WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-28 20:42:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

group_vars/all: default nbdr to false for non rdu3 hardware

Browse Source 
Non rdu3 hardware doesn't have access to tang.
There's some slight exceptions on some hosts that use tpm,
but we can override that in hosts vars.

Also drop the rdu3 datacenter check, we can just use the
nbde boolean to determine if we run it or not.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi
2025-08-09 15:24:14 -07:00
parent 6e3f6e9ac3
commit be1b1503d6
2 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
inventory/group_vars/all
View File

@@ -302,3 +302,8 @@ notes: |
Unspecified.
* What hosts/services does this rely on?
* What hosts/services rely on this?
# network block device encryption default to false,
# only set on hardware hosts that are encrypted installs where
# there is a local tang server or tpm
nbde: false

2
playbooks/groups/virthost.yml
View File

@@ -48,7 +48,7 @@
- role: collectd/base
- sudo
- virthost
- {role: linux-system-roles.nbde_client, tags: ['nbde_client'], when: (datacenter == 'rdu3' and nbde|bool) or ( datacenter == 'rdu3' and nbde|bool) }
- {role: linux-system-roles.nbde_client, tags: ['nbde_client'], when: (nbde|bool) }
- {role: serial-console, when: datacenter == 'rdu3' and ansible_architecture != 's390x'}
- {role: iscsi_client, when: datacenter == 'rdu3' and inventory_hostname.startswith('bvmhost-p10-01') }