Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

ipa/client: enable for osbs in prod

Browse source 
Signed-off-by: Nils Philippsen <nils@redhat.com>
This commit is contained in:
Nils Philippsen 2021-03-19 17:25:38 +01:00
parent fd76ec07a2
commit bc6c2d4edd
6 changed files with 3 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

1
inventory/group_vars/osbs
View file

@ -9,6 +9,7 @@ tcp_ports: [ 80, 443, 8443]
fas_client_groups: sysadmin-releng,fi-apprentice,sysadmin-noc,sysadmin-veteran,sysadmin-osbs
sudoers: "{{ private }}/files/sudo/osbs-sudoers"
primary_auth_source: ipa
ipa_host_group: osbs
ipa_host_group_desc: OpenShift Build Service
ipa_client_shell_groups:

3
inventory/group_vars/osbs_aarch64_masters
View file

@ -12,9 +12,6 @@ tcp_ports: [ 80, 443, 8443]
openshift_node_labels: {'region':'infra'}
openshift_schedulable: False
fas_client_groups: sysadmin-releng,sysadmin-noc,sysadmin-osbs
sudoers: "{{ private }}/files/sudo/osbs-sudoers"
docker_cert_dir: "/etc/docker/certs.d/candidate-registry.fedoraproject.org"
source_registry: "registry.fedoraproject.org"
docker_registry: "candidate-registry.fedoraproject.org"

3
inventory/group_vars/osbs_masters
View file

@ -6,9 +6,6 @@ num_cpus: 2
tcp_ports: [ 80, 443, 8443]
fas_client_groups: sysadmin-releng,fi-apprentice,sysadmin-noc,sysadmin-veteran,sysadmin-osbs
sudoers: "{{ private }}/files/sudo/osbs-sudoers"
docker_cert_dir: "/etc/docker/certs.d/candidate-registry.fedoraproject.org"
source_registry: "registry.fedoraproject.org"
docker_registry: "candidate-registry.fedoraproject.org"

3
inventory/group_vars/osbs_nodes
View file

@ -6,9 +6,6 @@ num_cpus: 2
tcp_ports: [ 80, 443, 8443, 10250]
fas_client_groups: sysadmin-releng,fi-apprentice,sysadmin-noc,sysadmin-veteran,sysadmin-osbs
sudoers: "{{ private }}/files/sudo/osbs-sudoers"
docker_cert_dir: "/etc/docker/certs.d/candidate-registry.fedoraproject.org"
docker_registry: "candidate-registry.fedoraproject.org"
source_registry: "registry.fedoraproject.org"

4
playbooks/groups/osbs-cluster.yml
View file

@ -24,7 +24,7 @@
- rkhunter
- nagios_client
- hosts
- { role: fas_client, when: env != "staging" }
- ipa/client
- sudo
- collectd/base
- rsyncd
@ -40,8 +40,6 @@
package:
name: subscription-manager-rhsm-certificates
state: present
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
when: env != "staging"
- import_tasks: "{{ tasks_path }}/motd.yml"
handlers:

5
playbooks/groups/osbs/deploy-cluster.yml
View file

@ -27,8 +27,7 @@
- rkhunter
- nagios_client
- hosts
- { role: ipa/client, when: env == "staging" }
- { role: fas_client, when: env != "staging" }
- ipa/client
- sudo
- collectd/base
- rsyncd
@ -44,8 +43,6 @@
package:
name: subscription-manager-rhsm-certificates
state: present
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
when: env != "staging"
- import_tasks: "{{ tasks_path }}/motd.yml"
handlers: