ansible/playbooks/update_ticketkey.yml

- name: make a new ssl ticketkey
  hosts: batcave01.iad2.fedoraproject.org
  user: root

  vars_files:
   - /srv/web/infra/ansible/vars/global.yml
   - "/srv/private/ansible/vars.yml"
   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  handlers:
  - import_tasks: "{{ handlers_path }}/restart_services.yml"

  tasks:
  - name: create new production ticket key
    command: /usr/local/bin/generate_ticketkey /root/ticketkey_production.tkey fpprod

  - name: create new staging ticket key
    command: /usr/local/bin/generate_ticketkey /root/ticketkey_staging.tkey fpstag

- name: Push out new ticket key
  hosts: proxies:proxies_stg
  user: root

  vars_files:
   - /srv/web/infra/ansible/vars/global.yml
   - "/srv/private/ansible/vars.yml"
   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  handlers:
  - import_tasks: "{{ handlers_path }}/restart_services.yml"

  tasks:

  - name: deploy ticket key
    copy: src=/root/ticketkey_{{env}}.tkey dest=/etc/httpd/ticketkey_{{env}}.tkey
          owner=root group=root mode=0600
    notify:
    - reload proxyhttpd
Rework update_ticketkey some. Make the keys once on batcave and copy out. Try using reload instead of restart. 2015-10-13 13:37:18 +00:00			`- name: make a new ssl ticketkey`
The great phx2 pruning run (1st cut). Since we no longer have any machines in phx2, I have tried to remove them from ansible. Note that there are still some places where we need to remove them still: nagios, dhcp, named were not touched, and in cases where it wasn't pretty clear what a conditional was doing I left it to be cleaned up later. Signed-off-by: Kevin Fenzi <kevin@scrye.com> 2020-06-14 14:14:31 -07:00			`hosts: batcave01.iad2.fedoraproject.org`
Create playbook for ticketkey recreation 2015-10-07 23:34:40 +00:00			`user: root`

Var files are also useful 2015-10-08 00:01:30 +00:00			`vars_files:`
			`- /srv/web/infra/ansible/vars/global.yml`
			`- "/srv/private/ansible/vars.yml"`
			`- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml`

Create playbook for ticketkey recreation 2015-10-07 23:34:40 +00:00			`handlers:`
typo on a massive scale 2017-10-15 20:33:11 +00:00			`- import_tasks: "{{ handlers_path }}/restart_services.yml"`
Create playbook for ticketkey recreation 2015-10-07 23:34:40 +00:00
			`tasks:`
Create both prod and stg ticket keys 2015-10-07 23:42:44 +00:00			`- name: create new production ticket key`
Use generate_ticketkey to generate ticket keys Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> 2017-10-10 12:27:41 +00:00			`command: /usr/local/bin/generate_ticketkey /root/ticketkey_production.tkey fpprod`
Create both prod and stg ticket keys 2015-10-07 23:42:44 +00:00
			`- name: create new staging ticket key`
Use generate_ticketkey to generate ticket keys Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com> 2017-10-10 12:27:41 +00:00			`command: /usr/local/bin/generate_ticketkey /root/ticketkey_staging.tkey fpstag`
Rework update_ticketkey some. Make the keys once on batcave and copy out. Try using reload instead of restart. 2015-10-13 13:37:18 +00:00
			`- name: Push out new ticket key`
ansible: more group fixing. Get playboooks/include and update_ticketkey Signed-off-by: Kevin Fenzi <kevin@scrye.com> 2019-05-20 18:14:08 +00:00			`hosts: proxies:proxies_stg`
Rework update_ticketkey some. Make the keys once on batcave and copy out. Try using reload instead of restart. 2015-10-13 13:37:18 +00:00			`user: root`

			`vars_files:`
			`- /srv/web/infra/ansible/vars/global.yml`
			`- "/srv/private/ansible/vars.yml"`
			`- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml`

			`handlers:`
typo on a massive scale 2017-10-15 20:33:11 +00:00			`- import_tasks: "{{ handlers_path }}/restart_services.yml"`
Rework update_ticketkey some. Make the keys once on batcave and copy out. Try using reload instead of restart. 2015-10-13 13:37:18 +00:00
			`tasks:`
Create playbook for ticketkey recreation 2015-10-07 23:34:40 +00:00
			`- name: deploy ticket key`
Create both prod and stg ticket keys 2015-10-07 23:42:44 +00:00			`copy: src=/root/ticketkey_{{env}}.tkey dest=/etc/httpd/ticketkey_{{env}}.tkey`
Create playbook for ticketkey recreation 2015-10-07 23:34:40 +00:00			`owner=root group=root mode=0600`
			`notify:`
we have reload apache and reload httpd.. maybe we should just use one? 2016-12-01 23:07:59 +00:00			`- reload proxyhttpd`