4b031f9f24
This runs an haproxy which is strikingly similar to the one we currently run for git.openstack.org, but it is run in a docker container. Change-Id: I647ae8c02eb2cd4f3db2b203d61a181f7eb632d2
88 lines
2.3 KiB
YAML
88 lines
2.3 KiB
YAML
- hosts: "!disabled"
|
|
name: "Base: set up users and base package repositories on all hosts"
|
|
roles:
|
|
- users
|
|
- base-repos
|
|
|
|
# Run base-server seperately so that the update apt cache handler in base-repos
|
|
# fires before we run base-server
|
|
- hosts: "!disabled"
|
|
name: "Base: set up common environment on all hosts"
|
|
roles:
|
|
- base-server
|
|
- timezone
|
|
- unbound
|
|
- exim
|
|
|
|
# Do not run firewall rules on kubernetes hosts, they are managed by k8s-on-openstack.
|
|
# TODO(mordred) snmpd should be able to be re-added to kubernetes hosts but we will
|
|
# need to add cacti to sg-opendev-nodes and sg-opendev-master security groups first.
|
|
- hosts: "!disabled:!kubernetes"
|
|
name: "Base: set up firewall rules"
|
|
roles:
|
|
- snmpd
|
|
- iptables
|
|
|
|
- hosts: bridge.openstack.org:!disabled
|
|
name: "Base: configure cloud credentials on bridge"
|
|
roles:
|
|
- install-kubectl
|
|
- configure-kubectl
|
|
tasks:
|
|
- include_role:
|
|
name: configure-openstacksdk
|
|
vars:
|
|
openstacksdk_config_file: '{{ openstacksdk_config_dir }}/all-clouds.yaml'
|
|
openstacksdk_config_template: clouds/bridge_all_clouds.yaml.j2
|
|
- include_role:
|
|
name: configure-openstacksdk
|
|
vars:
|
|
openstacksdk_config_template: clouds/bridge_clouds.yaml.j2
|
|
|
|
- hosts: nodepool-launcher:nodepool-builder:!disabled
|
|
name: "Base: configure OpenStackSDK on nodepool"
|
|
strategy: free
|
|
roles:
|
|
- minimal-nodepool
|
|
- configure-openstacksdk
|
|
- configure-kubectl
|
|
|
|
- hosts: "puppet:!disabled"
|
|
name: "Base: install and configure puppet on puppet hosts"
|
|
roles:
|
|
- puppet-install
|
|
- disable-puppet-agent
|
|
|
|
- hosts: "adns1.opendev.org:!disabled"
|
|
name: "Base: configure adns1.opendev.org"
|
|
roles:
|
|
- master-nameserver
|
|
|
|
- hosts: "ns1.opendev.org:ns2.opendev.org:!disabled"
|
|
name: "Base: configure authoritative nameservers"
|
|
roles:
|
|
- nameserver
|
|
|
|
- hosts: "docker:!disabled"
|
|
name: "Base: install and configure docker on docker hosts"
|
|
roles:
|
|
- install-docker
|
|
|
|
- hosts: "registry:!disabled"
|
|
name: "Base: configure registry"
|
|
roles:
|
|
- install-docker
|
|
- registry
|
|
|
|
- hosts: "gitea:!disabled"
|
|
name: "Base: configure gitea"
|
|
roles:
|
|
- install-docker
|
|
- gitea
|
|
|
|
- hosts: "gitea-lb:!disabled"
|
|
name: "Base: configure gitea load balancer"
|
|
roles:
|
|
- install-docker
|
|
- haproxy
|