From 310bc5696c36d358e276a0a38e961a8d1c4bbef2 Mon Sep 17 00:00:00 2001
From: "James E. Blair" <jeblair@redhat.com>
Date: Fri, 7 Sep 2018 11:00:22 -0700
Subject: [PATCH] Remove !ci-backup play

Let's abandon the idea that we'll treat the backup server specially.
As long as we allow *any* automated remote access via ansible, we
have opened the door to potential compromise of the backup systems
if bridge is compromised.  Rather than pretending that this separation
gives us any benefit, remove it.

Change-Id: I751060dc05918c440374e80ffb483d948f048f36
---
 playbooks/base.yaml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/playbooks/base.yaml b/playbooks/base.yaml
index 767709d9a0..57a1abaa88 100644
--- a/playbooks/base.yaml
+++ b/playbooks/base.yaml
@@ -12,10 +12,6 @@
     - base-server
     - timezone
     - unbound
-
-- hosts: "!ci-backup:!disabled"
-  name: "Base: set up common environment on all hosts (except backup)"
-  roles:
     - exim
     - iptables
     - snmpd