pagure-stg-ro01: add new instance for readonly pagure in stg ( ticket 13351 )

For infra/tickets#13351
This makes a staging rhel10 vm thats just the same size / place
as pagure-stg01.

It still needs external ip's and nat in from those, but this should be
enough to install it and start setting things up.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

inventory/group_vars/pagure_stg_ro

@@ -0,0 +1,30 @@
+---
+env_prefix: stg.
+env_suffix: .stg
+env_short: stg
+freezes: false
+ipa_client_shell_groups:
+  - sysadmin-noc
+  - sysadmin-web
+  - sysadmin-veteran
+ipa_client_sudo_groups:
+  - sysadmin-web
+ipa_host_group: pagure_stg_ro
+ipa_host_group_desc: Pagure read only
+lvm_size: 50000
+mem_size: 8192
+num_cpus: 4
+postfix_group: vpn.pagure-stg
+tcp_ports: [22, 25, 80, 443, 9418,
+  # Used for the eventsource server
+  8088]
+vpn: true
+# Pagure-stg has special needs for monitoring
+zabbix_host: zabbix01.vpn.fedoraproject.org
+zabbix_server: "{{ zabbix_hostname }}"
+zabbix_auth_key: "{{ zabbix_apikey }}" # ansible-private repo
+zabbix_tls_psk: "{{ zabbix_tls_prod_psk }}" # in ansible-private repo, pagure-stg is weird...
+
+notes: |
+  Run the pagure read only instances for fedora
+  This host runs a read-only copy of the pagure forge

inventory/host_vars/pagure-stg-ro01.fedoraproject.org

@@ -0,0 +1,49 @@
+---
+datacenter: rdu3
+dns1: 10.16.163.33
+dns2: 10.16.163.34
+dns_search1: "vpn.fedoraproject.org"
+dns_search2: "stg.rdu3.fedoraproject.org"
+dns_search3: "rdu3.fedoraproject.org"
+dns_search4: "fedoraproject.org"
+effective_cache_size: "6GB"
+eth0_ipv4_gw: 10.16.179.254
+eth0_ipv4_ip: 10.16.179.80
+eth0_ipv6_gw: "2620:52:6:1161::1"
+eth0_ipv6_ip: "2620:52:6:1161::33"
+eth0_ipv6_nm: 64
+eth0_nm: 255.255.255.0
+has_ipv6: yes
+ks_repo: https://infrastructure.fedoraproject.org/repo/rhel/RHEL10-x86_64/
+ks_url: https://infrastructure.fedoraproject.org/repo/rhel/ks/kvm-rhel-10
+network_connections:
+  - autoconnect: yes
+    ip:
+      address:
+        - "{{ eth0_ipv4_ip }}/{{ eth0_ipv4_nm }}"
+        - "{{ eth0_ipv6_ip }}/{{ eth0_ipv6_nm }}"
+      dhcp4: no
+      dns:
+        - "{{ dns1 }}"
+        - "{{ dns2 }}"
+      dns_search:
+        - "{{ dns_search1 }}"
+        - "{{ dns_search2 }}"
+        - "{{ dns_search3 }}"
+        - "{{ dns_search4 }}"
+      gateway4: "{{ eth0_ipv4_gw }}"
+      gateway6: "{{ eth0_ipv6_gw }}"
+    mac: "{{ ansible_default_ipv4.macaddress }}"
+    name: eth0
+    type: ethernet
+# DB host:
+pagure_db_host: 127.0.0.1
+rdu_external: true
+#
+# PostgreSQL configuration
+#
+shared_buffers: "2GB"
+ssh_hostnames:
+  - stg.pagure.io
+vmhost: vmhost-x86-iso01.rdu3.fedoraproject.org
+volgroup: /dev/vg_guests

inventory/inventory

@@ -917,6 +917,9 @@ pagure01.fedoraproject.org
 [pagure_stg]
 pagure-stg02.fedoraproject.org
 
+[pagure_stg_ro]
+pagure-stg-ro01.fedoraproject.org
+
 [ocp:children]
 os_control
 ocp_controlplane

playbooks/groups/pagure-ro.yml

@@ -0,0 +1,31 @@
+---
+- import_playbook: "/srv/web/infra/ansible/playbooks/include/virt-create.yml"
+  vars:
+    myhosts: "pagure_ro:pagure_stg_ro"
+
+- name: Make the boxen be real for real
+  hosts: pagure_ro:pagure_stg_ro
+  user: root
+  gather_facts: true
+
+  vars_files:
+    - /srv/web/infra/ansible/vars/global.yml
+    - "/srv/private/ansible/vars.yml"
+    - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
+
+  roles:
+  - base
+  - rkhunter
+  - nagios_client
+  - zabbix/zabbix_agent
+  - hosts
+  - openvpn/client
+  - ipa/client
+  - sudo
+  - collectd/base
+
+  pre_tasks:
+  - import_tasks: "{{ tasks_path }}/yumrepos.yml"
+
+  handlers:
+  - import_tasks: "{{ handlers_path }}/restart_services.yml"