The great phx2 pruning run (1st cut).

Since we no longer have any machines in phx2, I have tried to remove
them from ansible. Note that there are still some places where we need
to remove them still: nagios, dhcp, named were not touched, and in cases
where it wasn't pretty clear what a conditional was doing I left it to
be cleaned up later.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2020-06-14 14:14:31 -07:00
parent 07d773e65c
commit 7984b46eb7
435 changed files with 282 additions and 5397 deletions

View file

@ -1,21 +0,0 @@
pam_url:
{
settings:
{
url = "https://fas-all.phx2.fedoraproject.org:8443/"; # URI to fetch
returncode = "OK"; # The remote script/cgi should return a 200 http code and this string as its only results
userfield = "user"; # userfield name to send
passwdfield = "token"; # passwdfield name to send
extradata = "&do=login"; # extradata to send
prompt = "Password+Token: "; # password prompt
};
ssl:
{
verify_peer = true; # Should we verify SSL ?
verify_host = true; # Should we verify the CN in the SSL cert?
client_cert = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side certificate
client_key = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side key (can be same file as above if a single cert)
ca_cert = "/etc/pki/tls/private/totpcgi-ca.cert";
};
};

View file

@ -1,21 +0,0 @@
pam_url:
{
settings:
{
url = "https://fas-all.phx2.fedoraproject.org:8443/"; # URI to fetch
returncode = "OK"; # The remote script/cgi should return a 200 http code and this string as its only results
userfield = "user"; # userfield name to send
passwdfield = "token"; # passwdfield name to send
extradata = "&do=login"; # extradata to send
prompt = "Password+Token: "; # password prompt
};
ssl:
{
verify_peer = true; # Should we verify SSL ?
verify_host = true; # Should we verify the CN in the SSL cert?
client_cert = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side certificate
client_key = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side key (can be same file as above if a single cert)
ca_cert = "/etc/pki/tls/private/totpcgi-ca.cert";
};
};

View file

@ -4,8 +4,6 @@ pam_url:
{
{% if env == 'staging' %}
url = "https://fas-all.stg.phx2.fedoraproject.org:8443/"; # URI to fetch
{% elif datacenter == 'phx2' %}
url = "https://fas-all.phx2.fedoraproject.org:8443/"; # URI to fetch
{% elif datacenter == 'iad2' %}
url = "https://fas-all.iad2.fedoraproject.org:8443/"; # URI to fetch
{% else %}

View file

@ -1,27 +0,0 @@
pam_url:
{
settings:
{
{% if env == 'staging' %}
url = "https://fas-all.stg.phx2.fedoraproject.org:8443/"; # URI to fetch
{% elif datacenter == 'phx2' %}
url = "https://fas-all.phx2.fedoraproject.org:8443/"; # URI to fetch
{% else %}
url = "https://fas-all.vpn.fedoraproject.org:8443/"; # URI to fetch
{% endif %}
returncode = "OK"; # The remote script/cgi should return a 200 http code and this string as its only results
userfield = "user"; # userfield name to send
passwdfield = "token"; # passwdfield name to send
extradata = "&do=login"; # extradata to send
prompt = "Password+Token: "; # password prompt
};
ssl:
{
verify_peer = true; # Should we verify SSL ?
verify_host = true; # Should we verify the CN in the SSL cert?
client_cert = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side certificate
client_key = "/etc/pki/tls/private/totpcgi.pem"; # file to use as client-side key (can be same file as above if a single cert)
ca_cert = "/etc/pki/tls/private/totpcgi-ca.cert";
};
};

View file

@ -1,25 +0,0 @@
---
# group variables for all hosts in iad2 datacenter
dns1: "10.5.126.21"
dns2: "10.5.126.22"
datacenter: phx2
#preferred_dc: phx2
ipa_server: ipa01.phx2.fedoraproject.org
# for now, lets not monitor any of them from phx2.
nagios_Can_Connect: false
nagios_Check_Services:
mail: false
nrpe: false
sshd: false
swap: false
ping: false
raid: false
certbot_datacenter: phx2
nagios_server: noc01.phx2.fedoraproject.org

View file

@ -1,30 +1,30 @@
[dells]
osuosl01.fedoraproject.org
bvirthost01.phx2.fedoraproject.org
## bvirthost01.phx2.fedoraproject.org
# bvirthost01.stg.phx2.fedoraproject.org
bvirthost04.phx2.fedoraproject.org
bvirthost05.phx2.fedoraproject.org
bvirthost12.phx2.fedoraproject.org
bvirthost13.phx2.fedoraproject.org
bvirthost14.phx2.fedoraproject.org
bvirthost15.phx2.fedoraproject.org
## bvirthost04.phx2.fedoraproject.org
## bvirthost05.phx2.fedoraproject.org
## bvirthost12.phx2.fedoraproject.org
## bvirthost13.phx2.fedoraproject.org
## bvirthost14.phx2.fedoraproject.org
## bvirthost15.phx2.fedoraproject.org
# virthost01.stg.phx2.fedoraproject.org
# virthost02.stg.phx2.fedoraproject.org
# virthost03.stg.phx2.fedoraproject.org
# virthost04.stg.phx2.fedoraproject.org
# virthost05.stg.phx2.fedoraproject.org
virthost01.phx2.fedoraproject.org
virthost02.phx2.fedoraproject.org
## virthost01.phx2.fedoraproject.org
## virthost02.phx2.fedoraproject.org
#autosign02.phx2.fedoraproject.org
virthost04.phx2.fedoraproject.org
virthost12.phx2.fedoraproject.org
virthost14.phx2.fedoraproject.org
virthost15.phx2.fedoraproject.org
virthost17.phx2.fedoraproject.org
virthost18.phx2.fedoraproject.org
virthost19.phx2.fedoraproject.org
virthost21.phx2.fedoraproject.org
virthost22.phx2.fedoraproject.org
## virthost04.phx2.fedoraproject.org
## virthost12.phx2.fedoraproject.org
## virthost14.phx2.fedoraproject.org
## virthost15.phx2.fedoraproject.org
## virthost17.phx2.fedoraproject.org
## virthost18.phx2.fedoraproject.org
## virthost19.phx2.fedoraproject.org
## virthost21.phx2.fedoraproject.org
## virthost22.phx2.fedoraproject.org
ibiblio01.fedoraproject.org
#ibiblio04.fedoraproject.org
ibiblio05.fedoraproject.org
@ -33,110 +33,78 @@ virthost-comm03.qa.fedoraproject.org
virthost-comm04.qa.fedoraproject.org
#osuosl03.fedoraproject.org
# ssh often disabled
#autosign01.phx2.fedoraproject.org
#autosign01.iad2.fedoraproject.org
virthost-rdu01.fedoraproject.org
#virthost-rdu02.fedoraproject.org
virthost-cc-rdu01.fedoraproject.org
virthost-cc-rdu02.fedoraproject.org
buildhw-01.phx2.fedoraproject.org
buildhw-02.phx2.fedoraproject.org
buildhw-03.phx2.fedoraproject.org
buildhw-04.phx2.fedoraproject.org
buildhw-05.phx2.fedoraproject.org
buildhw-06.phx2.fedoraproject.org
buildhw-07.phx2.fedoraproject.org
buildhw-08.phx2.fedoraproject.org
buildhw-09.phx2.fedoraproject.org
buildhw-10.phx2.fedoraproject.org
buildvmhost-01.phx2.fedoraproject.org
buildvmhost-02.phx2.fedoraproject.org
buildvmhost-03.phx2.fedoraproject.org
buildvmhost-04.phx2.fedoraproject.org
qa01.qa.fedoraproject.org
qa02.qa.fedoraproject.org
qa09.qa.fedoraproject.org
qa14.qa.fedoraproject.org
bkernel03.phx2.fedoraproject.org
##buildhw-01.phx2.fedoraproject.org
##buildhw-02.phx2.fedoraproject.org
##buildhw-03.phx2.fedoraproject.org
##buildhw-04.phx2.fedoraproject.org
##buildhw-05.phx2.fedoraproject.org
##buildhw-06.phx2.fedoraproject.org
##buildhw-07.phx2.fedoraproject.org
##buildhw-08.phx2.fedoraproject.org
##buildhw-09.phx2.fedoraproject.org
##buildhw-10.phx2.fedoraproject.org
##buildvmhost-01.phx2.fedoraproject.org
##buildvmhost-02.phx2.fedoraproject.org
##buildvmhost-03.phx2.fedoraproject.org
##buildvmhost-04.phx2.fedoraproject.org
##qa01.qa.fedoraproject.org
##qa02.qa.fedoraproject.org
##qa09.qa.fedoraproject.org
##qa14.qa.fedoraproject.org
##bkernel03.phx2.fedoraproject.org
#bkernel04.phx2.fedoraproject.org
[ibms]
virthost-cc-rdu03.fedoraproject.org
osuosl02.fedoraproject.org
data-analysis01.phx2.fedoraproject.org
##data-analysis01.phx2.fedoraproject.org
download-rdu01.fedoraproject.org
[powerpc]
ppc8-01.ppc.fedoraproject.org
ppc8-02.ppc.fedoraproject.org
ppc8-03.ppc.fedoraproject.org
ppc8-04.ppc.fedoraproject.org
[moonshot]
#aarch64-c01n1.arm.fedoraproject.org
#aarch64-c02n1.arm.fedoraproject.org
#aarch64-c03n1.arm.fedoraproject.org
#aarch64-c04n1.arm.fedoraproject.org
#aarch64-c05n1.arm.fedoraproject.org
#aarch64-c06n1.arm.fedoraproject.org
#aarch64-c07n1.arm.fedoraproject.org
#aarch64-c08n1.arm.fedoraproject.org
#aarch64-c09n1.arm.fedoraproject.org
#aarch64-c10n1.arm.fedoraproject.org
#aarch64-c11n1.arm.fedoraproject.org
#aarch64-c12n1.arm.fedoraproject.org
#aarch64-c13n1.arm.fedoraproject.org
#aarch64-c14n1.arm.fedoraproject.org
#aarch64-c15n1.arm.fedoraproject.org
#aarch64-c16n1.arm.fedoraproject.org
#aarch64-c17n1.arm.fedoraproject.org
#aarch64-c18n1.arm.fedoraproject.org
#aarch64-c19n1.arm.fedoraproject.org
#aarch64-c20n1.arm.fedoraproject.org
#aarch64-c21n1.arm.fedoraproject.org
#aarch64-c22n1.arm.fedoraproject.org
#aarch64-c23n1.arm.fedoraproject.org
#aarch64-c24n1.arm.fedoraproject.org
#aarch64-c25n1.arm.fedoraproject.org
aarch64-c26n1-oqa.arm.fedoraproject.org
aarch64-c27n1-oqa.arm.fedoraproject.org
aarch64-c28n1-oqa.arm.fedoraproject.org
aarch64-c29n1-oqa.arm.fedoraproject.org
aarch64-c30n1-oqa.arm.fedoraproject.org
##ppc8-01.ppc.fedoraproject.org
##ppc8-02.ppc.fedoraproject.org
##ppc8-03.ppc.fedoraproject.org
##ppc8-04.ppc.fedoraproject.org
[appliedmicro]
# buildhw-aarch64-01.arm.fedoraproject.org
buildhw-aarch64-02.arm.fedoraproject.org
buildhw-aarch64-03.arm.fedoraproject.org
buildhw-aarch64-04.arm.fedoraproject.org
buildhw-aarch64-05.arm.fedoraproject.org
buildhw-aarch64-06.arm.fedoraproject.org
buildhw-aarch64-07.arm.fedoraproject.org
buildhw-aarch64-08.arm.fedoraproject.org
##buildhw-aarch64-02.arm.fedoraproject.org
##buildhw-aarch64-03.arm.fedoraproject.org
##buildhw-aarch64-04.arm.fedoraproject.org
##buildhw-aarch64-05.arm.fedoraproject.org
##buildhw-aarch64-06.arm.fedoraproject.org
##buildhw-aarch64-07.arm.fedoraproject.org
##buildhw-aarch64-08.arm.fedoraproject.org
# [storinator]
# storinator01.fedorainfracloud.org
[cavium]
# 2 thunderx2 machines on loan for builders
buildvmhost-aarch64-01.arm.fedoraproject.org
buildvmhost-aarch64-02.arm.fedoraproject.org
##buildvmhost-aarch64-01.arm.fedoraproject.org
##buildvmhost-aarch64-02.arm.fedoraproject.org
# 2 thunderx1 machines on loan for copr builders
# virthost-aarch64-os01.fedorainfracloud.org
# virthost-aarch64-os02.fedorainfracloud.org
[emag]
buildvmhost-aarch64-10.arm.fedoraproject.org
buildvmhost-aarch64-11.arm.fedoraproject.org
buildvmhost-aarch64-12.arm.fedoraproject.org
buildvmhost-aarch64-13.arm.fedoraproject.org
buildvmhost-aarch64-14.arm.fedoraproject.org
buildvmhost-aarch64-15.arm.fedoraproject.org
buildvmhost-aarch64-16.arm.fedoraproject.org
buildvmhost-aarch64-17.arm.fedoraproject.org
buildvmhost-aarch64-18.arm.fedoraproject.org
buildvmhost-a64-osbs-01.arm.fedoraproject.org
openqa-aarch64-01.qa.fedoraproject.org
openqa-aarch64-03.qa.fedoraproject.org
##buildvmhost-aarch64-10.arm.fedoraproject.org
##buildvmhost-aarch64-11.arm.fedoraproject.org
##buildvmhost-aarch64-12.arm.fedoraproject.org
##buildvmhost-aarch64-13.arm.fedoraproject.org
##buildvmhost-aarch64-14.arm.fedoraproject.org
##buildvmhost-aarch64-15.arm.fedoraproject.org
##buildvmhost-aarch64-16.arm.fedoraproject.org
##buildvmhost-aarch64-17.arm.fedoraproject.org
##buildvmhost-aarch64-18.arm.fedoraproject.org
##buildvmhost-a64-osbs-01.arm.fedoraproject.org
##openqa-aarch64-01.qa.fedoraproject.org
##openqa-aarch64-03.qa.fedoraproject.org
bvmhost-a64-01.iad2.fedoraproject.org
bvmhost-a64-02.iad2.fedoraproject.org
bvmhost-a64-03.iad2.fedoraproject.org

View file

@ -1,3 +0,0 @@
---
# This virthost only has stg instances, so it doesn't freeze
freezes: false

View file

@ -1,35 +0,0 @@
---
eth0_ip: 10.5.129.126
gw: 10.5.129.254
nm: 255.255.255.0
dns: 10.5.126.21
datacenter: phx2
fas_client_groups: sysadmin-qa,sysadmin-main,sysadmin-noc,fi-apprentice,sysadmin-veteran,sysadmin-secondary
nrpe_procs_warn: 250
nrpe_procs_crit: 300
sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
# openQA tap worker hosts (like this one) do stuff with ifcfg that base
# doesn't understand. terrible, terrible stuff. seriously - it doesn't
# handle the openvswitch config well. so let's tell it to just configure
# the regular interfaces (which on this system is eth0 and eth1) for us,
# disabling all but the one we want to use (eth0), and leave everything
# else alone.
ansible_ifcfg_allowlist: ['eth0', 'eth1']
ansible_ifcfg_disabled: ['eth1']
# 5 is pushing it a bit, but we need 5 simultaneous tap workers for
# the server-dvd-iso support_server test cluster...
openqa_workers: 5
# firewall ports for server->worker websockets connections
# this port is 'QEMUPORT plus 1'
# QEMUPORT is:
# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
tcp_ports: ['20013', '20023', '20033', '20043']
# has an HW RNG, so let's have rngd
openqa_rngd: True

View file

@ -1,31 +0,0 @@
---
eth0_ip: 10.5.129.127
gw: 10.5.129.254
nm: 255.255.255.0
dns: 10.5.126.21
datacenter: phx2
fas_client_groups: sysadmin-qa,sysadmin-main,sysadmin-noc,fi-apprentice,sysadmin-veteran,sysadmin-secondary
nrpe_procs_warn: 250
nrpe_procs_crit: 300
sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
# openQA tap worker hosts (like this one) do stuff with ifcfg that base
# doesn't understand. terrible, terrible stuff. seriously - it doesn't
# handle the openvswitch config well. so let's tell it to just configure
# the actual connected interface (which on this system is eth0) for us
# and leave everything else alone.
ansible_ifcfg_allowlist: ['eth0']
openqa_workers: 4
# firewall ports for server->worker websockets connections
# this port is 'QEMUPORT plus 1'
# QEMUPORT is:
# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
tcp_ports: ['20013', '20023', '20033', '20043']
# has an HW RNG, so let's have rngd
openqa_rngd: True

View file

@ -1,31 +0,0 @@
---
eth0_ip: 10.5.129.128
gw: 10.5.129.254
nm: 255.255.255.0
dns: 10.5.126.21
datacenter: phx2
fas_client_groups: sysadmin-qa,sysadmin-main,sysadmin-noc,fi-apprentice,sysadmin-veteran,sysadmin-secondary
nrpe_procs_warn: 250
nrpe_procs_crit: 300
sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
# openQA tap worker hosts (like this one) do stuff with ifcfg that base
# doesn't understand. terrible, terrible stuff. seriously - it doesn't
# handle the openvswitch config well. so let's tell it to just configure
# the actual connected interface (which on this system is eth0) for us
# and leave everything else alone.
ansible_ifcfg_allowlist: ['eth0']
openqa_workers: 4
# firewall ports for server->worker websockets connections
# this port is 'QEMUPORT plus 1'
# QEMUPORT is:
# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
tcp_ports: ['20013', '20023', '20033', '20043']
# has an HW RNG, so let's have rngd
openqa_rngd: True

View file

@ -1,31 +0,0 @@
---
eth0_ip: 10.5.129.129
gw: 10.5.129.254
nm: 255.255.255.0
dns: 10.5.126.21
datacenter: phx2
fas_client_groups: sysadmin-qa,sysadmin-main,sysadmin-noc,fi-apprentice,sysadmin-veteran,sysadmin-secondary
nrpe_procs_warn: 250
nrpe_procs_crit: 300
sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
# openQA tap worker hosts (like this one) do stuff with ifcfg that base
# doesn't understand. terrible, terrible stuff. seriously - it doesn't
# handle the openvswitch config well. so let's tell it to just configure
# the actual connected interface (which on this system is eth0) for us
# and leave everything else alone.
ansible_ifcfg_allowlist: ['eth0']
openqa_workers: 4
# firewall ports for server->worker websockets connections
# this port is 'QEMUPORT plus 1'
# QEMUPORT is:
# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
tcp_ports: ['20013', '20023', '20033', '20043']
# has an HW RNG, so let's have rngd
openqa_rngd: True

View file

@ -1,31 +0,0 @@
---
eth0_ip: 10.5.129.130
gw: 10.5.129.254
nm: 255.255.255.0
dns: 10.5.126.21
datacenter: phx2
fas_client_groups: sysadmin-qa,sysadmin-main,sysadmin-noc,fi-apprentice,sysadmin-veteran,sysadmin-secondary
nrpe_procs_warn: 250
nrpe_procs_crit: 300
sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
# openQA tap worker hosts (like this one) do stuff with ifcfg that base
# doesn't understand. terrible, terrible stuff. seriously - it doesn't
# handle the openvswitch config well. so let's tell it to just configure
# the actual connected interface (which on this system is eth0) for us
# and leave everything else alone.
ansible_ifcfg_allowlist: ['eth0']
openqa_workers: 4
# firewall ports for server->worker websockets connections
# this port is 'QEMUPORT plus 1'
# QEMUPORT is:
# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
tcp_ports: ['20013', '20023', '20033', '20043']
# has an HW RNG, so let's have rngd
openqa_rngd: True

View file

@ -1,7 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.125.254
dns: 10.5.126.21
eth0_ip: 10.5.125.22
eth1_ip: 10.5.127.49
datacenter: phx2

View file

@ -1,11 +0,0 @@
---
nrpe_procs_warn: 1200
nrpe_procs_crit: 1400
datacenter: phx2
eth0_ip: 10.5.126.161
eth1_ip: 10.5.127.24
gw: 10.5.126.254
grokmirror_topdir: /fedora_backups/grokmirror

View file

@ -1,15 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.126.254
dns: 10.5.126.21
ks_url: http://10.5.126.23/repo/rhel/ks/kvm-rhel-7
ks_repo: http://10.5.126.23/repo/rhel/RHEL7-x86_64/
volgroup: /dev/vg_guests
eth0_ip: 10.5.126.100
vmhost: virthost19.phx2.fedoraproject.org
datacenter: phx2
# GDPR SAR variables
sar_script: /usr/local/bin/get-sar-person-details
sar_script_user: fedmsg
sar_output_file: badges.json

View file

@ -1,10 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.126.254
dns: 10.5.126.21
ks_url: http://10.5.126.23/repo/rhel/ks/kvm-rhel-7
ks_repo: http://10.5.126.23/repo/rhel/RHEL7-x86_64/
volgroup: /dev/vg_guests
eth0_ip: 10.5.126.101
vmhost: virthost21.phx2.fedoraproject.org
datacenter: phx2

View file

@ -1,10 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.126.254
dns: 10.5.126.21
ks_url: http://10.5.126.23/repo/rhel/ks/kvm-rhel-7
ks_repo: http://10.5.126.23/repo/rhel/RHEL7-x86_64/
volgroup: /dev/vg_guests00
eth0_ip: 10.5.126.102
vmhost: virthost15.phx2.fedoraproject.org
datacenter: phx2

View file

@ -1,12 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.126.254
dns: 10.5.126.21
ks_url: http://10.5.126.23/repo/rhel/ks/kvm-rhel-7
ks_repo: http://10.5.126.23/repo/rhel/RHEL7-x86_64/
volgroup: /dev/vg_guests
eth0_ip: 10.5.126.194
vmhost: virthost19.phx2.fedoraproject.org
datacenter: phx2

View file

@ -1,15 +0,0 @@
---
freezes: false
nm: 255.255.255.0
gw: 10.5.124.254
dns: 10.5.126.21
volgroup: /dev/VirtGuests
eth0_ip: 10.5.124.132
eth0_nm: 255.255.255.128
vmhost: virthost-comm03.qa.fedoraproject.org
datacenter: phx2
fas_client_groups: sysadmin-main,sysadmin-noc,sysadmin-qa,fi-apprentice,sysadmin-veteran,sysadmin-releng,sysadmin-kernel,arm-qa,sysadmin-centos,qa-automation-shell,sysadmin-troubleshoot,sysadmin-atomic,sysadmin-ppc,retrace

View file

@ -1,16 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.126.254
dns: 10.5.126.21
volgroup: /dev/vg_guests
eth0_ip: 10.5.126.12
vmhost: virthost02.phx2.fedoraproject.org
datacenter: phx2
vpn: true
ssh_hostnames:
- bastion.fedoraproject.org
- bastion01.fedoraproject.org

View file

@ -1,17 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.126.254
dns: 10.5.126.21
volgroup: /dev/vg_guests00
eth0_ip: 10.5.126.11
vmhost: virthost21.phx2.fedoraproject.org
datacenter: phx2
vpn: true
ssh_hostnames:
- bastion.fedoraproject.org
- bastion02.fedoraproject.org

View file

@ -1,34 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.126.254
dns: 10.5.126.21
ks_url: http://10.5.126.23/repo/rhel/ks/kvm-rhel-7
ks_repo: http://10.5.126.23/repo/rhel/RHEL7-x86_64/
volgroup: /dev/vg_guests
eth0_ip: 10.5.126.23
eth1_ip: 10.5.127.13
vmhost: virthost22.phx2.fedoraproject.org
datacenter: phx2
# This normally wouldn't be necessary, but when we were setting it up,
# reverse-dns was pointing elsewhere so we had to hardcode this.
fedmsg_fqdn: batcave01.phx2.fedoraproject.org
host_backup_targets: ['/git', '/mnt/fedora/app/attachments']
#
# We need this to install with 2 nics
#
virt_install_command: "{{ virt_install_command_two_nic }}"
# GDPR SAR variables - koji
sar_script: /usr/local/bin/koji_sar.py
sar_script_user: root
sar_output_file: koji.json
# Add VPN host name as alt name for SSH cert. Useful when you need to
# SSH into batcave through VPN, like from bastion in a different DC.
ssh_hostnames:
- batcave01.vpn.fedoraproject.org

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.81
eth1_ip: 10.5.127.129

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.82
eth1_ip: 10.5.127.144

View file

@ -1,13 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.126.254
dns: 10.5.126.21
ks_url: http://10.5.126.23/repo/rhel/ks/kvm-rhel-7
ks_repo: http://10.5.126.23/repo/rhel/RHEL7-x86_64/
volgroup: /dev/vg_guests00
eth0_ip: 10.5.126.53
vmhost: virthost15.phx2.fedoraproject.org
datacenter: phx2
# This is the master node in stg, so it runs the cron job
master_blockerbugs_node: True

View file

@ -1,13 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.126.254
dns: 10.5.126.21
ks_url: http://10.5.126.23/repo/rhel/ks/kvm-rhel-7
ks_repo: http://10.5.126.23/repo/rhel/RHEL7-x86_64/
volgroup: /dev/vg_guests00
eth0_ip: 10.5.126.54
vmhost: virthost15.phx2.fedoraproject.org
datacenter: phx2
# This is the secondary node
master_blockerbugs_node: False

View file

@ -1,93 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.125.254
dns: 10.5.126.21
ks_url: http://10.5.126.23/repo/rhel/ks/kvm-fedora-30
ks_repo: http://10.5.126.23/pub/fedora/linux/releases/30/Server/x86_64/os/
volgroup: /dev/vg_guests
eth0_ip: 10.5.125.135
eth1_ip: 10.5.127.61
vmhost: bvirthost15.phx2.fedoraproject.org
mem_size: 98304
max_mem_size: 98304
num_cpus: 30
# These set a config value in /etc/fedmsg.d/, see roles/bodhi2/base/
bodhi_masher_enabled: True
bodhi_updates_handler_enabled: False
bodhi_signed_handler_enabled: False
# GDPR SAR variables
sar_script: /usr/bin/bodhi-sar
sar_script_user: apache
sar_output_file: bodhi.json
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
# These are certs for pungi
- service: releng
owner: apache
group: sysadmin-releng
can_send:
# new school pungi-koji stuff (ask dgilmore)
- pungi.compose.phase.start
- pungi.compose.phase.stop
- pungi.compose.status.change
- pungi.compose.createiso.targets
- pungi.compose.ostree
- releng.atomic.twoweek.begin
- releng.atomic.twoweek.complete
# These are certs for the masher to publish its own messages as it progresses.
- service: bodhi
owner: root
group: apache
can_send:
- bodhi.mashtask.complete
- bodhi.mashtask.mashing
- bodhi.mashtask.start
- bodhi.mashtask.sync.done
- bodhi.mashtask.sync.wait
- bodhi.ostree.compose.start
- bodhi.ostree.compose.fail
- bodhi.ostree.compose.finish
- bodhi.errata.publish
- bodhi.update.eject
- bodhi.update.complete.testing
- bodhi.update.complete.stable
- bodhi.update.request.testing
- bodhi.update.request.stable
- bodhi.update.request.batched
- bodhi.update.karma.threshold.reach
- bodhi.buildroot_override.untag
- bodhi.update.comment
- bodhi.update.requirements_met.stable
- service: ftpsync
owner: root
group: ftpsync
can_send:
- bodhi.updates.epel.sync
- bodhi.updates.fedora.sync
# For the MOTD
csi_security_category: Medium
csi_primary_contact: Releng Admins sysadmin-releng-members@fedoraproject.org
csi_purpose: Run the Bodhi masher.
csi_relationship: |
The mashing of repos here happens as part of the 'fedmsg-hub' daemon. Check
logs with 'journalctl -u fedmsg-hub'. Check the bodhi masher docs/code for
more detail on what it does:
https://github.com/fedora-infra/bodhi/blob/develop/bodhi/consumers/masher.py
* This host relies on:
* db01 for its database, which is shares with the bodhi2 frontend nodes.
* An NFS mount of koji data in /mnt/koji/
* The fedmsg bus for triggering mashes.
* XMLRPC calls to koji for tagging and untagging updates.
* bugzilla for posting comments about status changes
* the wiki for getting information about QA "Test Cases"
* taksotron (resultsdb) for getting status-check results (gating updates).
* No other systems rely directly on this host. Everything depends on it
indirectly for the creation of new updates repos (which get synced out to
the master mirror for distribution.

View file

@ -1,52 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.125.254
dns: 10.5.126.21
ks_url: http://10.5.126.23/repo/rhel/ks/kvm-fedora-30
ks_repo: http://10.5.126.23/pub/fedora/linux/releases/30/Server/x86_64/os/
volgroup: /dev/vg_guests
eth0_ip: 10.5.125.136
eth1_ip: 10.5.127.62
vmhost: bvirthost14.phx2.fedoraproject.org
# These set a config value in /etc/fedmsg.d/, see roles/bodhi2/base/
bodhi_masher_enabled: False
bodhi_updates_handler_enabled: True
bodhi_signed_handler_enabled: True
# GDPR SAR variables
sar_script: /usr/bin/bodhi-sar
sar_script_user: apache
sar_output_file: bodhi.json
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
- service: shell
owner: root
group: sysadmin
- service: bodhi
owner: root
group: masher
can_send:
# From the cronjob? https://github.com/fedora-infra/bodhi/issues/616
- bodhi.buildroot_override.untag
- bodhi.update.requirements_met.stable
# For the MOTD
csi_security_category: Low
csi_primary_contact: Bodhi Admins bodhiadmin-members@fedoraproject.org
csi_purpose: Run the Bodhi UpdatesHandler and other backend processes
csi_relationship: |
This host handles all of the bodhi backend stuff **except** for mashing.
https://github.com/fedora-infra/bodhi/blob/develop/bodhi/consumers/
* This host relies on:
* db01 for its database, which is shares with the bodhi2 frontend nodes.
* The fedmsg bus for triggering work.
* XMLRPC calls to koji for tagging and untagging updates.
* bugzilla for posting comments about status changes
* the wiki for getting information about QA "Test Cases"
* No other systems rely directly on this host. Everything depends on it
indirectly for the creation of new updates repos (which get synced out to
the master mirror for distribution.

View file

@ -1,41 +0,0 @@
---
vmhost: bvirthost13.phx2.fedoraproject.org
eth0_ip: 10.5.125.66
eth1_ip: 10.5.127.53
volgroup: /dev/vg_guests
ks_url: http://10.5.126.23/repo/rhel/ks/kvm-fedora-32
ks_repo: http://10.5.126.23/pub/fedora/linux/releases/32/Server/x86_64/os/
koji_hub_nfs: "fedora_koji"
kojipkgs_url: kojipkgs.fedoraproject.org
kojihub_url: koji.fedoraproject.org/kojihub
kojihub_scheme: https
fedmsg_certs:
- service: releng
owner: root
group: sysadmin-releng
can_send:
- pungi.compose.phase.start
- pungi.compose.phase.stop
- pungi.compose.status.change
- pungi.compose.createiso.targets
- pungi.compose.createiso.imagefail
- pungi.compose.createiso.imagedone
- pungi.compose.ostree
- compose.branched.complete
- compose.branched.mash.complete
- compose.branched.mash.start
- compose.branched.image.complete
- compose.branched.image.start
- compose.branched.pungify.complete
- compose.branched.pungify.start
- compose.branched.rsync.complete
- compose.branched.rsync.start
- compose.branched.start
- compose.29.start
- compose.29.complete
- compose.29.rsync.start
- compose.29.rsync.complete

View file

@ -1,13 +0,0 @@
---
nm: 255.255.255.0
gw: 10.5.126.254
dns: 10.5.126.21
volgroup: /dev/vg_virthost
vmhost: virthost17.phx2.fedoraproject.org
datacenter: phx2
ks_url: http://10.5.126.23/repo/rhel/ks/kvm-rhel-7
ks_repo: http://10.5.126.23/repo/rhel/RHEL7-x86_64/
eth0_ip: 10.5.126.249

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.164
eth1_ip: 10.5.127.71

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.165
eth1_ip: 10.5.127.72

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.166
eth1_ip: 10.5.127.73

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.167
eth1_ip: 10.5.127.74

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.168
eth1_ip: 10.5.127.75

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.169
eth1_ip: 10.5.127.76

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.170
eth1_ip: 10.5.127.77

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.171
eth1_ip: 10.5.127.78

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.172
eth1_ip: 10.5.127.145

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.173
eth1_ip: 10.5.127.146

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.178
eth1_ip: 10.5.127.194

View file

@ -1,4 +0,0 @@
---
gw: 10.5.125.254
eth0_ip: 10.5.125.179
eth1_ip: 10.5.127.213

View file

@ -1,3 +0,0 @@
---
eth0_ip: 10.5.78.165
gw: 10.5.78.254

View file

@ -1,3 +0,0 @@
---
eth0_ip: 10.5.78.170
gw: 10.5.78.254

View file

@ -1,3 +0,0 @@
---
eth0_ip: 10.5.78.175
gw: 10.5.78.254

View file

@ -1,3 +0,0 @@
---
eth0_ip: 10.5.78.160
gw: 10.5.78.254

View file

@ -1,3 +0,0 @@
---
eth0_ip: 10.5.78.190
gw: 10.5.78.254

View file

@ -1,3 +0,0 @@
---
eth0_ip: 10.5.78.70
gw: 10.5.78.254

View file

@ -1,3 +0,0 @@
---
eth0_ip: 10.5.78.150
gw: 10.5.78.254

View file

@ -1,3 +0,0 @@
---
eth0_ip: 10.5.78.85
gw: 10.5.78.254

View file

@ -1,3 +0,0 @@
---
eth0_ip: 10.5.78.195
gw: 10.5.78.254

View file

@ -1,3 +0,0 @@
---
eth0_ip: 10.5.78.80
gw: 10.5.78.254

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-01.phx2.fedoraproject.org
eth0_ip: 10.5.125.98
eth1_ip: 10.5.127.158

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-01.phx2.fedoraproject.org
eth0_ip: 10.5.125.99
eth1_ip: 10.5.127.159

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-01.phx2.fedoraproject.org
eth0_ip: 10.5.125.100
eth1_ip: 10.5.127.160

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-01.phx2.fedoraproject.org
eth0_ip: 10.5.125.101
eth1_ip: 10.5.127.161

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-01.phx2.fedoraproject.org
eth0_ip: 10.5.125.102
eth1_ip: 10.5.127.162

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-01.phx2.fedoraproject.org
eth0_ip: 10.5.125.103
eth1_ip: 10.5.127.163

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-01.phx2.fedoraproject.org
eth0_ip: 10.5.125.104
eth1_ip: 10.5.127.164

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-01.phx2.fedoraproject.org
eth0_ip: 10.5.125.105
eth1_ip: 10.5.127.165

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-02.phx2.fedoraproject.org
eth0_ip: 10.5.125.106
eth1_ip: 10.5.127.166

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-02.phx2.fedoraproject.org
eth0_ip: 10.5.125.107
eth1_ip: 10.5.127.167

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-02.phx2.fedoraproject.org
eth0_ip: 10.5.125.108
eth1_ip: 10.5.127.168

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-02.phx2.fedoraproject.org
eth0_ip: 10.5.125.109
eth1_ip: 10.5.127.169

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-02.phx2.fedoraproject.org
eth0_ip: 10.5.125.110
eth1_ip: 10.5.127.170

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-02.phx2.fedoraproject.org
eth0_ip: 10.5.125.111
eth1_ip: 10.5.127.171

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-02.phx2.fedoraproject.org
eth0_ip: 10.5.125.112
eth1_ip: 10.5.127.172

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-02.phx2.fedoraproject.org
eth0_ip: 10.5.125.113
eth1_ip: 10.5.127.173

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-03.phx2.fedoraproject.org
eth0_ip: 10.5.125.140
eth1_ip: 10.5.127.174

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-03.phx2.fedoraproject.org
eth0_ip: 10.5.125.141
eth1_ip: 10.5.127.175

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-03.phx2.fedoraproject.org
eth0_ip: 10.5.125.142
eth1_ip: 10.5.127.176

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-03.phx2.fedoraproject.org
eth0_ip: 10.5.125.143
eth1_ip: 10.5.127.177

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-03.phx2.fedoraproject.org
eth0_ip: 10.5.125.144
eth1_ip: 10.5.127.178

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-03.phx2.fedoraproject.org
eth0_ip: 10.5.125.145
eth1_ip: 10.5.127.179

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-03.phx2.fedoraproject.org
eth0_ip: 10.5.125.146
eth1_ip: 10.5.127.180

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-03.phx2.fedoraproject.org
eth0_ip: 10.5.125.147
eth1_ip: 10.5.127.181

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-04.phx2.fedoraproject.org
eth0_ip: 10.5.125.148
eth1_ip: 10.5.127.182

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-04.phx2.fedoraproject.org
eth0_ip: 10.5.125.149
eth1_ip: 10.5.127.183

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-04.phx2.fedoraproject.org
eth0_ip: 10.5.125.150
eth1_ip: 10.5.127.184

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-04.phx2.fedoraproject.org
eth0_ip: 10.5.125.151
eth1_ip: 10.5.127.185

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-04.phx2.fedoraproject.org
eth0_ip: 10.5.125.152
eth1_ip: 10.5.127.186

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-04.phx2.fedoraproject.org
eth0_ip: 10.5.125.153
eth1_ip: 10.5.127.187

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-04.phx2.fedoraproject.org
eth0_ip: 10.5.125.154
eth1_ip: 10.5.127.188

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-04.phx2.fedoraproject.org
eth0_ip: 10.5.125.155
eth1_ip: 10.5.127.189

View file

@ -1,6 +0,0 @@
---
vmhost: buildvmhost-aarch64-10.arm.fedoraproject.org
eth0_ip: 10.5.129.151
eth1_ip: 10.5.127.32
ks_url: http://10.5.126.23/repo/rhel/ks/buildvm-fedora-31-aarch64
ks_repo: http://10.5.126.23/pub/fedora/linux/releases/31/Server/aarch64/os/

View file

@ -1,6 +0,0 @@
---
eth0_ip: 10.5.129.152
eth1_ip: 10.5.127.33
vmhost: buildvmhost-aarch64-10.arm.fedoraproject.org
ks_url: http://10.5.126.23/repo/rhel/ks/buildvm-fedora-31-aarch64
ks_repo: http://10.5.126.23/pub/fedora/linux/releases/31/Server/aarch64/os/

View file

@ -1,6 +0,0 @@
---
vmhost: buildvmhost-aarch64-10.arm.fedoraproject.org
eth0_ip: 10.5.129.153
eth1_ip: 10.5.127.34
ks_url: http://10.5.126.23/repo/rhel/ks/buildvm-fedora-31-aarch64
ks_repo: http://10.5.126.23/pub/fedora/linux/releases/31/Server/aarch64/os/

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-11.arm.fedoraproject.org
eth0_ip: 10.5.129.154
eth1_ip: 10.5.127.35

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-11.arm.fedoraproject.org
eth0_ip: 10.5.129.155
eth1_ip: 10.5.127.36

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-11.arm.fedoraproject.org
eth0_ip: 10.5.129.156
eth1_ip: 10.5.127.37

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-12.arm.fedoraproject.org
eth0_ip: 10.5.129.157
eth1_ip: 10.5.127.82

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-12.arm.fedoraproject.org
eth0_ip: 10.5.129.158
eth1_ip: 10.5.127.83

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-12.arm.fedoraproject.org
eth0_ip: 10.5.129.159
eth1_ip: 10.5.127.84

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-13.arm.fedoraproject.org
eth0_ip: 10.5.129.160
eth1_ip: 10.5.127.85

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-13.arm.fedoraproject.org
eth0_ip: 10.5.129.161
eth1_ip: 10.5.127.86

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-13.arm.fedoraproject.org
eth0_ip: 10.5.129.162
eth1_ip: 10.5.127.87

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-14.arm.fedoraproject.org
eth0_ip: 10.5.129.163
eth1_ip: 10.5.127.88

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-14.arm.fedoraproject.org
eth0_ip: 10.5.129.164
eth1_ip: 10.5.127.89

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-14.arm.fedoraproject.org
eth0_ip: 10.5.129.165
eth1_ip: 10.5.127.90

View file

@ -1,4 +0,0 @@
---
vmhost: buildvmhost-aarch64-15.arm.fedoraproject.org
eth0_ip: 10.5.129.166
eth1_ip: 10.5.127.91

Some files were not shown because too many files have changed in this diff Show more