Hope this is ok. My first patch submission for CSI group variables. Feedback, outright rejection, and mild outrage (so long as it's educational) are all welcome.
Thanks, Zach
From: Aikidouke zachvatwork@gmail.com Date: Tue, 15 Sep 2015 10:40:45 -0400 Subject: [PATCH] added CSI vars to mirror list
--- inventory/group_vars/mirrorlist | 15 +++++++++++++++ 1 file changed, 15 insertions(+)
diff --git a/inventory/group_vars/mirrorlist b/inventory/group_vars/mirrorlist index c3ee6b1..ecb2515 100644 --- a/inventory/group_vars/mirrorlist +++ b/inventory/group_vars/mirrorlist @@ -15,3 +15,18 @@ mirrorlist_procs: 45
# Set this to get the vpn postfix setup postfix_group: vpn + +# These vars get shoved into /etc/system_idenfication by the base role. +# Groups and individual hosts should override them with specific info. +# See http://infrastructure.fedoraproject.org/csi/security-policy/ + +csi_security_category: Moderate +csi_primary_contact: Fedora Admins - admin@fedoraproject.org +csi_purpose: Provide the daemon process that serves cached mirror data for requests to mirrorlist_client. Part of the Fedora Mirror Management System +csi_relationship: | + * Relies on fedmsg, haproxy, apache, varnish, and nagios for monitoring + * MirrorManager system running on app01, app02, app03, app04, app05, app06, bapp02 relies on mirrorlist to cache mirrors and answer requests. + + +# To update this text, add the csi_* vars to group_vars/ in ansible. +#
On Tue, 15 Sep 2015 10:59:32 -0400 Zach Villers zachvatwork@gmail.com wrote:
Hope this is ok. My first patch submission for CSI group variables. Feedback, outright rejection, and mild outrage (so long as it's educational) are all welcome.
:)
Some hopefully constructive comments inline...
Thanks, Zach
From: Aikidouke zachvatwork@gmail.com Date: Tue, 15 Sep 2015 10:40:45 -0400 Subject: [PATCH] added CSI vars to mirror list
inventory/group_vars/mirrorlist | 15 +++++++++++++++ 1 file changed, 15 insertions(+)
diff --git a/inventory/group_vars/mirrorlist b/inventory/group_vars/mirrorlist index c3ee6b1..ecb2515 100644 --- a/inventory/group_vars/mirrorlist +++ b/inventory/group_vars/mirrorlist @@ -15,3 +15,18 @@ mirrorlist_procs: 45
# Set this to get the vpn postfix setup postfix_group: vpn
+# These vars get shoved into /etc/system_idenfication by the base role. +# Groups and individual hosts should override them with specific info. +# See http://infrastructure.fedoraproject.org/csi/security-policy/ + +csi_security_category: Moderate +csi_primary_contact: Fedora Admins - admin@fedoraproject.org +csi_purpose: Provide the daemon process that serves cached mirror data for requests to mirrorlist_client. Part of the Fedora Mirror Management System +csi_relationship: |
* Relies on fedmsg, haproxy, apache, varnish, and nagios formonitoring
* MirrorManager system running on app01, app02, app03,app04, app05, app06, bapp02 relies on mirrorlist to cache mirrors and answer requests.
{b}app* are gone now. :) They were our combined application servers, but we split off services to have their own things now.
So the mirrorlists depend on mm-backend01. Its the place that generates the data that syncs to them and then they use to reply to users dnf/yum requests.
Then they depend on the proxy services for requests in and out.
Can you redo without app* and with mm-backend01?
Thanks for poking at it...
kevin
_______________________________________________ infrastructure mailing list infrastructure@lists.fedoraproject.org http://lists.fedoraproject.org/postorius/infrastructure@lists.fedoraproject....
infrastructure@lists.fedoraproject.org
-
Kevin Fenzi -
Zach Villers