Add postgresql, resultsdb and execdb in ci-cc-rdu01

inventory/group_vars/ci

@@ -0,0 +1,78 @@
+---
+############################################################
+# general information
+############################################################
+# common items for the releng-* boxes
+lvm_size: 50000
+mem_size: 4096
+num_cpus: 4
+# for systems that do not match the above - specify the same parameter in
+# the host_vars/$hostname file
+
+tcp_ports: [ 80, 443, "{{ resultsdb_db_port }}" ]
+fas_client_groups: sysadmin-qa,sysadmin-noc,sysadmin-web
+nrpe_procs_warn: 250
+nrpe_procs_crit: 300
+
+external_hostname: resultsdb.ci.centos.org
+deployment_type: prod
+
+
+############################################################
+# resultsdb details
+############################################################
+
+# the db_host_machine bits are so that delegation continues to work, even if
+# that db is localhost relative to resultsdb
+
+resultsdb_db_host_machine: ci-cc-rdu01.fedoraproject.org
+resultsdb_db_host: "{{ resultsdb_db_host_machine }}"
+resultsdb_db_port: 5432
+resultsdb_endpoint: 'resultsdb_api'
+resultsdb_db_name: resultsdb
+resultsdb_db_user: "{{ ci_resultsdb_db_user }}"
+resultsdb_db_password: "{{ ci_resultsdb_db_password }}"
+resultsdb_secret_key: "{{ ci_resultsdb_secret_key }}"
+
+allowed_hosts:
+    - 10.5.124
+    - 10.5.131
+
+
+############################################################
+# resultsdb-frontend details
+############################################################
+resultsdb_fe_endpoint: "resultsdb"
+resultsdb_frontend_secret_key: "{{ ci_resultsdb_frontend_secret_key }}"
+
+
+###########################################################
+# execdb details
+############################################################
+execdb_db_host_machine: ci-cc-rdu01.fedoraproject.org
+execdb_db_host: "{{ execdb_db_host_machine }}"
+execdb_db_port: 5432
+execdb_endpoint: 'execdb'
+execdb_db_name: execdb
+execdb_db_user: "{{ ci_execdb_db_user }}"
+execdb_db_password: "{{ ci_execdb_db_password }}"
+execdb_secret_key: "{{ ci_execdb_secret_key }}"
+
+
+############################################################
+# fedmsg details
+############################################################
+fedmsg_active: False
+fedmsg_cert_prefix: ci.resultsdb
+
+fedmsg_certs:
+- service: shell
+  owner: root
+  group: sysadmin
+  can_send:
+  - logger.log
+- service: resultsdb
+  owner: root
+  group: apache
+  can_send:
+  - taskotron.result.new

playbooks/groups/ci.yml

@@ -26,6 +26,7 @@
    - { role: sudo, tags: ['sudo'] }
    - { role: openvpn/client,
        when: deployment_type == "prod", tags: ['openvpn_client'] }
+   - postgresql_server
    - apache
    - { role: fedmsg/base }
 
@@ -37,3 +38,22 @@
 
   handlers:
    - include: "{{ handlers_path }}/restart_services.yml"
+
+- name: configure resultsdb production
+  hosts: ci
+  user: root
+  gather_facts: True
+
+  vars_files:
+   - /srv/web/infra/ansible/vars/global.yml
+   - "/srv/private/ansible/vars.yml"
+   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
+
+  roles:
+   - { role: taskotron/resultsdb-fedmsg, tags: ['resultsdb-fedmsg']}
+   - { role: taskotron/resultsdb-backend, tags: ['resultsdb-be'] }
+   - { role: taskotron/resultsdb-frontend, tags: ['resultsdb-fe'] }
+   - { role: taskotron/execdb, tags: ['execdb'] }
+
+  handlers:
+   - include: "{{ handlers_path }}/restart_services.yml"