infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Add sysadmin-veteran everywhere sysadmin-noc is

Browse source
This commit is contained in:
Nick Bebout 2017-06-12 03:09:13 +00:00
parent 14d66ff5af
commit a6ad9e2c05
72 changed files with 76 additions and 76 deletions
Download patch file Download diff file Expand all files Collapse all files

2
inventory/group_vars/anitya-backend
View file

@ -16,7 +16,7 @@ custom_rules: [
# No other ports open. no web service running here. # No other ports open. no web service running here.
#tcp_ports: [] #tcp_ports: []
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
freezes: false freezes: false

2
inventory/group_vars/anitya-frontend
View file

@ -18,7 +18,7 @@ custom_rules: [
'-A INPUT -p tcp -m tcp -s 140.211.169.230 --dport 9941 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 140.211.169.230 --dport 9941 -j ACCEPT',
] ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
# Don't use testing repos in production # Don't use testing repos in production
testing: False testing: False

2
inventory/group_vars/autocloud-backend
View file

@ -15,7 +15,7 @@ tcp_ports: [
3000, 3001, 3002, 3003, 3000, 3001, 3002, 3003,
] ]
fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/autocloud-backend" sudoers: "{{ private }}/files/sudo/autocloud-backend"
# These are hw boxes and don't use the NM ifconfig setup # These are hw boxes and don't use the NM ifconfig setup

2
inventory/group_vars/autocloud-backend-stg
View file

@ -12,7 +12,7 @@ tcp_ports: [
3000, 3001, 3002, 3003, 3000, 3001, 3002, 3003,
] ]
fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng,sysadmin-veteran
# These people get told when something goes wrong. # These people get told when something goes wrong.
fedmsg_error_recipients: fedmsg_error_recipients:

2
inventory/group_vars/autocloud-web
View file

@ -14,7 +14,7 @@ wsgi_threads: 2
tcp_ports: [ 80 ] tcp_ports: [ 80 ]
fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng,sysadmin-veteran
# For the MOTD # For the MOTD
csi_security_category: Moderate csi_security_category: Moderate

2
inventory/group_vars/autocloud-web-stg
View file

@ -14,7 +14,7 @@ wsgi_threads: 2
tcp_ports: [ 80 ] tcp_ports: [ 80 ]
fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng fas_client_groups: sysadmin-noc,sysadmin-fedimg,sysadmin-releng,sysadmin-veteran
# For the MOTD # For the MOTD
csi_security_category: Moderate csi_security_category: Moderate

2
inventory/group_vars/badges-backend
View file

@ -10,7 +10,7 @@ freezes: false
tcp_ports: [ 3000, 3001, 3002, 3003, tcp_ports: [ 3000, 3001, 3002, 3003,
3004, 3005, 3006, 3007 ] 3004, 3005, 3006, 3007 ]
fas_client_groups: sysadmin-noc,sysadmin-badges fas_client_groups: sysadmin-noc,sysadmin-badges,sysadmin-veteran
# These people get told when something goes wrong. # These people get told when something goes wrong.
fedmsg_error_recipients: fedmsg_error_recipients:

2
inventory/group_vars/badges-backend-stg
View file

@ -10,7 +10,7 @@ num_cpus: 2
tcp_ports: [ 3000, 3001, 3002, 3003, tcp_ports: [ 3000, 3001, 3002, 3003,
3004, 3005, 3006, 3007 ] 3004, 3005, 3006, 3007 ]
fas_client_groups: sysadmin-noc,sysadmin-badges fas_client_groups: sysadmin-noc,sysadmin-badges,sysadmin-veteran
# These people get told when something goes wrong. # These people get told when something goes wrong.
fedmsg_error_recipients: fedmsg_error_recipients:

2
inventory/group_vars/badges-web
View file

@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-badges fas_client_groups: sysadmin-noc,sysadmin-badges,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/badges-web-stg
View file

@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-badges fas_client_groups: sysadmin-noc,sysadmin-badges,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/bodhi2
View file

@ -28,7 +28,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-bodhi fas_client_groups: sysadmin-noc,sysadmin-bodhi,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/00releng-sudoers" sudoers: "{{ private }}/files/sudo/00releng-sudoers"
# These set a config value in /etc/fedmsg.d/, see roles/bodhi2/base/ # These set a config value in /etc/fedmsg.d/, see roles/bodhi2/base/

2
inventory/group_vars/bodhi2-stg
View file

@ -26,7 +26,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-bodhi fas_client_groups: sysadmin-noc,sysadmin-bodhi,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/00releng-sudoers" sudoers: "{{ private }}/files/sudo/00releng-sudoers"
host_group: bodhi2 host_group: bodhi2

2
inventory/group_vars/bugyou
View file

@ -9,7 +9,7 @@ num_cpus: 2
tcp_ports: [] tcp_ports: []
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-fedimg,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-fedimg,sysadmin-datanommer,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/bugyou-sudoers" sudoers: "{{ private }}/files/sudo/bugyou-sudoers"
# For the MOTD # For the MOTD

2
inventory/group_vars/bugyou-stg
View file

@ -9,7 +9,7 @@ num_cpus: 1
tcp_ports: [] tcp_ports: []
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-fedimg,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-fedimg,sysadmin-datanommer,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/bugyou-stg-sudoers" sudoers: "{{ private }}/files/sudo/bugyou-stg-sudoers"
# For the MOTD # For the MOTD

2
inventory/group_vars/bugzilla2fedmsg
View file

@ -9,7 +9,7 @@ freezes: false
tcp_ports: [ 3000, 3001, 3002, 3003 ] tcp_ports: [ 3000, 3001, 3002, 3003 ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/bugzilla2fedmsg-stg
View file

@ -9,7 +9,7 @@ num_cpus: 1
tcp_ports: [ 3000, 3001 ] tcp_ports: [ 3000, 3001 ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/busgateway
View file

@ -15,7 +15,7 @@ tcp_ports: [
9919, # The websocket server publishes here. Proxies need to connect. 9919, # The websocket server publishes here. Proxies need to connect.
] ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/busgateway-stg
View file

@ -14,7 +14,7 @@ tcp_ports: [
9919, # The websocket server publishes here. Proxies need to connect. 9919, # The websocket server publishes here. Proxies need to connect.
] ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/fedocal
View file

@ -15,7 +15,7 @@ tcp_ports: [ 80, 443,
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
freezes: false freezes: false

2
inventory/group_vars/fedocal-stg
View file

@ -15,7 +15,7 @@ tcp_ports: [ 80, 443,
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
freezes: false freezes: false

2
inventory/group_vars/github2fedmsg
View file

@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/github2fedmsg-stg
View file

@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/hotness
View file

@ -9,7 +9,7 @@ num_cpus: 2
tcp_ports: [ 3000, 3001, 3002, 3003 ] tcp_ports: [ 3000, 3001, 3002, 3003 ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/hotness-sudoers" sudoers: "{{ private }}/files/sudo/hotness-sudoers"

2
inventory/group_vars/hotness-stg
View file

@ -9,7 +9,7 @@ num_cpus: 1
tcp_ports: [ 3000, 3001, 3002, 3003 ] tcp_ports: [ 3000, 3001, 3002, 3003 ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/hotness-sudoers" sudoers: "{{ private }}/files/sudo/hotness-sudoers"

2
inventory/group_vars/kerneltest
View file

@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/kerneltest-stg
View file

@ -17,7 +17,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/keys
View file

@ -7,4 +7,4 @@ num_cpus: 2
# the host_vars/$hostname file # the host_vars/$hostname file
tcp_ports: [ 80, 443, 11370, 11371 ] tcp_ports: [ 80, 443, 11370, 11371 ]
fas_client_groups: sysadmin-noc,sysadmin-keys fas_client_groups: sysadmin-noc,sysadmin-keys,sysadmin-veteran

2
inventory/group_vars/kojipkgs
View file

@ -13,7 +13,7 @@ custom_rules: [
tcp_ports: [80, 8080] tcp_ports: [80, 8080]
fas_client_groups: sysadmin-releng,sysadmin-noc fas_client_groups: sysadmin-releng,sysadmin-noc,sysadmin-veteran
varnish_group: kojipkgs varnish_group: kojipkgs

2
inventory/group_vars/mbs-backend
View file

@ -12,7 +12,7 @@ freezes: false
tcp_ports: [ 3000, 3001, 3002, 3003, tcp_ports: [ 3000, 3001, 3002, 3003,
3004, 3005, 3006, 3007 ] 3004, 3005, 3006, 3007 ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran
# These people get told when something goes wrong. # These people get told when something goes wrong.
fedmsg_error_recipients: fedmsg_error_recipients:

2
inventory/group_vars/mbs-backend-stg
View file

@ -12,7 +12,7 @@ freezes: false
tcp_ports: [ 3000, 3001, 3002, 3003, tcp_ports: [ 3000, 3001, 3002, 3003,
3004, 3005, 3006, 3007 ] 3004, 3005, 3006, 3007 ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran
# These people get told when something goes wrong. # These people get told when something goes wrong.
fedmsg_error_recipients: fedmsg_error_recipients:

2
inventory/group_vars/mbs-frontend
View file

@ -19,7 +19,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/mbs-frontend-stg
View file

@ -19,7 +19,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/mdapi
View file

@ -9,7 +9,7 @@ tcp_ports: [ 80, 8080 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/mdapi-stg
View file

@ -12,7 +12,7 @@ custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '
wsgi_procs: 2 wsgi_procs: 2
wsgi_threads: 2 wsgi_threads: 2
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/mm
View file

@ -1,6 +1,6 @@
--- ---
# Define resources for this group of hosts here. # Define resources for this group of hosts here.
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/mm2-sudoers" sudoers: "{{ private }}/files/sudo/mm2-sudoers"
mm2_checkin: false mm2_checkin: false

2
inventory/group_vars/mm-stg
View file

@ -1,6 +1,6 @@
--- ---
# Define resources for this group of hosts here. # Define resources for this group of hosts here.
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/mm2-sudoers" sudoers: "{{ private }}/files/sudo/mm2-sudoers"
mm2_checkin: false mm2_checkin: false

2
inventory/group_vars/nagios
View file

@ -22,7 +22,7 @@ fedmsg_certs:
- nagios.host.state.change - nagios.host.state.change
- nagios.service.state.change - nagios.service.state.change
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
csi_security_category: High csi_security_category: High
csi_primary_contact: Fedora Admins - admin@fedoraproject.org csi_primary_contact: Fedora Admins - admin@fedoraproject.org
csi_purpose: Monitoring system csi_purpose: Monitoring system

2
inventory/group_vars/nagios-new
View file

@ -22,7 +22,7 @@ fedmsg_certs:
- nagios.host.state.change - nagios.host.state.change
- nagios.service.state.change - nagios.service.state.change
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
csi_security_category: High csi_security_category: High
csi_primary_contact: Fedora Admins - admin@fedoraproject.org csi_primary_contact: Fedora Admins - admin@fedoraproject.org
csi_purpose: Monitoring system csi_purpose: Monitoring system

2
inventory/group_vars/nagios-new-stg
View file

@ -22,7 +22,7 @@ fedmsg_certs:
- nagios.host.state.change - nagios.host.state.change
- nagios.service.state.change - nagios.service.state.change
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
csi_security_category: High csi_security_category: High
csi_primary_contact: Fedora Admins - admin@fedoraproject.org csi_primary_contact: Fedora Admins - admin@fedoraproject.org
csi_purpose: Monitoring system csi_purpose: Monitoring system

2
inventory/group_vars/notifs-backend
View file

@ -10,7 +10,7 @@ num_cpus: 8
tcp_ports: [ 3000, 3001, 3002, 3003, 3004 ] tcp_ports: [ 3000, 3001, 3002, 3003, 3004 ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/notifs-sudoers" sudoers: "{{ private }}/files/sudo/notifs-sudoers"

2
inventory/group_vars/notifs-backend-stg
View file

@ -10,7 +10,7 @@ num_cpus: 4
tcp_ports: [ 3000, 3001, 3002, 3003, 3004 ] tcp_ports: [ 3000, 3001, 3002, 3003, 3004 ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/notifs-sudoers" sudoers: "{{ private }}/files/sudo/notifs-sudoers"

2
inventory/group_vars/notifs-web
View file

@ -13,7 +13,7 @@ wsgi_threads: 2
tcp_ports: [ 80 ] tcp_ports: [ 80 ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/notifs-sudoers" sudoers: "{{ private }}/files/sudo/notifs-sudoers"

2
inventory/group_vars/notifs-web-stg
View file

@ -13,7 +13,7 @@ wsgi_threads: 2
tcp_ports: [ 80 ] tcp_ports: [ 80 ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/notifs-sudoers" sudoers: "{{ private }}/files/sudo/notifs-sudoers"

2
inventory/group_vars/nuancier
View file

@ -17,7 +17,7 @@ tcp_ports: [ 80,
6996, 6996,
] ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
freezes: false freezes: false

2
inventory/group_vars/nuancier-stg
View file

@ -17,7 +17,7 @@ tcp_ports: [ 80,
6996, 6996,
] ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
freezes: false freezes: false

2
inventory/group_vars/osbs-control
View file

@ -1,6 +1,6 @@
--- ---
# Define resources for this group of hosts here. # Define resources for this group of hosts here.
fas_client_groups: sysadmin-releng,sysadmin-noc fas_client_groups: sysadmin-releng,sysadmin-noc,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/00releng-sudoers" sudoers: "{{ private }}/files/sudo/00releng-sudoers"
osbs_url: "osbs.fedoraproject.org" osbs_url: "osbs.fedoraproject.org"

2
inventory/group_vars/osbs-control-stg
View file

@ -1,6 +1,6 @@
--- ---
# Define resources for this group of hosts here. # Define resources for this group of hosts here.
fas_client_groups: sysadmin-releng,sysadmin-noc fas_client_groups: sysadmin-releng,sysadmin-noc,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/00releng-sudoers" sudoers: "{{ private }}/files/sudo/00releng-sudoers"
osbs_url: "osbs.stg.fedoraproject.org" osbs_url: "osbs.stg.fedoraproject.org"

2
inventory/group_vars/packages
View file

@ -18,7 +18,7 @@ tcp_ports: [ 80, 443,
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/packages-stg
View file

@ -16,7 +16,7 @@ tcp_ports: [ 80, 443,
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/pagure
View file

@ -56,7 +56,7 @@ fedmsg_certs:
fedmsg_prefix: io.pagure fedmsg_prefix: io.pagure
fedmsg_env: prod fedmsg_env: prod
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
freezes: true freezes: true
postfix_group: vpn.pagure postfix_group: vpn.pagure

2
inventory/group_vars/pagure-stg
View file

@ -53,7 +53,7 @@ fedmsg_certs:
fedmsg_prefix: io.pagure fedmsg_prefix: io.pagure
fedmsg_env: stg fedmsg_env: stg
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran
freezes: false freezes: false
env: pagure-staging env: pagure-staging

2
inventory/group_vars/pdc-backend
View file

@ -11,7 +11,7 @@ host_group: pdc-backend
tcp_ports: [] tcp_ports: []
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer,sysadmin-mbs fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer,sysadmin-mbs,sysadmin-veteran
# See the host_vars files for the value of fedmsg_error_recipients here # See the host_vars files for the value of fedmsg_error_recipients here

2
inventory/group_vars/pdc-backend-stg
View file

@ -11,7 +11,7 @@ host_group: pdc-backend
tcp_ports: [] tcp_ports: []
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer,sysadmin-mbs fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-datanommer,sysadmin-mbs,sysadmin-veteran
# See the host_vars files for the value of fedmsg_error_recipients here # See the host_vars files for the value of fedmsg_error_recipients here

2
inventory/group_vars/pdc-web
View file

@ -13,7 +13,7 @@ wsgi_threads: 2
tcp_ports: [ 80 ] tcp_ports: [ 80 ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran
# This just defines the CN of the saml2 cert we pull from the private repo # This just defines the CN of the saml2 cert we pull from the private repo
# Don't be confused. The app is actually served at apps.stg.fp.o/pdc # Don't be confused. The app is actually served at apps.stg.fp.o/pdc

2
inventory/group_vars/pdc-web-stg
View file

@ -13,7 +13,7 @@ wsgi_threads: 2
tcp_ports: [ 80 ] tcp_ports: [ 80 ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-mbs,sysadmin-veteran
# This just defines the CN of the saml2 cert we pull from the private repo # This just defines the CN of the saml2 cert we pull from the private repo
# Don't be confused. The app is actually served at apps.stg.fp.o/pdc # Don't be confused. The app is actually served at apps.stg.fp.o/pdc

2
inventory/group_vars/piwik-stg
View file

@ -5,4 +5,4 @@ mem_size: 8192
num_cpus: 2 num_cpus: 2
tcp_ports: [ 80 ] tcp_ports: [ 80 ]
fas_client_groups: sysadmin-noc,sysadmin-web fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-veteran

2
inventory/group_vars/pkgdb
View file

@ -13,7 +13,7 @@ wsgi_threads: 2
tcp_ports: [ 80 ] tcp_ports: [ 80 ]
fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-releng,sysadmin-cvs fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-releng,sysadmin-cvs,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/pkgdb-stg
View file

@ -13,7 +13,7 @@ wsgi_threads: 2
tcp_ports: [ 80 ] tcp_ports: [ 80 ]
fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-releng,sysadmin-cvs fas_client_groups: sysadmin-noc,sysadmin-web,sysadmin-releng,sysadmin-cvs,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

6
inventory/group_vars/pkgs
View file

@ -16,11 +16,11 @@ wsgi_fedmsg_service: pagure
wsgi_procs: 4 wsgi_procs: 4
wsgi_threads: 4 wsgi_threads: 4
fas_client_groups: sysadmin-main,sysadmin-cvs,sysadmin-build,sysadmin-noc fas_client_groups: sysadmin-main,sysadmin-cvs,sysadmin-build,sysadmin-noc,sysadmin-veteran
fas_client_restricted_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell %(username)s fas_client_restricted_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell %(username)s
fas_client_admin_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell -s %(username)s fas_client_admin_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell -s %(username)s
fas_client_ssh_groups: "@cvs,sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc" fas_client_ssh_groups: "@cvs,sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc,sysadmin-veteran"
admin_groups: "@sysadmin-cvs @sysadmin-releng @sysadmin-noc" admin_groups: "@sysadmin-cvs @sysadmin-releng @sysadmin-noc @sysadmin-veteran"
git_group: packager git_group: packager
git_port: 9418 git_port: 9418

6
inventory/group_vars/pkgs-stg
View file

@ -16,11 +16,11 @@ wsgi_fedmsg_service: pagure
wsgi_procs: 4 wsgi_procs: 4
wsgi_threads: 4 wsgi_threads: 4
fas_client_groups: sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc fas_client_groups: sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc,sysadmin-veteran
fas_client_restricted_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell %(username)s fas_client_restricted_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell %(username)s
fas_client_admin_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell -s %(username)s fas_client_admin_app: HOME=/srv/git /usr/share/gitolite3/gitolite-shell -s %(username)s
fas_client_ssh_groups: "@cvs,sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc" fas_client_ssh_groups: "@cvs,sysadmin-main,sysadmin-cvs,sysadmin-releng,sysadmin-noc,sysadmin-veteran"
admin_groups: "@sysadmin-cvs @sysadmin-releng @sysadmin-noc" admin_groups: "@sysadmin-cvs @sysadmin-releng @sysadmin-noc @sysadmin-veteran"
git_group: packager git_group: packager
git_port: 9418 git_port: 9418

2
inventory/group_vars/postgresql-server
View file

@ -6,4 +6,4 @@ num_cpus: 4
# for systems that do not match the above - specify the same parameter in # for systems that do not match the above - specify the same parameter in
# the host_vars/$hostname file # the host_vars/$hostname file
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran

2
inventory/group_vars/releng-secondary
View file

@ -13,7 +13,7 @@ nrpe_procs_crit: 1000
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4" nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4"
fas_client_groups: sysadmin-releng,sysadmin-secondary,sysadmin-noc fas_client_groups: sysadmin-releng,sysadmin-secondary,sysadmin-noc,sysadmin-veteran
sudoers: "{{ private }}/files/sudo/00releng-sudoers" sudoers: "{{ private }}/files/sudo/00releng-sudoers"
host_group: releng host_group: releng

2
inventory/group_vars/statscache-backend
View file

@ -10,7 +10,7 @@ num_cpus: 4
# No fedmsg publication... no ports. # No fedmsg publication... no ports.
tcp_ports: [] tcp_ports: []
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
# For performance measurement.. for now. This can be removed whenever. # For performance measurement.. for now. This can be removed whenever.
fedmsg_loglevel: DEBUG fedmsg_loglevel: DEBUG

2
inventory/group_vars/statscache-backend-stg
View file

@ -10,4 +10,4 @@ num_cpus: 2
# Nope # Nope
tcp_ports: [] tcp_ports: []
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

2
inventory/group_vars/statscache-web
View file

@ -9,4 +9,4 @@ num_cpus: 2
tcp_ports: [ 80 ] tcp_ports: [ 80 ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

2
inventory/group_vars/statscache-web-stg
View file

@ -9,4 +9,4 @@ num_cpus: 2
tcp_ports: [ 80 ] tcp_ports: [ 80 ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran

2
inventory/group_vars/summershum
View file

@ -9,7 +9,7 @@ num_cpus: 2
tcp_ports: [ 3000 ] tcp_ports: [ 3000 ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/summershum-stg
View file

@ -9,7 +9,7 @@ num_cpus: 2
tcp_ports: [ 3000 ] tcp_ports: [ 3000 ]
fas_client_groups: sysadmin-noc,sysadmin-datanommer fas_client_groups: sysadmin-noc,sysadmin-datanommer,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/tagger
View file

@ -16,7 +16,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/tagger-stg
View file

@ -16,7 +16,7 @@ tcp_ports: [ 80 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/zanata2fedmsg
View file

@ -20,7 +20,7 @@ custom_rules: [
'-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT',
] ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:

2
inventory/group_vars/zanata2fedmsg-stg
View file

@ -20,7 +20,7 @@ custom_rules: [
'-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT',
] ]
fas_client_groups: sysadmin-noc fas_client_groups: sysadmin-noc,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs: