communishift: add some proxies.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

inventory/group_vars/os-proxies

@@ -0,0 +1,2 @@
+---
+datacenter: cloud

inventory/host_vars/os-proxy01.fedorainfracloud.org

@@ -0,0 +1,18 @@
+---
+nm: 255.255.254.0
+gw: 38.145.49.254
+dns: 8.8.8.8
+num_cpus: 4
+
+ks_url: http://10.5.126.23/repo/rhel/ks/kvm-fedora-29
+ks_repo: http://10.5.126.23/pub/fedora/linux/releases/29/Server/x86_64/os/
+
+vmhost: virthost-os01.fedoraproject.org
+volgroup: /dev/vg_guests
+
+eth0_ip: 38.145.48.42
+
+nrpe_procs_warn: 1200
+nrpe_procs_crit: 1400
+
+vpn: false

inventory/host_vars/os-proxy02.fedorainfracloud.org

@@ -0,0 +1,18 @@
+---
+nm: 255.255.254.0
+gw: 38.145.49.254
+dns: 8.8.8.8
+num_cpus: 4
+
+ks_url: http://10.5.126.23/repo/rhel/ks/kvm-fedora-29
+ks_repo: http://10.5.126.23/pub/fedora/linux/releases/29/Server/x86_64/os/
+
+vmhost: virthost-os01.fedoraproject.org
+volgroup: /dev/vg_guests
+
+eth0_ip: 38.145.48.42
+
+nrpe_procs_warn: 1200
+nrpe_procs_crit: 1400
+
+vpn: false

inventory/inventory

@@ -1519,3 +1519,7 @@ virthost-os03.fedorainfracloud.org
 #virthost-ppc64le-os01.fedorainfracloud.org
 virthost-aarch64-os01.fedorainfracloud.org
 virthost-aarch64-os02.fedorainfracloud.org
+
+[os-proxies]
+os-proxy01.fedorainfracloud.org
+os-proxy02.fedorainfracloud.org

master.yml

@@ -78,6 +78,7 @@
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/openstack-compute-nodes.yml
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/osbs-cluster.yml
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/os-cluster.yml
+- import_playbook: /srv/web/infra/ansible/playbooks/groups/os-proxies.yml
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/packages.yml
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/pagure.yml
 - import_playbook: /srv/web/infra/ansible/playbooks/groups/pagure-proxy.yml

playbooks/groups/os-proxies.yml

@@ -0,0 +1,29 @@
+# create a new proxy server
+
+- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml myhosts=os-proxies"
+
+- name: make the box be real
+  hosts: os-proxies
+  user: root
+  gather_facts: True
+
+  vars_files:
+   - /srv/web/infra/ansible/vars/global.yml
+   - "/srv/private/ansible/vars.yml"
+   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
+
+  pre_tasks:
+  - include_vars: dir=/srv/web/infra/ansible/vars/all/ ignore_files=README
+  - import_tasks: "{{ tasks_path }}/yumrepos.yml"
+
+  roles:
+  - base
+  - fas_client
+  - rkhunter
+  - nagios_client
+  - collectd/base
+  - sudo
+
+  tasks:
+  - import_tasks: "{{ tasks_path }}/2fa_client.yml"
+  - import_tasks: "{{ tasks_path }}/motd.yml"