Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Add CSI vars from Juan Jimenez-Anca. Thanks!

Browse source
This commit is contained in:
Kevin Fenzi 2015-11-20 20:19:56 +00:00
parent 3ef23498c8
commit 3665a3e10a
5 changed files with 50 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

15
inventory/group_vars/bastion
View file

@ -1,5 +1,5 @@
---
# Define resources for this group of hosts here.
# Define resources for this group of hosts here.
lvm_size: 20000
mem_size: 8192
num_cpus: 4
@ -37,3 +37,16 @@ fas_aliases: true
#
nrpe_procs_warn: 1100
nrpe_procs_crit: 1200
# These variables are pushed into /etc/system_identification by the base role.
# Groups and individual hosts should override them with specific info.
# See http://infrastructure.fedoraproject.org/csi/security-policy/
csi_security_category: High
csi_primary_contact: sysadmin-main admin@fedoraproject.org
csi_purpose: SSH proxy to access infrastructure not exposed to the web
csi_relationship:
* Provides ssh access to all phx2/vpn connected servers.
* Bastion is the hub for all infrastructure's VPN connections.
* All incoming SMTP from phx2 and VPN, as well as outgoing SMTP, pass or are filtered here.
* Bastion does not accept any mail outside phx2/vpn.

11
inventory/group_vars/copr-back
View file

@ -20,3 +20,14 @@ do_sign: "true"
spawn_in_advance: "true"
frontend_base_url: "https://copr-fe.cloud.fedoraproject.org"
# These variables are pushed into /etc/system_identification by the base role.
# Groups and individual hosts should override them with specific info.
# See http://infrastructure.fedoraproject.org/csi/security-policy/
csi_security_category: High
csi_primary_contact: msuchy (mirek, vgologuz) | IRC: #fedora-admin, #fedora-buildsys
csi_purpose: Provide the backend for copr (3rd party packages)
csi_relationship:
* Backend: Management of copr cloud infrastructure (OpenStack).
* Small frontend with copr's public stats

9
inventory/group_vars/copr-back-stg
View file

@ -18,3 +18,12 @@ do_sign: "true"
spawn_in_advance: "false"
frontend_base_url: "http://copr-fe-dev.cloud.fedoraproject.org"
# These variables are pushed into /etc/system_identification by the base role.
# Groups and individual hosts should override them with specific info.
# See http://infrastructure.fedoraproject.org/csi/security-policy/
csi_security_category: Moderate
csi_primary_contact: msuchy (mirek, vgologuz) | IRC: #fedora-admin, #fedora-buildsys
csi_purpose: Provide the testing environment of copr's backend
csi_relationship: This host is the testing environment for the cloud infrastructure of copr's backend

11
inventory/group_vars/copr-front
View file

@ -1,3 +1,14 @@
---
copr_hostname: "copr-fe.cloud.fedoraproject.org"
copr_frontend_public_hostname: "copr.fedoraproject.org"
# These variables are pushed into /etc/system_identification by the base role.
# Groups and individual hosts should override them with specific info.
# See http://infrastructure.fedoraproject.org/csi/security-policy/
csi_security_category: Moderate
csi_primary_contact: msuchy (mirek, vgologuz) | IRC: #fedora-admin, #fedora-buildsys
csi_purpose: Provide a publicly accessible frontend for 3rd party packages (copr)
csi_relationship:
* This host provides the frontend part of copr only.
* It's the point of contact between end users and the copr build system (backend, package singer)

5
inventory/group_vars/copr-front-stg
View file

@ -1,2 +1,7 @@
---
copr_frontend_public_hostname: "copr-fe-dev.cloud.fedoraproject.org"
csi_security_category: Low
csi_primary_contact: msuchy (mirek, vgologuz) | IRC: #fedora-admin, #fedora-buildsys
csi_purpose: Provide the testing environment of copr's frontend
csi_relationship: This host is the testing environment for copr's web interface