infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

ipa/client: enable for odcs in prod

Browse source 
Signed-off-by: Nils Philippsen <nils@redhat.com>
This commit is contained in:
Nils Philippsen 2021-03-19 17:25:38 +01:00
parent 40a5fed45e
commit 202715dbc8
4 changed files with 2 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

1
inventory/group_vars/odcs
View file

@ -1,3 +1,4 @@
primary_auth_source: ipa
ipa_host_group: odcs ipa_host_group: odcs
ipa_host_group_desc: On Demand Compose Service ipa_host_group_desc: On Demand Compose Service
ipa_client_shell_groups: ipa_client_shell_groups:

2
inventory/group_vars/odcs_backend
View file

@ -28,8 +28,6 @@ nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3"
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-odcs,sysadmin-veteran
fedmsg_hub_auto_restart: False fedmsg_hub_auto_restart: False
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml

2
inventory/group_vars/odcs_frontend
View file

@ -21,8 +21,6 @@ udp_ports: [ 111 ]
# Neeed for rsync from log01 for logs. # Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ] custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-odcs,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml # These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs: fedmsg_certs:
- service: odcs - service: odcs

5
playbooks/groups/odcs.yml
View file

@ -18,15 +18,12 @@
- rkhunter - rkhunter
- nagios_client - nagios_client
- hosts - hosts
- { role: fas_client, when: env != "staging" } - ipa/client
- { role: ipa/client, when: env == "staging" }
- rsyncd - rsyncd
- sudo - sudo
- collectd/base - collectd/base
tasks: tasks:
- import_tasks: "{{ tasks_path }}/2fa_client.yml"
when: env != "staging"
- import_tasks: "{{ tasks_path }}/motd.yml" - import_tasks: "{{ tasks_path }}/motd.yml"
handlers: handlers: