mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-04-30 13:32:30 +08:00
76bda7e176
Move kickstarts into ansible from the side repo they were in before. Hopefully this will make it easier for people to contibute to them and see what they are. All sensitive info here should be templated out from the private repo. note that before we merge/run this, we need to move the old repo out of the way in the location we are syncing to. We can gradually move other kickstarts out of the old repo into this role as we need them to build rdu3 out. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
68 lines
2.0 KiB
YAML
68 lines
2.0 KiB
YAML
---
|
|
- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
|
|
vars:
|
|
myhosts: "batcave"
|
|
|
|
- name: Make the box be real
|
|
hosts: batcave
|
|
user: root
|
|
gather_facts: true
|
|
|
|
vars_files:
|
|
- /srv/web/infra/ansible/vars/global.yml
|
|
- "/srv/private/ansible/vars.yml"
|
|
- /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
|
|
|
|
roles:
|
|
- base
|
|
- rkhunter
|
|
- nagios_client
|
|
- hosts
|
|
- openvpn/client
|
|
- ipa/client
|
|
- ansible-server
|
|
- sudo
|
|
- collectd/base
|
|
- role: git/hooks
|
|
- rsyncd
|
|
- apache
|
|
- httpd/mod_ssl
|
|
- role: httpd/certificate
|
|
certname: "{{wildcard_cert_name}}"
|
|
SSLCertificateChainFile: "{{wildcard_int_file}}"
|
|
- role: rabbit/user
|
|
user_name: "batcave{{ env_suffix }}"
|
|
user_sent_topics: ^org\.fedoraproject\.{{ env_short }}\.(ansible|git|infragit|logger)\..*
|
|
- role: rabbit/queue
|
|
queue_username: "mirror_pagure_ansible{{ env_suffix }}"
|
|
queue_name: "mirror_pagure_ansible{{ env_suffix }}"
|
|
queue_routing_keys:
|
|
- "io.pagure.*.pagure.git.receive"
|
|
queue_thresholds:
|
|
warning: 10
|
|
critical: 100
|
|
user_sent_topics: ^$
|
|
- role: rabbit/queue
|
|
queue_username: "mirror_pagure_ansible{{ env_suffix }}"
|
|
queue_name: "mirror_pagure_ansible{{ env_suffix }}_13"
|
|
queue_routing_keys:
|
|
- "io.pagure.*.pagure.git.receive"
|
|
queue_thresholds:
|
|
warning: 10
|
|
critical: 100
|
|
user_sent_topics: ^$
|
|
when: datacenter != 'iad2'
|
|
- batcave
|
|
- role: grobisplitter
|
|
when: datacenter == 'iad2'
|
|
- { role: nfs/client, when: inventory_hostname.startswith('batcave'), mnt_dir: '/srv/web/pub', nfs_src_dir: 'fedora_ftp/fedora.redhat.com/pub' }
|
|
- { role: nfs/client, when: inventory_hostname.startswith('batcave01'), mnt_dir: '/mnt/fedora/app', nfs_src_dir: 'fedora_app/app' }
|
|
- { role: mirror_pagure_ansible, tags: ['mirror_pagure_ansible'] }
|
|
- kickstarts
|
|
|
|
pre_tasks:
|
|
- import_tasks: "{{ tasks_path }}/yumrepos.yml"
|
|
|
|
handlers:
|
|
- import_tasks: "{{ handlers_path }}/restart_services.yml"
|