+1

-re

On 05/15/2015 12:29 PM, Kevin Fenzi wrote:

Greetings.

I'd like to run the master ansible playbook over everything with just the fedmsg/base and fedmsgmonitor tags.

This will sync hosts up to what we have in git now, making the following changes:

fedmsg/base:

TASK: [fedmsg/base | setup basic /etc/fedmsg.d/ contents for internal hosts] *** --- before: /etc/fedmsg.d/ssl.py +++ after: /srv/web/infra/ansible/roles/fedmsg/base/templates/ssl.py.j2 @@ -166,23 +166,24 @@ ("shell.koschei01", "shell-koschei01.%s" % suffix), ("koschei.koschei01", "koschei-koschei01.%s" % suffix),

     ("shell.elections01", "shell-elections01.%s" % suffix),
     ("shell.elections02", "shell-elections02.%s" % suffix),
     ("fedora_elections.elections01", "fedora_elections-elections01.%s" % suffix),
     ("fedora_elections.elections02", "fedora_elections-elections02.%s" % suffix),

     ("mirrormanager2.mm-frontend01", "mirrormanager2-mm-frontend01.%s" % suffix),
     ("shell.mm-frontend01", "shell-mm-frontend01.%s" % suffix),

•    ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
     ("shell.mm-crawler01", "shell-mm-crawler01.%s" % suffix),
     ("shell.mm-crawler02", "shell-mm-crawler02.%s" % suffix),
  

•    ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
  

•    ("mirrormanager.mm-backend01", "shell-mm-backend01.%s" % suffix),
  
     ("shell.anitya-frontend01", "shell-anitya-frontend01.fedoraproject.org"),
     ("anitya.anitya-frontend01", "anitya-anitya-frontend01.fedoraproject.org"),
     ("shell.anitya-backend01", "shell-anitya-backend01.fedoraproject.org"),
     ("anitya.anitya-backend01", "anitya-anitya-backend01.fedoraproject.org"),
  
     # FAF/retrace is on the qa network and talks to an inbound relay.
     ("shell.retrace01", "shell-retrace01.qa.fedoraproject.org"),
     ("shell.retrace02", "shell-retrace02.qa.fedoraproject.org"),
     ("faf.retrace01", "faf-retrace01.qa.fedoraproject.org"),
  
  

changed: [value01.phx2.fedoraproject.org] => (item=ssl.py)

fedmsgmonitor:

some permissions on fedmsg sockets for nrpe to be able to read them.

This should make sure we are all in sync with git in the event we need to make any more changes down the road and should reduce the size of the check/diff reports so we can see actual issues.

+1s?

kevin

---

infrastructure mailing list infrastructure@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/infrastructure