Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

Enter log01, bravest of the brave

Browse source
This commit is contained in:
Kevin Fenzi 2014-07-18 20:42:00 +00:00
parent 10c4c85a53
commit 92549b5c05
42 changed files with 97 additions and 67 deletions
Download patch file Download diff file Expand all files Collapse all files

4
inventory/group_vars/ask
View file

@ -8,8 +8,8 @@ tcp_ports: [ 80, 443,
# These 8 ports are used by fedmsg. One for each wsgi thread. # These 8 ports are used by fedmsg. One for each wsgi thread.
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007] 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-ask,fi-apprentice fas_client_groups: sysadmin-noc,sysadmin-ask,fi-apprentice

4
inventory/group_vars/ask-stg
View file

@ -8,8 +8,8 @@ tcp_ports: [ 80, 443,
# These 8 ports are used by fedmsg. One for each wsgi thread. # These 8 ports are used by fedmsg. One for each wsgi thread.
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007] 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-ask,fi-apprentice fas_client_groups: sysadmin-noc,sysadmin-ask,fi-apprentice

4
inventory/group_vars/badges-web
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-badges fas_client_groups: sysadmin-noc,sysadmin-badges

4
inventory/group_vars/badges-web-stg
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-badges fas_client_groups: sysadmin-noc,sysadmin-badges

4
inventory/group_vars/bodhi
View file

@ -15,8 +15,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc

4
inventory/group_vars/bodhi-stg
View file

@ -15,8 +15,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc

4
inventory/group_vars/datagrepper
View file

@ -8,8 +8,8 @@ num_cpus: 2
# the host_vars/$hostname file # the host_vars/$hostname file
tcp_ports: [ 80, 443, 6996 ] tcp_ports: [ 80, 443, 6996 ]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer,fi-apprentice fas_client_groups: sysadmin-noc,sysadmin-datanommer,fi-apprentice

4
inventory/group_vars/datagrepper-stg
View file

@ -8,8 +8,8 @@ num_cpus: 1
# the host_vars/$hostname file # the host_vars/$hostname file
tcp_ports: [ 80, 443, 6996 ] tcp_ports: [ 80, 443, 6996 ]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer,fi-apprentice fas_client_groups: sysadmin-noc,sysadmin-datanommer,fi-apprentice

4
inventory/group_vars/elections
View file

@ -10,8 +10,8 @@ tcp_ports: [ 80,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web,fi-apprentice fas_client_groups: sysadmin-noc,sysadmin-web,fi-apprentice

4
inventory/group_vars/elections-stg
View file

@ -9,8 +9,8 @@ tcp_ports: [ 80,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web,fi-apprentice fas_client_groups: sysadmin-noc,sysadmin-web,fi-apprentice

4
inventory/group_vars/fedoauth
View file

@ -9,7 +9,7 @@ num_cpus: 2
tcp_ports: [ 80, 443 ] tcp_ports: [ 80, 443 ]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-main,sysadmin-accounts fas_client_groups: sysadmin-main,sysadmin-accounts

4
inventory/group_vars/fedoauth-stg
View file

@ -9,7 +9,7 @@ num_cpus: 2
tcp_ports: [ 80, 443 ] tcp_ports: [ 80, 443 ]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-main,sysadmin-accounts fas_client_groups: sysadmin-main,sysadmin-accounts

4
inventory/group_vars/fedocal
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web

4
inventory/group_vars/fedocal-stg
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web

4
inventory/group_vars/github2fedmsg
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc

4
inventory/group_vars/github2fedmsg-stg
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc

4
inventory/group_vars/kerneltest
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc

4
inventory/group_vars/kerneltest-stg
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc

4
inventory/group_vars/packages
View file

@ -14,8 +14,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web

4
inventory/group_vars/packages-stg
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web

4
inventory/group_vars/paste
View file

@ -8,8 +8,8 @@ num_cpus: 2
# the host_vars/$hostname file # the host_vars/$hostname file
tcp_ports: [ 80, 443, 8888 ] tcp_ports: [ 80, 443, 8888 ]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-paste,fi-apprentice fas_client_groups: sysadmin-noc,sysadmin-paste,fi-apprentice
# This host doesn't freeze # This host doesn't freeze

4
inventory/group_vars/paste-stg
View file

@ -8,8 +8,8 @@ num_cpus: 2
# the host_vars/$hostname file # the host_vars/$hostname file
tcp_ports: [ 80, 443, 8888 ] tcp_ports: [ 80, 443, 8888 ]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-paste,fi-apprentice fas_client_groups: sysadmin-noc,sysadmin-paste,fi-apprentice
# This host doesn't freeze # This host doesn't freeze

4
inventory/group_vars/tagger
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc

4
inventory/group_vars/tagger-stg
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc

4
inventory/group_vars/value
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443, 5050,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,fi-apprentice fas_client_groups: sysadmin-noc,fi-apprentice

4
inventory/group_vars/value-stg
View file

@ -12,8 +12,8 @@ tcp_ports: [ 80, 443, 5050,
3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007, 3000, 3001, 3002, 3003, 3004, 3005, 3006, 3007,
3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015] 3008, 3009, 3010, 3011, 3012, 3013, 3014, 3015]
# Neeed for rsync from log02 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.29 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.56 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,fi-apprentice fas_client_groups: sysadmin-noc,fi-apprentice

8
master.yml
View file

@ -27,7 +27,10 @@
- include: /srv/web/infra/ansible/playbooks/groups/bugzilla2fedmsg.yml - include: /srv/web/infra/ansible/playbooks/groups/bugzilla2fedmsg.yml
- include: /srv/web/infra/ansible/playbooks/groups/buildhw.yml - include: /srv/web/infra/ansible/playbooks/groups/buildhw.yml
- include: /srv/web/infra/ansible/playbooks/groups/buildvm.yml - include: /srv/web/infra/ansible/playbooks/groups/buildvm.yml
- include: /srv/web/infra/ansible/playbooks/groups/busgateway.yml
- include: /srv/web/infra/ansible/playbooks/groups/composers.yml - include: /srv/web/infra/ansible/playbooks/groups/composers.yml
- include: /srv/web/infra/ansible/playbooks/groups/datagrepper.yml
- include: /srv/web/infra/ansible/playbooks/groups/dhcp.yml
- include: /srv/web/infra/ansible/playbooks/groups/docs-backend.yml - include: /srv/web/infra/ansible/playbooks/groups/docs-backend.yml
- include: /srv/web/infra/ansible/playbooks/groups/download.yml - include: /srv/web/infra/ansible/playbooks/groups/download.yml
- include: /srv/web/infra/ansible/playbooks/groups/elections.yml - include: /srv/web/infra/ansible/playbooks/groups/elections.yml
@ -44,6 +47,7 @@
- include: /srv/web/infra/ansible/playbooks/groups/mailman.yml - include: /srv/web/infra/ansible/playbooks/groups/mailman.yml
- include: /srv/web/infra/ansible/playbooks/groups/mirrorlist.yml - include: /srv/web/infra/ansible/playbooks/groups/mirrorlist.yml
- include: /srv/web/infra/ansible/playbooks/groups/memcached.yml - include: /srv/web/infra/ansible/playbooks/groups/memcached.yml
- include: /srv/web/infra/ansible/playbooks/groups/noc.yml
- include: /srv/web/infra/ansible/playbooks/groups/notifs-backend.yml - include: /srv/web/infra/ansible/playbooks/groups/notifs-backend.yml
- include: /srv/web/infra/ansible/playbooks/groups/notifs-web.yml - include: /srv/web/infra/ansible/playbooks/groups/notifs-web.yml
- include: /srv/web/infra/ansible/playbooks/groups/nuancier.yml - include: /srv/web/infra/ansible/playbooks/groups/nuancier.yml
@ -51,16 +55,17 @@
- include: /srv/web/infra/ansible/playbooks/groups/paste.yml - include: /srv/web/infra/ansible/playbooks/groups/paste.yml
- include: /srv/web/infra/ansible/playbooks/groups/pkgdb.yml - include: /srv/web/infra/ansible/playbooks/groups/pkgdb.yml
- include: /srv/web/infra/ansible/playbooks/groups/postgresl-server.yml - include: /srv/web/infra/ansible/playbooks/groups/postgresl-server.yml
- include: /srv/web/infra/ansible/playbooks/groups/resultsdb-prod.yml
- include: /srv/web/infra/ansible/playbooks/groups/resultsdb-dev.yml - include: /srv/web/infra/ansible/playbooks/groups/resultsdb-dev.yml
- include: /srv/web/infra/ansible/playbooks/groups/resultsdb-stg.yml - include: /srv/web/infra/ansible/playbooks/groups/resultsdb-stg.yml
- include: /srv/web/infra/ansible/playbooks/groups/smtp-mm.yml - include: /srv/web/infra/ansible/playbooks/groups/smtp-mm.yml
- include: /srv/web/infra/ansible/playbooks/groups/summershum.yml - include: /srv/web/infra/ansible/playbooks/groups/summershum.yml
- include: /srv/web/infra/ansible/playbooks/groups/sundries.yml - include: /srv/web/infra/ansible/playbooks/groups/sundries.yml
- include: /srv/web/infra/ansible/playbooks/groups/tagger.yml - include: /srv/web/infra/ansible/playbooks/groups/tagger.yml
- include: /srv/web/infra/ansible/playbooks/groups/taskotron-prod.yml
- include: /srv/web/infra/ansible/playbooks/groups/taskotron-dev.yml - include: /srv/web/infra/ansible/playbooks/groups/taskotron-dev.yml
- include: /srv/web/infra/ansible/playbooks/groups/taskotron-dev-clients.yml - include: /srv/web/infra/ansible/playbooks/groups/taskotron-dev-clients.yml
- include: /srv/web/infra/ansible/playbooks/groups/taskotron-stg-clients.yml - include: /srv/web/infra/ansible/playbooks/groups/taskotron-stg-clients.yml
- include: /srv/web/infra/ansible/playbooks/groups/taskotron.yml
- include: /srv/web/infra/ansible/playbooks/groups/unbound.yml - include: /srv/web/infra/ansible/playbooks/groups/unbound.yml
- include: /srv/web/infra/ansible/playbooks/groups/value.yml - include: /srv/web/infra/ansible/playbooks/groups/value.yml
- include: /srv/web/infra/ansible/playbooks/groups/virthost.yml - include: /srv/web/infra/ansible/playbooks/groups/virthost.yml
@ -81,5 +86,6 @@
- include: /srv/web/infra/ansible/playbooks/hosts/fedocal.dev.fedoraproject.org.yml - include: /srv/web/infra/ansible/playbooks/hosts/fedocal.dev.fedoraproject.org.yml
- include: /srv/web/infra/ansible/playbooks/hosts/hrf.cloud.fedoraproject.org.yml - include: /srv/web/infra/ansible/playbooks/hosts/hrf.cloud.fedoraproject.org.yml
- include: /srv/web/infra/ansible/playbooks/hosts/lists-dev.cloud.fedoraproject.org.yml - include: /srv/web/infra/ansible/playbooks/hosts/lists-dev.cloud.fedoraproject.org.yml
- include: /srv/web/infra/ansible/playbooks/hosts/logserver.yml
- include: /srv/web/infra/ansible/playbooks/hosts/logstash-dev.cloud.fedoraproject.org.yml - include: /srv/web/infra/ansible/playbooks/hosts/logstash-dev.cloud.fedoraproject.org.yml
- include: /srv/web/infra/ansible/playbooks/hosts/shogun-ca.cloud.fedoraproject.org.yml - include: /srv/web/infra/ansible/playbooks/hosts/shogun-ca.cloud.fedoraproject.org.yml

2
roles/base/files/rsyslog/rsyslog-audit.conf
View file

@ -10,4 +10,4 @@ $InputFileFacility local6
$InputRunFileMonitor $InputRunFileMonitor
:msg, !contains, "type=AVC" :msg, !contains, "type=AVC"
local6.* @@log02:514 local6.* @@log01:514

4
roles/base/files/rsyslog/rsyslog-log01 Normal file
View file

@ -0,0 +1,4 @@
#
# Send everything on to central log01 logger machines
#
cron.*;kern.*;authpriv.*;local7.*;*.info;local6.none;local4.* @@log01:514

4
roles/base/files/rsyslog/rsyslog-log01-nolocal4 Normal file
View file

@ -0,0 +1,4 @@
#
# Send everything on to central log01 logger machines
#
cron.*;kern.*;authpriv.*;local7.*;*.info;local6.none @@log01:514

4
roles/base/files/rsyslog/rsyslog-log02
View file

@ -1,4 +1,4 @@
# #
# Send everything on to central log02 logger machines # Send everything on to central log01 logger machines
# #
cron.*;kern.*;authpriv.*;local7.*;*.info;local6.none;local4.* @@log02:514 cron.*;kern.*;authpriv.*;local7.*;*.info;local6.none;local4.* @@log01:514

4
roles/base/files/rsyslog/rsyslog-log02-nolocal4
View file

@ -1,4 +1,4 @@
# #
# Send everything on to central log02 logger machines # Send everything on to central log01 logger machines
# #
cron.*;kern.*;authpriv.*;local7.*;*.info;local6.none @@log02:514 cron.*;kern.*;authpriv.*;local7.*;*.info;local6.none @@log01:514

16
roles/base/tasks/main.yml
View file

@ -166,7 +166,23 @@
tags: tags:
- rsyslogd - rsyslogd
- config - config
- name: log everything to log01 except on mirrorlist, do not log local4 there.
copy: src=rsyslog/rsyslog-log01 dest=/etc/rsyslog.d/rsyslog-log01.conf mode=644
when: not inventory_hostname.startswith('mirrorlist')
tags:
- rsyslogd
- config
- base - base
- name: log everything to log01 except on mirrorlist, do not log local4 there.
copy: src=rsyslog/rsyslog-log01-nolocal4 dest=/etc/rsyslog.d/rsyslog-log01.conf mode=644
when: inventory_hostname.startswith('mirrorlist')
tags:
- rsyslogd
- config
- base
- base
- name: /etc/postfix/main.cf - name: /etc/postfix/main.cf
copy: src={{ item }} dest=/etc/postfix/main.cf copy: src={{ item }} dest=/etc/postfix/main.cf

2
roles/base/templates/iptables/iptables.kojibuilder
View file

@ -40,7 +40,7 @@
-A OUTPUT -p tcp -m tcp -d 10.5.126.23 --dport 80 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.5.126.23 --dport 80 -j ACCEPT
-A OUTPUT -p tcp -m tcp -d 10.5.126.23 --dport 443 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.5.126.23 --dport 443 -j ACCEPT
# rsyslog out to log02 # rsyslog out to log01
-A OUTPUT -p tcp -m tcp -d 10.5.126.29 --dport 514 -j ACCEPT -A OUTPUT -p tcp -m tcp -d 10.5.126.29 --dport 514 -j ACCEPT
# SSH # SSH

2
roles/collectd/base/files/network-client.conf
View file

@ -1,5 +1,5 @@
LoadPlugin network LoadPlugin network
<Plugin "network"> <Plugin "network">
Server "log02" Server "log01"
</Plugin> </Plugin>

2
roles/epylog/files/merged/modules.d/rsyncd.conf
View file

@ -12,5 +12,5 @@ priority = 7
# Report this many "top ranking hosts" # Report this many "top ranking hosts"
# #
report_top = 10 report_top = 10
ignore_hosts = log02.vpn.fedoraproject.org log02.phx2.fedoraproject.org proxy3.vpn.fedoraproject.org proxy04.vpn.fedoraproject.org proxy6.vpn.fedoraproject.org proxy01.phx2.fedoraproject.org proxy07.vpn.fedoraproject.org proxy02.vpn.fedoraproject.org proxy03.vpn.fedoraproject.org proxy06.vpn.fedoraproject.org collab04.fedoraproject.org hosted04.fedoraproject.org admin.fedoraproject.org proxy01.stg.phx2.fedoraproject.org proxy08.vpn.fedoraproject.org proxy09.vpn.fedoraproject.org ignore_hosts = log01.vpn.fedoraproject.org log01.phx2.fedoraproject.org proxy3.vpn.fedoraproject.org proxy04.vpn.fedoraproject.org proxy6.vpn.fedoraproject.org proxy01.phx2.fedoraproject.org proxy07.vpn.fedoraproject.org proxy02.vpn.fedoraproject.org proxy03.vpn.fedoraproject.org proxy06.vpn.fedoraproject.org collab04.fedoraproject.org hosted04.fedoraproject.org admin.fedoraproject.org proxy01.stg.phx2.fedoraproject.org proxy08.vpn.fedoraproject.org proxy09.vpn.fedoraproject.org

2
roles/rsyncd/README
View file

@ -1,3 +1,3 @@
This role is for servers that have httpd access and error logs This role is for servers that have httpd access and error logs
that we wish to sync to log02 to be able to review and backup. that we wish to sync to log01 to be able to review and backup.

2
roles/rsyncd/files/rsyncd.conf.default
View file

@ -13,4 +13,4 @@ path = /var/log
uid = root uid = root
gid = root gid = root
read only = yes read only = yes
hosts allow = 10.5.126.29 192.168.1.56 hosts allow = 10.5.126.13 192.168.1.59

2
roles/rsyncd/files/rsyncd.conf.download-ibiblio
View file

@ -101,5 +101,5 @@ refuse options = checksum
uid = root uid = root
gid = root gid = root
read only = yes read only = yes
hosts allow = 10.5.126.29 192.168.1.56 hosts allow = 10.5.126.13 192.168.1.59
list = no list = no

2
roles/rsyncd/files/rsyncd.conf.download-phx2
View file

@ -105,5 +105,5 @@ refuse options = checksum
uid = root uid = root
gid = root gid = root
read only = yes read only = yes
hosts allow = 10.5.126.29 hosts allow = 10.5.126.13
list = no list = no

2
roles/rsyncd/files/rsyncd.conf.download-rdu
View file

@ -101,5 +101,5 @@ refuse options = checksum
uid = root uid = root
gid = root gid = root
read only = yes read only = yes
hosts allow = 10.5.126.29 192.168.1.56 hosts allow = 10.5.126.13 192.168.1.59
list = no list = no

2
roles/rsyncd/files/rsyncd.conf.sundries
View file

@ -13,7 +13,7 @@ path = /var/log
uid = root uid = root
gid = root gid = root
read only = yes read only = yes
hosts allow = 10.5.126.29 192.168.1.56 hosts allow = 10.5.126.13 192.168.1.59
[gather-easyfix] [gather-easyfix]
comment = Gather easyfix available in Fedora comment = Gather easyfix available in Fedora