Commit Graph

48 Commits

Author SHA1 Message Date
Aurélien Bompard
292c7f6c6e Deploy journal-to-fedora-messaging on IPA (staging for now)
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2025-03-28 12:37:56 +01:00
Michal Konecny
2ec055db6f Use first uppercase letter for all handlers
This will unify all the handlers to use first uppercase letter for
ansible-lint to stop complaining.

I went through all `notify:` occurrences and fixed them by running
```
set TEXT "text_to_replace"; set REPLACEMENT "replacement_text"; git grep
-rlz "$TEXT" . | xargs -0 sed -i "s/$TEXT/$REPLACEMENT/g"
```

Then I went through all the changes and removed the ones that wasn't
expected to be changed.

Fixes https://pagure.io/fedora-infrastructure/issue/12391

Signed-off-by: Michal Konecny <mkonecny@redhat.com>
2025-02-10 20:31:49 +00:00
iamyaash
b3d6a90b9a motd generic template added
migrated notes from infra/hosts

motd changes; excluding CSI infos

removed csi_* vars from group_vars; converted csi_purpose & csi_relationship into notes

fixed merge conflicts

minor changes; var

updating YAMLs & playbooks

udpated YAMLs & playbooks again

updated correctly; buildhw.yml

fixing merge conflicts

dest added in motd.yml
2025-01-28 01:10:14 +00:00
Ryan Lerch
dbdb0d9824 Fix the final 50ish casing linting errors
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-22 07:30:55 +10:00
Ryan Lerch
3c41882bb0 ansiblelint fixes - fqcn[action-core] - shell to ansible.builtin.shell
Replaces references to shell: with ansible.builtin.shell

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 11:29:10 +10:00
Ryan Lerch
62952df107 ansiblelint fixes-- fqcn[action-core] - file to ansible.builtin.file
Replaces many references to  file: with ansible.builtin.file

Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2025-01-15 10:41:52 +10:00
Ryan Lerch
2cf38c1f17 [yaml-lint] fix yamllint errors and warnings on plabooks
Signed-off-by: Ryan Lerch <rlerch@redhat.com>
2024-11-25 19:04:25 +10:00
David Kirwan
5ad386ed6f zabbix: Enable zabbix agent on prod hosts
Signed-off-by: David Kirwan <davidkirwanirl@gmail.com>
2024-01-03 14:31:12 +00:00
Patrik Polakovič
73863a8c90 Zabbix: Add zabbix agent to groups/ipa playbook
Signed-off-by: Patrik Polakovič <patrik@alphamail.org>
2023-08-30 11:18:34 +00:00
Kevin Fenzi
3fd5580883 ipa: adjust for new ansible import_playbook needs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2023-05-17 17:28:44 -07:00
Nils Philippsen
2d4ec8d259 Apply openvpn/client role before ipa/client
This is so hosts on the Fedora VPN are able to talk to IPA before they
try to enroll.

Signed-off-by: Nils Philippsen <nils@redhat.com>
2021-03-24 18:19:11 +01:00
Nils Philippsen
006b2246b1 ipa/client: enable for ipa in prod
Signed-off-by: Nils Philippsen <nils@redhat.com>
2021-03-24 13:44:33 +01:00
Mark O'Brien
4e33f7c5d7 remove trailing backslash 2021-02-12 14:22:40 +00:00
Mark O'Brien
5e3848ad7b add ipa client role to hosts with no fas in staging 2021-02-12 14:22:40 +00:00
Kevin Fenzi
0bf41f71ca ipa: install collectd so we can see some basic load graphs
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2021-02-02 08:48:31 -08:00
Aurélien Bompard
d58d1bd208 IPA: don't add the mod_wsgi role, let the installed set the options it wants
Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
2020-11-10 12:07:49 +01:00
Kevin Fenzi
0eb6dae00e playbooks: ipa/proxies: 2fa also only in prod
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-07-23 12:30:44 -07:00
Kevin Fenzi
2ee56651b0 playbooks: ipa/proxies: make fasClient only prod
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-07-23 12:24:22 -07:00
Kevin Fenzi
80d8694583 ansible: fix -- mistake for import_playbook
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-20 18:23:42 +00:00
Kevin Fenzi
2d1cf41c9f ansible: fix the virt-create calls
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-20 18:19:27 +00:00
Kevin Fenzi
4b31ac5152 ansible: Change all our group names from foo-bar to foo_bar or foo-bar-baz to foo_bar_baz
In ansible 2.8 the - character isn't supposed to be valid in group names.
While we could override this, might has well just bite the bullet and change it.
So, just switch all group names to use _ instead of -

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-20 17:38:09 +00:00
Stephen Smoogen
3e3632fa62 fix all playbooks so that yumrepos is a pre_task 2018-10-31 15:38:38 +00:00
Kevin Fenzi
afef097a3d switch all the include tasks to import tasks 2017-10-17 17:37:03 +00:00
Kevin Fenzi
d9ee0059b4 typo on a massive scale 2017-10-15 20:33:11 +00:00
Kevin Fenzi
69fd8d117a switch all the handlers to import and drop the global static import 2017-10-15 20:29:59 +00:00
Kevin Fenzi
1bf960425f this needs to be imported not included 2017-10-15 19:54:19 +00:00
Kevin Fenzi
ceff9bfca4 first stab at replacing include with include_playbook or includ_tasks 2017-10-15 19:46:08 +00:00
Patrick Uiterwijk
afd0a590f9 Using API at id.fp.o broke
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2017-08-10 17:43:55 +02:00
Stephen Smoogen
d0b6c8ce06 and this is how you break everything before going on a week vacation 2017-05-05 22:12:33 +00:00
Kevin Fenzi
0acfaa2a7e Fix handlers, roles, and tasks to be handlers_path, roles_path and tasks_path so as not to conflict with ansible variables.
Fix duplicate definition of become default that was in group_vars/all as well as vars/global.
2017-04-13 15:46:14 +00:00
Patrick Uiterwijk
5ced2ec87a Make IPA API available from external
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-20 08:04:23 +00:00
Patrick Uiterwijk
0464676294 Force combined keytab ownership
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-20 05:26:30 +00:00
Patrick Uiterwijk
a3203b9950 Record original
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-20 05:24:11 +00:00
Patrick Uiterwijk
78261c632c Make IPA use the combined keytab
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-20 05:21:37 +00:00
Patrick Uiterwijk
ab40af84d1 Make it a task
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-20 05:16:52 +00:00
Patrick Uiterwijk
a16153d7ad Combine keytabs together
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-20 05:13:49 +00:00
Patrick Uiterwijk
58546b9d3d Disable link for now
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-05 21:37:37 +00:00
Patrick Uiterwijk
f62f5633fd Only do this in staging for now
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-04 03:11:42 +00:00
Patrick Uiterwijk
fcb723e401 We overwrite the existing file
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-04 03:04:39 +00:00
Patrick Uiterwijk
78c5d59d74 Use id.fp.o keytab
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-04 03:02:21 +00:00
Patrick Uiterwijk
dc64c85788 Give ipa keytab for id.fp.o
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-12-04 02:54:13 +00:00
Patrick Uiterwijk
c74bd6d108 Move ipa to ipa/server
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-10-18 17:43:22 +00:00
Patrick Uiterwijk
66bdf1408b After installing IPA, do one more base role
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-10-13 12:54:43 +00:00
Kevin Fenzi
04a52b8667 Death to all trailing whitespace. 2016-08-08 19:36:31 +00:00
Michael Scherer
07f04462c3 Move mod_wsgi to a role rather than a included tasks 2016-08-08 16:34:12 +00:00
Patrick Uiterwijk
d9f91f5a1a Ipa doesnt need us to do apache
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-04 17:20:42 +00:00
Patrick Uiterwijk
6e6ddc87f0 Setup IPA realm
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-04 16:39:30 +00:00
Patrick Uiterwijk
2d55a8bb7d IPA server role and playbook
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2016-08-04 16:37:47 +00:00