ansible/inventory/group_vars/odcs_frontend_stg
2020-04-24 21:34:13 +02:00

65 lines
1.9 KiB
Text

---
lvm_size: 20000
mem_size: 2048
num_cpus: 2
# Set this to True for the F28 release and onwards.
freezes: false
# Definining these vars has a number of effects
# 1) mod_wsgi is configured to use the vars for its own setup
# 2) iptables opens enough ports for all threads for fedmsg
# 3) roles/fedmsg/base/ declares enough fedmsg endpoints for all threads
wsgi_fedmsg_service: odcs
wsgi_procs: 2
wsgi_threads: 2
tcp_ports: [
80,
# These ports all required for gluster
111, 24007, 24008, 24009, 24010, 24011,
49152, 49153, 49154, 49155,
]
# Also for gluster.
udp_ports: [ 111 ]
# Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-odcs,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
- service: odcs
owner: apache
group: apache
can_send:
- odcs.compose.state-changed
odcs_allowed_source_types: ["tag", "module"]
odcs_target_dir_url: https://odcs.stg.fedoraproject.org/composes
# Give access to jscotka to be able to develop module testing integration
# for taskotron.
odcs_allowed_clients_users:
jscotka: {}
nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3"
ansible_python_interpreter: /usr/bin/python3
# For the MOTD
csi_security_category: Low
csi_primary_contact: Factory 2 factory2-members@fedoraproject.org
csi_purpose: Run the on-demand-compose-service frontend API.
csi_relationship: |
The apache/mod_wsgi app is the only thing really running here
This host:
- relies on db01 for its database of activity (what composes have been
requested and what state are they in?)
- It also mounts an nfs shared provided by odcs-backend01.
- It provides http access to the compose contents on that nfs share.