Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

copr: configure list of root users just on one place

Browse source
This commit is contained in:
Jiri Kyjovsky 2022-09-19 13:54:00 +02:00
parent 22fbdca02e
commit f41baf6f21
22 changed files with 2 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

1
inventory/group_vars/copr_aws
View file

@ -70,5 +70,6 @@ keygen_host: "54.83.48.73"
postfix_group: copr
rpm_vendor_copr_name: Fedora Copr
services_disabled: false
root_auth_users: msuchy frostyx praiskup
aws_cloudfront_distribution: E2PUZIRCXCOXTG

1
inventory/group_vars/copr_back_aws
View file

@ -49,7 +49,6 @@ messaging:
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.copr\..*
nrpe_procs_crit: 2500
nrpe_procs_warn: 2200
root_auth_users: msuchy pingou frostyx praiskup
spawn_in_advance: "true"
tcp_ports: [
22, 80, 443,

1
inventory/group_vars/copr_back_dev_aws
View file

@ -41,7 +41,6 @@ messaging:
key: copr
username: copr
sent_topics: ^org\.fedoraproject\.{{ env_short }}\.copr\..*
root_auth_users: msuchy pingou frostyx praiskup
spawn_in_advance: "false"
tcp_ports: [
22, 80, 443,

1
inventory/group_vars/copr_dev_aws
View file

@ -69,5 +69,6 @@ keygen_host: "54.225.23.248"
postfix_group: copr
rpm_vendor_copr_name: Fedora Copr (devel)
services_disabled: false
root_auth_users: msuchy frostyx praiskup
aws_cloudfront_distribution: EX55ITR8LVMOH

1
inventory/host_vars/copr-be-dev.cloud.fedoraproject.org
View file

@ -34,7 +34,6 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 209.132.184.53
root_auth_users: msuchy pingou frostyx praiskup
security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,allow-nagios-persistent,fedmsg-relay-persistent,node-exporter-persistent
tcp_ports: ['22', '80', '443', '2003', '4001',
# this port is used by node_exporter whose metrics are used by prometheus

1
inventory/host_vars/copr-be-stg.fedorainfracloud.org
View file

@ -26,7 +26,6 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 209.132.184.44
root_auth_users: msuchy pingou frostyx praiskup
security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,allow-nagios-persistent,fedmsg-relay-persistent
tcp_ports: ['22', '80', '443', '2003', '4001']
# volumes: copr-be-stg-data

1
inventory/host_vars/copr-be.cloud.fedoraproject.org
View file

@ -35,7 +35,6 @@ nagios_Check_Services:
# There is no python2 on F30
public_ip: 209.132.184.48
root_auth_users: msuchy frostyx praiskup
security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,allow-nagios-persistent,node-exporter-persistent
tcp_ports: [22, 80, 443,
# These 8 ports are used by fedmsg. One for each wsgi thread.

1
inventory/host_vars/copr-db-stg.aws.fedoraproject.org
View file

@ -33,6 +33,5 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 52.200.82.86
root_auth_users: msuchy frostyx praiskup
swap_file_path: /swap
swap_file_size_mb: 4096

1
inventory/host_vars/copr-dist-git-dev.aws.fedoraproject.org
View file

@ -23,6 +23,5 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 54.243.51.13
root_auth_users: msuchy frostyx praiskup
swap_file_path: /swap
swap_file_size_mb: 2048

1
inventory/host_vars/copr-dist-git-dev.fedorainfracloud.org
View file

@ -24,7 +24,6 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 209.132.184.179
root_auth_users: ryanlerch pingou msuchy frostyx praiskup
security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
tcp_ports: [22, 80, 443,
# node_exporter/prometheus

1
inventory/host_vars/copr-dist-git-stg.fedorainfracloud.org
View file

@ -23,7 +23,6 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 209.132.184.57
root_auth_users: ryanlerch pingou msuchy frostyx frostyx praiskup
security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
tcp_ports: [22, 80, 443]
# volumes: copr-dist-git-stg

1
inventory/host_vars/copr-dist-git.aws.fedoraproject.org
View file

@ -26,4 +26,3 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 3.89.184.181
root_auth_users: msuchy frostyx praiskup

1
inventory/host_vars/copr-dist-git.fedorainfracloud.org
View file

@ -26,7 +26,6 @@ nagios_Check_Services:
# There is no python2 on F30
public_ip: 209.132.184.163
root_auth_users: msuchy frostyx praiskup
security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
tcp_ports: [22, 80, 443,
# node_exporter/prometheus

1
inventory/host_vars/copr-fe-dev.aws.fedoraproject.org
View file

@ -18,6 +18,5 @@ nagios_Check_Services:
swap: false
principal_alias: "HTTP/copr.stg.fedoraproject.org@STG.FEDORAPROJECT.ORG"
public_ip: 18.208.24.211
root_auth_users: msuchy frostyx praiskup ttomecek
swap_file_path: /swap
swap_file_size_mb: 4096

1
inventory/host_vars/copr-fe-dev.cloud.fedoraproject.org
View file

@ -24,7 +24,6 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 209.132.184.55
root_auth_users: ryanlerch pingou msuchy frostyx praiskup
security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
tcp_ports: [22, 80, 443,
# node_exporter/prometheus

1
inventory/host_vars/copr-fe.aws.fedoraproject.org
View file

@ -23,7 +23,6 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 3.225.109.36
root_auth_users: msuchy frostyx praiskup ttomecek
sar_output_file: copr.json
# GDPR SAR variables
sar_script: /usr/share/copr/coprs_frontend/run/copr-gdpr-sar.sh

1
inventory/host_vars/copr-fe.cloud.fedoraproject.org
View file

@ -30,7 +30,6 @@ nagios_Check_Services:
# There is no python2 on F30
public_ip: 209.132.184.54
root_auth_users: msuchy frostyx praiskup
sar_output_file: copr.json
# GDPR SAR variables
sar_script: /usr/share/copr/coprs_frontend/run/copr-gdpr-sar.sh

1
inventory/host_vars/copr-keygen-dev.aws.fedoraproject.org
View file

@ -22,4 +22,3 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 54.225.23.248
root_auth_users: msuchy frostyx praiskup

1
inventory/host_vars/copr-keygen-dev.cloud.fedoraproject.org
View file

@ -24,7 +24,6 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 209.132.184.46
root_auth_users: msuchy frostyx praiskup
# todo: remove some security groups ?
security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
tcp_ports: [

1
inventory/host_vars/copr-keygen-stg.fedorainfracloud.org
View file

@ -23,7 +23,6 @@ nagios_Check_Services:
sshd: false
swap: false
public_ip: 209.132.184.56
root_auth_users: msuchy frostyx praiskup
# todo: remove some security groups ?
security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
volumes: [{device: '/dev/vdc', volume_id: '5424ff3c-b1c6-4291-a0ed-2d30924f4f88'}]

1
inventory/host_vars/copr-keygen.aws.fedoraproject.org
View file

@ -22,4 +22,3 @@ nagios_Check_Services:
sshd: true
swap: false
public_ip: 54.83.48.73
root_auth_users: msuchy frostyx praiskup

1
inventory/host_vars/copr-keygen.cloud.fedoraproject.org
View file

@ -25,7 +25,6 @@ nagios_Check_Services:
sshd: true
swap: false
public_ip: 209.132.184.49
root_auth_users: msuchy frostyx praiskup
# security_group: default
security_group: web-80-anywhere-persistent,ssh-anywhere-persistent,default,allow-nagios-persistent,keygen-persistent
tcp_ports: [