Add icmp allowed to all cloud instances we provision from ansible so we can monitor them from nagios.

2026-05-12 10:56:20 +08:00 · 2017-05-02 18:02:39 +00:00
parent 1668ec04c0
commit 40f69265d7
35 changed files with 33 additions and 39 deletions
--- a/inventory/host_vars/artboard.fedorainfracloud.org
+++ b/inventory/host_vars/artboard.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: rhel7-20141015
 instance_type: m1.small
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,web-443-anywhere-persistent
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,web-443-anywhere-persistent,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]
 ansible_ifcfg_blacklist: true 
--- a/inventory/host_vars/blockerbugs-dev.cloud.fedoraproject.org
+++ b/inventory/host_vars/blockerbugs-dev.cloud.fedoraproject.org
@@ -2,7 +2,7 @@
 instance_type: m1.medium
 image: "{{ el6_qcow_id }}"
 keypair: fedora-admin
-security_group: webserver
+security_group: webserver,all-icmp-persistent,default
 zone: nova
 hostbase: blockerbugs-dev-
 public_ip: 209.132.184.200
--- a/inventory/host_vars/communityblog.fedorainfracloud.org
+++ b/inventory/host_vars/communityblog.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: rhel7-20141015
 instance_type: m1.medium
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/copr-dist-git-dev.fedorainfracloud.org
+++ b/inventory/host_vars/copr-dist-git-dev.fedorainfracloud.org
@@ -3,7 +3,7 @@ instance_type: ms1.small
 image: "{{ fedora25_x86_64 }}"
 #image: rhel7-20141015
 keypair: fedora-admin-20130801
-security_group: web-80-anywhere-persistent,ssh-anywhere-persistent,default
+security_group: web-80-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 hostbase: copr-dist-git-dev-
 public_ip: 209.132.184.179
--- a/inventory/host_vars/copr-dist-git.fedorainfracloud.org
+++ b/inventory/host_vars/copr-dist-git.fedorainfracloud.org
@@ -2,7 +2,7 @@
 instance_type: ms1.medium.bigswap
 image: "{{ fedora25_x86_64 }}"
 keypair: fedora-admin-20130801
-security_group: web-80-anywhere-persistent,ssh-anywhere-persistent,default
+security_group: web-80-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 hostbase: copr-dist-git-
 public_ip: 209.132.184.163
--- a/inventory/host_vars/copr-fe-dev.cloud.fedoraproject.org
+++ b/inventory/host_vars/copr-fe-dev.cloud.fedoraproject.org
@@ -2,7 +2,7 @@
 instance_type: m1.medium
 image: "{{ fedora25_x86_64 }}"
 keypair: fedora-admin-20130801
-security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default
+security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 hostbase: copr-fe-dev-
 public_ip: 209.132.184.55
--- a/inventory/host_vars/copr-fe.cloud.fedoraproject.org
+++ b/inventory/host_vars/copr-fe.cloud.fedoraproject.org
@@ -5,7 +5,7 @@ base_pkgs_erase: ['PackageKit*', 'sendmail', 'at']
 instance_type: ms1.medium
 image: "{{ fedora25_x86_64 }}"
 keypair: fedora-admin-20130801
-security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default
+security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,allow-nagios-persistent
 zone: nova
 hostbase: copr-fe-
 public_ip: 209.132.184.54
--- a/inventory/host_vars/copr-keygen-dev.cloud.fedoraproject.org
+++ b/inventory/host_vars/copr-keygen-dev.cloud.fedoraproject.org
@@ -3,7 +3,7 @@ instance_type: ms1.small
 image: "{{ fedora25_x86_64 }}"
 keypair: fedora-admin-20130801
 # todo: remove some security groups ?
-security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,allow-nagios-persistent
+security_group: web-80-anywhere-persistent,web-443-anywhere-persistent,ssh-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 hostbase: copr-keygen-dev-
 public_ip: 209.132.184.46
--- a/inventory/host_vars/darkserver-dev.fedorainfracloud.org
+++ b/inventory/host_vars/darkserver-dev.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: rhel7-20141015
 instance_type: m1.large
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/developer.fedorainfracloud.org
+++ b/inventory/host_vars/developer.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "{{ fedora25_x86_64 }}"
 instance_type: m1.large
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/dopr-dev.cloud.fedoraproject.org
+++ b/inventory/host_vars/dopr-dev.cloud.fedoraproject.org
@@ -1,4 +0,0 @@
---
-resolvconf: "resolv.conf/cloud"
-tcp_ports: [80, 443]
-freezes: false
--- a/inventory/host_vars/eclipse.fedorainfracloud.org
+++ b/inventory/host_vars/eclipse.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "{{ fedora23_x86_64 }}"
 instance_type: m1.small
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/faitout.fedorainfracloud.org
+++ b/inventory/host_vars/faitout.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: rhel7-20141015
 instance_type: m1.small
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,pg-5432-anywhere,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,pg-5432-anywhere,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443, 5432]

--- a/inventory/host_vars/fas2-dev.fedorainfracloud.org
+++ b/inventory/host_vars/fas2-dev.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "{{ centos66_x86_64 }}"
 instance_type: m1.small
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/fas3-dev.fedorainfracloud.org
+++ b/inventory/host_vars/fas3-dev.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: rhel7-20141015
 instance_type: m1.small
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/fedimg-dev.fedorainfracloud.org
+++ b/inventory/host_vars/fedimg-dev.fedorainfracloud.org
@@ -1,7 +1,7 @@
 instance_type: m1.medium
 image: rhel7-20141015
 keypair: fedora-admin-20130801
-security_group: default,ssh-anywhere-persistent
+security_group: default,ssh-anywhere-persistent,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/fedora-bootstrap.fedorainfracloud.org
+++ b/inventory/host_vars/fedora-bootstrap.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: Fedora-Cloud-Base-23.x86_64-python2
 instance_type: m1.large
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/glittergallery-dev.fedorainfracloud.org
+++ b/inventory/host_vars/glittergallery-dev.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "{{ fedora23_x86_64 }}"
 instance_type: m1.medium
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,web-443-anywhere-persistent
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,web-443-anywhere-persistent,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/graphite.fedorainfracloud.org
+++ b/inventory/host_vars/graphite.fedorainfracloud.org
@@ -1,7 +1,7 @@
 instance_type: m1.large
 image: "{{ fedora23_x86_64 }}"
 keypair: fedora-admin-20130801
-security_group: default,wide-open-persistent
+security_group: default,wide-open-persistent,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]
 custom_rules:
--- a/inventory/host_vars/hubs-dev.fedorainfracloud.org
+++ b/inventory/host_vars/hubs-dev.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "{{ fedora25_x86_64 }}"
 instance_type: m1.medium
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,all-icmp-persistent,default,web-80-anywhere-persistent,web-443-anywhere-persistent
+security_group: ssh-anywhere-persistent,all-icmp-persistent,default,web-80-anywhere-persistent,web-443-anywhere-persistent,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/iddev.fedorainfracloud.org
+++ b/inventory/host_vars/iddev.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: rhel7-20141015
 instance_type: m1.small
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]
 ansible_ifcfg_blacklist: true
--- a/inventory/host_vars/insim.fedorainfracloud.org
+++ b/inventory/host_vars/insim.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "{{ fedora25_x86_64 }}"
 instance_type: m1.small
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/java-deptools.fedorainfracloud.org
+++ b/inventory/host_vars/java-deptools.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "{{ fedora24_x86_64 }}"
 instance_type: m1.medium
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,web-443-anywhere-persistent
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,web-443-anywhere-persistent,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/lists-dev.fedorainfracloud.org
+++ b/inventory/host_vars/lists-dev.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: rhel7-20141015
 instance_type: m1.large
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,web-443-anywhere-persistent
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,web-443-anywhere-persistent,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/magazine.fedorainfracloud.org
+++ b/inventory/host_vars/magazine.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: rhel7-20141015
 instance_type: m1.large
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,allow-nagios-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,allow-nagios-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/modernpaste.fedorainfracloud.org
+++ b/inventory/host_vars/modernpaste.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "{{ fedora23_x86_64 }}"
 instance_type: m1.small
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/modularity.fedorainfracloud.org
+++ b/inventory/host_vars/modularity.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "Fedora-Cloud-Base-24 (Final)"
 instance_type: m1.medium
 keypair: fedora-admin-20130801
-security_group: modularity,ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default
+security_group: modularity,ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/piwik.fedorainfracloud.org
+++ b/inventory/host_vars/piwik.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "{{ fedora24_x86_64 }}"
 instance_type: m1.large
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/qadevel.cloud.fedoraproject.org
+++ b/inventory/host_vars/qadevel.cloud.fedoraproject.org
@@ -1,2 +0,0 @@
---
-host_backup_targets: ['/var/lib/phabricator/files', '/srv/backup']
--- a/inventory/host_vars/regcfp.fedorainfracloud.org
+++ b/inventory/host_vars/regcfp.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: rhel7-20141015
 instance_type: m1.medium
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/respins.fedorainfracloud.org
+++ b/inventory/host_vars/respins.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: rhel7-20141015
 instance_type: m1.medium
 keypair: fedora-admin-20130801
-security_group: wide-open-persistent,default
+security_group: wide-open-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 6969]

--- a/inventory/host_vars/shumgrepper-dev.fedorainfracloud.org
+++ b/inventory/host_vars/shumgrepper-dev.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: rhel7-20141015
 instance_type: m1.medium
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/taiga.fedorainfracloud.org
+++ b/inventory/host_vars/taiga.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "{{ fedora25_x86_64 }}"
 instance_type: m1.medium
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-443-anywhere-persistent,web-80-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-443-anywhere-persistent,web-80-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/taigastg.fedorainfracloud.org
+++ b/inventory/host_vars/taigastg.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: "{{ fedora23_x86_64 }}"
 instance_type: m1.small
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-443-anywhere-persistent,web-80-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-443-anywhere-persistent,web-80-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]

--- a/inventory/host_vars/testdays.fedorainfracloud.org
+++ b/inventory/host_vars/testdays.fedorainfracloud.org
@@ -2,7 +2,7 @@
 image: 'rhel7-20141015'
 instance_type: m1.small
 keypair: fedora-admin-20130801
-security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default
+security_group: ssh-anywhere-persistent,web-80-anywhere-persistent,web-443-anywhere-persistent,default,all-icmp-persistent
 zone: nova
 tcp_ports: [22, 80, 443]