Aurélien Bompard
292c7f6c6e
Deploy journal-to-fedora-messaging on IPA (staging for now)
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2025-03-28 12:37:56 +01:00
Michal Konecny
2ec055db6f
Use first uppercase letter for all handlers
...
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.
I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```
Then I went through all the changes and removed the ones that wasn't
expected to be changed.
Fixes https://pagure.io/fedora-infrastructure/issue/12391
Signed-off-by: Michal Konecny <mkonecny@redhat.com >
2025-02-10 20:31:49 +00:00
iamyaash
b3d6a90b9a
motd generic template added
...
migrated notes from infra/hosts
motd changes; excluding CSI infos
removed csi_* vars from group_vars; converted csi_purpose & csi_relationship into notes
fixed merge conflicts
minor changes; var
updating YAMLs & playbooks
udpated YAMLs & playbooks again
updated correctly; buildhw.yml
fixing merge conflicts
dest added in motd.yml
2025-01-28 01:10:14 +00:00
Ryan Lerch
dbdb0d9824
Fix the final 50ish casing linting errors
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-22 07:30:55 +10:00
Ryan Lerch
3c41882bb0
ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell
...
Replaces references to shell: with ansible.builtin.shell
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 11:29:10 +10:00
Ryan Lerch
62952df107
ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
...
Replaces many references to file: with ansible.builtin.file
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2025-01-15 10:41:52 +10:00
Ryan Lerch
2cf38c1f17
[yaml-lint] fix yamllint errors and warnings on plabooks
...
Signed-off-by: Ryan Lerch <rlerch@redhat.com >
2024-11-25 19:04:25 +10:00
David Kirwan
5ad386ed6f
zabbix: Enable zabbix agent on prod hosts
...
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com >
2024-01-03 14:31:12 +00:00
Patrik Polakovič
73863a8c90
Zabbix: Add zabbix agent to groups/ipa playbook
...
Signed-off-by: Patrik Polakovič <patrik@alphamail.org >
2023-08-30 11:18:34 +00:00
Kevin Fenzi
3fd5580883
ipa: adjust for new ansible import_playbook needs
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2023-05-17 17:28:44 -07:00
Nils Philippsen
2d4ec8d259
Apply openvpn/client role before ipa/client
...
This is so hosts on the Fedora VPN are able to talk to IPA before they
try to enroll.
Signed-off-by: Nils Philippsen <nils@redhat.com >
2021-03-24 18:19:11 +01:00
Nils Philippsen
006b2246b1
ipa/client: enable for ipa in prod
...
Signed-off-by: Nils Philippsen <nils@redhat.com >
2021-03-24 13:44:33 +01:00
Mark O'Brien
4e33f7c5d7
remove trailing backslash
2021-02-12 14:22:40 +00:00
Mark O'Brien
5e3848ad7b
add ipa client role to hosts with no fas in staging
2021-02-12 14:22:40 +00:00
Kevin Fenzi
0bf41f71ca
ipa: install collectd so we can see some basic load graphs
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2021-02-02 08:48:31 -08:00
Aurélien Bompard
d58d1bd208
IPA: don't add the mod_wsgi role, let the installed set the options it wants
...
Signed-off-by: Aurélien Bompard <aurelien@bompard.org >
2020-11-10 12:07:49 +01:00
Kevin Fenzi
0eb6dae00e
playbooks: ipa/proxies: 2fa also only in prod
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2020-07-23 12:30:44 -07:00
Kevin Fenzi
2ee56651b0
playbooks: ipa/proxies: make fasClient only prod
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2020-07-23 12:24:22 -07:00
Kevin Fenzi
80d8694583
ansible: fix -- mistake for import_playbook
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-05-20 18:23:42 +00:00
Kevin Fenzi
2d1cf41c9f
ansible: fix the virt-create calls
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-05-20 18:19:27 +00:00
Kevin Fenzi
4b31ac5152
ansible: Change all our group names from foo-bar to foo_bar or foo-bar-baz to foo_bar_baz
...
In ansible 2.8 the - character isn't supposed to be valid in group names.
While we could override this, might has well just bite the bullet and change it.
So, just switch all group names to use _ instead of -
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-05-20 17:38:09 +00:00
Stephen Smoogen
3e3632fa62
fix all playbooks so that yumrepos is a pre_task
2018-10-31 15:38:38 +00:00
Kevin Fenzi
afef097a3d
switch all the include tasks to import tasks
2017-10-17 17:37:03 +00:00
Kevin Fenzi
d9ee0059b4
typo on a massive scale
2017-10-15 20:33:11 +00:00
Kevin Fenzi
69fd8d117a
switch all the handlers to import and drop the global static import
2017-10-15 20:29:59 +00:00
Kevin Fenzi
1bf960425f
this needs to be imported not included
2017-10-15 19:54:19 +00:00
Kevin Fenzi
ceff9bfca4
first stab at replacing include with include_playbook or includ_tasks
2017-10-15 19:46:08 +00:00
Patrick Uiterwijk
afd0a590f9
Using API at id.fp.o broke
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2017-08-10 17:43:55 +02:00
Stephen Smoogen
d0b6c8ce06
and this is how you break everything before going on a week vacation
2017-05-05 22:12:33 +00:00
Kevin Fenzi
0acfaa2a7e
Fix handlers, roles, and tasks to be handlers_path, roles_path and tasks_path so as not to conflict with ansible variables.
...
Fix duplicate definition of become default that was in group_vars/all as well as vars/global.
2017-04-13 15:46:14 +00:00
Patrick Uiterwijk
5ced2ec87a
Make IPA API available from external
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-12-20 08:04:23 +00:00
Patrick Uiterwijk
0464676294
Force combined keytab ownership
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-12-20 05:26:30 +00:00
Patrick Uiterwijk
a3203b9950
Record original
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-12-20 05:24:11 +00:00
Patrick Uiterwijk
78261c632c
Make IPA use the combined keytab
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-12-20 05:21:37 +00:00
Patrick Uiterwijk
ab40af84d1
Make it a task
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-12-20 05:16:52 +00:00
Patrick Uiterwijk
a16153d7ad
Combine keytabs together
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-12-20 05:13:49 +00:00
Patrick Uiterwijk
58546b9d3d
Disable link for now
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-12-05 21:37:37 +00:00
Patrick Uiterwijk
f62f5633fd
Only do this in staging for now
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-12-04 03:11:42 +00:00
Patrick Uiterwijk
fcb723e401
We overwrite the existing file
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-12-04 03:04:39 +00:00
Patrick Uiterwijk
78c5d59d74
Use id.fp.o keytab
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-12-04 03:02:21 +00:00
Patrick Uiterwijk
dc64c85788
Give ipa keytab for id.fp.o
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-12-04 02:54:13 +00:00
Patrick Uiterwijk
c74bd6d108
Move ipa to ipa/server
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-10-18 17:43:22 +00:00
Patrick Uiterwijk
66bdf1408b
After installing IPA, do one more base role
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-10-13 12:54:43 +00:00
Kevin Fenzi
04a52b8667
Death to all trailing whitespace.
2016-08-08 19:36:31 +00:00
Michael Scherer
07f04462c3
Move mod_wsgi to a role rather than a included tasks
2016-08-08 16:34:12 +00:00
Patrick Uiterwijk
d9f91f5a1a
Ipa doesnt need us to do apache
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-08-04 17:20:42 +00:00
Patrick Uiterwijk
6e6ddc87f0
Setup IPA realm
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-08-04 16:39:30 +00:00
Patrick Uiterwijk
2d55a8bb7d
IPA server role and playbook
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2016-08-04 16:37:47 +00:00