fedora-infra_ansible/inventory/host_vars/log01.iad2.fedoraproject.org at dfd5d17e3a2a347ff7f10d2efbb1d16ae431e6cb

mirror of https://pagure.io/fedora-infra/ansible.git synced 2026-05-16 13:56:03 +08:00

Files

Nils Philippsen dbbf94a411 ipa/client: configure global shell access and sudo

Almost global anyway, i.e. inside the VPN.

The ipa/client-based shell access and sudo rules are only effective for
staging right now, the respective playbook bits are masked out for prod.

- Assign Ansible host groups to IPA host groups, the latter don't care
  about 'stg' in the name and use dashes rather than underscores.
- Distill shell access groups from fas_client_groups in group and host
  vars.
- Let all `sysadmin-*` groups in the previous list run anything via sudo
  in the host group (except bastion & batcave).
- Remove `fas_client_groups` from staging host and group vars.
- Remove sudoers from staging host and group vars if only `sysadmin-*`
  groups have shell access.
- Set up `ipa_client_shell_groups` on bastion to be a super set of the
  same on batcave.

Newly created IPA host groups:
- autosign
- badges
- basset
- bastion
- batcave
- blockerbugs
- bodhi
- bugzilla2fedmsg
- busgateway
- datagrepper
- dbserver
- dns
- fedimg
- github2fedmsg
- ipa
- kernel-qa
- kerneltest
- kojibuilder
- kojihub
- kojipkgs
- logging
- mailman
- memcached
- mirrormanager
- nagios
- notifs
- oci-registry
- odcs
- openqa
- openqa-workers
- osbs
- packages
- pdc-web
- pkgs
- proxies
- rabbitmq
- releng-compose
- resultsdb
- secondary
- sign-bridge
- sundries
- value
- wiki

Signed-off-by: Nils Philippsen <nils@redhat.com>

2021-02-01 22:23:41 +00:00

465 B

Raw Blame History

— nm: 255.255.255.0 gw: 10.3.163.254 dns: 10.3.163.33

ks_url: http://209.132.181.6/repo/rhel/ks/kvm-rhel-8-ext ks_repo: http://209.132.181.6/repo/rhel/RHEL8-x86_64/

volgroup: /dev/vg_guests eth0_ip: 10.3.163.39 vmhost: vmhost-x86-03.iad2.fedoraproject.org datacenter: iad2

tcp_ports: [ 80, 443, 514, 6514 ] udp_ports: [ 514, 25826 ] nrpe_procs_warn: 900 nrpe_procs_crit: 1000

lvm_size: 1048576 mem_size: 16384 num_cpus: 16

#host_backup_targets: ['/var/log']

465 B Raw Blame History

465 B

Raw Blame History