Very rough cut of sign server setup

inventory/inventory

@@ -115,6 +115,8 @@ compose-x86-02.phx2.fedoraproject.org
 [sign]
 sign-bridge02.phx2.fedoraproject.org
 sign-vault02.phx2.fedoraproject.org
+sign-vault03.phx2.fedoraproject.org
+sign-vault04.phx2.fedoraproject.org
 
 [releng-stg]
 releng01.stg.phx2.fedoraproject.org

playbooks/groups/sign.yml

@@ -0,0 +1,24 @@
+# provision a new sign server.
+# NOTE: this assumes the boxes are already up and are accessible
+# NOTE: most of these vars come from group_vars/sign or from hostvars
+#
+# FURTHER NOTE: some of These machines run day to day with sshd disabled/off. 
+# Access is via management interface only. This playbook does initial setup. 
+# Please check with rel-eng before doing anything here. 
+
+- name: make sign server
+  hosts: sign
+  user: root
+  gather_facts: true
+
+  vars_files: 
+   - /srv/web/infra/ansible/vars/global.yml
+   - ${private}/vars.yml
+   - ${vars}/${ansible_distribution}.yml
+
+  tasks:
+  - include: $tasks/base.yml
+  - include: $tasks/sign_setup.yml
+
+  handlers:
+  - include: $handlers/restart_services.yml

tasks/sign_setup.yml

@@ -0,0 +1,8 @@
+---
+
+- name: install sigul
+  action: yum state=installed name=$item
+  with_items:
+  - sigul
+  tags:
+  - packages