Add in secondary bridge/vault to ansible and spin anew

inventory/group_vars/sign-bridge

@@ -3,11 +3,11 @@ freezes: true
 postfix_group: sign
 
 # Define resources for this group of hosts here. 
-lvm_size: 10000
+lvm_size: 50000
 mem_size: 4096
 num_cpus: 4
 
-tcp_ports: [ 22, 44333, 44334 ]
+tcp_ports: [ 44333, 44334 ]
 
 fas_client_groups: sysadmin-releng
 sudoers: "{{ private }}/files/sudo/arm-releng-sudoers"

inventory/host_vars/secondary-bridge01.qa.fedoraproject.org

@@ -0,0 +1,12 @@
+---
+nm: 255.255.255.0
+gw: 10.5.124.254
+dns: 10.5.126.21
+
+ks_url: http://10.5.126.23/repo/rhel/ks/kvm-rhel-7
+ks_repo: http://10.5.126.23/repo/rhel/RHEL7-x86_64/
+volgroup: /dev/VirtGuests
+vmhost: virthost-comm03.qa.fedoraproject.org
+datacenter: phx2
+
+eth0_ip: 10.5.124.145

inventory/host_vars/secondary-vault01.qa.fedoraproject.org

@@ -0,0 +1,12 @@
+---
+nm: 255.255.255.0
+gw: 10.5.124.254
+dns: 10.5.126.21
+
+ks_url: http://10.5.126.23/repo/rhel/ks/kvm-rhel-7
+ks_repo: http://10.5.126.23/repo/rhel/RHEL7-x86_64/
+volgroup: /dev/vg_guests
+vmhost: virthost-comm04.qa.fedoraproject.org
+datacenter: phx2
+
+eth0_ip: 10.5.124.146

inventory/inventory

@@ -191,12 +191,14 @@ composer.stg.phx2.fedoraproject.org
 
 [sign-bridge]
 sign-bridge01.phx2.fedoraproject.org
+secondary-bridge01.qa.fedoraproject.org
 #
 # sign vault servers don't listen to ssh by default.
 #
 #[sign-vault]
 #sign-vault03.phx2.fedoraproject.org
 #sign-vault04.phx2.fedoraproject.org
+secondary-vault01.qa.fedoraproject.org
 
 [autosign]
 autosign01.phx2.fedoraproject.org

playbooks/manual/sign-vault.yml

@@ -6,6 +6,22 @@
 # Access is via management interface only. This playbook does initial setup. 
 # Please check with rel-eng before doing anything here. 
 
+- name: make sign-vault server vm (secondary only)
+  hosts: secondary-vault01.qa.fedoraproject.org
+  user: root
+  gather_facts: False
+
+  vars_files:
+   - /srv/web/infra/ansible/vars/global.yml
+   - "/srv/private/ansible/vars.yml"
+   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
+
+  tasks:
+  - include: "{{ tasks }}/virt_instance_create.yml"
+
+  handlers:
+  - include: "{{ handlers }}/restart_services.yml"
+
 - name: make sign vault server
   hosts: sign-vault
   user: root