mirror of
https://pagure.io/fedora-infra/ansible.git
synced 2026-03-20 12:07:34 +08:00
55cc28c3b1
In IAD2 the prod and stg hosts are on different VLANs, so we thought we didn't need this. However, we are still seeing some odd mixing of prod and stg fedmsgs, so likely some fedmsg port has become enabled accross all the VLANS. In any case this should do no harm, it just adds 2 subnets on all prod hosts to block staging, except for a small number of staging_friendly hosts (in the staging_friendly ansible group). Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This role is the base setup for all our machines. If there's something that shouldn't be run on every single machine, it should be in another role.