07edd9d297
We want our base ansible roles to run on these nodes. However, k8s-on-openstack manages firewall rules via openstack security groups, so we don't want to run those there. There was a discussion about making a minimal set of roles that are run by default and then a group containing servers that got the full set ... but that would require a duplicate entry for 99% of our servers in the inventory, while the "only run a subset" is the exception case. Change-Id: I2cbf364305f758cecf11df41398d3d2c05222fda
247 lines
6.3 KiB
YAML
247 lines
6.3 KiB
YAML
plugin: yamlgroup
|
|
groups:
|
|
adns: adns*.open*.org
|
|
afs: afs[0-9]*.open*.org
|
|
afs-client:
|
|
- review-dev[0-9]*.open*.org
|
|
- mirror[0-9]*.open*.org
|
|
- files[0-9]*.open*.org
|
|
- ze[0-9]*.open*.org
|
|
- afsdb*.open*.org
|
|
- afs[0-9]*.open*.org
|
|
afsadmin: mirror-update[0-9]*.open*.org
|
|
afsdb: afsdb[0-9]*.open*.org
|
|
ask: ask*.open*.org
|
|
cacti: cacti[0-9]*.open*.org
|
|
disabled:
|
|
- ask-staging.openstack.org
|
|
- ask-staging01.openstack.org
|
|
- backup01.ord.rax.ci.openstack.org
|
|
- corvustest
|
|
- ethercalc01.openstack.org
|
|
- idp.openstackid.org
|
|
- lists-dev01.openstack.org
|
|
- mirror01.sto2.citycloud.openstack.org
|
|
- wiki-dev01.openstack.org
|
|
- wiki-upgrade-test.openstack.org
|
|
dns:
|
|
- adns*.opendev.org
|
|
- ns*.opendev.org
|
|
eavesdrop: eavesdrop[0-9]*.open*.org
|
|
elasticsearch: elasticsearch[0-9]*.open*.org
|
|
ethercalc: ethercalc*.open*.org
|
|
etherpad: etherpad[0-9]*.open*.org
|
|
etherpad-dev: etherpad-dev[0-9]*.open*.org
|
|
files: files[0-9]*.open*.org
|
|
firehose: firehose[0-9]*.open*.org
|
|
futureparser:
|
|
- ask-staging[0-9]*.open*.org
|
|
- cacti[0-9]*.open*.org
|
|
- codesearch[0-9]*.open*.org
|
|
- eavesdrop[0-9]*.open*.org
|
|
- elasticsearch[0-9]*.open*.org
|
|
- ethercalc[0-9]*.open*.org
|
|
- etherpad[0-9]*.open*.org
|
|
- files[0-9]*.open*.org
|
|
- firehose[0-9]*.open*.org
|
|
- git.open*.org
|
|
- git[0-9]*.open*.org
|
|
- grafana[0-9]*.open*.org
|
|
- graphite[0-9]*.open*.org
|
|
- groups-dev[0-9]*.open*.org
|
|
- groups[0-9]*.open*.org
|
|
- health[0-9]*.open*.org
|
|
- lists-dev[0-9]*.open*.org
|
|
- lists*.katacontainers.io
|
|
- lists*.open*.org
|
|
- logstash-worker[0-9]*.open*.org
|
|
- logstash[0-9]*.open*.org
|
|
- mirror-update[0-9]*.open*.org
|
|
- mirror[0-9]*.*.*.open*.org
|
|
- nb[0-9]*.open*.org
|
|
- nl[0-9]*.open*.org
|
|
- paste[0-9]*.open*.org
|
|
- pbx*.open*.org
|
|
- planet[0-9]*.open*.org
|
|
- review-dev[0-9]*.open*.org
|
|
- review[0-9]*.open*.org
|
|
- storyboard-dev[0-9]*.opendev.org
|
|
- storyboard[0-9]*.open*.org
|
|
- static[0-9]*.open*.org
|
|
- status[0-9]*.open*.org
|
|
- subunit-worker[0-9]*.open*.org
|
|
- survey[0-9]*.open*.org
|
|
- translate[0-9]*.open*.org
|
|
- translate-dev[0-9]*.open*.org
|
|
- wiki-dev[0-9]*.open*.org
|
|
- wiki[0-9]*.open*.org
|
|
- ze[0-9]*.open*.org
|
|
- zk[0-9]*.open*.org
|
|
- zm[0-9]*.open*.org
|
|
- zuul01.open*.org
|
|
gerrit:
|
|
- review-dev[0-9]*.open*.org
|
|
- review[0-9]*.open*.org
|
|
git-loadbalancer:
|
|
- git.open*.org
|
|
git-server:
|
|
- git[0-9]*.open*.org
|
|
grafana:
|
|
- grafana[0-9]*.open*.org
|
|
graphite:
|
|
- graphite*.open*.org
|
|
groups:
|
|
- groups*.open*.org
|
|
health:
|
|
- health*.open*.org
|
|
kdc:
|
|
- kdc[0-9]*.open*.org
|
|
kubernetes:
|
|
- opendev-k8s*.opendev.org
|
|
logstash:
|
|
- logstash[0-9]*.open*.org
|
|
logstash-worker:
|
|
- logstash-worker[0-9]*.open*.org
|
|
mailman:
|
|
- lists*.katacontainers.io
|
|
- lists*.open*.org
|
|
mirror:
|
|
- mirror[0-9]*.open*.org
|
|
nodepool:
|
|
- nb[0-9]*.open*.org
|
|
- nl[0-9]*.open*.org
|
|
nodepool-builder:
|
|
- nb[0-9]*.open*.org
|
|
nodepool-launcher:
|
|
- nl[0-9]*.open*.org
|
|
ns:
|
|
- ns[0-9]*.open*.org
|
|
openstackid-dev:
|
|
- openstackid-dev*.openstack.org
|
|
openstackid:
|
|
- openstackid.org
|
|
- openstackid[0-9]*.openstack.org
|
|
paste:
|
|
- paste[0-9]*.open*.org
|
|
pbx:
|
|
- pbx*.open*.org
|
|
puppet:
|
|
- afs[0-9]*.open*.org
|
|
- afsdb[0-9]*.open*.org
|
|
- ask*.open*.org
|
|
- backup[0-9]*.open*.org
|
|
- cacti[0-9]*.open*.org
|
|
- codesearch[0-9]*.open*.org
|
|
- corvustest
|
|
- eavesdrop[0-9]*.open*.org
|
|
- elasticsearch[0-9]*.open*.org
|
|
- ethercalc[0-9]*.open*.org
|
|
- etherpad-dev[0-9]*.open*.org
|
|
- etherpad[0-9]*.open*.org
|
|
- files[0-9]*.open*.org
|
|
- firehose[0-9]*.open*.org
|
|
- git*.open*.org
|
|
- grafana[0-9]*.open*.org
|
|
- graphite*.open*.org
|
|
- groups-dev*.open*.org
|
|
- groups*.open*.org
|
|
- health*.open*.org
|
|
- kdc[0-9]*.open*.org
|
|
- lists*.katacontainers.io
|
|
- lists*.open*.org
|
|
- logstash-worker[0-9]*.open*.org
|
|
- logstash[0-9]*.open*.org
|
|
- mirror-update[0-9]*.open*.org
|
|
- mirror[0-9]*.open*.org
|
|
- nb[0-9]*.open*.org
|
|
- nl[0-9]*.open*.org
|
|
- openstackid-dev*.openstack.org
|
|
- openstackid.org
|
|
- openstackid[0-9]*.openstack.org
|
|
- paste[0-9]*.open*.org
|
|
- pbx*.open*.org
|
|
- planet[0-9]*.open*.org
|
|
- refstack*.open*.org
|
|
- review-dev[0-9]*.open*.org
|
|
- review[0-9]*.open*.org
|
|
- static*.open*.org
|
|
- status*.open*.org
|
|
- storyboard*.open*.org
|
|
- subunit-worker[0-9]*.open*.org
|
|
- survey[0-9]*.open*.org
|
|
- translate-dev[0-9]*.open*.org
|
|
- translate[0-9]*.open*.org
|
|
- wiki-dev[0-9]*.open*.org
|
|
- wiki[0-9]*.open*.org
|
|
- ze[0-9]*.open*.org
|
|
- zm[0-9]*.open*.org
|
|
- zuul[0-9]*.open*.org
|
|
- zk[0-9]*.open*.org
|
|
puppet4:
|
|
- etherpad-dev[0-9]*.open*.org
|
|
refstack:
|
|
- refstack*.open*.org
|
|
registry:
|
|
- insecure-ci-registry[0-9]*.opendev.org
|
|
review-dev:
|
|
- review-dev[0-9]*.open*.org
|
|
review:
|
|
- review[0-9]*.open*.org
|
|
static:
|
|
- static*.open*.org
|
|
status:
|
|
- status*.open*.org
|
|
storyboard:
|
|
- storyboard*.open*.org
|
|
storyboard-dev:
|
|
- storyboard-dev[0-9]*.opendev.org
|
|
subunit-worker:
|
|
- subunit-worker[0-9]*.open*.org
|
|
survey:
|
|
- survey[0-9]*.open*.org
|
|
translate-dev:
|
|
- translate-dev[0-9]*.open*.org
|
|
translate:
|
|
- translate[0-9]*.open*.org
|
|
webservers:
|
|
- ask*.open*.org
|
|
- cacti[0-9]*.open*.org
|
|
- codesearch[0-9]*.open*.org
|
|
- eavesdrop[0-9]*.open*.org
|
|
- ethercalc[0-9]*.open*.org
|
|
- etherpad-dev[0-9]*.open*.org
|
|
- etherpad[0-9]*.open*.org
|
|
- files[0-9]*.open*.org
|
|
- grafana[0-9]*.open*.org
|
|
- graphite*.open*.org
|
|
- groups*.open*.org
|
|
- health*.open*.org
|
|
- nb[0-9]*.open*.org
|
|
- nl[0-9]*.open*.org
|
|
- openstackid-dev*.openstack.org
|
|
- openstackid.org
|
|
- openstackid[0-9]*.openstack.org
|
|
- paste[0-9]*.open*.org
|
|
- planet[0-9]*.open*.org
|
|
- refstack*.open*.org
|
|
- static*.open*.org
|
|
- status*.open*.org
|
|
- storyboard*.open*.org
|
|
- survey[0-9]*.open*.org
|
|
- translate-dev[0-9]*.open*.org
|
|
- translate[0-9]*.open*.org
|
|
- wiki-dev[0-9]*.open*.org
|
|
- wiki[0-9]*.open*.org
|
|
wiki:
|
|
- wiki[0-9]*.open*.org
|
|
wiki-dev:
|
|
- wiki-dev[0-9]*.open*.org
|
|
zookeeper:
|
|
- zk[0-9]*.open*.org
|
|
zuul-executor:
|
|
- ze[0-9]*.open*.org
|
|
zuul-merger:
|
|
- zm[0-9]*.open*.org
|
|
zuul-scheduler:
|
|
- zuul[0-9]*.open*.org
|