e3e2cb1d93
Time to retire ODCS. ELN is moved off and that was the last thing using it. Thanks for all the service ODCS! Signed-off-by: Kevin Fenzi <kevin@scrye.com>
79 lines
2.1 KiB
Text
79 lines
2.1 KiB
Text
---
|
|
ansible_base: /srv/web/infra
|
|
csi_primary_contact: admin@fedoraproject.org / sysadmin-main-members
|
|
csi_purpose: Central management host for ansible
|
|
csi_relationship: |
|
|
From the batcave batman ventures out to fight crime and protect gotham city!
|
|
|
|
batcave is the central management host for ansible.
|
|
It also is the infrastructure.fedoraproject.org website with various content.
|
|
It houses a number of infrastructure git repos.
|
|
|
|
* This host relies on:
|
|
The virthost it's hosted on (virthost22)
|
|
|
|
* Things that rely on this host:
|
|
Things that access rhel/fedora/infra rpm repos, including builders and infra hosts.
|
|
If this host is down, ansible runs cannot be made to update other hosts.
|
|
If this host is down, crime may go up in gotham city.
|
|
# For the MOTD
|
|
csi_security_category: High
|
|
# Neeed for rsync from log01 for logs.
|
|
custom_rules: ['-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT']
|
|
#
|
|
# This host is externally reachable
|
|
#
|
|
external: true
|
|
fedmsg_certs:
|
|
- can_send:
|
|
- ansible.playbook.complete
|
|
- ansible.playbook.start
|
|
- logger.log
|
|
group: sysadmin
|
|
owner: root
|
|
service: shell
|
|
- can_send:
|
|
- infragit.receive
|
|
group: sysadmin
|
|
owner: root
|
|
service: scm
|
|
freezes: true
|
|
ipa_client_shell_groups:
|
|
- fi-apprentice
|
|
- sysadmin-ask
|
|
- sysadmin-badges
|
|
- sysadmin-bot
|
|
- sysadmin-centos
|
|
- sysadmin-cloud
|
|
- sysadmin-copr
|
|
- sysadmin-coreos
|
|
- sysadmin-cvs
|
|
- sysadmin-datanommer
|
|
- sysadmin-debuginfod
|
|
- sysadmin-koschei
|
|
- sysadmin-libravatar
|
|
- sysadmin-messaging
|
|
- sysadmin-noc
|
|
- sysadmin-osbuild
|
|
- sysadmin-openscanhub
|
|
- sysadmin-qa
|
|
- sysadmin-retrace
|
|
- sysadmin-releasemonitoring
|
|
- sysadmin-releng
|
|
- sysadmin-tools
|
|
- sysadmin-upstreamfirst
|
|
- sysadmin-veteran
|
|
- sysadmin-web
|
|
ipa_host_group: batcave
|
|
ipa_host_group_desc: The Bat Cave
|
|
lvm_size: 750000
|
|
mem_size: 24576
|
|
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3"
|
|
nrpe_procs_crit: 1000
|
|
nrpe_procs_warn: 900
|
|
num_cpus: 10
|
|
primary_auth_source: ipa
|
|
tcp_ports: [80, 443, 8442, 8443]
|
|
vpn: true
|
|
nagios_Check_Services:
|
|
swap: false
|