WarlockFish/fedora-infra_ansible
1
0
Fork 0
mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-04-28 04:22:18 +08:00
Code Issues Packages Projects Releases Wiki Activity
20,712 Commits 9 Branches 0 Tags
15aa64b80784bbd34d7b6f85e3a9ce43cfc94de4
Commit Graph

216 Commits

Author SHA1 Message Date
Kevin Fenzi
afef097a3d switch all the include tasks to import tasks 2017-10-17 17:37:03 +00:00
Kevin Fenzi
583f303946 we cannot use autoremove yet, it needs dnf 2 everywhere 2017-10-15 21:14:06 +00:00
Kevin Fenzi
ceff9bfca4 first stab at replacing include with include_playbook or includ_tasks 2017-10-15 19:46:08 +00:00
Kevin Fenzi
0425fd11b0 do not autoremove on base packages to remove 2017-10-15 18:26:17 +00:00
Kevin Fenzi
0067afe12f restart docker service on iptables reloads, and set docker to not restart containers on service restarts 2017-10-12 21:46:01 +00:00
Patrick Uiterwijk
936e8b261a yum accepted pkg=, package calls it name= 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2017-10-09 00:38:26 +02:00
Patrick Uiterwijk
adcbf72f03 Packageize this, packageize that, packageize the world 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-10-08 22:25:52 +00:00
Patrick Uiterwijk
394cf40242 == True is not ideal 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-10-08 20:57:08 +00:00
Patrick Uiterwijk
d12cedc5d3 Allow NM-controlled DNS if intended 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-08-21 20:58:55 +00:00
Kevin Fenzi
06033a3b27 move this to a dep instead of including it 2017-08-19 17:13:49 +00:00
Patrick Uiterwijk
aef0feda87 Turns out it was just missing a name= 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-08-16 17:43:00 +00:00
Patrick Uiterwijk
e2b829c900 Turns out name: is incompatible with include_role 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-08-16 17:41:49 +00:00
Patrick Uiterwijk
e43e0e06b1 Move SSH setup to its own role 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-08-16 17:39:23 +00:00
Patrick Uiterwijk
dfc9e56b96 Revert "bypass sshd restart for nowg" 
This reverts commit ecb03a1093.
 2017-08-15 16:59:30 +00:00
Patrick Uiterwijk
ecb03a1093 bypass sshd restart for nowg 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-08-15 16:32:16 +00:00
Patrick Uiterwijk
11a36497c8 Lets just call out to date... 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-08-15 16:24:37 +00:00
Patrick Uiterwijk
800f9145d3 Add sshd_cert tag 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-08-15 15:19:53 +00:00
Patrick Uiterwijk
fe5f1c3152 Or no quoting 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-08-04 16:49:13 +00:00
Patrick Uiterwijk
4eef39463f Quote this too. Quote all the things 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-08-04 16:47:29 +00:00
Patrick Uiterwijk
fa0d94d697 Fix EPARSE 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-08-04 16:46:12 +00:00
Patrick Uiterwijk
cfab031a8a Deploy sender_access file 
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
 2017-08-04 18:20:17 +02:00
Patrick Uiterwijk
bb707cc070 when != hen 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-07-14 02:55:02 +00:00
Patrick Uiterwijk
1bf3eacc7c Teach ansible about the enc900 interface on s390 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-07-14 02:53:27 +00:00
Kevin Fenzi
a60055fbaa oops, == here not is 2017-05-15 17:37:56 +00:00
Kevin Fenzi
2df1d71510 clean up iptables in base to not apply to cloud compute/master, osbs or os 2017-05-15 17:33:51 +00:00
Kevin Fenzi
9f71fa2295 comment in rsyslog-audit module in base 2017-05-04 14:20:37 +00:00
Kevin Fenzi
fcf570d42e initial selinux module work for rsyslog to read audit 2017-05-04 14:02:02 +00:00
Kevin Fenzi
db328d7ac2 Revert "ansible tells me not to use {s in when, lets see if this works" 
This reverts commit 9b77ca729b.
 2017-04-20 17:03:09 +00:00
Kevin Fenzi
9b77ca729b ansible tells me not to use {s in when, lets see if this works 2017-04-20 16:57:07 +00:00
Kevin Fenzi
8a6e51a9a6 change state=running to start=started as the old one is going away in ansible 2.7 2017-04-13 01:37:21 +00:00
Patrick Uiterwijk
78a6c13010 Production key is generated 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-09 23:32:41 +00:00
Patrick Uiterwijk
09cd075108 Revert "Make explicitly invalid" 
This reverts commit b91d69d1ed.
 2017-04-09 23:24:08 +00:00
Patrick Uiterwijk
b91d69d1ed Make explicitly invalid 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-09 23:22:25 +00:00
Patrick Uiterwijk
d01c436580 SSH does not know years 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-09 23:18:54 +00:00
Patrick Uiterwijk
dc1664c8f3 Combine properly 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-09 23:17:58 +00:00
Patrick Uiterwijk
7a7054b34c Allow setting additional hostnames 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-09 23:15:16 +00:00
Patrick Uiterwijk
3ec28fa016 Use a static dir 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-09 22:50:25 +00:00
Patrick Uiterwijk
7ce0b12a42 Fix env tests 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-09 22:34:55 +00:00
Patrick Uiterwijk
c96d44b232 Add initial SSH certificates 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2017-04-09 22:29:14 +00:00
Kevin Fenzi
a0727e3fd2 do not apply iptables to any fed-cloud machine now 2017-04-07 19:23:42 +00:00
Kevin Fenzi
3743d7691c add tag for common scripts 2017-03-02 16:00:06 +00:00
Stephen Smoogen
2f92b9777a we need to add a larger limits for file coverage 2017-01-18 19:34:08 +00:00
Kevin Fenzi
3163d7fdd5 Fix missing ) 2016-12-05 17:33:53 +00:00
Kevin Fenzi
0ee9865961 Simplify this conditional for iptables. 2016-12-05 17:31:45 +00:00
Kevin Fenzi
d195bae51a Exclude the osbs hosts from our default iptables template as they have their own more complex one. 2016-12-05 17:21:06 +00:00
Kevin Fenzi
8ca5c772e4 policycoreutils-python is what we want for semanage on rhel 2016-11-30 19:14:06 +00:00
Tim Flink
3c69cdbe10 adding check for non-standard ssh and semanage adjustment if found 2016-11-30 16:51:18 +00:00
Patrick Uiterwijk
b88c5c4da6 Seems IPA masters need a different krb5 conf 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-11-23 18:13:24 +00:00
Kevin Fenzi
b1a2d105c9 In ansible 2.2 always_run is depreciated. Switch to check_mode. 2016-11-01 16:29:49 +00:00
Patrick Uiterwijk
d058b58136 Allow specifying additionally needed host keytabs 
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
 2016-10-27 15:23:31 +00:00