# provision a new kernel-qa system
# NOTE: this assumes the kernel-qa boxes are already up and are accessible
# NOTE: most of these vars_path come from group_vars/kernel-qa or from hostvars

- name: make kernel-qa
  hosts: kernel-qa
  user: root
  gather_facts: True

  vars_files: 
   - /srv/web/infra/ansible/vars/global.yml
   - "{{ private }}/vars.yml"
   - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml

  roles:
  - base
  - rkhunter
  - denyhosts
  - nagios_client
  - fas_client
  - sudo

  tasks:
  # this is how you include other task lists
  - include: "{{ tasks }}/hosts.yml"
  - include: "{{ tasks }}/yumrepos.yml"
  - include: "{{ tasks }}/2fa_client.yml"
  - include: "{{ tasks }}/motd.yml"


  handlers:
  - include: "{{ handlers }}/restart_services.yml"