ansible/playbooks/groups/nuancier.yml

# create a new nuancier server
# NOTE: should be used with --limit most of the time
# NOTE: make sure there is room/space for this server on the vmhost
# NOTE: most of these vars_path come from group_vars/nuancier* or from hostvars

- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=nuancier:nuancier-stg"

- name: make the box be real
  hosts: nuancier:nuancier-stg
  user: root
  gather_facts: True

  vars_files:
   - /srv/web/infra/ansible/vars/global.yml
   - "/srv/private/ansible/vars.yml"
   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  roles:
  - base
  - rkhunter
  - nagios_client
  - hosts
  - fas_client
  - collectd/base
  - sudo
  - { role: openvpn/client,
      when: env != "staging" }
  - mod_wsgi

  tasks:
  - import_tasks: "{{ tasks_path }}/yumrepos.yml"
  - import_tasks: "{{ tasks_path }}/2fa_client.yml"
  - import_tasks: "{{ tasks_path }}/motd.yml"

  handlers:
  - import_tasks: "{{ handlers_path }}/restart_services.yml"

- name: set up fedmsg
  hosts: nuancier:nuancier-stg
  user: root
  gather_facts: True

  vars_files:
   - /srv/web/infra/ansible/vars/global.yml
   - "/srv/private/ansible/vars.yml"
   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  roles:
  - fedmsg/base

  handlers:
  - import_tasks: "{{ handlers_path }}/restart_services.yml"

- name: set up gluster on stg
  hosts: nuancier-stg
  user: root
  gather_facts: True

  vars_files:
   - /srv/web/infra/ansible/vars/global.yml
   - "/srv/private/ansible/vars.yml"
   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  roles:
  - role: gluster/server
    name: gluster
    username: "{{ nuancier_gluster_username }}"
    password: "{{ nuancier_gluster_password }}"
    owner: root
    group: root
    datadir: /srv/glusterfs/nuancier-stg

  - role: gluster/client
    name: gluster
    servers:
    - nuancier01.stg.phx2.fedoraproject.org
    - nuancier02.stg.phx2.fedoraproject.org
    username: "{{ nuancier_gluster_username }}"
    password: "{{ nuancier_gluster_password }}"
    owner: apache
    group: root
    mountdir: /var/cache/nuancier

- name: set up gluster on prod
  hosts: nuancier
  user: root
  gather_facts: True

  vars_files:
   - /srv/web/infra/ansible/vars/global.yml
   - "/srv/private/ansible/vars.yml"
   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  roles:
  - role: gluster/server
    name: gluster
    username: "{{ nuancier_gluster_username }}"
    password: "{{ nuancier_gluster_password }}"
    owner: root
    group: root
    datadir: /srv/glusterfs/nuancier

  - role: gluster/client
    name: gluster
    servers:
    - nuancier01.phx2.fedoraproject.org
    - nuancier02.phx2.fedoraproject.org
    username: "{{ nuancier_gluster_username }}"
    password: "{{ nuancier_gluster_password }}"
    owner: apache
    group: root
    mountdir: /var/cache/nuancier

- name: deploy nuancier itself
  hosts: nuancier:nuancier-stg
  user: root
  gather_facts: True

  vars_files:
   - /srv/web/infra/ansible/vars/global.yml
   - "/srv/private/ansible/vars.yml"
   - "{{ vars_path }}/{{ ansible_distribution }}.yml"

  roles:
  - nuancier

  handlers:
  - import_tasks: "{{ handlers_path }}/restart_services.yml"
Add inventory and playbook for nuancier staging nodes. 2013-09-19 03:33:39 +00:00			`# create a new nuancier server`
			`# NOTE: should be used with --limit most of the time`
			`# NOTE: make sure there is room/space for this server on the vmhost`
vars is reserved, use vars_path for variable path 2014-01-06 17:49:22 +00:00			`# NOTE: most of these vars_path come from group_vars/nuancier* or from hostvars`
Add inventory and playbook for nuancier staging nodes. 2013-09-19 03:33:39 +00:00
this needs to be imported not included 2017-10-15 19:54:19 +00:00			`- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=nuancier:nuancier-stg"`
Add inventory and playbook for nuancier staging nodes. 2013-09-19 03:33:39 +00:00
			`- name: make the box be real`
Use : instead of ; between host/group names. ; is depreciated and will go away someday. 2016-02-02 21:03:19 +00:00			`hosts: nuancier:nuancier-stg`
Add inventory and playbook for nuancier staging nodes. 2013-09-19 03:33:39 +00:00			`user: root`
			`gather_facts: True`

Distinguish the stg and prod gluster volumes for nuancier 2014-02-26 09:10:22 +01:00			`vars_files:`
Add inventory and playbook for nuancier staging nodes. 2013-09-19 03:33:39 +00:00			`- /srv/web/infra/ansible/vars/global.yml`
New ansible doesn't like expanding {{ private }} in the same list of vars files it's defined in. 2015-01-09 22:59:18 +00:00			`- "/srv/private/ansible/vars.yml"`
Hard code vars_path for now. 2014-01-06 18:22:18 +00:00			`- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml`
Add inventory and playbook for nuancier staging nodes. 2013-09-19 03:33:39 +00:00
			`roles:`
Now that we have roles_path, drop the long path on all the roles. 2014-01-23 17:12:40 +00:00			`- base`
			`- rkhunter`
and this is how you break everything before going on a week vacation 2017-05-05 22:12:33 +00:00			`- nagios_client`
Move hosts to a role and put it before fas_client so initial runs can find admin. 2014-06-23 00:49:31 +00:00			`- hosts`
Now that we have roles_path, drop the long path on all the roles. 2014-01-23 17:12:40 +00:00			`- fas_client`
Add some hosts to collectd which were not there before. 2014-03-21 13:45:02 +00:00			`- collectd/base`
Convert sudo to a role so we can include it before roles/plays that use sudo. 2014-06-14 20:58:52 +00:00			`- sudo`
Replace the openvpn task by the openvpn role 2014-08-01 18:23:40 +02:00			`- { role: openvpn/client,`
			`when: env != "staging" }`
Move mod_wsgi to a role rather than a included tasks 2016-08-08 13:51:44 +02:00			`- mod_wsgi`
Add inventory and playbook for nuancier staging nodes. 2013-09-19 03:33:39 +00:00
			`tasks:`
switch all the include tasks to import tasks 2017-10-17 17:37:03 +00:00			`- import_tasks: "{{ tasks_path }}/yumrepos.yml"`
			`- import_tasks: "{{ tasks_path }}/2fa_client.yml"`
			`- import_tasks: "{{ tasks_path }}/motd.yml"`
Move fedmsg to its own play so that users and groups are created first. 2013-09-26 15:44:01 +00:00
			`handlers:`
typo on a massive scale 2017-10-15 20:33:11 +00:00			`- import_tasks: "{{ handlers_path }}/restart_services.yml"`
Move fedmsg to its own play so that users and groups are created first. 2013-09-26 15:44:01 +00:00
			`- name: set up fedmsg`
Use : instead of ; between host/group names. ; is depreciated and will go away someday. 2016-02-02 21:03:19 +00:00			`hosts: nuancier:nuancier-stg`
Move fedmsg to its own play so that users and groups are created first. 2013-09-26 15:44:01 +00:00			`user: root`
			`gather_facts: True`

Distinguish the stg and prod gluster volumes for nuancier 2014-02-26 09:10:22 +01:00			`vars_files:`
Move fedmsg to its own play so that users and groups are created first. 2013-09-26 15:44:01 +00:00			`- /srv/web/infra/ansible/vars/global.yml`
New ansible doesn't like expanding {{ private }} in the same list of vars files it's defined in. 2015-01-09 22:59:18 +00:00			`- "/srv/private/ansible/vars.yml"`
Hard code vars_path for now. 2014-01-06 18:22:18 +00:00			`- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml`
Move fedmsg to its own play so that users and groups are created first. 2013-09-26 15:44:01 +00:00
Move fedmsg_base stuff from a task to a role. Submitted by janeznemanic for https://fedorahosted.org/fedora-infrastructure/ticket/4011 2013-10-15 03:40:57 +00:00			`roles:`
Renamespace the fedmsg module. 2014-03-14 15:47:11 +00:00			`- fedmsg/base`
Add inventory and playbook for nuancier staging nodes. 2013-09-19 03:33:39 +00:00
			`handlers:`
typo on a massive scale 2017-10-15 20:33:11 +00:00			`- import_tasks: "{{ handlers_path }}/restart_services.yml"`
Run the nuancier role at the end, once everything is in place 2013-09-20 15:04:57 +00:00
Split even more the gluster volume creation for stg/prod 2014-02-26 09:16:22 +01:00			`- name: set up gluster on stg`
			`hosts: nuancier-stg`
First stab at a gluster role for the nuancier staging nodes. 2014-02-07 21:36:24 +00:00			`user: root`
			`gather_facts: True`

Distinguish the stg and prod gluster volumes for nuancier 2014-02-26 09:10:22 +01:00			`vars_files:`
First stab at a gluster role for the nuancier staging nodes. 2014-02-07 21:36:24 +00:00			`- /srv/web/infra/ansible/vars/global.yml`
New ansible doesn't like expanding {{ private }} in the same list of vars files it's defined in. 2015-01-09 22:59:18 +00:00			`- "/srv/private/ansible/vars.yml"`
First stab at a gluster role for the nuancier staging nodes. 2014-02-07 21:36:24 +00:00			`- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml`

Remove indentation. 2014-02-07 21:41:47 +00:00			`roles:`
			`- role: gluster/server`
Supply a "name". 2014-02-07 21:48:53 +00:00			`name: gluster`
Quote those. 2014-02-07 21:42:33 +00:00			`username: "{{ nuancier_gluster_username }}"`
			`password: "{{ nuancier_gluster_password }}"`
Remove indentation. 2014-02-07 21:41:47 +00:00			`owner: root`
			`group: root`
Distinguish the stg and prod gluster volumes for nuancier 2014-02-26 09:10:22 +01:00			`datadir: /srv/glusterfs/nuancier-stg`
Remove indentation. 2014-02-07 21:41:47 +00:00
			`- role: gluster/client`
Supply a "name". 2014-02-07 21:48:53 +00:00			`name: gluster`
Distinguish the stg and prod gluster volumes for nuancier 2014-02-26 09:10:22 +01:00			`servers:`
Remove indentation. 2014-02-07 21:41:47 +00:00			`- nuancier01.stg.phx2.fedoraproject.org`
			`- nuancier02.stg.phx2.fedoraproject.org`
Distinguish the stg and prod gluster volumes for nuancier 2014-02-26 09:10:22 +01:00			`username: "{{ nuancier_gluster_username }}"`
			`password: "{{ nuancier_gluster_password }}"`
			`owner: apache`
			`group: root`
			`mountdir: /var/cache/nuancier`

Split even more the gluster volume creation for stg/prod 2014-02-26 09:16:22 +01:00			`- name: set up gluster on prod`
			`hosts: nuancier`
			`user: root`
			`gather_facts: True`

			`vars_files:`
			`- /srv/web/infra/ansible/vars/global.yml`
New ansible doesn't like expanding {{ private }} in the same list of vars files it's defined in. 2015-01-09 22:59:18 +00:00			`- "/srv/private/ansible/vars.yml"`
Split even more the gluster volume creation for stg/prod 2014-02-26 09:16:22 +01:00			`- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml`

Distinguish the stg and prod gluster volumes for nuancier 2014-02-26 09:10:22 +01:00			`roles:`
			`- role: gluster/server`
			`name: gluster`
			`username: "{{ nuancier_gluster_username }}"`
			`password: "{{ nuancier_gluster_password }}"`
			`owner: root`
			`group: root`
			`datadir: /srv/glusterfs/nuancier`

			`- role: gluster/client`
			`name: gluster`
			`servers:`
Should specify the gluster servers 2014-02-26 08:46:32 +01:00			`- nuancier01.phx2.fedoraproject.org`
			`- nuancier02.phx2.fedoraproject.org`
Quote those. 2014-02-07 21:42:33 +00:00			`username: "{{ nuancier_gluster_username }}"`
			`password: "{{ nuancier_gluster_password }}"`
Remove indentation. 2014-02-07 21:41:47 +00:00			`owner: apache`
			`group: root`
			`mountdir: /var/cache/nuancier`
First stab at a gluster role for the nuancier staging nodes. 2014-02-07 21:36:24 +00:00
Run the nuancier role at the end, once everything is in place 2013-09-20 15:04:57 +00:00			`- name: deploy nuancier itself`
Use : instead of ; between host/group names. ; is depreciated and will go away someday. 2016-02-02 21:03:19 +00:00			`hosts: nuancier:nuancier-stg`
Run the nuancier role at the end, once everything is in place 2013-09-20 15:04:57 +00:00			`user: root`
			`gather_facts: True`

			`vars_files:`
			`- /srv/web/infra/ansible/vars/global.yml`
New ansible doesn't like expanding {{ private }} in the same list of vars files it's defined in. 2015-01-09 22:59:18 +00:00			`- "/srv/private/ansible/vars.yml"`
vars is reserved, use vars_path for variable path 2014-01-06 17:49:22 +00:00			`- "{{ vars_path }}/{{ ansible_distribution }}.yml"`
Run the nuancier role at the end, once everything is in place 2013-09-20 15:04:57 +00:00
			`roles:`
Now that we have roles_path, drop the long path on all the roles. 2014-01-23 17:12:40 +00:00			`- nuancier`
Add handler to nuancier playbook 2013-09-20 18:09:04 +00:00
			`handlers:`
typo on a massive scale 2017-10-15 20:33:11 +00:00			`- import_tasks: "{{ handlers_path }}/restart_services.yml"`