mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-05-03 20:03:34 +08:00
d366194a22
With the EOL of Fedora 38 yesterday, we are no longer building any modules and can retire our module build service. Note that toddlers needs to be adjusted still, that will happen after this. Thanks for all the modules! Signed-off-by: Kevin Fenzi <kevin@scrye.com>
82 lines
2.2 KiB
Plaintext
82 lines
2.2 KiB
Plaintext
---
|
|
ansible_base: /srv/web/infra
|
|
csi_primary_contact: admin@fedoraproject.org / sysadmin-main-members
|
|
csi_purpose: Central management host for ansible
|
|
csi_relationship: |
|
|
From the batcave batman ventures out to fight crime and protect gotham city!
|
|
|
|
batcave is the central management host for ansible.
|
|
It also is the infrastructure.fedoraproject.org website with various content.
|
|
It houses a number of infrastructure git repos.
|
|
|
|
* This host relies on:
|
|
The virthost it's hosted on (virthost22)
|
|
|
|
* Things that rely on this host:
|
|
Things that access rhel/fedora/infra rpm repos, including builders and infra hosts.
|
|
If this host is down, ansible runs cannot be made to update other hosts.
|
|
If this host is down, crime may go up in gotham city.
|
|
# For the MOTD
|
|
csi_security_category: High
|
|
# Neeed for rsync from log01 for logs.
|
|
custom_rules: ['-A INPUT -p tcp -m tcp -s 10.3.163.39 --dport 873 -j ACCEPT', '-A INPUT -p tcp -m tcp -s 192.168.1.59 --dport 873 -j ACCEPT']
|
|
#
|
|
# This host is externally reachable
|
|
#
|
|
external: true
|
|
fedmsg_certs:
|
|
- can_send:
|
|
- ansible.playbook.complete
|
|
- ansible.playbook.start
|
|
- logger.log
|
|
group: sysadmin
|
|
owner: root
|
|
service: shell
|
|
- can_send:
|
|
- infragit.receive
|
|
group: sysadmin
|
|
owner: root
|
|
service: scm
|
|
freezes: true
|
|
ipa_client_shell_groups:
|
|
- fi-apprentice
|
|
- sysadmin-ask
|
|
- sysadmin-badges
|
|
- sysadmin-bot
|
|
- sysadmin-centos
|
|
- sysadmin-cloud
|
|
- sysadmin-copr
|
|
- sysadmin-coreos
|
|
- sysadmin-cvs
|
|
- sysadmin-datanommer
|
|
- sysadmin-debuginfod
|
|
- sysadmin-fedimg
|
|
- sysadmin-koschei
|
|
- sysadmin-libravatar
|
|
- sysadmin-messaging
|
|
- sysadmin-noc
|
|
- sysadmin-odcs
|
|
- sysadmin-osbuild
|
|
- sysadmin-openscanhub
|
|
- sysadmin-qa
|
|
- sysadmin-retrace
|
|
- sysadmin-releasemonitoring
|
|
- sysadmin-releng
|
|
- sysadmin-tools
|
|
- sysadmin-upstreamfirst
|
|
- sysadmin-veteran
|
|
- sysadmin-web
|
|
ipa_host_group: batcave
|
|
ipa_host_group_desc: The Bat Cave
|
|
lvm_size: 750000
|
|
mem_size: 24576
|
|
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3"
|
|
nrpe_procs_crit: 1000
|
|
nrpe_procs_warn: 900
|
|
num_cpus: 10
|
|
primary_auth_source: ipa
|
|
tcp_ports: [80, 443, 8442, 8443]
|
|
vpn: true
|
|
nagios_Check_Services:
|
|
swap: false
|