Freeze break: run master playbook with fedmsg/base and fedmsgmonitor tags

[Kevin Fenzi]

Greetings. 

I'd like to run the master ansible playbook over everything with just
the fedmsg/base and fedmsgmonitor tags. 

This will sync hosts up to what we have in git now, making the
following changes: 

fedmsg/base: 

TASK: [fedmsg/base | setup basic /etc/fedmsg.d/ contents for internal hosts] *** 
--- before: /etc/fedmsg.d/ssl.py 
+++ after: /srv/web/infra/ansible/roles/fedmsg/base/templates/ssl.py.j2 
@@ -166,23 +166,24 @@
         ("shell.koschei01", "shell-koschei01.%s" % suffix),
         ("koschei.koschei01", "koschei-koschei01.%s" % suffix),
 
         ("shell.elections01", "shell-elections01.%s" % suffix),
         ("shell.elections02", "shell-elections02.%s" % suffix),
         ("fedora_elections.elections01",
"fedora_elections-elections01.%s" % suffix),
         ("fedora_elections.elections02",
"fedora_elections-elections02.%s" % suffix),
 
         ("mirrormanager2.mm-frontend01",
"mirrormanager2-mm-frontend01.%s" % suffix),
         ("shell.mm-frontend01", "shell-mm-frontend01.%s" % suffix),
-        ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
         ("shell.mm-crawler01", "shell-mm-crawler01.%s" % suffix),
         ("shell.mm-crawler02", "shell-mm-crawler02.%s" % suffix),
+        ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
+        ("mirrormanager.mm-backend01", "shell-mm-backend01.%s" %
suffix),
 
         ("shell.anitya-frontend01",
"shell-anitya-frontend01.fedoraproject.org"),
         ("anitya.anitya-frontend01",
"anitya-anitya-frontend01.fedoraproject.org"),
         ("shell.anitya-backend01",
"shell-anitya-backend01.fedoraproject.org"),
         ("anitya.anitya-backend01",
"anitya-anitya-backend01.fedoraproject.org"),
 
         # FAF/retrace is on the qa network and talks to an inbound relay.
         ("shell.retrace01", "shell-retrace01.qa.fedoraproject.org"),
         ("shell.retrace02", "shell-retrace02.qa.fedoraproject.org"),
         ("faf.retrace01", "faf-retrace01.qa.fedoraproject.org"),

changed: [value01.phx2.fedoraproject.org] => (item=ssl.py)

fedmsgmonitor: 

some permissions on fedmsg sockets for nrpe to be able to read them. 

This should make sure we are all in sync with git in the event we need
to make any more changes down the road and should reduce the size of
the check/diff reports so we can see actual issues. 

+1s?

kevin

[Dennis Gilmore]

On Friday, May 15, 2015 10:29:48 AM Kevin Fenzi wrote:
>  Greetings.
>  
>  I'd like to run the master ansible playbook over everything with just
>  the fedmsg/base and fedmsgmonitor tags.
>  
>  This will sync hosts up to what we have in git now, making the
>  following changes:
>  
>  fedmsg/base:
>  
>  TASK: [fedmsg/base | setup basic /etc/fedmsg.d/ contents for internal hosts]
>  *** --- before: /etc/fedmsg.d/ssl.py
>  +++ after: /srv/web/infra/ansible/roles/fedmsg/base/templates/ssl.py.j2
>  @@ -166,23 +166,24 @@
>           ("shell.koschei01", "shell-koschei01.%s" % suffix),
>           ("koschei.koschei01", "koschei-koschei01.%s" % suffix),
>  
>           ("shell.elections01", "shell-elections01.%s" % suffix),
>           ("shell.elections02", "shell-elections02.%s" % suffix),
>           ("fedora_elections.elections01",
> "fedora_elections-elections01.%s"
>  % suffix), ("fedora_elections.elections02",
>  "fedora_elections-elections02.%s" % suffix),
>  
>           ("mirrormanager2.mm-frontend01",
> "mirrormanager2-mm-frontend01.%s"
>  % suffix), ("shell.mm-frontend01", "shell-mm-frontend01.%s" %
> suffix), -   
>      ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
>  ("shell.mm-crawler01", "shell-mm-crawler01.%s" % suffix),
>  ("shell.mm-crawler02", "shell-mm-crawler02.%s" % suffix), +       
>  ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix), +       
>  ("mirrormanager.mm-backend01", "shell-mm-backend01.%s" % suffix),
>  
>           ("shell.anitya-frontend01",
>  "shell-anitya-frontend01.fedoraproject.org"),
> ("anitya.anitya-frontend01",
>  "anitya-anitya-frontend01.fedoraproject.org"),
> ("shell.anitya-backend01",
>  "shell-anitya-backend01.fedoraproject.org"),
> ("anitya.anitya-backend01",
>  "anitya-anitya-backend01.fedoraproject.org"),
>  
>           # FAF/retrace is on the qa network and talks to an inbound relay.
>           ("shell.retrace01",
> "shell-retrace01.qa.fedoraproject.org"),
>           ("shell.retrace02",
> "shell-retrace02.qa.fedoraproject.org"),
>           ("faf.retrace01", "faf-retrace01.qa.fedoraproject.org"),
>  
>  changed: [value01.phx2.fedoraproject.org] => (item=ssl.py)
>  
>  fedmsgmonitor:
>  
>  some permissions on fedmsg sockets for nrpe to be able to read them.
>  
>  This should make sure we are all in sync with git in the event we need
>  to make any more changes down the road and should reduce the size of
>  the check/diff reports so we can see actual issues.
>  
>  +1s?
>  
>  kevin 
+1

[Ricky Elrod]

+1

-re

On 05/15/2015 12:29 PM, Kevin Fenzi wrote:
>  Greetings. 
>  
>  I'd like to run the master ansible playbook over everything with just
>  the fedmsg/base and fedmsgmonitor tags. 
>  
>  This will sync hosts up to what we have in git now, making the
>  following changes: 
>  
>  fedmsg/base: 
>  
>  TASK: [fedmsg/base | setup basic /etc/fedmsg.d/ contents for internal hosts] *** 
>  --- before: /etc/fedmsg.d/ssl.py 
>  +++ after: /srv/web/infra/ansible/roles/fedmsg/base/templates/ssl.py.j2 
>  @@ -166,23 +166,24 @@
>           ("shell.koschei01", "shell-koschei01.%s" % suffix),
>           ("koschei.koschei01", "koschei-koschei01.%s" % suffix),
>   
>           ("shell.elections01", "shell-elections01.%s" % suffix),
>           ("shell.elections02", "shell-elections02.%s" % suffix),
>           ("fedora_elections.elections01",
> "fedora_elections-elections01.%s" % suffix),
>           ("fedora_elections.elections02",
> "fedora_elections-elections02.%s" % suffix),
>   
>           ("mirrormanager2.mm-frontend01",
> "mirrormanager2-mm-frontend01.%s" % suffix),
>           ("shell.mm-frontend01", "shell-mm-frontend01.%s" % suffix),
>  -        ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
>           ("shell.mm-crawler01", "shell-mm-crawler01.%s" % suffix),
>           ("shell.mm-crawler02", "shell-mm-crawler02.%s" % suffix),
>  +        ("shell.mm-backend01", "shell-mm-backend01.%s" % suffix),
>  +        ("mirrormanager.mm-backend01", "shell-mm-backend01.%s" %
> suffix),
>   
>           ("shell.anitya-frontend01",
> "shell-anitya-frontend01.fedoraproject.org"),
>           ("anitya.anitya-frontend01",
> "anitya-anitya-frontend01.fedoraproject.org"),
>           ("shell.anitya-backend01",
> "shell-anitya-backend01.fedoraproject.org"),
>           ("anitya.anitya-backend01",
> "anitya-anitya-backend01.fedoraproject.org"),
>   
>           # FAF/retrace is on the qa network and talks to an inbound relay.
>           ("shell.retrace01",
> "shell-retrace01.qa.fedoraproject.org"),
>           ("shell.retrace02",
> "shell-retrace02.qa.fedoraproject.org"),
>           ("faf.retrace01", "faf-retrace01.qa.fedoraproject.org"),
>  
>  changed: [value01.phx2.fedoraproject.org] => (item=ssl.py)
>  
>  fedmsgmonitor: 
>  
>  some permissions on fedmsg sockets for nrpe to be able to read them. 
>  
>  This should make sure we are all in sync with git in the event we need
>  to make any more changes down the road and should reduce the size of
>  the check/diff reports so we can see actual issues. 
>  
>  +1s?
>  
>  kevin
>  
>  
>  
>  _______________________________________________
>  infrastructure mailing list
>  infrastructure(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/infrastructure
>

[Kevin Fenzi]

Run, thanks. 

kevin