ansible/inventory/group_vars/odcs_frontend
2020-04-24 21:34:15 +02:00

63 lines
1.9 KiB
Text

---
lvm_size: 30000
mem_size: 2048
num_cpus: 2
freezes: true
# Definining these vars has a number of effects
# 1) mod_wsgi is configured to use the vars for its own setup
# 2) iptables opens enough ports for all threads for fedmsg
# 3) roles/fedmsg/base/ declares enough fedmsg endpoints for all threads
wsgi_fedmsg_service: odcs
wsgi_procs: 2
wsgi_threads: 2
tcp_ports: [
80,
# These ports all required for gluster
111, 24007, 24008, 24009, 24010, 24011,
49152, 49153, 49154, 49155,
]
# Also for gluster.
udp_ports: [ 111 ]
# Neeed for rsync from log01 for logs.
custom_rules: [ '-A INPUT -p tcp -m tcp -s 10.5.126.13 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT' ]
fas_client_groups: sysadmin-noc,sysadmin-releng,sysadmin-odcs,sysadmin-veteran
# These are consumed by a task in roles/fedmsg/base/main.yml
fedmsg_certs:
- service: odcs
owner: apache
group: apache
can_send:
- odcs.compose.state-changed
odcs_target_dir_url: https://odcs.fedoraproject.org/composes
# Give access to jscotka to be able to develop module testing integration
# for taskotron.
# Give access to sgallagh to be able to generate testing composes for new
# modules.
odcs_allowed_clients_users: {"jscotka": {}, "sgallagh": {}}
virt_install_command: "{{ virt_install_command_two_nic }}"
nfs_mount_opts: "ro,hard,bg,intr,noatime,nodev,nosuid,nfsvers=3"
# For the MOTD
csi_security_category: Low
csi_primary_contact: Factory 2 factory2-members@fedoraproject.org
csi_purpose: Run the on-demand-compose-service frontend API.
csi_relationship: |
The apache/mod_wsgi app is the only thing really running here
This host:
- relies on db01 for its database of activity (what composes have been
requested and what state are they in?)
- It also mounts an nfs shared provided by odcs-backend01.
- It provides http access to the compose contents on that nfs share.