ansible/playbooks/manual/autosign.yml
iamyaash b3d6a90b9a motd generic template added
migrated notes from infra/hosts

motd changes; excluding CSI infos

removed csi_* vars from group_vars; converted csi_purpose & csi_relationship into notes

fixed merge conflicts

minor changes; var

updating YAMLs & playbooks

udpated YAMLs & playbooks again

updated correctly; buildhw.yml

fixing merge conflicts

dest added in motd.yml
2025-01-28 01:10:14 +00:00

89 lines
2.7 KiB
YAML

# create a new autosign server
#
# FURTHER NOTE: some of These machines run day to day with sshd disabled/off.
# Access is via management interface only. This playbook does initial setup.
# Please check with rel-eng before doing anything here.
---
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
vars:
myhosts: "autosign_stg"
- name: Make the box be real
hosts: autosign:autosign_stg
user: root
gather_facts: true
vars_files:
- /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles:
- base
- basessh
- rkhunter
- nagios_client
- {role: zabbix/zabbix_agent, when: env == "staging"}
- hosts
- ipa/client
- collectd/base
- sudo
- role: nfs/client
mnt_dir: '/mnt/fedora_koji'
nfs_src_dir: 'fedora_koji'
when: env != 'staging'
- role: nfs/client
mnt_dir: '/mnt/fedora_koji/koji/ostree'
nfs_src_dir: 'fedora_ostree_content/ostree'
when: env != 'staging' and datacenter == 'iad2'
- role: nfs/client
mnt_dir: '/mnt/fedora_koji/koji/compose/ostree'
nfs_src_dir: 'fedora_ostree_content/compose/ostree'
when: env != 'staging' and datacenter == 'iad2'
- role: nfs/client
mnt_dir: '/mnt/fedora_koji/koji/ostree'
nfs_src_dir: 'fedora_ostree_content/ostree'
when: env != 'staging' and datacenter == 'iad2'
- role: nfs/client
mnt_dir: '/mnt/fedora_koji/koji/compose/ostree'
nfs_src_dir: 'fedora_ostree_content/compose/ostree'
when: env != 'staging' and datacenter == 'iad2'
# - role: nfs/client
# mnt_dir: '/mnt/fedora_koji/koji/ostree'
# nfs_src_dir: 'fedora_ostree_content/ostree'
# when: env == 'staging'
#
# - role: nfs/client
# mnt_dir: '/mnt/fedora_koji/koji/compose/ostree'
# nfs_src_dir: 'fedora_ostree_content/compose/ostree'
# when: env == 'staging'
- role: rabbit/queue
queue_username: "robosignatory{{ env_suffix }}"
queue_name: "robosignatory{{ env_suffix }}"
queue_max_priority: 5
queue_routing_keys:
- "org.fedoraproject.*.pungi.compose.ostree"
- "org.fedoraproject.*.coreos.build.request.artifacts-sign"
- "org.fedoraproject.*.coreos.build.request.ostree-sign"
- "org.fedoraproject.*.buildsys.tag"
user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.(robosignatory|coreos)\..*\.finished$
- robosignatory
- role: keytab/service
service: autosign
owner_user: robosignatory
owner_group: robosignatory
- {role: linux-system-roles.nbde_client, when: datacenter == 'iad2' and env != 'staging' }
- {role: serial-console, when: datacenter == 'iad2'}
pre_tasks:
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
handlers:
- import_tasks: "{{ handlers_path }}/restart_services.yml"