Infrastructure/ansible
3
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

ipa/client: enable for mbs in prod

Browse source 
Signed-off-by: Nils Philippsen <nils@redhat.com>
This commit is contained in:
Nils Philippsen 2021-03-19 17:25:38 +01:00
parent 3fd14610c6
commit 7cf64ad1f6
4 changed files with 2 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

1
inventory/group_vars/mbs
View file

@ -1,4 +1,5 @@
--- ---
primary_auth_source: ipa
ipa_host_group: mbs ipa_host_group: mbs
ipa_host_group_desc: Modular Build Service hosts ipa_host_group_desc: Modular Build Service hosts
ipa_client_shell_groups: ipa_client_shell_groups:

3
inventory/group_vars/mbs_backend
View file

@ -9,9 +9,6 @@ num_cpus: 2
tcp_ports: [ 3000, 3001, 3002, 3003, tcp_ports: [ 3000, 3001, 3002, 3003,
3004, 3005, 3006, 3007 ] 3004, 3005, 3006, 3007 ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/mbs-sudoers"
# These people get told when something goes wrong. # These people get told when something goes wrong.
fedmsg_error_recipients: fedmsg_error_recipients:
- ralph@fedoraproject.org - ralph@fedoraproject.org

3
inventory/group_vars/mbs_frontend
View file

@ -16,9 +16,6 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/mbs-sudoers"
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:
- service: mbs - service: mbs

5
playbooks/groups/mbs.yml
View file

@ -18,15 +18,12 @@
- rkhunter - rkhunter
- nagios_client - nagios_client
- hosts - hosts
- { role: ipa/client, when: env == "staging" } - ipa/client
- { role: fas_client, when: env != "staging" }
- rsyncd - rsyncd
- sudo - sudo
- collectd/base - collectd/base
tasks: tasks:
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
when: env != "staging"
- import_tasks: "{{ tasks_path }}/motd.yml" - import_tasks: "{{ tasks_path }}/motd.yml"
handlers: handlers: