In ansible 2.8 the - character isn't supposed to be valid in group names. While we could override this, might has well just bite the bullet and change it. So, just switch all group names to use _ instead of - Signed-off-by: Kevin Fenzi <kevin@scrye.com>
72 lines
1.9 KiB
Text
72 lines
1.9 KiB
Text
---
|
|
# Define resources for this group of hosts here.
|
|
lvm_size: 60000
|
|
mem_size: 4096
|
|
num_cpus: 4
|
|
|
|
# for systems that do not match the above - specify the same parameter in
|
|
# the host_vars/$hostname file
|
|
|
|
koschei_topurl: https://apps.stg.fedoraproject.org/koschei
|
|
# koschei database on pgbdr.stg is in inconsistent state, so we're
|
|
# using non-BDR db01.stg for now.
|
|
koschei_pgsql_hostname: db01.stg.phx2.fedoraproject.org
|
|
koschei_koji_hub: koji.stg.fedoraproject.org
|
|
koschei_kojipkgs: koji.stg.fedoraproject.org
|
|
koschei_koji_web: koji.stg.fedoraproject.org
|
|
koschei_copr_url: http://copr-fe-dev.cloud.fedoraproject.org
|
|
koschei_copr_login: "{{ koschei_copr_login_stg }}"
|
|
koschei_copr_token: "{{ koschei_copr_token_stg }}"
|
|
|
|
|
|
tcp_ports: [
|
|
# These 4 are for fedmsg. See also /etc/fedmsg.d/endpoints.py
|
|
3000, 3001, 3002, 3003
|
|
]
|
|
|
|
custom_rules: [
|
|
# Need for rsync from log01 for logs.
|
|
'-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT',
|
|
'-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT',
|
|
]
|
|
|
|
fas_client_groups: sysadmin-koschei,fi-apprentice,sysadmin-noc,sysadmin-veteran
|
|
|
|
freezes: false
|
|
|
|
# These are consumed by a task in roles/fedmsg/base/main.yml
|
|
fedmsg_certs:
|
|
- service: shell
|
|
owner: root
|
|
group: sysadmin
|
|
can_send:
|
|
- logger.log
|
|
- service: koschei
|
|
owner: root
|
|
group: koschei
|
|
can_send:
|
|
- koschei.collection.state.change
|
|
- koschei.package.state.change
|
|
- koschei.update
|
|
|
|
# For the MOTD
|
|
csi_security_category: Low
|
|
csi_primary_contact: Fedora admins - admin@fedoraproject.org
|
|
csi_purpose: Koschei continuous integration system
|
|
csi_relationship: |
|
|
This machine depends on:
|
|
- PostgreSQL DB server
|
|
- Koji hub and kojipkgs
|
|
- fedmsg hub
|
|
- bastion (for mail relay)
|
|
- memcached01
|
|
- Copr development instance
|
|
|
|
koschei_backend_services:
|
|
- koschei-polling
|
|
- koschei-build-resolver
|
|
- koschei-repo-resolver
|
|
- koschei-scheduler
|
|
- koschei-watcher
|
|
- koschei-copr-resolver
|
|
- koschei-copr-scheduler
|