Seems there was already a playbook, lets reuse
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
This commit is contained in:
parent
66c857d4f7
commit
94ca15a1a2
2 changed files with 6 additions and 42 deletions
|
@ -1,11 +1,11 @@
|
||||||
# create a new autosign server
|
# create a new autosign server
|
||||||
#
|
#
|
||||||
# This server looks for rawhide builds and requests they be signed.
|
# FURTHER NOTE: some of These machines run day to day with sshd disabled/off.
|
||||||
#
|
# Access is via management interface only. This playbook does initial setup.
|
||||||
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=autosign"
|
# Please check with rel-eng before doing anything here.
|
||||||
|
|
||||||
- name: make the box be real
|
- name: make the box be real
|
||||||
hosts: autosign:autosign-hardware
|
hosts: autosign
|
||||||
user: root
|
user: root
|
||||||
gather_facts: True
|
gather_facts: True
|
||||||
|
|
||||||
|
@ -21,8 +21,9 @@
|
||||||
- hosts
|
- hosts
|
||||||
- fas_client
|
- fas_client
|
||||||
- collectd/base
|
- collectd/base
|
||||||
- autosigner
|
|
||||||
- sudo
|
- sudo
|
||||||
|
- fedmsg/hub
|
||||||
|
- robosignatory
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- include: "{{ tasks }}/yumrepos.yml"
|
- include: "{{ tasks }}/yumrepos.yml"
|
||||||
|
|
|
@ -1,37 +0,0 @@
|
||||||
# provision an autosign server
|
|
||||||
# NOTE: this assumes the boxes are already up and are accessible
|
|
||||||
# NOTE: most of these vars_path come from group_vars/sign or from hostvars
|
|
||||||
#
|
|
||||||
# FURTHER NOTE: some of These machines run day to day with sshd disabled/off.
|
|
||||||
# Access is via management interface only. This playbook does initial setup.
|
|
||||||
# Please check with rel-eng before doing anything here.
|
|
||||||
|
|
||||||
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=sign-bridge"
|
|
||||||
|
|
||||||
- name: configure robosignatory server
|
|
||||||
hosts: autosign
|
|
||||||
user: root
|
|
||||||
gather_facts: true
|
|
||||||
|
|
||||||
vars_files:
|
|
||||||
- /srv/web/infra/ansible/vars/global.yml
|
|
||||||
- "/srv/private/ansible/vars.yml"
|
|
||||||
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
||||||
|
|
||||||
roles:
|
|
||||||
- base
|
|
||||||
- rkhunter
|
|
||||||
- hosts
|
|
||||||
- fas_client
|
|
||||||
- sudo
|
|
||||||
- fedmsg/base
|
|
||||||
- fedmsg/hub
|
|
||||||
- robosignatory
|
|
||||||
|
|
||||||
tasks:
|
|
||||||
- include: "{{ tasks }}/motd.yml"
|
|
||||||
- include: "{{ tasks }}/yumrepos.yml"
|
|
||||||
- include: "{{ tasks }}/2fa_client.yml"
|
|
||||||
|
|
||||||
handlers:
|
|
||||||
- include: "{{ handlers }}/restart_services.yml"
|
|
Loading…
Add table
Add a link
Reference in a new issue