In ansible 2.2 always_run is depreciated. Switch to check_mode.
This commit is contained in:
parent
1fe7e9264d
commit
b1a2d105c9
67 changed files with 124 additions and 124 deletions
|
@ -13,7 +13,7 @@
|
||||||
- include: "{{ tasks }}/persistent_cloud.yml"
|
- include: "{{ tasks }}/persistent_cloud.yml"
|
||||||
- name: gather facts
|
- name: gather facts
|
||||||
setup:
|
setup:
|
||||||
always_run: True
|
check_mode: no
|
||||||
ignore_errors: True
|
ignore_errors: True
|
||||||
register: facts
|
register: facts
|
||||||
- name: install python2 and dnf stuff
|
- name: install python2 and dnf stuff
|
||||||
|
|
|
@ -30,7 +30,7 @@
|
||||||
- name: check the selinux context of webdir
|
- name: check the selinux context of webdir
|
||||||
command: matchpathcon /srv/web
|
command: matchpathcon /srv/web
|
||||||
register: webdir
|
register: webdir
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -294,7 +294,7 @@
|
||||||
- name: register origin_version_out rpm query
|
- name: register origin_version_out rpm query
|
||||||
shell: "rpm -q origin --qf '%{Version}'"
|
shell: "rpm -q origin --qf '%{Version}'"
|
||||||
register: origin_version_out
|
register: origin_version_out
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: False
|
changed_when: False
|
||||||
|
|
||||||
- set_fact:
|
- set_fact:
|
||||||
|
|
|
@ -289,7 +289,7 @@
|
||||||
# - name: register origin_version_out rpm query
|
# - name: register origin_version_out rpm query
|
||||||
# shell: "rpm -q origin --qf '%{Version}'"
|
# shell: "rpm -q origin --qf '%{Version}'"
|
||||||
# register: origin_version_out
|
# register: origin_version_out
|
||||||
# always_run: true
|
# check_mode: no
|
||||||
# changed_when: False
|
# changed_when: False
|
||||||
|
|
||||||
# - set_fact:
|
# - set_fact:
|
||||||
|
|
|
@ -50,7 +50,7 @@
|
||||||
- name: check the selinux context of the artboard dirs
|
- name: check the selinux context of the artboard dirs
|
||||||
command: matchpathcon "/srv/persist/artboard/(.*)"
|
command: matchpathcon "/srv/persist/artboard/(.*)"
|
||||||
register: webcontext
|
register: webcontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -286,110 +286,110 @@
|
||||||
# ceilometer
|
# ceilometer
|
||||||
- shell: source /root/keystonerc_admin && keystone service-list | grep ceilometer | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone service-list | grep ceilometer | awk '{print $2}'
|
||||||
register: SERVICE_ID
|
register: SERVICE_ID
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
||||||
register: ENDPOINT_ID
|
register: ENDPOINT_ID
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8777' --adminurl 'https://{{ controller_publicname }}:8777' --internalurl 'https://{{ controller_publicname }}:8777' ) || true
|
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8777' --adminurl 'https://{{ controller_publicname }}:8777' --internalurl 'https://{{ controller_publicname }}:8777' ) || true
|
||||||
# cinder
|
# cinder
|
||||||
- shell: source /root/keystonerc_admin && keystone service-list | grep 'cinder ' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone service-list | grep 'cinder ' | awk '{print $2}'
|
||||||
register: SERVICE_ID
|
register: SERVICE_ID
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
||||||
register: ENDPOINT_ID
|
register: ENDPOINT_ID
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8776/v1/%(tenant_id)s' --adminurl 'https://{{ controller_publicname }}:8776/v1/%(tenant_id)s' --internalurl 'https://{{ controller_publicname }}:8776/v1/%(tenant_id)s' ) || true
|
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8776/v1/%(tenant_id)s' --adminurl 'https://{{ controller_publicname }}:8776/v1/%(tenant_id)s' --internalurl 'https://{{ controller_publicname }}:8776/v1/%(tenant_id)s' ) || true
|
||||||
# cinderv2
|
# cinderv2
|
||||||
- shell: source /root/keystonerc_admin && keystone service-list | grep 'cinderv2' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone service-list | grep 'cinderv2' | awk '{print $2}'
|
||||||
register: SERVICE_ID
|
register: SERVICE_ID
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
||||||
register: ENDPOINT_ID
|
register: ENDPOINT_ID
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8776/v2/%(tenant_id)s' --adminurl 'https://{{ controller_publicname }}:8776/v2/%(tenant_id)s' --internalurl 'https://{{ controller_publicname }}:8776/v2/%(tenant_id)s' ) || true
|
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8776/v2/%(tenant_id)s' --adminurl 'https://{{ controller_publicname }}:8776/v2/%(tenant_id)s' --internalurl 'https://{{ controller_publicname }}:8776/v2/%(tenant_id)s' ) || true
|
||||||
# glance
|
# glance
|
||||||
- shell: source /root/keystonerc_admin && keystone service-list | grep 'glance' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone service-list | grep 'glance' | awk '{print $2}'
|
||||||
register: SERVICE_ID
|
register: SERVICE_ID
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
||||||
register: ENDPOINT_ID
|
register: ENDPOINT_ID
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:9292' --adminurl 'https://{{ controller_publicname }}:9292' --internalurl 'https://{{ controller_publicname }}:9292' ) || true
|
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:9292' --adminurl 'https://{{ controller_publicname }}:9292' --internalurl 'https://{{ controller_publicname }}:9292' ) || true
|
||||||
# neutron
|
# neutron
|
||||||
- shell: source /root/keystonerc_admin && keystone service-list | grep 'neutron' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone service-list | grep 'neutron' | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: SERVICE_ID
|
register: SERVICE_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: ENDPOINT_ID
|
register: ENDPOINT_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:9696/' --adminurl 'https://{{ controller_publicname }}:9696/' --internalurl 'https://{{ controller_publicname }}:9696/' ) || true
|
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:9696/' --adminurl 'https://{{ controller_publicname }}:9696/' --internalurl 'https://{{ controller_publicname }}:9696/' ) || true
|
||||||
# nova
|
# nova
|
||||||
- shell: source /root/keystonerc_admin && keystone service-list | grep 'nova ' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone service-list | grep 'nova ' | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: SERVICE_ID
|
register: SERVICE_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: ENDPOINT_ID
|
register: ENDPOINT_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8774/v2/%(tenant_id)s' --adminurl 'https://{{ controller_publicname }}:8774/v2/%(tenant_id)s' --internalurl 'https://{{ controller_publicname }}:8774/v2/%(tenant_id)s' ) || true
|
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8774/v2/%(tenant_id)s' --adminurl 'https://{{ controller_publicname }}:8774/v2/%(tenant_id)s' --internalurl 'https://{{ controller_publicname }}:8774/v2/%(tenant_id)s' ) || true
|
||||||
# nova_ec2
|
# nova_ec2
|
||||||
- shell: source /root/keystonerc_admin && keystone service-list | grep 'nova_ec2' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone service-list | grep 'nova_ec2' | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: SERVICE_ID
|
register: SERVICE_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: ENDPOINT_ID
|
register: ENDPOINT_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8773/services/Cloud' --adminurl 'https://{{ controller_publicname }}:8773/services/Admin' --internalurl 'https://{{ controller_publicname }}:8773/services/Cloud' ) || true
|
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8773/services/Cloud' --adminurl 'https://{{ controller_publicname }}:8773/services/Admin' --internalurl 'https://{{ controller_publicname }}:8773/services/Cloud' ) || true
|
||||||
# novav3
|
# novav3
|
||||||
- shell: source /root/keystonerc_admin && keystone service-list | grep 'novav3' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone service-list | grep 'novav3' | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: SERVICE_ID
|
register: SERVICE_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: ENDPOINT_ID
|
register: ENDPOINT_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8774/v3' --adminurl 'https://{{ controller_publicname }}:8774/v3' --internalurl 'https://{{ controller_publicname }}:8774/v3' ) || true
|
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8774/v3' --adminurl 'https://{{ controller_publicname }}:8774/v3' --internalurl 'https://{{ controller_publicname }}:8774/v3' ) || true
|
||||||
# swift
|
# swift
|
||||||
- shell: source /root/keystonerc_admin && keystone service-list | grep 'swift ' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone service-list | grep 'swift ' | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: SERVICE_ID
|
register: SERVICE_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: ENDPOINT_ID
|
register: ENDPOINT_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{controller_publicname}}:8080/v1/AUTH_%(tenant_id)s' --adminurl 'https://{{controller_publicname}}:8080' --internalurl 'https://{{controller_publicname}}:8080/v1/AUTH_%(tenant_id)s' ) || true
|
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{controller_publicname}}:8080/v1/AUTH_%(tenant_id)s' --adminurl 'https://{{controller_publicname}}:8080' --internalurl 'https://{{controller_publicname}}:8080/v1/AUTH_%(tenant_id)s' ) || true
|
||||||
# swift_s3
|
# swift_s3
|
||||||
- shell: source /root/keystonerc_admin && keystone service-list | grep 'swift_s3' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone service-list | grep 'swift_s3' | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: SERVICE_ID
|
register: SERVICE_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: ENDPOINT_ID
|
register: ENDPOINT_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8080' --adminurl 'https://{{ controller_publicname }}:8080' --internalurl 'https://{{ controller_publicname }}:8080' ) || true
|
- shell: source /root/keystonerc_admin && keystone endpoint-list |grep {{SERVICE_ID.stdout}} |grep -v {{ controller_publicname }} && (keystone endpoint-delete {{ENDPOINT_ID.stdout}} && keystone endpoint-create --region 'RegionOne' --service {{SERVICE_ID.stdout}} --publicurl 'https://{{ controller_publicname }}:8080' --adminurl 'https://{{ controller_publicname }}:8080' --internalurl 'https://{{ controller_publicname }}:8080' ) || true
|
||||||
# keystone --- !!!!! we need to use ADMIN_TOKEN here - this MUST be last before we restart OS and set up haproxy
|
# keystone --- !!!!! we need to use ADMIN_TOKEN here - this MUST be last before we restart OS and set up haproxy
|
||||||
- shell: source /root/keystonerc_admin && keystone service-list | grep 'keystone' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone service-list | grep 'keystone' | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: SERVICE_ID
|
register: SERVICE_ID
|
||||||
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone endpoint-list | grep {{SERVICE_ID.stdout}} | awk '{print $2}'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: ENDPOINT_ID
|
register: ENDPOINT_ID
|
||||||
- ini_file: dest=/etc/keystone/keystone.conf section=ssl option=certfile value=/etc/haproxy/fedorainfracloud.org.combined
|
- ini_file: dest=/etc/keystone/keystone.conf section=ssl option=certfile value=/etc/haproxy/fedorainfracloud.org.combined
|
||||||
|
@ -1211,12 +1211,12 @@
|
||||||
# default is 10 instances, 20 cores, 51200 RAM, 10 floating IPs
|
# default is 10 instances, 20 cores, 51200 RAM, 10 floating IPs
|
||||||
- shell: source /root/keystonerc_admin && keystone tenant-list | grep 'copr ' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone tenant-list | grep 'copr ' | awk '{print $2}'
|
||||||
register: TENANT_ID
|
register: TENANT_ID
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
- shell: source /root/keystonerc_admin && nova quota-update --instances 40 --cores 80 --ram 300000 --floating-ips 10 --security-groups 20 {{ TENANT_ID.stdout }}
|
- shell: source /root/keystonerc_admin && nova quota-update --instances 40 --cores 80 --ram 300000 --floating-ips 10 --security-groups 20 {{ TENANT_ID.stdout }}
|
||||||
|
|
||||||
- shell: source /root/keystonerc_admin && keystone tenant-list | grep 'coprdev ' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone tenant-list | grep 'coprdev ' | awk '{print $2}'
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: TENANT_ID
|
register: TENANT_ID
|
||||||
- shell: source /root/keystonerc_admin && nova quota-update --instances 40 --cores 80 --ram 300000 --floating-ips 10 --security-groups 20 {{ TENANT_ID.stdout }}
|
- shell: source /root/keystonerc_admin && nova quota-update --instances 40 --cores 80 --ram 300000 --floating-ips 10 --security-groups 20 {{ TENANT_ID.stdout }}
|
||||||
|
@ -1226,14 +1226,14 @@
|
||||||
# nova quota-update cannot do so.
|
# nova quota-update cannot do so.
|
||||||
#
|
#
|
||||||
- shell: source /root/keystonerc_admin && keystone tenant-list | grep 'persistent ' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone tenant-list | grep 'persistent ' | awk '{print $2}'
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: TENANT_ID
|
register: TENANT_ID
|
||||||
- shell: source /root/keystonerc_admin && nova quota-update --instances 60 --cores 150 --ram 288300 --security-groups 20 {{ TENANT_ID.stdout }}
|
- shell: source /root/keystonerc_admin && nova quota-update --instances 60 --cores 150 --ram 288300 --security-groups 20 {{ TENANT_ID.stdout }}
|
||||||
|
|
||||||
# Transient quota
|
# Transient quota
|
||||||
- shell: source /root/keystonerc_admin && keystone tenant-list | grep 'transient ' | awk '{print $2}'
|
- shell: source /root/keystonerc_admin && keystone tenant-list | grep 'transient ' | awk '{print $2}'
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
register: TENANT_ID
|
register: TENANT_ID
|
||||||
- shell: source /root/keystonerc_admin && nova quota-update --instances 30 --cores 60 --ram 102400 --security-groups 20 {{ TENANT_ID.stdout }}
|
- shell: source /root/keystonerc_admin && nova quota-update --instances 30 --cores 60 --ram 102400 --security-groups 20 {{ TENANT_ID.stdout }}
|
||||||
|
|
|
@ -27,7 +27,7 @@
|
||||||
- name: check the selinux context of webdir
|
- name: check the selinux context of webdir
|
||||||
command: matchpathcon /srv/web
|
command: matchpathcon /srv/web
|
||||||
register: webdir
|
register: webdir
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -49,13 +49,13 @@
|
||||||
|
|
||||||
tasks:
|
tasks:
|
||||||
- name: Create drop place for upgrades
|
- name: Create drop place for upgrades
|
||||||
always_run: true
|
check_mode: no
|
||||||
when: ansible_virtualization_role == "host"
|
when: ansible_virtualization_role == "host"
|
||||||
file: path=/root/firmware-upgrades
|
file: path=/root/firmware-upgrades
|
||||||
state=directory
|
state=directory
|
||||||
|
|
||||||
- name: Check which updates to copy
|
- name: Check which updates to copy
|
||||||
always_run: true
|
check_mode: no
|
||||||
stat: path=/root/firmware-upgrades/{{ item.1}}.applied
|
stat: path=/root/firmware-upgrades/{{ item.1}}.applied
|
||||||
register: is_applied_results
|
register: is_applied_results
|
||||||
when: item.0.vendor == ansible_system_vendor and item.0.product == ansible_product_name
|
when: item.0.vendor == ansible_system_vendor and item.0.product == ansible_product_name
|
||||||
|
@ -64,7 +64,7 @@
|
||||||
- files
|
- files
|
||||||
|
|
||||||
- name: Copy updates
|
- name: Copy updates
|
||||||
always_run: true
|
check_mode: no
|
||||||
copy: src={{ bigfiles }}/firmware/{{ item.item.0.dirname }}/{{ item.item.1}}
|
copy: src={{ bigfiles }}/firmware/{{ item.item.0.dirname }}/{{ item.item.1}}
|
||||||
dest=/root/firmware-upgrades/
|
dest=/root/firmware-upgrades/
|
||||||
mode=0700
|
mode=0700
|
||||||
|
@ -75,7 +75,7 @@
|
||||||
|
|
||||||
# Dell updates here
|
# Dell updates here
|
||||||
- name: Check Dell updates
|
- name: Check Dell updates
|
||||||
always_run: true
|
check_mode: no
|
||||||
command: /root/firmware-upgrades/{{ item.item.1}} -qc
|
command: /root/firmware-upgrades/{{ item.item.1}} -qc
|
||||||
register: check_results
|
register: check_results
|
||||||
failed_when: "'System(s) supported by this package' in check_results.stdout"
|
failed_when: "'System(s) supported by this package' in check_results.stdout"
|
||||||
|
@ -105,7 +105,7 @@
|
||||||
|
|
||||||
# We are cleaning up all files we copied, regardless of update result
|
# We are cleaning up all files we copied, regardless of update result
|
||||||
- name: Delete update files
|
- name: Delete update files
|
||||||
always_run: true
|
check_mode: no
|
||||||
file: path=/root/firmware-upgrades/{{ item.item.1 }}
|
file: path=/root/firmware-upgrades/{{ item.item.1 }}
|
||||||
state=absent
|
state=absent
|
||||||
when: "'stat' in item and not item.stat.exists"
|
when: "'stat' in item and not item.stat.exists"
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata
|
- name: clean all metadata
|
||||||
command: dnf clean all
|
command: dnf clean all
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: dnf update autocloud packages from main repo
|
- name: dnf update autocloud packages from main repo
|
||||||
dnf: name="autocloud*" state=latest
|
dnf: name="autocloud*" state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update tahrir/badges packages from main repo
|
- name: yum update tahrir/badges packages from main repo
|
||||||
yum: name={{item}} state=latest
|
yum: name={{item}} state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
@ -42,7 +42,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update tahrir/badges packages from main repo
|
- name: yum update tahrir/badges packages from main repo
|
||||||
yum: name={{item}} state=latest
|
yum: name={{item}} state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -30,7 +30,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update bodhi-server packages from main repo
|
- name: yum update bodhi-server packages from main repo
|
||||||
yum: name="bodhi-server" state=latest
|
yum: name="bodhi-server" state=latest
|
||||||
- name: yum update bodhi-server packages from testing repo
|
- name: yum update bodhi-server packages from testing repo
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update bugzilla2fedmsg packages from main repo
|
- name: yum update bugzilla2fedmsg packages from main repo
|
||||||
yum: name="python-bugzilla2fedmsg" state=latest
|
yum: name="python-bugzilla2fedmsg" state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update datagrepper packages from main repo
|
- name: yum update datagrepper packages from main repo
|
||||||
yum: name="datagrepper" state=latest
|
yum: name="datagrepper" state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -21,7 +21,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update datanommer packages from main repo
|
- name: yum update datanommer packages from main repo
|
||||||
yum: name="*datanommer*" state=latest
|
yum: name="*datanommer*" state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update fedimg packages from main repo
|
- name: yum update fedimg packages from main repo
|
||||||
yum: name="python-fedimg" state=latest
|
yum: name="python-fedimg" state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -38,7 +38,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update fedmsg packages from the main repo
|
- name: yum update fedmsg packages from the main repo
|
||||||
yum: name={{item}} state=latest
|
yum: name={{item}} state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update FMN packages from main repo
|
- name: yum update FMN packages from main repo
|
||||||
yum: name="python-fmn*" state=latest
|
yum: name="python-fmn*" state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update hotness packages from main repo
|
- name: yum update hotness packages from main repo
|
||||||
yum: name="the-new-hotness" state=latest
|
yum: name="the-new-hotness" state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update mote packages from main repo
|
- name: yum update mote packages from main repo
|
||||||
yum: name="mote" state=latest
|
yum: name="mote" state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update fedora-packages packages from main repo
|
- name: yum update fedora-packages packages from main repo
|
||||||
yum: name="fedora-packages" state=latest
|
yum: name="fedora-packages" state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -11,7 +11,7 @@
|
||||||
pre_tasks:
|
pre_tasks:
|
||||||
- name: clean all metadata
|
- name: clean all metadata
|
||||||
command: yum clean all
|
command: yum clean all
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update PDC packages
|
- name: yum update PDC packages
|
||||||
yum: name="{{item}}" state=latest
|
yum: name="{{item}}" state=latest
|
||||||
with_items:
|
with_items:
|
||||||
|
@ -43,7 +43,7 @@
|
||||||
pre_tasks:
|
pre_tasks:
|
||||||
- name: clean all metadata
|
- name: clean all metadata
|
||||||
command: yum clean all
|
command: yum clean all
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update PDC packages
|
- name: yum update PDC packages
|
||||||
yum: name="{{item}}" state=latest
|
yum: name="{{item}}" state=latest
|
||||||
with_items:
|
with_items:
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update statscache packages from main repo
|
- name: yum update statscache packages from main repo
|
||||||
yum: name="statscache*" state=latest
|
yum: name="statscache*" state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
tasks:
|
tasks:
|
||||||
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
- name: clean all metadata {%if testing%}(with infrastructure-testing on){%endif%}
|
||||||
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
command: yum clean all {%if testing%} --enablerepo=infrastructure-testing {%endif%}
|
||||||
always_run: yes
|
check_mode: no
|
||||||
- name: yum update fedora-tagger packages from main repo
|
- name: yum update fedora-tagger packages from main repo
|
||||||
yum: name="fedora-tagger" state=latest
|
yum: name="fedora-tagger" state=latest
|
||||||
when: not testing
|
when: not testing
|
||||||
|
|
|
@ -47,7 +47,7 @@
|
||||||
|
|
||||||
- name: gather facts
|
- name: gather facts
|
||||||
setup:
|
setup:
|
||||||
always_run: True
|
check_mode: no
|
||||||
ignore_errors: True
|
ignore_errors: True
|
||||||
register: facts
|
register: facts
|
||||||
|
|
||||||
|
|
|
@ -135,7 +135,7 @@
|
||||||
- name: check log file
|
- name: check log file
|
||||||
command: stat /var/log/askbot/askfedora.log
|
command: stat /var/log/askbot/askfedora.log
|
||||||
register: logstat
|
register: logstat
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
failed_when: no
|
failed_when: no
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -23,7 +23,7 @@
|
||||||
command: redis-cli --scan --pattern tunirports
|
command: redis-cli --scan --pattern tunirports
|
||||||
changed_when: False
|
changed_when: False
|
||||||
register: tunirports
|
register: tunirports
|
||||||
always_run: true
|
check_mode: no
|
||||||
tags:
|
tags:
|
||||||
- autocloud
|
- autocloud
|
||||||
- autocloud/backend
|
- autocloud/backend
|
||||||
|
@ -83,7 +83,7 @@
|
||||||
- gcc
|
- gcc
|
||||||
- vagrant
|
- vagrant
|
||||||
register: virtualbox_installed
|
register: virtualbox_installed
|
||||||
always_run: true
|
check_mode: no
|
||||||
when: autocloud_specialization == 'virtualbox'
|
when: autocloud_specialization == 'virtualbox'
|
||||||
notify:
|
notify:
|
||||||
- restart fedmsg-hub
|
- restart fedmsg-hub
|
||||||
|
|
|
@ -26,7 +26,7 @@
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
changed_when: false
|
changed_when: false
|
||||||
failed_when: "1 != 1"
|
failed_when: "1 != 1"
|
||||||
always_run: true
|
check_mode: no
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
- resolvconf
|
- resolvconf
|
||||||
|
@ -49,7 +49,7 @@
|
||||||
register: if_uuid
|
register: if_uuid
|
||||||
changed_when: false
|
changed_when: false
|
||||||
failed_when: 'if_uuid.stdout == ""'
|
failed_when: 'if_uuid.stdout == ""'
|
||||||
always_run: yes
|
check_mode: no
|
||||||
when: ansible_distribution_major_version|int >=7 and nmclitest|success and ( not ansible_ifcfg_blacklist )
|
when: ansible_distribution_major_version|int >=7 and nmclitest|success and ( not ansible_ifcfg_blacklist )
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -1,7 +1,7 @@
|
||||||
- name: See if theres a watchdog device
|
- name: See if theres a watchdog device
|
||||||
stat: path=/dev/watchdog
|
stat: path=/dev/watchdog
|
||||||
when: ansible_virtualization_role == 'guest'
|
when: ansible_virtualization_role == 'guest'
|
||||||
always_run: true
|
check_mode: no
|
||||||
failed_when: no
|
failed_when: no
|
||||||
register: watchdog_dev
|
register: watchdog_dev
|
||||||
|
|
||||||
|
|
|
@ -343,7 +343,7 @@
|
||||||
- name: check the selinux context of webdir
|
- name: check the selinux context of webdir
|
||||||
command: matchpathcon /srv/web
|
command: matchpathcon /srv/web
|
||||||
register: webdir
|
register: webdir
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -369,7 +369,7 @@
|
||||||
- name: check the selinux context of ansible
|
- name: check the selinux context of ansible
|
||||||
command: matchpathcon /git/ansible
|
command: matchpathcon /git/ansible
|
||||||
register: webdir
|
register: webdir
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -391,7 +391,7 @@
|
||||||
- name: check the selinux context of badges
|
- name: check the selinux context of badges
|
||||||
command: matchpathcon /git/badges
|
command: matchpathcon /git/badges
|
||||||
register: webdir
|
register: webdir
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -413,7 +413,7 @@
|
||||||
- name: check the selinux context of dns
|
- name: check the selinux context of dns
|
||||||
command: matchpathcon /git/dns
|
command: matchpathcon /git/dns
|
||||||
register: webdir
|
register: webdir
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -435,7 +435,7 @@
|
||||||
- name: check the selinux context of infra-docs
|
- name: check the selinux context of infra-docs
|
||||||
command: matchpathcon /git/infra-docs
|
command: matchpathcon /git/infra-docs
|
||||||
register: webdir
|
register: webdir
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -122,7 +122,7 @@
|
||||||
- name: get vm list
|
- name: get vm list
|
||||||
virt: command=list_vms
|
virt: command=list_vms
|
||||||
register: result
|
register: result
|
||||||
always_run: yes
|
check_mode: no
|
||||||
|
|
||||||
- name: generate libvirt xml files for clients
|
- name: generate libvirt xml files for clients
|
||||||
template:
|
template:
|
||||||
|
|
|
@ -18,7 +18,7 @@
|
||||||
|
|
||||||
- name: setup opensc in pcscd
|
- name: setup opensc in pcscd
|
||||||
shell: modutil -dbdir /etc/pki/pesign -list | grep -q Fedora || modutil -force -dbdir /etc/pki/pesign -add opensc -libfile /usr/lib64/pkcs11/opensc-pkcs11.so
|
shell: modutil -dbdir /etc/pki/pesign -list | grep -q Fedora || modutil -force -dbdir /etc/pki/pesign -add opensc -libfile /usr/lib64/pkcs11/opensc-pkcs11.so
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- bkernel
|
- bkernel
|
||||||
|
|
|
@ -128,7 +128,7 @@
|
||||||
#- name: check the selinux context of the bugzilla cookie
|
#- name: check the selinux context of the bugzilla cookie
|
||||||
# command: matchpathcon /var/tmp/bodhi-bz.cookie
|
# command: matchpathcon /var/tmp/bodhi-bz.cookie
|
||||||
# register: cookiecontext
|
# register: cookiecontext
|
||||||
# always_run: yes
|
# check_mode: no
|
||||||
# changed_when: "1 != 1"
|
# changed_when: "1 != 1"
|
||||||
# tags:
|
# tags:
|
||||||
# - config
|
# - config
|
||||||
|
|
|
@ -48,7 +48,7 @@
|
||||||
- name: check the selinux context of the repo list
|
- name: check the selinux context of the repo list
|
||||||
command: matchpathcon /srv/git/pkgs-git-repos-list
|
command: matchpathcon /srv/git/pkgs-git-repos-list
|
||||||
register: gitlistcontext
|
register: gitlistcontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -53,7 +53,7 @@
|
||||||
- name: Check if python-client has ever been installed
|
- name: Check if python-client has ever been installed
|
||||||
command: "python -c 'import openqa_client'"
|
command: "python -c 'import openqa_client'"
|
||||||
register: instclient
|
register: instclient
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
failed_when: "1 != 1"
|
failed_when: "1 != 1"
|
||||||
|
|
||||||
|
|
|
@ -113,7 +113,7 @@
|
||||||
- name: check to see if its even installed yet
|
- name: check to see if its even installed yet
|
||||||
shell: semodule -l | grep fi-collectd | wc -l
|
shell: semodule -l | grep fi-collectd | wc -l
|
||||||
register: ficgeneral_grep
|
register: ficgeneral_grep
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: "'0' in ficgeneral_grep.stdout"
|
changed_when: "'0' in ficgeneral_grep.stdout"
|
||||||
tags:
|
tags:
|
||||||
- collectd
|
- collectd
|
||||||
|
@ -138,7 +138,7 @@
|
||||||
shell: semodule -l | grep fi-pstorefs | wc -l
|
shell: semodule -l | grep fi-pstorefs | wc -l
|
||||||
when: ansible_distribution_major_version|int != 6
|
when: ansible_distribution_major_version|int != 6
|
||||||
register: ficpstorefs_grep
|
register: ficpstorefs_grep
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: "'0' in ficpstorefs_grep.stdout"
|
changed_when: "'0' in ficpstorefs_grep.stdout"
|
||||||
tags:
|
tags:
|
||||||
- collectd
|
- collectd
|
||||||
|
|
|
@ -39,7 +39,7 @@
|
||||||
- name: check to see if its even installed yet
|
- name: check to see if its even installed yet
|
||||||
shell: semodule -l | grep fi-collectd-fcomm | wc -l
|
shell: semodule -l | grep fi-collectd-fcomm | wc -l
|
||||||
register: ficfcomm_grep
|
register: ficfcomm_grep
|
||||||
always_run: True
|
check_mode: no
|
||||||
changed_when: "'0' in ficfcomm_grep.stdout"
|
changed_when: "'0' in ficfcomm_grep.stdout"
|
||||||
tags:
|
tags:
|
||||||
- collectd
|
- collectd
|
||||||
|
|
|
@ -58,7 +58,7 @@
|
||||||
- name: check known_hosts file
|
- name: check known_hosts file
|
||||||
command: stat /home/copr/.ssh/known_hosts
|
command: stat /home/copr/.ssh/known_hosts
|
||||||
register: hostsstat
|
register: hostsstat
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
ignore_errors: yes
|
ignore_errors: yes
|
||||||
|
|
||||||
|
|
|
@ -62,7 +62,7 @@
|
||||||
register: offloading
|
register: offloading
|
||||||
failed_when: offloading.rc == 2
|
failed_when: offloading.rc == 2
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
always_run: True
|
check_mode: no
|
||||||
|
|
||||||
- name: disable offloading
|
- name: disable offloading
|
||||||
command: ethtool -K eth0 tso off gro off gso off
|
command: ethtool -K eth0 tso off gro off gso off
|
||||||
|
|
|
@ -57,7 +57,7 @@
|
||||||
- name: read pub key into var
|
- name: read pub key into var
|
||||||
command: cat /home/copr-service/.ssh/id_rsa.pub
|
command: cat /home/copr-service/.ssh/id_rsa.pub
|
||||||
register: cat_pubkey
|
register: cat_pubkey
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
||||||
- set_fact: pubkey="{{cat_pubkey.stdout|join('')}}"
|
- set_fact: pubkey="{{cat_pubkey.stdout|join('')}}"
|
||||||
|
|
|
@ -74,7 +74,7 @@
|
||||||
- name: check the selinux context of the distgit root directory
|
- name: check the selinux context of the distgit root directory
|
||||||
command: matchpathcon /srv/git
|
command: matchpathcon /srv/git
|
||||||
register: distgitcontext
|
register: distgitcontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -269,7 +269,7 @@
|
||||||
- name: Get admin users
|
- name: Get admin users
|
||||||
command: "/srv/web/infra/ansible/scripts/users-from-fas @sysadmin-main {{ admin_groups }}"
|
command: "/srv/web/infra/ansible/scripts/users-from-fas @sysadmin-main {{ admin_groups }}"
|
||||||
register: admin_user_list
|
register: admin_user_list
|
||||||
always_run: True
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
run_once: True
|
run_once: True
|
||||||
delegate_to: localhost
|
delegate_to: localhost
|
||||||
|
@ -366,7 +366,7 @@
|
||||||
- name: check the selinux context of the Lookaside Cache root directory
|
- name: check the selinux context of the Lookaside Cache root directory
|
||||||
command: matchpathcon /srv/cache
|
command: matchpathcon /srv/cache
|
||||||
register: lcachecontext
|
register: lcachecontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -436,7 +436,7 @@
|
||||||
- name: check the selinux context of the upload CGI script
|
- name: check the selinux context of the upload CGI script
|
||||||
command: matchpathcon /srv/web/upload.cgi
|
command: matchpathcon /srv/web/upload.cgi
|
||||||
register: upcgicontext
|
register: upcgicontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -31,7 +31,7 @@
|
||||||
- name: check if dnf-automatic.timer is active
|
- name: check if dnf-automatic.timer is active
|
||||||
command: systemctl is-active dnf-automatic.timer
|
command: systemctl is-active dnf-automatic.timer
|
||||||
register: automaticative
|
register: automaticative
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: 1 != 1
|
changed_when: 1 != 1
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
|
|
||||||
|
|
|
@ -92,7 +92,7 @@
|
||||||
- name: check semanage ports
|
- name: check semanage ports
|
||||||
command: semanage port -l
|
command: semanage port -l
|
||||||
register: semanageoutput
|
register: semanageoutput
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- dns
|
- dns
|
||||||
|
|
|
@ -23,7 +23,7 @@
|
||||||
- name: check the selinux context rsyncd log
|
- name: check the selinux context rsyncd log
|
||||||
command: matchpathcon /var/log/rsyncd-fedora.log
|
command: matchpathcon /var/log/rsyncd-fedora.log
|
||||||
register: rsyncdlog
|
register: rsyncdlog
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -45,7 +45,7 @@
|
||||||
- name: check the selinux context pubdir
|
- name: check the selinux context pubdir
|
||||||
command: matchpathcon /srv/pub
|
command: matchpathcon /srv/pub
|
||||||
register: pubdir
|
register: pubdir
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -328,7 +328,7 @@
|
||||||
- name: check semanage ports
|
- name: check semanage ports
|
||||||
command: semanage port -l
|
command: semanage port -l
|
||||||
register: semanageoutput
|
register: semanageoutput
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- fedmsg/base
|
- fedmsg/base
|
||||||
|
@ -342,7 +342,7 @@
|
||||||
- name: Check if the nrpe user exists
|
- name: Check if the nrpe user exists
|
||||||
shell: /usr/bin/getent passwd nrpe | /usr/bin/wc -l | tr -d ' '
|
shell: /usr/bin/getent passwd nrpe | /usr/bin/wc -l | tr -d ' '
|
||||||
register: nrpe_exists
|
register: nrpe_exists
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- fedmsg/base
|
- fedmsg/base
|
||||||
|
|
|
@ -70,7 +70,7 @@
|
||||||
- name: check the selinux context freemedia
|
- name: check the selinux context freemedia
|
||||||
command: matchpathcon /srv/web/freemedia
|
command: matchpathcon /srv/web/freemedia
|
||||||
register: freemediacontext
|
register: freemediacontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -71,7 +71,7 @@
|
||||||
- name: check to see if its even installed yet
|
- name: check to see if its even installed yet
|
||||||
shell: semodule -l | grep fi-haproxy | wc -l
|
shell: semodule -l | grep fi-haproxy | wc -l
|
||||||
register: fi_haproxy_grep
|
register: fi_haproxy_grep
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: "'0' in fi_haproxy_grep.stdout"
|
changed_when: "'0' in fi_haproxy_grep.stdout"
|
||||||
tags:
|
tags:
|
||||||
- haproxy
|
- haproxy
|
||||||
|
@ -87,7 +87,7 @@
|
||||||
|
|
||||||
- name: check haproxy cfg to make sure it is valid
|
- name: check haproxy cfg to make sure it is valid
|
||||||
command: haproxy -c -f /etc/haproxy/haproxy.cfg
|
command: haproxy -c -f /etc/haproxy/haproxy.cfg
|
||||||
always_run: true
|
check_mode: no
|
||||||
register: haproxyconfigcheck
|
register: haproxyconfigcheck
|
||||||
changed_when: haproxyconfigcheck.rc != 0
|
changed_when: haproxyconfigcheck.rc != 0
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -80,7 +80,7 @@
|
||||||
- name: check the selinux context of /srv/web
|
- name: check the selinux context of /srv/web
|
||||||
command: matchpathcon /srv/web
|
command: matchpathcon /srv/web
|
||||||
register: webdir
|
register: webdir
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- infinote
|
- infinote
|
||||||
|
|
|
@ -215,7 +215,7 @@
|
||||||
- name: check for max_loop with grub2
|
- name: check for max_loop with grub2
|
||||||
command: cat /etc/grub2.cfg
|
command: cat /etc/grub2.cfg
|
||||||
register: max_loop
|
register: max_loop
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: '1 != 1'
|
changed_when: '1 != 1'
|
||||||
when: ansible_distribution_major_version|int != 6 and ansible_architecture == 'x86_64'
|
when: ansible_distribution_major_version|int != 6 and ansible_architecture == 'x86_64'
|
||||||
tags:
|
tags:
|
||||||
|
@ -224,7 +224,7 @@
|
||||||
- name: check for max_loop with grub1
|
- name: check for max_loop with grub1
|
||||||
command: cat /etc/grub.conf
|
command: cat /etc/grub.conf
|
||||||
register: max_loop
|
register: max_loop
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: '1 != 1'
|
changed_when: '1 != 1'
|
||||||
when: ansible_distribution == 'RedHat' and ansible_architecture == 'x86_64' and ansible_distribution_major_version|int == 6
|
when: ansible_distribution == 'RedHat' and ansible_architecture == 'x86_64' and ansible_distribution_major_version|int == 6
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -347,7 +347,7 @@
|
||||||
command: matchpathcon /mnt/fedora_koji
|
command: matchpathcon /mnt/fedora_koji
|
||||||
register: mnt_fedora_koji_context
|
register: mnt_fedora_koji_context
|
||||||
when: env == "staging"
|
when: env == "staging"
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- koji_hub
|
- koji_hub
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- name: check log file
|
- name: check log file
|
||||||
command: stat /var/log/koji-cert-reminder.log
|
command: stat /var/log/koji-cert-reminder.log
|
||||||
register: logstat
|
register: logstat
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -61,7 +61,7 @@
|
||||||
#- name: check to see if its even installed yet
|
#- name: check to see if its even installed yet
|
||||||
# shell: semodule -l | grep mirrorlist2 | wc -l
|
# shell: semodule -l | grep mirrorlist2 | wc -l
|
||||||
# register: ficgeneral_grep
|
# register: ficgeneral_grep
|
||||||
# always_run: true
|
# check_mode: no
|
||||||
# changed_when: "'0' in ficgeneral_grep.stdout"
|
# changed_when: "'0' in ficgeneral_grep.stdout"
|
||||||
# tags:
|
# tags:
|
||||||
# - mirrorlist2
|
# - mirrorlist2
|
||||||
|
|
|
@ -214,7 +214,7 @@
|
||||||
- name: Check if the fedmsg group exists
|
- name: Check if the fedmsg group exists
|
||||||
shell: /usr/bin/getent group fedmsg | /usr/bin/wc -l | tr -d ' '
|
shell: /usr/bin/getent group fedmsg | /usr/bin/wc -l | tr -d ' '
|
||||||
register: fedmsg_exists
|
register: fedmsg_exists
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- nagios/client
|
- nagios/client
|
||||||
|
|
|
@ -13,7 +13,7 @@
|
||||||
- name: check for netapp route
|
- name: check for netapp route
|
||||||
command: ip route show
|
command: ip route show
|
||||||
register: netapproute
|
register: netapproute
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- nfs/client
|
- nfs/client
|
||||||
|
|
|
@ -63,7 +63,7 @@
|
||||||
register: instclient
|
register: instclient
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
failed_when: "1 != 1"
|
failed_when: "1 != 1"
|
||||||
always_run: true
|
check_mode: no
|
||||||
|
|
||||||
- name: Install openQA-python-client
|
- name: Install openQA-python-client
|
||||||
command: "python setup.py install"
|
command: "python setup.py install"
|
||||||
|
@ -84,7 +84,7 @@
|
||||||
register: insttools
|
register: insttools
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
failed_when: "1 != 1"
|
failed_when: "1 != 1"
|
||||||
always_run: true
|
check_mode: no
|
||||||
|
|
||||||
- name: Install openqa_fedora_tools
|
- name: Install openqa_fedora_tools
|
||||||
command: "python setup.py install"
|
command: "python setup.py install"
|
||||||
|
|
|
@ -106,7 +106,7 @@
|
||||||
register: testsbranch
|
register: testsbranch
|
||||||
failed_when: "1 != 1"
|
failed_when: "1 != 1"
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
always_run: true
|
check_mode: no
|
||||||
|
|
||||||
- name: Check out the tests
|
- name: Check out the tests
|
||||||
git:
|
git:
|
||||||
|
@ -142,7 +142,7 @@
|
||||||
register: diskcheck
|
register: diskcheck
|
||||||
failed_when: "1 != 1"
|
failed_when: "1 != 1"
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
always_run: true
|
check_mode: no
|
||||||
|
|
||||||
- name: Ensure libvirt is running if needed to create images
|
- name: Ensure libvirt is running if needed to create images
|
||||||
service: name=libvirtd enabled=yes state=started
|
service: name=libvirtd enabled=yes state=started
|
||||||
|
|
|
@ -16,7 +16,7 @@
|
||||||
register: ifcfgusb0
|
register: ifcfgusb0
|
||||||
failed_when: "1 != 1"
|
failed_when: "1 != 1"
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
always_run: true
|
check_mode: no
|
||||||
when: deployment_type is defined
|
when: deployment_type is defined
|
||||||
|
|
||||||
- name: Check if there's an annoying ifcfg-eth1 lurking
|
- name: Check if there's an annoying ifcfg-eth1 lurking
|
||||||
|
@ -24,7 +24,7 @@
|
||||||
register: ifcfgeth1
|
register: ifcfgeth1
|
||||||
failed_when: "1 != 1"
|
failed_when: "1 != 1"
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
always_run: true
|
check_mode: no
|
||||||
when: deployment_type is defined
|
when: deployment_type is defined
|
||||||
|
|
||||||
- name: Make sure usb0 doesn't get in our way
|
- name: Make sure usb0 doesn't get in our way
|
||||||
|
|
|
@ -72,7 +72,7 @@
|
||||||
- name: check the selinux context of the users home git dirs
|
- name: check the selinux context of the users home git dirs
|
||||||
command: matchpathcon "/home/fedora/someone/public_git"
|
command: matchpathcon "/home/fedora/someone/public_git"
|
||||||
register: gitcontext
|
register: gitcontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -88,7 +88,7 @@
|
||||||
- name: check the selinux context of the project dirs
|
- name: check the selinux context of the project dirs
|
||||||
command: matchpathcon "/project"
|
command: matchpathcon "/project"
|
||||||
register: gitcontext
|
register: gitcontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -104,7 +104,7 @@
|
||||||
- name: check the selinux context of the web dir
|
- name: check the selinux context of the web dir
|
||||||
command: matchpathcon "/srv/web"
|
command: matchpathcon "/srv/web"
|
||||||
register: gitcontext
|
register: gitcontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -120,7 +120,7 @@
|
||||||
- name: check the selinux context of the people dir
|
- name: check the selinux context of the people dir
|
||||||
command: matchpathcon "/srv/people"
|
command: matchpathcon "/srv/people"
|
||||||
register: gitcontext
|
register: gitcontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -136,7 +136,7 @@
|
||||||
- name: check the selinux context of the planet dir
|
- name: check the selinux context of the planet dir
|
||||||
command: matchpathcon "/srv/planet"
|
command: matchpathcon "/srv/planet"
|
||||||
register: gitcontext
|
register: gitcontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -154,7 +154,7 @@
|
||||||
- name: check the selinux context alias of the home dir
|
- name: check the selinux context alias of the home dir
|
||||||
command: matchpathcon "/srv/home"
|
command: matchpathcon "/srv/home"
|
||||||
register: gitcontext
|
register: gitcontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
@ -173,7 +173,7 @@
|
||||||
#
|
#
|
||||||
- name: set default xfs quotas on /srv
|
- name: set default xfs quotas on /srv
|
||||||
command: xfs_quota -x -c 'limit bsoft=2g bhard=2g -d' /srv
|
command: xfs_quota -x -c 'limit bsoft=2g bhard=2g -d' /srv
|
||||||
always_run: true
|
check_mode: no
|
||||||
register: xfs_quotaoutput
|
register: xfs_quotaoutput
|
||||||
changed_when: "xfs_quotaoutput.rc != 0"
|
changed_when: "xfs_quotaoutput.rc != 0"
|
||||||
tags:
|
tags:
|
||||||
|
@ -215,7 +215,7 @@
|
||||||
- { user: tflink, quota: 10g }
|
- { user: tflink, quota: 10g }
|
||||||
- { user: thunderbirdtr, quota: 3g }
|
- { user: thunderbirdtr, quota: 3g }
|
||||||
- { user: zpericic, quota: 5g }
|
- { user: zpericic, quota: 5g }
|
||||||
always_run: true
|
check_mode: no
|
||||||
register: xfs_quotaoutput
|
register: xfs_quotaoutput
|
||||||
changed_when: "xfs_quotaoutput.rc != 0"
|
changed_when: "xfs_quotaoutput.rc != 0"
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -150,7 +150,7 @@
|
||||||
- name: check to see if sshd port is already known by selinux
|
- name: check to see if sshd port is already known by selinux
|
||||||
shell: semanage port -l | grep ssh
|
shell: semanage port -l | grep ssh
|
||||||
register: sshd_selinux_port
|
register: sshd_selinux_port
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
|
|
||||||
- name: allow alternate sshd port
|
- name: allow alternate sshd port
|
||||||
|
|
|
@ -54,7 +54,7 @@
|
||||||
- name: check the selinux context of the planet dir
|
- name: check the selinux context of the planet dir
|
||||||
command: matchpathcon "/srv/planet"
|
command: matchpathcon "/srv/planet"
|
||||||
register: gitcontext
|
register: gitcontext
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: false
|
changed_when: false
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -4,7 +4,7 @@
|
||||||
- name: check for grub serial setup
|
- name: check for grub serial setup
|
||||||
command: cat /etc/grub2.cfg
|
command: cat /etc/grub2.cfg
|
||||||
register: serial
|
register: serial
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: '1 != 1'
|
changed_when: '1 != 1'
|
||||||
tags:
|
tags:
|
||||||
- serial-console
|
- serial-console
|
||||||
|
|
|
@ -55,7 +55,7 @@
|
||||||
- name: check the selinux context of the /srv/web/meetbot dir
|
- name: check the selinux context of the /srv/web/meetbot dir
|
||||||
command: matchpathcon /srv/web/meetbot
|
command: matchpathcon /srv/web/meetbot
|
||||||
register: context
|
register: context
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -85,7 +85,7 @@
|
||||||
- name: check log file
|
- name: check log file
|
||||||
command: stat /var/log/fedoratagger.log
|
command: stat /var/log/fedoratagger.log
|
||||||
register: logstat
|
register: logstat
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
tags:
|
tags:
|
||||||
|
|
|
@ -75,7 +75,7 @@
|
||||||
- name: check the selinux context of webdir
|
- name: check the selinux context of webdir
|
||||||
command: matchpathcon /srv/web
|
command: matchpathcon /srv/web
|
||||||
register: webdir
|
register: webdir
|
||||||
always_run: yes
|
check_mode: no
|
||||||
changed_when: "1 != 1"
|
changed_when: "1 != 1"
|
||||||
tags:
|
tags:
|
||||||
- config
|
- config
|
||||||
|
|
|
@ -12,7 +12,7 @@
|
||||||
- name: growpart the second partition (/) to full size
|
- name: growpart the second partition (/) to full size
|
||||||
command: growpart /dev/vda 2
|
command: growpart /dev/vda 2
|
||||||
register: growpart
|
register: growpart
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: "growpart.rc != 1"
|
changed_when: "growpart.rc != 1"
|
||||||
#failed_when: growpart.rc == 2
|
#failed_when: growpart.rc == 2
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
|
|
|
@ -12,7 +12,7 @@
|
||||||
- name: growpart the first partition (/) to full size
|
- name: growpart the first partition (/) to full size
|
||||||
command: growpart /dev/vda 1
|
command: growpart /dev/vda 1
|
||||||
register: growpart
|
register: growpart
|
||||||
always_run: true
|
check_mode: no
|
||||||
changed_when: "growpart.rc != 1"
|
changed_when: "growpart.rc != 1"
|
||||||
failed_when: growpart.rc == 2
|
failed_when: growpart.rc == 2
|
||||||
|
|
||||||
|
|
|
@ -5,7 +5,7 @@
|
||||||
register: host_is_up
|
register: host_is_up
|
||||||
ignore_errors: true
|
ignore_errors: true
|
||||||
changed_when: false
|
changed_when: false
|
||||||
always_run: true
|
check_mode: no
|
||||||
|
|
||||||
- name: clean out old known_hosts (name based entries)
|
- name: clean out old known_hosts (name based entries)
|
||||||
local_action: known_hosts path={{item}} host={{inventory_hostname}} state=absent
|
local_action: known_hosts path={{item}} host={{inventory_hostname}} state=absent
|
||||||
|
@ -56,7 +56,7 @@
|
||||||
changed_when: volume_available.rc == 0
|
changed_when: volume_available.rc == 0
|
||||||
ignore_errors: True
|
ignore_errors: True
|
||||||
when: volumes is defined
|
when: volumes is defined
|
||||||
always_run: True
|
check_mode: no
|
||||||
|
|
||||||
#
|
#
|
||||||
# If it is attach it.
|
# If it is attach it.
|
||||||
|
@ -97,7 +97,7 @@
|
||||||
|
|
||||||
- name: gather facts
|
- name: gather facts
|
||||||
setup:
|
setup:
|
||||||
always_run: True
|
check_mode: no
|
||||||
ignore_errors: True
|
ignore_errors: True
|
||||||
register: facts
|
register: facts
|
||||||
|
|
||||||
|
|
|
@ -6,7 +6,7 @@
|
||||||
delegate_to: "{{ vmhost }}"
|
delegate_to: "{{ vmhost }}"
|
||||||
virt: command=list_vms
|
virt: command=list_vms
|
||||||
register: result
|
register: result
|
||||||
always_run: yes
|
check_mode: no
|
||||||
|
|
||||||
- name: ensure the lv for the guest is made
|
- name: ensure the lv for the guest is made
|
||||||
lvol: lv={{ inventory_hostname }} vg={{ volgroup }} size={{ lvm_size }} state=present
|
lvol: lv={{ inventory_hostname }} vg={{ volgroup }} size={{ lvm_size }} state=present
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue