2018-07-31 16:53:35 +00:00
|
|
|
- hosts: "!disabled"
|
2018-09-07 17:51:56 +00:00
|
|
|
name: "Base: set up users and base package repositories on all hosts"
|
2018-07-31 16:53:35 +00:00
|
|
|
roles:
|
|
|
|
- users
|
|
|
|
- base-repos
|
2018-08-09 18:35:53 +00:00
|
|
|
|
2018-08-13 19:40:19 +00:00
|
|
|
# Run base-server seperately so that the update apt cache handler in base-repos
|
|
|
|
# fires before we run base-server
|
2018-08-09 18:35:53 +00:00
|
|
|
- hosts: "!disabled"
|
2018-09-07 17:51:56 +00:00
|
|
|
name: "Base: set up common environment on all hosts"
|
2018-08-09 18:35:53 +00:00
|
|
|
roles:
|
2018-07-31 16:53:35 +00:00
|
|
|
- base-server
|
2018-08-21 20:12:37 +00:00
|
|
|
- timezone
|
2018-08-27 20:04:57 +00:00
|
|
|
- unbound
|
2018-09-07 17:58:32 +00:00
|
|
|
- exim
|
2019-02-07 10:07:56 +00:00
|
|
|
|
|
|
|
# Do not run firewall rules on kubernetes hosts, they are managed by k8s-on-openstack.
|
|
|
|
# TODO(mordred) snmpd should be able to be re-added to kubernetes hosts but we will
|
|
|
|
# need to add cacti to sg-opendev-nodes and sg-opendev-master security groups first.
|
|
|
|
- hosts: "!disabled:!kubernetes"
|
|
|
|
name: "Base: set up firewall rules"
|
|
|
|
roles:
|
2018-09-07 17:58:32 +00:00
|
|
|
- snmpd
|
2019-02-07 10:07:56 +00:00
|
|
|
- iptables
|