infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Death to all trailing whitespace.

Browse source
This commit is contained in:
Kevin Fenzi 2016-08-08 19:36:31 +00:00
parent fd129648ae
commit 04a52b8667
131 changed files with 311 additions and 311 deletions
Download patch file Download diff file Expand all files Collapse all files

10
playbooks/check-for-nonvirt-updates.yml
View file

@ -1,11 +1,11 @@
# #
# simple playbook to check all hosts and see how many updates they have pending. # simple playbook to check all hosts and see how many updates they have pending.
# It could be a lot faster if we didn't gather facts, but we need that for yum vs dnf checking # It could be a lot faster if we didn't gather facts, but we need that for yum vs dnf checking
# #
# If you want a pretty sorted list, you need to post process the output here with something # If you want a pretty sorted list, you need to post process the output here with something
# like: # like:
# #
# time ansible-playbook check-for-updates.yml | grep msg\": | awk -F: '{print $2}' | sort # time ansible-playbook check-for-updates.yml | grep msg\": | awk -F: '{print $2}' | sort
# #
- name: check for updates - name: check for updates
@ -18,12 +18,12 @@
- name: check for updates (yum) - name: check for updates (yum)
yum: list=updates update_cache=true yum: list=updates update_cache=true
register: yumoutput register: yumoutput
when: ansible_distribution_major_version|int < 22 and ansible_virtualization_role == 'host' when: ansible_distribution_major_version|int < 22 and ansible_virtualization_role == 'host'
- name: check for updates (dnf) - name: check for updates (dnf)
dnf: list=updates dnf: list=updates
register: dnfoutput register: dnfoutput
when: ansible_distribution_major_version|int > 21 and ansible_virtualization_role == 'host' when: ansible_distribution_major_version|int > 21 and ansible_virtualization_role == 'host'
- debug: msg="{{ inventory_hostname}} {{ yumoutput.results|length }}" - debug: msg="{{ inventory_hostname}} {{ yumoutput.results|length }}"
when: yumoutput is defined and yumoutput.results|length > 0 when: yumoutput is defined and yumoutput.results|length > 0

6
playbooks/check-for-updates.yml
View file

@ -1,11 +1,11 @@
# #
# simple playbook to check all hosts and see how many updates they have pending. # simple playbook to check all hosts and see how many updates they have pending.
# It could be a lot faster if we didn't gather facts, but we need that for yum vs dnf checking # It could be a lot faster if we didn't gather facts, but we need that for yum vs dnf checking
# #
# If you want a pretty sorted list, you need to post process the output here with something # If you want a pretty sorted list, you need to post process the output here with something
# like: # like:
# #
# time ansible-playbook check-for-updates.yml | grep msg\": | awk -F: '{print $2}' | sort # time ansible-playbook check-for-updates.yml | grep msg\": | awk -F: '{print $2}' | sort
# #
- name: check for updates - name: check for updates

8
playbooks/check-host.yml
View file

@ -77,7 +77,7 @@
- check - check
- services - services
- name: output loaded inactive service list systemctl - name: output loaded inactive service list systemctl
shell: echo {{loaded_inactive_services_systemctl.stdout_lines}} >> {{temp_dir.stdout}}/liservices shell: echo {{loaded_inactive_services_systemctl.stdout_lines}} >> {{temp_dir.stdout}}/liservices
when: loaded_inactive_services_systemctl is defined and loaded_inactive_services_systemctl.rc == 0 when: loaded_inactive_services_systemctl is defined and loaded_inactive_services_systemctl.rc == 0
changed_when: False changed_when: False
@ -181,7 +181,7 @@
- check - check
- selinux - selinux
- name: Show Boot SELinux mode - name: Show Boot SELinux mode
shell: echo "SELinux boots to {{ ansible_selinux.config_mode }} mode " >> {{temp_dir.stdout}}/selinux shell: echo "SELinux boots to {{ ansible_selinux.config_mode }} mode " >> {{temp_dir.stdout}}/selinux
when: ansible_selinux.status != "disabled" when: ansible_selinux.status != "disabled"
changed_when: False changed_when: False
@ -246,7 +246,7 @@
changed_when: False changed_when: False
register: file_diff register: file_diff
when: last_dir is defined and last_dir.stdout != "" when: last_dir is defined and last_dir.stdout != ""
- name: display diff - name: display diff
debug: var=file_diff.stdout_lines debug: var=file_diff.stdout_lines
ignore_errors: True ignore_errors: True
@ -263,7 +263,7 @@
file: path={{localchanges.stdout}} state=absent file: path={{localchanges.stdout}} state=absent
changed_when: False changed_when: False
# handlers: # handlers:
# - include: "{{ handlers }}/restart_services.yml" # - include: "{{ handlers }}/restart_services.yml"
# - include: "restart_services.yml" # - include: "restart_services.yml"

4
playbooks/cloud_prep.yml
View file

@ -1,11 +1,11 @@
# restricted to run on cloud instances only # restricted to run on cloud instances only
- hosts: 209.132.184.* - hosts: 209.132.184.*
user: root user: root
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
tasks: tasks:
- include: "{{ tasks }}/cloud_setup_basic.yml" - include: "{{ tasks }}/cloud_setup_basic.yml"

6
playbooks/death_to_postfix.yml
View file

@ -9,13 +9,13 @@
tasks: tasks:
- name: Try to stop postfix cleanly. - name: Try to stop postfix cleanly.
service: name=postfix state=stopped service: name=postfix state=stopped
# This doesn't really remove the pid file.. but we say it does so ansible only runs it if the pid file is there.. # This doesn't really remove the pid file.. but we say it does so ansible only runs it if the pid file is there..
- name: Really kill postfix master process - name: Really kill postfix master process
command: pkill -u root master removes=/var/spool/postfix/pid/master.pid command: pkill -u root master removes=/var/spool/postfix/pid/master.pid
- name: Clean up old pid lock file. - name: Clean up old pid lock file.
command: rm /var/spool/postfix/pid/master.pid removes=/var/spool/postfix/pid/master.pid command: rm /var/spool/postfix/pid/master.pid removes=/var/spool/postfix/pid/master.pid
- name: Try to start postfix cleanly - name: Try to start postfix cleanly
service: name=postfix state=started service: name=postfix state=started

2
playbooks/destroy_cloud_inst.yml
View file

@ -16,7 +16,7 @@
- name: pause for 30s before doing it - name: pause for 30s before doing it
pause: seconds=30 prompt="Destroying vm now {{ target }}, abort if this is wrong" pause: seconds=30 prompt="Destroying vm now {{ target }}, abort if this is wrong"
- name: find the instance id from the builder - name: find the instance id from the builder
command: curl -s http://169.254.169.254/latest/meta-data/instance-id command: curl -s http://169.254.169.254/latest/meta-data/instance-id
register: instanceid register: instanceid

2
playbooks/destroy_virt_inst.yml
View file

@ -26,7 +26,7 @@
- name: pause for 30s before doing it - name: pause for 30s before doing it
pause: seconds=30 prompt="Destroying (and lvremove for) vm now {{ target }}, abort if this is wrong" pause: seconds=30 prompt="Destroying (and lvremove for) vm now {{ target }}, abort if this is wrong"
- name: destroy the vm - name: destroy the vm
virt: name={{ inventory_hostname }} command=destroy virt: name={{ inventory_hostname }} command=destroy
delegate_to: "{{ vmhost }}" delegate_to: "{{ vmhost }}"

2
playbooks/fix_arm_soc.yml
View file

@ -1,6 +1,6 @@
# #
# This playbook power cycles an arm soc, sets time and runs playbook on it. # This playbook power cycles an arm soc, sets time and runs playbook on it.
# #
# requires -e "target=arm0N-builderXX.arm.fedoraproject.org" -l arm0N-builderXX.arm.fedoraproject.org # requires -e "target=arm0N-builderXX.arm.fedoraproject.org" -l arm0N-builderXX.arm.fedoraproject.org
- name: power cycle instance - name: power cycle instance

4
playbooks/groups/autosign.yml
View file

@ -1,6 +1,6 @@
# create a new autosign server # create a new autosign server
# #
# This server looks for rawhide builds and requests they be signed. # This server looks for rawhide builds and requests they be signed.
# #
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=autosign" - include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=autosign"
@ -9,7 +9,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/backup-server.yml
View file

@ -8,7 +8,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/badges-backend.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -46,7 +46,7 @@
- role: collectd/fedmsg-service - role: collectd/fedmsg-service
process: fedmsg-hub process: fedmsg-hub
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml" - "{{ vars_path }}/{{ ansible_distribution }}.yml"

2
playbooks/groups/badges-web.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/batcave.yml
View file

@ -32,7 +32,7 @@
- { role: nfs/client, mnt_dir: '/srv/web/pub', nfs_src_dir: 'fedora_ftp/fedora.redhat.com/pub' } - { role: nfs/client, mnt_dir: '/srv/web/pub', nfs_src_dir: 'fedora_ftp/fedora.redhat.com/pub' }
- { role: nfs/client, mnt_dir: '/mnt/fedora/app', nfs_src_dir: 'fedora_app/app' } - { role: nfs/client, mnt_dir: '/mnt/fedora/app', nfs_src_dir: 'fedora_app/app' }
tasks: tasks:
- include: "{{ tasks }}/yumrepos.yml" - include: "{{ tasks }}/yumrepos.yml"
- include: "{{ tasks }}/2fa_client.yml" - include: "{{ tasks }}/2fa_client.yml"

2
playbooks/groups/beaker-virthosts.yml
View file

@ -9,7 +9,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/beaker.yml
View file

@ -9,7 +9,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/blockerbugs.yml
View file

@ -9,7 +9,7 @@
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
roles: roles:
- base - base
- hosts - hosts

4
playbooks/groups/bodhi-backend.yml
View file

@ -1,13 +1,13 @@
# create a new bodhi-backend system # create a new bodhi-backend system
# #
# This group makes bodhi-backend servers. # This group makes bodhi-backend servers.
# They are used by releng to push updates with bodhi. # They are used by releng to push updates with bodhi.
# They also run some misc releng scripts. # They also run some misc releng scripts.
# #
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=bodhi-backend:bodhi-backend-stg" - include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=bodhi-backend:bodhi-backend-stg"
# Once the instance exists, configure it. # Once the instance exists, configure it.
- name: make bodhi-backend server system - name: make bodhi-backend server system
hosts: bodhi-backend:bodhi-backend-stg hosts: bodhi-backend:bodhi-backend-stg

6
playbooks/groups/bugyou.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -37,7 +37,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -60,7 +60,7 @@
- role: collectd/fedmsg-service - role: collectd/fedmsg-service
process: fedmsg-hub process: fedmsg-hub
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/bugzilla2fedmsg.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -43,7 +43,7 @@
- role: collectd/fedmsg-service - role: collectd/fedmsg-service
process: moksha-hub process: moksha-hub
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml" - "{{ vars_path }}/{{ ansible_distribution }}.yml"

4
playbooks/groups/busgateway.yml
View file

@ -5,7 +5,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -49,7 +49,7 @@
process: fedmsg-gateway process: fedmsg-gateway
- role: collectd/fedmsg-activation - role: collectd/fedmsg-activation
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml" - "{{ vars_path }}/{{ ansible_distribution }}.yml"

8
playbooks/groups/darkserver-backend.yml
View file

@ -5,7 +5,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -14,7 +14,7 @@
- yum: name=libsemanage-python state=present - yum: name=libsemanage-python state=present
- name: "Set SElinux booleans" - name: "Set SElinux booleans"
seboolean: name=httpd_can_network_connect_db state=yes persistent=yes seboolean: name=httpd_can_network_connect_db state=yes persistent=yes
roles: roles:
- base - base
@ -42,7 +42,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -58,7 +58,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/darkserver-web.yml
View file

@ -5,7 +5,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -14,7 +14,7 @@
- yum: name=libsemanage-python state=present - yum: name=libsemanage-python state=present
- name: "Set SElinux booleans" - name: "Set SElinux booleans"
seboolean: name=httpd_can_network_connect_db state=yes persistent=yes seboolean: name=httpd_can_network_connect_db state=yes persistent=yes
roles: roles:
- base - base

8
playbooks/groups/darkserver.yml
View file

@ -5,7 +5,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -13,10 +13,10 @@
pre_tasks: pre_tasks:
- name: "Add koji to hosts file" - name: "Add koji to hosts file"
lineinfile: dest=/etc/hosts line="10.5.125.36 koji koji.fedoraproject.org" state=present lineinfile: dest=/etc/hosts line="10.5.125.36 koji koji.fedoraproject.org" state=present
- yum: name=libsemanage-python state=present - yum: name=libsemanage-python state=present
- name: "Set SElinux booleans" - name: "Set SElinux booleans"
seboolean: name=httpd_can_network_connect_db state=yes persistent=yes seboolean: name=httpd_can_network_connect_db state=yes persistent=yes
roles: roles:
- base - base
@ -31,7 +31,7 @@
- role: apache - role: apache
- darkserver - darkserver
tasks: tasks:
- include: "{{ tasks }}/yumrepos.yml" - include: "{{ tasks }}/yumrepos.yml"
- include: "{{ tasks }}/2fa_client.yml" - include: "{{ tasks }}/2fa_client.yml"

2
playbooks/groups/datagrepper.yml
View file

@ -7,7 +7,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/dns.yml
View file

@ -7,7 +7,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/download.yml
View file

@ -62,10 +62,10 @@
- name: install bc so last-sync works. - name: install bc so last-sync works.
yum: pkg=bc state=present yum: pkg=bc state=present
when: inventory_hostname == 'download-ib01.fedoraproject.org' when: inventory_hostname == 'download-ib01.fedoraproject.org'
handlers: handlers:
- include: "{{ handlers }}/restart_services.yml" - include: "{{ handlers }}/restart_services.yml"

2
playbooks/groups/fas.yml
View file

@ -7,7 +7,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/fas3.yml
View file

@ -7,7 +7,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/fedimg.yml
View file

@ -8,7 +8,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -55,7 +55,7 @@
- role: collectd/fedmsg-service - role: collectd/fedmsg-service
process: fedmsg-hub process: fedmsg-hub
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/fedocal.yml
View file

@ -5,7 +5,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -36,7 +36,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml" - "{{ vars_path }}/{{ ansible_distribution }}.yml"

2
playbooks/groups/gallery.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/github2fedmsg.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/groups/hotness.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -63,7 +63,7 @@
- role: collectd/fedmsg-service - role: collectd/fedmsg-service
process: fedmsg-hub process: fedmsg-hub
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/ipa.yml
View file

@ -5,7 +5,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/ipsilon.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/keyserver.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -26,7 +26,7 @@
- { role: openvpn/client, - { role: openvpn/client,
when: env != "staging" } when: env != "staging" }
- apache - apache
- keyserver - keyserver
tasks: tasks:
- include: "{{ tasks }}/yumrepos.yml" - include: "{{ tasks }}/yumrepos.yml"

2
playbooks/groups/logserver.yml
View file

@ -31,7 +31,7 @@
# #
# We exclude some dirs from restorecon on updates on logservers as they are very large # We exclude some dirs from restorecon on updates on logservers as they are very large
# and it takes a long long time to run restorecon over them. # and it takes a long long time to run restorecon over them.
# #
- name: exclude some directories from selinux relabeling on updates - name: exclude some directories from selinux relabeling on updates
copy: src="{{ files }}/logserver/fixfiles_exclude_dirs" dest=/etc/selinux/fixfiles_exclude_dirs owner=root mode=0644 copy: src="{{ files }}/logserver/fixfiles_exclude_dirs" dest=/etc/selinux/fixfiles_exclude_dirs owner=root mode=0644

4
playbooks/groups/mariadb-server.yml
View file

@ -4,14 +4,14 @@
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=db03.phx2.fedoraproject.org:db03.stg.phx2.fedoraproject.org" - include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=db03.phx2.fedoraproject.org:db03.stg.phx2.fedoraproject.org"
# Once the instance exists, configure it. # Once the instance exists, configure it.
- name: configure mariadb server system - name: configure mariadb server system
hosts: db03.phx2.fedoraproject.org:db03.stg.phx2.fedoraproject.org hosts: db03.phx2.fedoraproject.org:db03.stg.phx2.fedoraproject.org
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/mdapi.yml
View file

@ -5,7 +5,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -53,7 +53,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml" - "{{ vars_path }}/{{ ansible_distribution }}.yml"

2
playbooks/groups/mirrorlist2.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/noc.yml
View file

@ -5,7 +5,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -36,7 +36,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/notifs-backend.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -60,7 +60,7 @@
- role: collectd/fedmsg-service - role: collectd/fedmsg-service
process: fedmsg-hub process: fedmsg-hub
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/notifs-web.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/openqa.yml
View file

@ -1,6 +1,6 @@
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=openqa:openqa-stg" - include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=openqa:openqa-stg"
- name: setup base openqa host - name: setup base openqa host
hosts: openqa:openqa-stg hosts: openqa:openqa-stg
user: root user: root
gather_facts: True gather_facts: True

2
playbooks/groups/openstack-compute-nodes.yml
View file

@ -4,7 +4,7 @@
hosts: openstack-compute hosts: openstack-compute
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/RedHat.yml - /srv/web/infra/ansible/vars/RedHat.yml

4
playbooks/groups/people.yml
View file

@ -8,7 +8,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -81,7 +81,7 @@
SSLCertificateChainFile: wildcard-2014.fedorapeople.org.intermediate.cert SSLCertificateChainFile: wildcard-2014.fedorapeople.org.intermediate.cert
- people - people
tasks: tasks:
- include: "{{ tasks }}/yumrepos.yml" - include: "{{ tasks }}/yumrepos.yml"
- include: "{{ tasks }}/2fa_client.yml" - include: "{{ tasks }}/2fa_client.yml"

4
playbooks/groups/pkgs.yml
View file

@ -27,8 +27,8 @@
- git/server - git/server
- git/hooks - git/hooks
- clamav - clamav
- { role: nfs/client, when: env != "staging", mnt_dir: '/srv/cache/lookaside', nfs_src_dir: 'fedora_sourcecache', nfs_mount_opts='rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4' } - { role: nfs/client, when: env != "staging", mnt_dir: '/srv/cache/lookaside', nfs_src_dir: 'fedora_sourcecache', nfs_mount_opts='rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4' }
- { role: nfs/client, when: env == "staging", mnt_dir: '/srv/cache/lookaside_prod', nfs_src_dir: 'fedora_sourcecache', nfs_mount_opts='ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4' } - { role: nfs/client, when: env == "staging", mnt_dir: '/srv/cache/lookaside_prod', nfs_src_dir: 'fedora_sourcecache', nfs_mount_opts='ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4' }
- role: distgit - role: distgit
tags: distgit tags: distgit
- { role: hosts, when: env == "staging" } - { role: hosts, when: env == "staging" }

4
playbooks/groups/postgresql-server.yml
View file

@ -4,14 +4,14 @@
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=db-datanommer02.phx2.fedoraproject.org:db-qa01.qa.fedoraproject.org:db-koji01.phx2.fedoraproject.org:db-fas01.stg.phx2.fedoraproject.org:db-fas01.phx2.fedoraproject.org:db01.phx2.fedoraproject.org:db01.stg.phx2.fedoraproject.org:db-s390-koji01.qa.fedoraproject.org:db-arm-koji01.qa.fedoraproject.org:db-ppc-koji01.ppc.fedoraproject.org" - include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=db-datanommer02.phx2.fedoraproject.org:db-qa01.qa.fedoraproject.org:db-koji01.phx2.fedoraproject.org:db-fas01.stg.phx2.fedoraproject.org:db-fas01.phx2.fedoraproject.org:db01.phx2.fedoraproject.org:db01.stg.phx2.fedoraproject.org:db-s390-koji01.qa.fedoraproject.org:db-arm-koji01.qa.fedoraproject.org:db-ppc-koji01.ppc.fedoraproject.org"
# Once the instance exists, configure it. # Once the instance exists, configure it.
- name: configure postgresql server system - name: configure postgresql server system
hosts: db-datanommer02.phx2.fedoraproject.org:db-qa01.qa.fedoraproject.org:db-koji01.phx2.fedoraproject.org:db-fas01.stg.phx2.fedoraproject.org:db-fas01.phx2.fedoraproject.org:db01.phx2.fedoraproject.org:db01.stg.phx2.fedoraproject.org:db-s390-koji01.qa.fedoraproject.org:db-arm-koji01.qa.fedoraproject.org:db-ppc-koji01.ppc.fedoraproject.org hosts: db-datanommer02.phx2.fedoraproject.org:db-qa01.qa.fedoraproject.org:db-koji01.phx2.fedoraproject.org:db-fas01.stg.phx2.fedoraproject.org:db-fas01.phx2.fedoraproject.org:db01.phx2.fedoraproject.org:db01.stg.phx2.fedoraproject.org:db-s390-koji01.qa.fedoraproject.org:db-arm-koji01.qa.fedoraproject.org:db-ppc-koji01.ppc.fedoraproject.org
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/proxies.yml
View file

@ -149,7 +149,7 @@
- reload httpd - reload httpd
# #
# If this is an initial deployment, make sure docs are synced over. # If this is an initial deployment, make sure docs are synced over.
# Do not count these as changed ever # Do not count these as changed ever
# #
- name: make sure docs are synced. This could take a very very very logtime to finish - name: make sure docs are synced. This could take a very very very logtime to finish

4
playbooks/groups/resultsdb-dev.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -40,7 +40,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/resultsdb-prod.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/resultsdb-stg.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -40,7 +40,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

8
playbooks/groups/secondary.yml
View file

@ -20,11 +20,11 @@
- download - download
- rsyncd - rsyncd
- sudo - sudo
- { role: nfs/client, - { role: nfs/client,
mnt_dir: '/srv/pub/archive', mnt_dir: '/srv/pub/archive',
nfs_src_dir: 'fedora_ftp/fedora.redhat.com/pub/archive' } nfs_src_dir: 'fedora_ftp/fedora.redhat.com/pub/archive' }
- { role: nfs/client, - { role: nfs/client,
mnt_dir: '/srv/pub/alt', mnt_dir: '/srv/pub/alt',
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4", nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,nfsvers=4",
nfs_src_dir: 'fedora_ftp/fedora.redhat.com/pub/alt' } nfs_src_dir: 'fedora_ftp/fedora.redhat.com/pub/alt' }
- { role: nfs/client, - { role: nfs/client,

8
playbooks/groups/sign-bridge.yml
View file

@ -2,9 +2,9 @@
# NOTE: this assumes the boxes are already up and are accessible # NOTE: this assumes the boxes are already up and are accessible
# NOTE: most of these vars_path come from group_vars/sign or from hostvars # NOTE: most of these vars_path come from group_vars/sign or from hostvars
# #
# FURTHER NOTE: some of These machines run day to day with sshd disabled/off. # FURTHER NOTE: some of These machines run day to day with sshd disabled/off.
# Access is via management interface only. This playbook does initial setup. # Access is via management interface only. This playbook does initial setup.
# Please check with rel-eng before doing anything here. # Please check with rel-eng before doing anything here.
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=sign-bridge" - include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=sign-bridge"
@ -13,7 +13,7 @@
user: root user: root
gather_facts: true gather_facts: true
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/smtp-mm.yml
View file

@ -7,7 +7,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/groups/statscache.yml
View file

@ -9,7 +9,7 @@
hosts: statscache:statscache-stg hosts: statscache:statscache-stg
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -35,7 +35,7 @@
hosts: statscache-web:statscache-web-stg hosts: statscache-web:statscache-web-stg
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -52,7 +52,7 @@
hosts: statscache-backend:statscache-backend-stg hosts: statscache-backend:statscache-backend-stg
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/groups/summershum.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -63,7 +63,7 @@
- role: collectd/fedmsg-service - role: collectd/fedmsg-service
process: fedmsg-hub process: fedmsg-hub
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/sundries.yml
View file

@ -1,6 +1,6 @@
# create a new sundries server # create a new sundries server
# #
# These servers run a number of smaller apps that don't merit their own instances. # These servers run a number of smaller apps that don't merit their own instances.
# #
- include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=sundries:sundries-stg" - include: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=sundries:sundries-stg"
@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/groups/tagger.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -58,7 +58,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/taskotron-client-hosts.yml
View file

@ -9,7 +9,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -68,4 +68,4 @@
handlers: handlers:
- include: "{{ handlers }}/restart_services.yml" - include: "{{ handlers }}/restart_services.yml"

4
playbooks/groups/taskotron-dev.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -40,7 +40,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/groups/taskotron.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -42,7 +42,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -64,7 +64,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/torrent.yml
View file

@ -5,7 +5,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/twisted-buildbots.yml
View file

@ -24,7 +24,7 @@
- include: "{{ tasks }}/cloud_setup_basic.yml" - include: "{{ tasks }}/cloud_setup_basic.yml"
- name: set hostname (required by some services, at least postfix need it) - name: set hostname (required by some services, at least postfix need it)
hostname: name="{{inventory_hostname}}" hostname: name="{{inventory_hostname}}"
tasks: tasks:
- name: add twisted key - name: add twisted key

2
playbooks/groups/virthost.yml
View file

@ -7,7 +7,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/groups/wiki.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/groups/zanata2fedmsg.yml
View file

@ -10,7 +10,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -41,7 +41,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

8
playbooks/host_update.yml
View file

@ -7,11 +7,11 @@
hosts: "{{ target }}" hosts: "{{ target }}"
gather_facts: false gather_facts: false
user: root user: root
tasks: tasks:
- name: expire-caches - name: expire-caches
command: yum clean expire-cache command: yum clean expire-cache
- name: yum -y {{ yumcommand }} - name: yum -y {{ yumcommand }}
command: yum -y {{ yumcommand }} command: yum -y {{ yumcommand }}
async: 7200 async: 7200
@ -26,7 +26,7 @@
command: /usr/bin/test -f /usr/bin/rkhunter command: /usr/bin/test -f /usr/bin/rkhunter
register: rkhunter register: rkhunter
ignore_errors: true ignore_errors: true
- name: run rkhunter --propupd - name: run rkhunter --propupd
command: /usr/bin/rkhunter --propupd command: /usr/bin/rkhunter --propupd
when: rkhunter|success when: rkhunter|success

4
playbooks/hosts/artboard.fedorainfracloud.org.yml
View file

@ -94,7 +94,7 @@
tags: tags:
- artboard - artboard
- name: make artboard subdir - name: make artboard subdir
file: path=/srv/persist/artboard mode=0755 state=directory file: path=/srv/persist/artboard mode=0755 state=directory
tags: tags:
- artboard - artboard
@ -112,7 +112,7 @@
notify: reload httpd notify: reload httpd
tags: tags:
- artboard - artboard
- name: startup apache - name: startup apache
service: name=httpd state=started service: name=httpd state=started
tags: tags:

4
playbooks/hosts/blockerbugs-dev.cloud.fedoraproject.org.yml
View file

@ -3,7 +3,7 @@
user: root user: root
gather_facts: False gather_facts: False
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
@ -19,7 +19,7 @@
- tcp_ports: [22, 80, 443] - tcp_ports: [22, 80, 443]
- udp_ports: [] - udp_ports: []
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/hosts/cloud-noc01.cloud.fedoraproject.org.yml
View file

@ -5,7 +5,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/hosts/data-analysis01.phx2.fedoraproject.org.yml
View file

@ -4,7 +4,7 @@
hosts: data-analysis01.phx2.fedoraproject.org hosts: data-analysis01.phx2.fedoraproject.org
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
@ -77,9 +77,9 @@
- name: setup mysql items - name: setup mysql items
file: path=/srv/mysql state=directory mode=0770 owner=mysql group=mysql setype=mysqld_db_t file: path=/srv/mysql state=directory mode=0770 owner=mysql group=mysql setype=mysqld_db_t
- name: semanage mysql tree - name: semanage mysql tree
command: /usr/sbin/semanage fcontext -a -t mysqld_db_t "/srv/mysql(/.*)?" command: /usr/sbin/semanage fcontext -a -t mysqld_db_t "/srv/mysql(/.*)?"
## ##

12
playbooks/hosts/fed-cloud09.cloud.fedoraproject.org.yml
View file

@ -101,7 +101,7 @@
state=present state=present
regexp="^.*INPUT.*172\.24\.0\.10/24.*tcp.*{{ item }}.*ACCEPT" regexp="^.*INPUT.*172\.24\.0\.10/24.*tcp.*{{ item }}.*ACCEPT"
insertbefore="^.*INPUT.*RELATED,ESTABLISHED.*ACCEPT" insertbefore="^.*INPUT.*RELATED,ESTABLISHED.*ACCEPT"
line="-A INPUT -s 172.24.0.10/24 -p tcp -m multiport --dports {{ item }} -m comment --comment \"added by fedora-infra ansible\" -j ACCEPT" line="-A INPUT -s 172.24.0.10/24 -p tcp -m multiport --dports {{ item }} -m comment --comment \"added by fedora-infra ansible\" -j ACCEPT"
backup=yes backup=yes
with_items: with_items:
- 80,443 - 80,443
@ -278,7 +278,7 @@
# http://docs.openstack.org/icehouse/install-guide/install/yum/content/basics-queue.html # http://docs.openstack.org/icehouse/install-guide/install/yum/content/basics-queue.html
# https://openstack.redhat.com/Securing_services#qpid # https://openstack.redhat.com/Securing_services#qpid
#### FIXME #### FIXME
- lineinfile: dest=/etc/rabbitmq/rabbitmq-env.conf regexp="^RABBITMQ_NODE_PORT=" state="absent" - lineinfile: dest=/etc/rabbitmq/rabbitmq-env.conf regexp="^RABBITMQ_NODE_PORT=" state="absent"
- service: name=rabbitmq-server state=started - service: name=rabbitmq-server state=started
@ -461,7 +461,7 @@
- ini_file: dest=/etc/cinder/api-paste.ini section="filter:authtoken" option=auth_protocol value=https - ini_file: dest=/etc/cinder/api-paste.ini section="filter:authtoken" option=auth_protocol value=https
- ini_file: dest=/etc/cinder/api-paste.ini section="filter:authtoken" option=service_host value={{ controller_publicname }} - ini_file: dest=/etc/cinder/api-paste.ini section="filter:authtoken" option=service_host value={{ controller_publicname }}
- ini_file: dest=/etc/cinder/api-paste.ini section="filter:authtoken" option=cafile value=/etc/pki/tls/certs/fedorainfracloud.org.digicert.pem - ini_file: dest=/etc/cinder/api-paste.ini section="filter:authtoken" option=cafile value=/etc/pki/tls/certs/fedorainfracloud.org.digicert.pem
- ini_file: dest=/etc/neutron/neutron.conf section=keystone_authtoken option=auth_uri value=https://{{ controller_publicname }}:5000 - ini_file: dest=/etc/neutron/neutron.conf section=keystone_authtoken option=auth_uri value=https://{{ controller_publicname }}:5000
- ini_file: dest=/etc/neutron/neutron.conf section=keystone_authtoken option=auth_protocol value=https - ini_file: dest=/etc/neutron/neutron.conf section=keystone_authtoken option=auth_protocol value=https
- ini_file: dest=/etc/neutron/neutron.conf section=keystone_authtoken option=auth_host value={{ controller_publicname }} - ini_file: dest=/etc/neutron/neutron.conf section=keystone_authtoken option=auth_host value={{ controller_publicname }}
@ -500,7 +500,7 @@
# enable stunell to neutron # enable stunell to neutron
- shell: cat /etc/pki/tls/certs/fedorainfracloud.org.pem /etc/pki/tls/certs/fedorainfracloud.org.digicert.pem /etc/pki/tls/private/fedorainfracloud.org.key > /etc/haproxy/fedorainfracloud.org.combined - shell: cat /etc/pki/tls/certs/fedorainfracloud.org.pem /etc/pki/tls/certs/fedorainfracloud.org.digicert.pem /etc/pki/tls/private/fedorainfracloud.org.key > /etc/haproxy/fedorainfracloud.org.combined
- file: path=/etc/haproxy/fedorainfracloud.org.combined owner=haproxy mode=644 - file: path=/etc/haproxy/fedorainfracloud.org.combined owner=haproxy mode=644
- copy: src={{ files }}/fedora-cloud/haproxy.cfg dest=/etc/haproxy/haproxy.cfg mode=644 owner=root group=root - copy: src={{ files }}/fedora-cloud/haproxy.cfg dest=/etc/haproxy/haproxy.cfg mode=644 owner=root group=root
# first OS have to free ports so haproxy can bind it, then we start OS on modified ports # first OS have to free ports so haproxy can bind it, then we start OS on modified ports
#- shell: openstack-service stop #- shell: openstack-service stop
@ -952,7 +952,7 @@
- { name: pythonbots, cidr: '172.25.128.1/20', gateway: '172.25.128.1' } - { name: pythonbots, cidr: '172.25.128.1/20', gateway: '172.25.128.1' }
- { name: qa, cidr: '172.25.112.1/20', gateway: '172.25.112.1' } - { name: qa, cidr: '172.25.112.1/20', gateway: '172.25.112.1' }
- { name: scratch, cidr: '172.25.64.1/20', gateway: '172.25.64.1' } - { name: scratch, cidr: '172.25.64.1/20', gateway: '172.25.64.1' }
- { name: transient, cidr: '172.25.48.1/20', gateway: '172.25.48.1' } - { name: transient, cidr: '172.25.48.1/20', gateway: '172.25.48.1' }
- { name: openshift, cidr: '172.25.160.1/20', gateway: '172.25.160.1' } - { name: openshift, cidr: '172.25.160.1/20', gateway: '172.25.160.1' }
- name: "Connect router's interface to the TENANT-subnet" - name: "Connect router's interface to the TENANT-subnet"
neutron_router_interface: neutron_router_interface:
@ -1222,7 +1222,7 @@
- shell: source /root/keystonerc_admin && nova quota-update --instances 40 --cores 80 --ram 300000 --floating-ips 10 --security-groups 20 {{ TENANT_ID.stdout }} - shell: source /root/keystonerc_admin && nova quota-update --instances 40 --cores 80 --ram 300000 --floating-ips 10 --security-groups 20 {{ TENANT_ID.stdout }}
# #
# Note that we set manually the amount of volumes for this tenant to 20 in the web interface. # Note that we set manually the amount of volumes for this tenant to 20 in the web interface.
# nova quota-update cannot do so. # nova quota-update cannot do so.
# #
- shell: source /root/keystonerc_admin && keystone tenant-list | grep 'persistent ' | awk '{print $2}' - shell: source /root/keystonerc_admin && keystone tenant-list | grep 'persistent ' | awk '{print $2}'

2
playbooks/hosts/fedora-hubs-dev.yml
View file

@ -3,7 +3,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/hosts/lists-dev.fedorainfracloud.org.yml
View file

@ -97,7 +97,7 @@
gather_facts: no gather_facts: no
become: yes become: yes
become_user: postgres become_user: postgres
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml" - "{{ vars_path }}/{{ ansible_distribution }}.yml"
@ -123,7 +123,7 @@
- name: setup mailman and hyperkitty - name: setup mailman and hyperkitty
hosts: lists-dev.fedorainfracloud.org hosts: lists-dev.fedorainfracloud.org
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- "{{ vars_path }}/{{ ansible_distribution }}.yml" - "{{ vars_path }}/{{ ansible_distribution }}.yml"
@ -169,4 +169,4 @@
handlers: handlers:
- include: "{{ handlers }}/restart_services.yml" - include: "{{ handlers }}/restart_services.yml"
- name: reload aliases - name: reload aliases
command: newaliases command: newaliases

4
playbooks/hosts/shogun-ca.cloud.fedoraproject.org.yml
View file

@ -3,7 +3,7 @@
user: root user: root
gather_facts: False gather_facts: False
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
@ -16,7 +16,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/include/proxies-certificates.yml
View file

@ -14,7 +14,7 @@
roles: roles:
- role: httpd/mod_ssl - role: httpd/mod_ssl
- role: httpd/certificate - role: httpd/certificate
name: wildcard-2014.fedoraproject.org name: wildcard-2014.fedoraproject.org
SSLCertificateChainFile: wildcard-2014.fedoraproject.org.intermediate.cert SSLCertificateChainFile: wildcard-2014.fedoraproject.org.intermediate.cert

4
playbooks/include/proxies-redirects.yml
View file

@ -50,7 +50,7 @@
- role: httpd/redirectmatch - role: httpd/redirectmatch
name: codecs name: codecs
website: codecs.fedoraproject.org website: codecs.fedoraproject.org
regex: ^.*/(.*openh264.*.rpm$) regex: ^.*/(.*openh264.*.rpm$)
target: http://ciscobinary.openh264.org/$1 target: http://ciscobinary.openh264.org/$1
- role: httpd/redirectmatch - role: httpd/redirectmatch
@ -246,7 +246,7 @@
# #
# When there is no prerelease we redirect the prerelease urls # When there is no prerelease we redirect the prerelease urls
# back to the main release. # back to the main release.
# This should be disabled when there is a prerelease # This should be disabled when there is a prerelease
- role: httpd/redirectmatch - role: httpd/redirectmatch

4
playbooks/include/proxies-websites.yml
View file

@ -133,7 +133,7 @@
- www.projectofedora.org - www.projectofedora.org
- www.getfedora.com - www.getfedora.com
- getfedora.com - getfedora.com
- role: httpd/website - role: httpd/website
name: admin.fedoraproject.org name: admin.fedoraproject.org
server_aliases: [admin.stg.fedoraproject.org] server_aliases: [admin.stg.fedoraproject.org]
@ -379,7 +379,7 @@
- www.389tcp.org - www.389tcp.org
ssl: false ssl: false
cert_name: "{{wildcard_cert_name}}" cert_name: "{{wildcard_cert_name}}"
- role: httpd/website - role: httpd/website
name: whatcanidoforfedora.org name: whatcanidoforfedora.org
server_aliases: server_aliases:

2
playbooks/manual/kernel-qa.yml
View file

@ -7,7 +7,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

6
playbooks/manual/qadevel.yml
View file

@ -1,6 +1,6 @@
# create a new qadevel server # create a new qadevel server
# #
# This server looks for rawhide builds and requests they be signed. # This server looks for rawhide builds and requests they be signed.
# #
- name: make qadevel server - name: make qadevel server
@ -8,7 +8,7 @@
user: root user: root
gather_facts: False gather_facts: False
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -24,7 +24,7 @@
user: root user: root
gather_facts: True gather_facts: True
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

8
playbooks/manual/sign-vault.yml
View file

@ -2,9 +2,9 @@
# NOTE: this assumes the boxes are already up and are accessible # NOTE: this assumes the boxes are already up and are accessible
# NOTE: most of these vars_path come from group_vars/sign or from hostvars # NOTE: most of these vars_path come from group_vars/sign or from hostvars
# #
# FURTHER NOTE: some of These machines run day to day with sshd disabled/off. # FURTHER NOTE: some of These machines run day to day with sshd disabled/off.
# Access is via management interface only. This playbook does initial setup. # Access is via management interface only. This playbook does initial setup.
# Please check with rel-eng before doing anything here. # Please check with rel-eng before doing anything here.
- name: make sign-vault server vm (secondary and stg only) - name: make sign-vault server vm (secondary and stg only)
hosts: secondary-vault01.phx2.fedoraproject.org:sign-vault01.stg.phx2.fedoraproject.org hosts: secondary-vault01.phx2.fedoraproject.org:sign-vault01.stg.phx2.fedoraproject.org
@ -27,7 +27,7 @@
user: root user: root
gather_facts: true gather_facts: true
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

2
playbooks/rdiff-backup.yml
View file

@ -10,7 +10,7 @@
serial: 10 serial: 10
# host_backup_targets set in host_vars or group_vars # host_backup_targets set in host_vars or group_vars
# global_backup_targets can be defined in vars, group_vars/all or anywhere # global_backup_targets can be defined in vars, group_vars/all or anywhere
# take the 'echo' out below for it to actually run # take the 'echo' out below for it to actually run
# FIXME - see how this copes with timeouts # FIXME - see how this copes with timeouts
# FIXME - storing/reporting results and output? # FIXME - storing/reporting results and output?
# FIXME - coping with errors? # FIXME - coping with errors?

2
playbooks/rkhunter_only.yml
View file

@ -9,7 +9,7 @@
command: /usr/bin/test -f /usr/bin/rkhunter command: /usr/bin/test -f /usr/bin/rkhunter
register: rkhunter register: rkhunter
ignore_errors: true ignore_errors: true
- name: run rkhunter --propupd - name: run rkhunter --propupd
command: /usr/bin/rkhunter --propupd command: /usr/bin/rkhunter --propupd
when: rkhunter|success when: rkhunter|success

4
playbooks/rkhunter_update.yml
View file

@ -7,7 +7,7 @@
tasks: tasks:
- name: expire-caches - name: expire-caches
command: yum clean expire-cache command: yum clean expire-cache
- name: yum -y {{ yumcommand }} - name: yum -y {{ yumcommand }}
command: yum -y {{ yumcommand }} command: yum -y {{ yumcommand }}
async: 7200 async: 7200
@ -17,7 +17,7 @@
command: /usr/bin/test -f /usr/bin/rkhunter command: /usr/bin/test -f /usr/bin/rkhunter
register: rkhunter register: rkhunter
ignore_errors: true ignore_errors: true
- name: run rkhunter --propupd - name: run rkhunter --propupd
command: /usr/bin/rkhunter --propupd command: /usr/bin/rkhunter --propupd
when: rkhunter|success when: rkhunter|success

4
playbooks/run_pkgdb_sync_git.yml
View file

@ -1,11 +1,11 @@
# Run `pkgdb2branch` on # Run `pkgdb2branch` on
# #
#To update from testing, adjust as follow: #To update from testing, adjust as follow:
# --extra-vars="package='pkg1:pkg2:pkg3'" # --extra-vars="package='pkg1:pkg2:pkg3'"
- name: run pkgdb_sync_git_branches.py - name: run pkgdb_sync_git_branches.py
hosts: pkgs01.phx2.fedoraproject.org hosts: pkgs01.phx2.fedoraproject.org
user: root user: root
serial: 25 serial: 25
gather_facts: False gather_facts: False

4
playbooks/set_root_auth_keys.yml
View file

@ -4,7 +4,7 @@
user: root user: root
gather_facts: False gather_facts: False
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -14,5 +14,5 @@
tasks: tasks:
- name: add root keys for sysadmin-main and other allowed users - name: add root keys for sysadmin-main and other allowed users
action: authorized_key user=root key={{ item }} action: authorized_key user=root key={{ item }}
with_lines: with_lines:
- "{{ auth_keys_from_fas}} @sysadmin-main {{ root_auth_users }}" - "{{ auth_keys_from_fas}} @sysadmin-main {{ root_auth_users }}"

14
playbooks/transient_cloud_instance.yml
View file

@ -1,16 +1,16 @@
# #
# setup a transient instance in the Fedora infrastructure private cloud # setup a transient instance in the Fedora infrastructure private cloud
# #
# This playbook is used to spin up a transient instance for someone to test something. # This playbook is used to spin up a transient instance for someone to test something.
# In particular transient instances will all be terminated at least by the next # In particular transient instances will all be terminated at least by the next
# maint window for the cloud, but ideally people will terminate instances they # maint window for the cloud, but ideally people will terminate instances they
# are done using. # are done using.
# #
# If you have an application or longer term item that should always be around # If you have an application or longer term item that should always be around
# please use the persistent playbook instead. # please use the persistent playbook instead.
# #
# You MUST pass a name to it, ie: -e 'name=somethingdescriptive' # You MUST pass a name to it, ie: -e 'name=somethingdescriptive'
# You can optionally override defaults by passing any of the following: # You can optionally override defaults by passing any of the following:
# image=imagename (default is centos70_x86_64) # image=imagename (default is centos70_x86_64)
# instance_type=some instance type (default is m1.small) # instance_type=some instance type (default is m1.small)
# root_auth_users='user1 user2 user3' (default is sysadmin-main group) # root_auth_users='user1 user2 user3' (default is sysadmin-main group)
@ -58,10 +58,10 @@
- name: provision instance - name: provision instance
hosts: tmp_just_created hosts: tmp_just_created
gather_facts: True gather_facts: True
environment: environment:
ANSIBLE_HOST_KEY_CHECKING: False ANSIBLE_HOST_KEY_CHECKING: False
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

4
playbooks/update-proxy-dns.yml
View file

@ -7,7 +7,7 @@
hosts: "{{ proxies }}" hosts: "{{ proxies }}"
user: root user: root
serial: 1 serial: 1
vars_files: vars_files:
- /srv/web/infra/ansible/vars/global.yml - /srv/web/infra/ansible/vars/global.yml
- "/srv/private/ansible/vars.yml" - "/srv/private/ansible/vars.yml"
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
@ -48,7 +48,7 @@
- name: Push our changes back - name: Push our changes back
local_action: command git push chdir={{tmp.stdout}} local_action: command git push chdir={{tmp.stdout}}
when: nodns is not defined or not "true" in nodns when: nodns is not defined or not "true" in nodns
- name: Destroy our temporary clone of /git/dns/ in /var/tmp/dns-checkout.... - name: Destroy our temporary clone of /git/dns/ in /var/tmp/dns-checkout....
local_action: file dest={{tmp.stdout}} state=absent local_action: file dest={{tmp.stdout}} state=absent
when: nodns is not defined or not "true" in nodns when: nodns is not defined or not "true" in nodns

6
playbooks/vhost_reboot.yml
View file

@ -1,6 +1,6 @@
# #
# This playbook lets you safely reboot a virthost and all it's guests. # This playbook lets you safely reboot a virthost and all it's guests.
# #
# requires --extra-vars="target=somevhost fqdn" # requires --extra-vars="target=somevhost fqdn"
# Might add nodns=true or nonagios=true to the extra vars # Might add nodns=true or nonagios=true to the extra vars
@ -13,7 +13,7 @@
# third play, reboot the vhost # third play, reboot the vhost
# wait for vhost to come back # wait for vhost to come back
# TODO: Figure out how to compare virt info pre and post boot. # TODO: Figure out how to compare virt info pre and post boot.
- name: find instances - name: find instances
hosts: "{{ target }}" hosts: "{{ target }}"

2
playbooks/vhost_update.yml
View file

@ -1,4 +1,4 @@
# This playboook updates a virthost and all it's guests. # This playboook updates a virthost and all it's guests.
# #
# requires --extra-vars="target=somevhostname yumcommand=update" # requires --extra-vars="target=somevhostname yumcommand=update"
# Might add nodns=true or nonagios=true at extra-vars # Might add nodns=true or nonagios=true at extra-vars

2
roles/ansible-server/tasks/main.yml
View file

@ -22,7 +22,7 @@
- ansible-server - ansible-server
# #
# TODO: # TODO:
# cgit? # cgit?
# rbac-playbook? # rbac-playbook?
# zodbot notifications? # zodbot notifications?
# #

10
roles/apache/tasks/main.yml
View file

@ -29,9 +29,9 @@
tags: tags:
- service - service
- apache - apache
# install hash randomization hotfix # install hash randomization hotfix
- name: hotfix - copy over new httpd init script - name: hotfix - copy over new httpd init script
copy: src="{{ files }}/hotfix/httpd/httpd.init" dest=/etc/init.d/httpd copy: src="{{ files }}/hotfix/httpd/httpd.init" dest=/etc/init.d/httpd
owner=root group=root mode=0755 owner=root group=root mode=0755
notify: notify:
@ -65,7 +65,7 @@
template: src="{{ files }}/httpd/headers.conf.j2" dest=/etc/httpd/conf.d/headers.conf template: src="{{ files }}/httpd/headers.conf.j2" dest=/etc/httpd/conf.d/headers.conf
notify: notify:
- reload apache - reload apache
tags: tags:
- config - config
- apache - apache
@ -73,10 +73,10 @@
template: src="{{ files }}/httpd/apachestatus.conf" dest=/etc/httpd/conf.d/apachestatus.conf template: src="{{ files }}/httpd/apachestatus.conf" dest=/etc/httpd/conf.d/apachestatus.conf
notify: notify:
- reload apache - reload apache
tags: tags:
- config - config
- apache - apache
- name: setup logrotate to our needs - name: setup logrotate to our needs
copy: src="{{ files }}/httpd/httpd.logrotate" dest=/etc/logrotate.d/httpd copy: src="{{ files }}/httpd/httpd.logrotate" dest=/etc/logrotate.d/httpd
tags: tags:

4
roles/ask/tasks/main.yml
View file

@ -1,6 +1,6 @@
--- ---
# #
# Setup askbot for ask.fedoraproject.org site. # Setup askbot for ask.fedoraproject.org site.
# #
- name: install needed packages - name: install needed packages
yum: pkg={{ item }} state=present yum: pkg={{ item }} state=present
@ -106,7 +106,7 @@
copy: > copy: >
src={{ item }} dest=/etc/cron.d/{{ item }} src={{ item }} dest=/etc/cron.d/{{ item }}
owner=root group=root mode=0644 owner=root group=root mode=0644
with_items: with_items:
- cron-ask-send-reminders - cron-ask-send-reminders
- cron-post-office-send-mail - cron-post-office-send-mail
- cron-post-office-send-daily - cron-post-office-send-daily

2
roles/awstats/tasks/main.yml
View file

@ -26,4 +26,4 @@
- awstats - awstats
#- name: set up http configs for awstats on dataserver #- name: set up http configs for awstats on dataserver

8
roles/base/tasks/main.yml
View file

@ -61,7 +61,7 @@
with_items: with_items:
- "{{ ansible_interfaces }}" - "{{ ansible_interfaces }}"
notify: notify:
# - restart NetworkManager # - restart NetworkManager
- reload NetworkManager-connections - reload NetworkManager-connections
- apply interface-changes - apply interface-changes
when: (virthost is not defined) and (not item.startswith('tun')) and (not item.startswith('virbr')) and (not item.startswith('vnet')) and (hostvars[inventory_hostname]['ansible_' + item.replace('-','_')]['type'] == 'ether') and (ansible_distribution_major_version|int >=7) and hostvars[inventory_hostname]['ansible_' + item.replace('-','_')]['active'] and nmclitest|success and ( not ansible_ifcfg_blacklist ) and ( ansible_ifcfg_whitelist is not defined or item in ansible_ifcfg_whitelist ) when: (virthost is not defined) and (not item.startswith('tun')) and (not item.startswith('virbr')) and (not item.startswith('vnet')) and (hostvars[inventory_hostname]['ansible_' + item.replace('-','_')]['type'] == 'ether') and (ansible_distribution_major_version|int >=7) and hostvars[inventory_hostname]['ansible_' + item.replace('-','_')]['active'] and nmclitest|success and ( not ansible_ifcfg_blacklist ) and ( ansible_ifcfg_whitelist is not defined or item in ansible_ifcfg_whitelist )
@ -324,7 +324,7 @@
- base - base
# #
# Blacklist the cdc_ether module as we don't want it loading mgmt usb0 and spewing to logs. # Blacklist the cdc_ether module as we don't want it loading mgmt usb0 and spewing to logs.
# #
- name: Blacklist cdc_ether module - name: Blacklist cdc_ether module
copy: src=blacklist-cdc_ether.conf dest=/etc/modprobe.d/blacklist-cdc_ether.conf copy: src=blacklist-cdc_ether.conf dest=/etc/modprobe.d/blacklist-cdc_ether.conf
@ -350,7 +350,7 @@
owner=root owner=root
group=root group=root
mode=644 mode=644
when: env == 'staging' when: env == 'staging'
tags: tags:
- base - base
- config - config
@ -365,7 +365,7 @@
owner=root owner=root
group=root group=root
mode=644 mode=644
when: env == 'production' when: env == 'production'
tags: tags:
- base - base
- config - config

12
roles/batcave/tasks/main.yml
View file

@ -70,7 +70,7 @@
- config - config
# #
# This is our ansible master, setup ansible # This is our ansible master, setup ansible
# #
@ -80,12 +80,12 @@
- batcave - batcave
- config - config
- name: run daily logview report for ansible actions. - name: run daily logview report for ansible actions.
copy: src=logview.cron dest=/etc/cron.daily/logview.cron mode=0755 copy: src=logview.cron dest=/etc/cron.daily/logview.cron mode=0755
tags: tags:
- batcave - batcave
- config - config
- name: setup cron for daily ticketkey reollover - name: setup cron for daily ticketkey reollover
copy: src=ticketkey.cron dest=/etc/cron.daily/ticketkey.cron mode=0755 copy: src=ticketkey.cron dest=/etc/cron.daily/ticketkey.cron mode=0755
tags: tags:
@ -187,7 +187,7 @@
- config - config
# #
# This script checks all the virthosts and logs what guests they are running. # This script checks all the virthosts and logs what guests they are running.
# #
- name: install vmdiff.sh cron - name: install vmdiff.sh cron
@ -286,8 +286,8 @@
- config - config
# #
# Setup geoip scripts. # Setup geoip scripts.
# Other machines pull current geoip data from here. # Other machines pull current geoip data from here.
# #
- name: Install geoip download databases script - name: Install geoip download databases script

2
roles/bugzilla2fedmsg/tasks/main.yml
View file

@ -39,7 +39,7 @@
dest=/etc/moksha/production.ini dest=/etc/moksha/production.ini
owner=fedmsg owner=fedmsg
group=fedmsg group=fedmsg
mode=0640 mode=0640
notify: notify:
- restart moksha-hub - restart moksha-hub
tags: tags:

2
roles/datagrepper/tasks/main.yml
View file

@ -41,7 +41,7 @@
- packages - packages
- datagrepper - datagrepper
- name: setting up httpd config - name: setting up httpd config
template: src=datagrepper-app.conf dest=/etc/httpd/conf.d/datagrepper.conf owner=root group=root template: src=datagrepper-app.conf dest=/etc/httpd/conf.d/datagrepper.conf owner=root group=root
notify: notify:
- reload httpd - reload httpd

2
roles/debug_env/tasks/main.yml
View file

@ -1,5 +1,5 @@
# #
# This role can be added to a playbook to dump out all # This role can be added to a playbook to dump out all
# the env from ansible to see what variables and facts are. # the env from ansible to see what variables and facts are.
# Taken from https://coderwall.com/p/13lh6w # Taken from https://coderwall.com/p/13lh6w
# #

Some files were not shown because too many files have changed in this diff Show more