest: /tmp/pulp_default_admin_password
mode: 000
mode: "000"
- name: cloud basic setup
hosts: copr_pulp_dev_aws:copr_pulp_aws

3
playbooks/groups/data-reports.yml
View file

@ -1,6 +1,7 @@
# create a data-reports vm
#
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "data_reports"
@ -8,7 +9,7 @@
- name: make the box be real
hosts: data_reports
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/db.aws.yml
View file

@ -3,10 +3,11 @@
# Once the instance exists, configure it.
---
- name: check/create instance
hosts: db.stg.aws.fedoraproject.org
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -27,7 +28,7 @@
- name: cloud basic setup
hosts: db.stg.aws.fedoraproject.org
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- /srv/private/ansible/vars.yml
@ -41,7 +42,7 @@
- name: configure server
hosts: db.stg.aws.fedoraproject.org
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

1
playbooks/groups/debuginfod.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "debuginfod:debuginfod_stg"

3
playbooks/groups/dns.yml
View file

@ -1,5 +1,6 @@
# create a new dns server
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "dns"
@ -7,7 +8,7 @@
- name: make the box be real
hosts: dns
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

6
playbooks/groups/download.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "download_ibiblio:download_cc_rdu:download_iad2"
@ -5,7 +6,7 @@
- name: Download servers
hosts: download
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -21,7 +22,7 @@
- name: post-initial-steps
hosts: download
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -89,4 +90,3 @@
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

2
playbooks/groups/flatpak-cache.yml
View file

@ -6,7 +6,7 @@
- name: make the box be real
hosts: flatpak_cache
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

5
playbooks/groups/github2fedmsg.yml
View file

@ -3,6 +3,7 @@
# NOTE: make sure there is room/space for this server on the vmhost
# NOTE: most of these vars_path come from group_vars/github2fedmsg* or from hostvars
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "github2fedmsg:github2fedmsg_stg"
@ -10,7 +11,7 @@
- name: make the box be real
hosts: github2fedmsg:github2fedmsg_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -43,7 +44,7 @@
- name: deploy service-specific config
hosts: github2fedmsg:github2fedmsg_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/ipa.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "ipa:ipa_stg"
@ -5,7 +6,7 @@
- name: make the box be real
hosts: ipa:ipa_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -37,7 +38,7 @@
- name: deploy ipa itself
hosts: ipa:ipa_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -93,7 +94,7 @@
- name: do base role once more to revert any resolvconf changes
hosts: ipa:ipa_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/ipsilon.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "ipsilon:ipsilon_stg"
@ -6,7 +7,7 @@
- name: make the box be real
hosts: ipsilon:ipsilon_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -46,7 +47,7 @@
- name: deploy ipsilon itself
hosts: ipsilon:ipsilon_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -68,7 +69,7 @@
- name: setup IPA
hosts: ipa[0]:ipa_stg[0]
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

5
playbooks/groups/koji-hub.yml
View file

@ -2,6 +2,7 @@
# NOTE: should be used with --limit most of the time
# NOTE: most of these vars_path come from group_vars/koji-hub or from hostvars
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "koji_stg:koji"
@ -11,7 +12,7 @@
- name: make koji_hub server system
hosts: koji_stg:koji
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -133,7 +134,7 @@
tags:
- sshfs
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/kojipkgs.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "kojipkgs"
@ -5,7 +6,7 @@
- name: make the boxen be real for real
hosts: kojipkgs
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/logserver.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "logging"
@ -5,7 +6,7 @@
- name: make the box be real
hosts: logging
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -57,7 +58,7 @@
- name: Cloud Image stats
hosts: log01.iad2.fedoraproject.org
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -73,7 +74,7 @@
- name: dole out the service-specific config
hosts: log01.iad2.fedoraproject.org
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"

3
playbooks/groups/maintainer-test.yml
View file

@ -1,6 +1,7 @@
---
- name: Setup maintainer test hosts
hosts: maintainer_test
gather_facts: True
gather_facts: true
tags:
- maintainer-test

3
playbooks/groups/mariadb-server.yml
View file

@ -2,6 +2,7 @@
# NOTE: should be used with --limit most of the time
# NOTE: most of these vars_path come from group_vars/backup_server or from hostvars
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "db03.stg.iad2.fedoraproject.org:db03.iad2.fedoraproject.org"
@ -11,7 +12,7 @@
- name: configure mariadb server system
hosts: db03.stg.iad2.fedoraproject.org:db03.iad2.fedoraproject.org
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/memcached.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "memcached:memcached_stg"
@ -5,7 +6,7 @@
- name: make the box be real
hosts: memcached:memcached_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/nfs-servers.yml
View file

@ -1,9 +1,10 @@
# This is a basic playbook
---
- name: dole out the basic configuration
hosts: nfs_servers
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -33,7 +34,7 @@
- name: Deal with drive items on storinator01
hosts: storinator01.rdu-cc.fedoraproject.org
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
@ -75,7 +76,7 @@
- name: Deal with NFS
hosts: storinator01.rdu-cc.fedoraproject.org
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"

5
playbooks/groups/noc.yml
View file

@ -1,4 +1,5 @@
# This is a basic playbook
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "nagios"
@ -6,7 +7,7 @@
- name: make the box be real
hosts: nagios
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -51,7 +52,7 @@
- name: deploy service-specific config (just for production)
hosts: nagios
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/oci-registry.yml
View file

@ -1,4 +1,5 @@
# create an osbs server
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "oci_registry:oci_registry_stg"
@ -6,7 +7,7 @@
- name: make the box be real
hosts: oci_registry:oci_registry_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -42,7 +43,7 @@
state: directory
owner: root
group: root
mode: 0755
mode: "0755"
when: "env == 'staging'"
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
@ -68,7 +69,7 @@
role: docker-distribution,
conf_path: "/etc/docker-distribution/registry/config.yml",
tls: {
enabled: False,
enabled: false,
},
log: {
fields: {

5
playbooks/groups/openqa-onebox-test.yml
View file

@ -1,7 +1,8 @@
---
- name: setup base openQA host
hosts: openqa_onebox_test
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -31,7 +32,7 @@
- name: configure openQA
hosts: openqa_onebox_test
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/openqa-workers.yml
View file

@ -1,7 +1,8 @@
---
- name: configure openQA workers
hosts: openqa_workers:openqa_lab_workers
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/openqa.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "openqa:openqa_lab"
@ -5,7 +6,7 @@
- name: setup base openQA host
hosts: openqa:openqa_lab
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -35,7 +36,7 @@
- name: configure fedora-messaging queues on openQA servers
hosts: openqa:openqa_lab
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -194,7 +195,7 @@
- name: configure openQA
hosts: openqa:openqa_lab
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

7
playbooks/groups/os-control.yml
View file

@ -1,4 +1,5 @@
# This is a basic playbook
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "os_control:os_control_stg"
@ -6,7 +7,7 @@
- name: make the box be real
hosts: os_control:os_control_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -30,7 +31,7 @@
state: directory
owner: root
group: root
mode: 0770
mode: "0770"
- name: copy oc rpm
copy:
@ -46,7 +47,7 @@
copy:
src: "{{ files }}/scripts/jobs-summary"
dest: /usr/local/bin/jobs-summary
mode: 0755
mode: "0755"
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
- import_tasks: "{{ tasks_path }}/motd.yml"

4
playbooks/groups/os-proxies.yml
View file

@ -1,5 +1,6 @@
# create a new proxy server
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "os_proxies"
@ -7,7 +8,7 @@
- name: make the box be real
hosts: os_proxies
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -40,4 +41,3 @@
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

5
playbooks/groups/pagure.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "pagure:pagure_stg"
@ -5,7 +6,7 @@
- name: make the boxen be real for real
hosts: pagure:pagure_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -36,7 +37,7 @@
- name: deploy pagure itself
hosts: pagure:pagure_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/postgresql-server.yml
View file

@ -2,6 +2,7 @@
# NOTE: should be used with --limit most of the time
# NOTE: most of these vars_path come from group_vars/backup_server or from hostvars
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "db-fas01.stg.iad2.fedoraproject.org:db01.stg.iad2.fedoraproject.org:db-koji01.stg.iad2.fedoraproject.org:db-fas01.iad2.fedoraproject.org:db01.iad2.fedoraproject.org:db-koji01.iad2.fedoraproject.org:db-openqa01.iad2.fedoraproject.org:db-datanommer01.stg.iad2.fedoraproject.org:db-datanommer02.iad2.fedoraproject.org"
@ -11,7 +12,7 @@
- name: configure postgresql server system
hosts: db-fas01.stg.iad2.fedoraproject.org:db01.stg.iad2.fedoraproject.org:db-koji01.stg.iad2.fedoraproject.org:db-fas01.iad2.fedoraproject.org:db01.iad2.fedoraproject.org:db-koji01.iad2.fedoraproject.org:db-openqa01.iad2.fedoraproject.org:db-datanommer01.stg.iad2.fedoraproject.org:db-datanommer02.iad2.fedoraproject.org
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

9
playbooks/groups/proxies.yml
View file

@ -1,5 +1,6 @@
# create a new proxy server
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "proxies:proxies_stg:!proxy05.fedoraproject.org:!cloud_aws"
@ -7,7 +8,7 @@
- name: make the box be real
hosts: proxies_stg:proxies
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -51,7 +52,7 @@
dest: /etc/modules-load.d/nf_conntrack.conf
owner: root
group: root
mode: 0644
mode: "0644"
- name: set ip_conntrack_max to a high value as the proxies deal with lots of connections
sysctl: name=net.nf_conntrack_max value=26214400 state=present sysctl_set=yes reload=yes
@ -80,7 +81,7 @@
- name: Set up the proxy basics
hosts: proxies_stg:proxies
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -121,7 +122,7 @@
hosts: proxies_stg:proxies
strategy: free
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/rabbitmq.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "rabbitmq:rabbitmq_stg"
@ -5,7 +6,7 @@
- name: make the box be real
hosts: rabbitmq:rabbitmq_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

9
playbooks/groups/releng-compose.yml
View file

@ -3,6 +3,7 @@
# NOTE: make sure there is room/space for this instance on the buildvmhost
# NOTE: most of these vars_path come from group_vars/releng or from hostvars
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "releng_compose:releng_compose_stg:releng_compose_eln"
@ -203,7 +204,7 @@
dest: /etc/krb5.releng.keytab
owner: root
group: "releng-team"
mode: 0640
mode: "0640"
tags:
- containerrebuild
@ -213,7 +214,7 @@
dest: /etc/pki/releng
owner: root
group: "releng-team"
mode: 0600
mode: "0600"
tags:
- containerrebuild
@ -223,7 +224,7 @@
dest: "/usr/local/bin/relengpush"
owner: root
group: "releng-team"
mode: 0750
mode: "0750"
tags:
- containerrebuild
@ -233,7 +234,7 @@
dest: "/usr/local/bin/relengpush-int"
owner: root
group: "releng-team"
mode: 0750
mode: "0750"
tags:
- containerrebuild

11
playbooks/groups/retrace.yml
View file

@ -1,7 +1,8 @@
---
- name: AWS setup
hosts: retrace_stg_aws
user: root
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -17,7 +18,7 @@
- name: setup RabbitMQ
hosts: rabbitmq[0]:rabbitmq_stg[0]
user: root
gather_facts: False
gather_facts: false
tags: rabbitmq
vars_files:
@ -51,7 +52,7 @@
- name: Setup retrace hosts
hosts: retrace,retrace_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -79,7 +80,7 @@
- name: setup FAF server
hosts: retrace,retrace_stg
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -99,7 +100,7 @@
- name: setup retrace server
hosts: retrace,retrace_stg
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/secondary.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "secondary"
@ -5,7 +6,7 @@
- name: setup secondary arch download server
hosts: secondary
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

1
playbooks/groups/sign-bridge.yml
View file

@ -6,6 +6,7 @@
# Access is via management interface only. This playbook does initial setup.
# Please check with rel-eng before doing anything here.
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "sign_bridge"

3
playbooks/groups/smtp-auth.yml
View file

@ -1,5 +1,6 @@
# create smtp auth servers
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "smtp_auth"
@ -7,7 +8,7 @@
- name: make the box be real
hosts: smtp_auth
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/smtp-mm.yml
View file

@ -1,5 +1,6 @@
# create smtp servers
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "smtp_mm"
@ -7,7 +8,7 @@
- name: make the box be real
hosts: smtp_mm
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/tang.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "tang"
@ -5,7 +6,7 @@
- name: make the box be real
hosts: tang
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/torrent.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "torrent"
@ -5,7 +6,7 @@
- name: make the box be real
hosts: torrent
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/value.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "value:value_stg"
@ -5,7 +6,7 @@
- name: make the box be real
hosts: value:value_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/virthost.yml
View file

@ -2,6 +2,7 @@
# NOTE: should be used with --limit most of the time
# NOTE: most of these vars_path come from group_vars/backup_server or from hostvars
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/happy_birthday.yml"
vars:
myhosts: "virthost:bvirthost:buildvmhost:colo_virt"
@ -9,7 +10,7 @@
- name: make virthost server system
hosts: virthost:bvirthost:buildvmhost:colo_virt
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/wiki.yml
View file

@ -3,6 +3,7 @@
# These servers run mediawiki for the main fedora wiki instance.
#
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "wiki:wiki_stg"
@ -10,7 +11,7 @@
- name: make the box be real
hosts: wiki:wiki_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/groups/zabbix.yml
View file

@ -1,3 +1,4 @@
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "zabbix_stg:zabbix"
@ -5,7 +6,7 @@
- name: make the box be real
hosts: zabbix_stg:zabbix
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/host_reboot.yml
View file

@ -1,8 +1,9 @@
# requires --extra-vars="target=hostspec"
---
- name: reboot hosts
hosts: "{{ target }}"
gather_facts: False
gather_facts: false
user: root
serial: 1

1
playbooks/host_update.yml
View file

@ -3,6 +3,7 @@
# requires --extra-vars="target=somehostname yumcommand=update"
---
- name: update the system
hosts: "{{ target }}"
gather_facts: false

4
playbooks/hosts/cloud-noc01.fedorainfracloud.org.yml
View file

@ -1,5 +1,6 @@
# This is a basic playbook
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "cloud-noc01.fedorainfracloud.org"
@ -7,7 +8,7 @@
- name: make cloud noc hardware
hosts: cloud-noc01.fedorainfracloud.org
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -58,4 +59,3 @@
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

3
playbooks/hosts/noc-cc01.rdu-cc.fedoraproject.org.yml
View file

@ -1,5 +1,6 @@
# This is a basic playbook
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "noc-cc01.rdu-cc.fedoraproject.org"
@ -7,7 +8,7 @@
- name: make cloud noc hardware
hosts: noc-cc01.rdu-cc.fedoraproject.org
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

4
playbooks/include/happy_birthday.yml
View file

@ -1,6 +1,7 @@
---
- name: handle ssh keys on a hosts birthday (new hw machine)
hosts: "{{ myhosts }}"
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -13,4 +14,3 @@
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

4
playbooks/include/proxies-certificates.yml
View file

@ -1,7 +1,8 @@
---
- name: Set up those proxy certificates. Good gravy..
hosts: proxies_stg:proxies
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -70,4 +71,3 @@
# - role: httpd/certificate
# certname: secondary.koji.fedoraproject.org.letsencrypt
# SSLCertificateChainFile: secondary.koji.fedoraproject.org.letsencrypt.intermediate.crt

3
playbooks/include/proxies-fedora-web.yml
View file

@ -1,7 +1,8 @@
---
- name: Set up all that fedora-web goodness. What a wonder!
hosts: proxies_stg:proxies
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

4
playbooks/include/proxies-fedorahosted.yml
View file

@ -1,7 +1,8 @@
---
- name: Fedorahosted. No more on our servers, but still in our hearts...
hosts: proxies_stg:proxies
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -26,4 +27,3 @@
- name: install special git.fedorahosted-redirects.conf with git.fedorahosted redirects
copy: src={{ files }}/httpd/git.fedorahosted-redirects.conf dest=/etc/httpd/conf.d/git.fedorahosted.org/fedorahosted-redirects.conf

3
playbooks/include/proxies-haproxy.yml
View file

@ -1,7 +1,8 @@
---
- name: Set up all the haproxy stuff.
hosts: proxies_stg:proxies
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/include/proxies-miscellaneous.yml
View file

@ -1,7 +1,8 @@
---
- name: Set up all the other proxy stuff -- miscellaneous
hosts: proxies_stg:proxies
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/include/proxies-redirects.yml
View file

@ -1,7 +1,8 @@
---
- name: Set up those proxy redirects. Wow!
hosts: proxies_stg:proxies
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/include/proxies-reverseproxy.yml
View file

@ -1,7 +1,8 @@
---
- name: Set up those ProxyPassReverse statements. Somebody get me a cup of coffee..
hosts: proxies_stg:proxies
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/include/proxies-rewrites.yml
View file

@ -1,7 +1,8 @@
---
- name: Set up some domain rewrites.
hosts: proxies_stg:proxies
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/include/proxies-websites.yml
View file

@ -1,7 +1,8 @@
---
- name: Set up those proxy websites. My, my..
hosts: proxies_stg:proxies
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

4
playbooks/include/virt-create.yml
View file

@ -1,6 +1,7 @@
---
- name: make the virtual instance
hosts: "{{ myhosts }}"
gather_facts: False
gather_facts: false
vars_files:
- /srv/web/infra/ansible/vars/global.yml
@ -12,4 +13,3 @@
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"

2
playbooks/list-vms-per-host.yml
View file

@ -4,7 +4,7 @@
---
- hosts: virtservers
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

3
playbooks/manual/autosign.yml
View file

@ -4,6 +4,7 @@
# Access is via management interface only. This playbook does initial setup.
# Please check with rel-eng before doing anything here.
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "autosign_stg"
@ -11,7 +12,7 @@
- name: make the box be real
hosts: autosign:autosign_stg
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

1
playbooks/manual/copr/_generic_tasks.yml
View file

@ -1,3 +1,4 @@
---
- name: detect package versions
package_facts: manager=auto

2
playbooks/manual/copr/copr-backend-upgrade.yml
View file

@ -2,7 +2,7 @@
- name: upgrade copr backend
hosts: copr_back_dev_aws:copr_back_aws
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

2
playbooks/manual/copr/copr-dist-git-upgrade.yml
View file

@ -2,7 +2,7 @@
- name: upgrade copr distgit
hosts: copr_dist_git_dev_aws:copr_dist_git_aws
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

2
playbooks/manual/copr/copr-frontend-upgrade.yml
View file

@ -2,7 +2,7 @@
- name: upgrade copr frontend
hosts: copr_front_dev_aws:copr_front_aws
user: root
gather_facts: True
gather_facts: true
vars:
cache_file: /var/lib/copr/.ansible-copr-frontend-version

2
playbooks/manual/copr/copr-keygen-upgrade.yml
View file

@ -2,7 +2,7 @@
- name: upgrade copr keygen
hosts: copr_keygen_dev_aws:copr_keygen_aws
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

2
playbooks/manual/copr/copr-pulp-upgrade.yml
View file

@ -2,7 +2,7 @@
- name: upgrade copr pulp
hosts: copr_pulp_dev_aws:copr_pulp_aws
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

1
playbooks/manual/gdpr/delete.yml
View file

@ -3,6 +3,7 @@
# Please read http://fedora-infra-docs.readthedocs.io/en/latest/sysadmin-guide/sops/gdpr_delete.html
# for information about how to use this playbook and how to integration applications with it.
---
- name: Delete user data
hosts: gdpr_delete
strategy: free

1
playbooks/manual/gdpr/sar.yml
View file

@ -2,6 +2,7 @@
#
# Please read http://fedora-infra-docs.readthedocs.io/en/latest/sysadmin-guide/sops/gdpr_sar.html
# for information about how to use this playbook and how to integration applications with it.
---
- name: Create the archive location
hosts: localhost
tasks:

1
playbooks/manual/gdpr/sar_openshift.yml
View file

@ -1,5 +1,6 @@
# Retrieve GDPR data from single openshift app.
# Get the correct pod
---
- name: Retrieve the id of the running container/pod
shell: "oc get -n {{ item.value.openshift_namespace }} -o name -l app={{ item.value.openshift_pod }} pods | cut -f 2 -d '/'"
register: pod_id

2
playbooks/manual/get-system-packages.yml
View file

@ -2,6 +2,7 @@
# A playbook to get all the rpms installed on a set of systems.
#
---
- name: Get installed packages
hosts: builders:releng-compose:data-analysis01.iad2.fedoraproject.org
gather_facts: true
@ -18,4 +19,3 @@
- debug: var=rpm_output.stdout_lines
# when: rpm_output is defined and rpm_output.results|length > 0

1
playbooks/manual/history_undo.yml
View file

@ -8,6 +8,7 @@
# all the virthosts. If you run this once, it will undo those transactions. If
# you run it again, it will undo that previous *undo*.
---
- name: Find and undo the latest yum transaction involving a $PACKAGE
hosts: "{{ target }}"
user: root

5
playbooks/manual/import-irc-cookies-to-matrix.yml
View file

@ -1,5 +1,6 @@
# This playbook imports the cookies given on IRC to the Matrix Zodbot
---
- name: Import the cookies
hosts: value02.iad2.fedoraproject.org:value02.stg.iad2.fedoraproject.org
user: root
@ -18,7 +19,7 @@
dest: /root/.pgpass
owner: root
group: root
mode: 0400
mode: "0400"
- name: install the required package
dnf:
@ -29,7 +30,7 @@
copy:
src: "{{ files }}/zodbot/karma-to-cookies-db.py"
dest: /usr/local/bin/karma-to-cookies-db
mode: 0755
mode: "0755"
- name: run the import script
command:

3
playbooks/manual/kernel-qa.yml
View file

@ -2,10 +2,11 @@
# NOTE: this assumes the kernel-qa boxes are already up and are accessible
# NOTE: most of these vars_path come from group_vars/kernel-qa or from hostvars
---
- name: make kernel-qa
hosts: kernel_qa
user: root
gather_facts: True
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml

1
playbooks/manual/mirrormanager/emergency-expire-repo.yml
View file

@ -6,6 +6,7 @@
# "Fedora", "EPEL" or "RHEL"
# version => The version that must be expired and updated.
---
- name: Run the emergency-expire-repo script
hosts: os_control[0]:os_control_stg[0]
user: root

1
playbooks/manual/mirrormanager/move-devel-to-release.yml
View file

@ -4,6 +4,7 @@
# --extra-vars="version='42'"
# version => The version that must be expired and updated.
---
- name: Run the move-devel-to-release script
hosts: os_control[0]:os_control_stg[0]
user: root

1
playbooks/manual/mirrormanager/move-to-archive.yml
View file

@ -6,6 +6,7 @@
# "Fedora", "EPEL" or "RHEL"
# version => The version that must be archived.
---
- name: Run the move-to-archive script
hosts: os_control[0]:os_control_stg[0]
user: root

1
playbooks/manual/nagios/shush-fmn.yml
View file

@ -1,3 +1,4 @@
---
- name: be quiet please...
hosts: notifs_backend:notifs_backend_stg
user: root

1
playbooks/manual/noggin-deployment/create-full-backup.yml
View file

@ -1,3 +1,4 @@
---
- name: backup IPA data for testing
hosts: ipa_stg
# vars_files:

2
playbooks/manual/noggin-deployment/fix-home-fedora-ownerships.yml
View file

@ -19,7 +19,7 @@
copy:
src: "{{ files }}/scripts/fix-home-fedora-ownerships.sh"
dest: /usr/local/sbin/fix-home-fedora-ownerships.sh
mode: 0755
mode: "0755"
changed_when: false
when: home_fedora_res.stat.isdir

Some files were not shown because too many files have changed in this diff Show more