Move the kernel-qa playbook to manual. The kernel team manages those day to day.

playbooks/manual/kernel-qa.yml

@@ -0,0 +1,32 @@
+# provision a new kernel-qa system
+# NOTE: this assumes the kernel-qa boxes are already up and are accessible
+# NOTE: most of these vars_path come from group_vars/kernel-qa or from hostvars
+
+- name: make kernel-qa
+  hosts: kernel-qa
+  user: root
+  gather_facts: True
+
+  vars_files: 
+   - /srv/web/infra/ansible/vars/global.yml
+   - "{{ private }}/vars.yml"
+   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
+
+  roles:
+  - /srv/web/infra/ansible/roles/base
+  - /srv/web/infra/ansible/roles/rkhunter
+  - /srv/web/infra/ansible/roles/denyhosts
+  - /srv/web/infra/ansible/roles/nagios_client
+  - /srv/web/infra/ansible/roles/fas_client
+
+  tasks:
+  # this is how you include other task lists
+  - include: "{{ tasks }}/hosts.yml"
+  - include: "{{ tasks }}/yumrepos.yml"
+  - include: "{{ tasks }}/2fa_client.yml"
+  - include: "{{ tasks }}/motd.yml"
+  - include: "{{ tasks }}/sudo.yml"
+
+
+  handlers:
+  - include: "{{ handlers }}/restart_services.yml"