forked from infra/ansible
30 lines
1.2 KiB
Text
30 lines
1.2 KiB
Text
---
|
|
# common items for the releng-* boxes
|
|
bodhi_message_queue_name: "bodhi{{ env_suffix }}_composer"
|
|
# Define the topics that our fedora-messaging queue should be subscribed to.
|
|
bodhi_message_routing_keys:
|
|
- "org.fedoraproject.*.bodhi.composer.start"
|
|
# Make connections from signing bridges stateless, they break sigul connections
|
|
# https://bugzilla.redhat.com/show_bug.cgi?id=1283364
|
|
custom_rules: ['-A INPUT --proto tcp --sport 44334 --source 10.5.125.71 -j ACCEPT']
|
|
nft_custom_rules: ['add rule {{nft_table_filter}} INPUT ip saddr 10.5.125.71 tcp sport 44334 counter accept']
|
|
host_group: bodhi2
|
|
ipa_client_shell_groups:
|
|
- sysadmin-bodhi
|
|
- sysadmin-releng
|
|
ipa_client_sudo_groups:
|
|
- sysadmin-bodhi
|
|
- sysadmin-releng
|
|
ipa_host_group: bodhi
|
|
ipa_host_group_desc: Bodhi update service
|
|
lvm_size: 100000
|
|
mem_size: 16384
|
|
nfs_mount_opts: "rw,hard,bg,intr,noatime,nodev,nosuid,sec=sys,nfsvers=3"
|
|
nrpe_procs_crit: 1000
|
|
# With 16 cpus, theres a bunch more kernel threads
|
|
nrpe_procs_warn: 900
|
|
num_cpus: 16
|
|
sudoers: "{{ private }}/files/sudo/00releng-sudoers"
|
|
# Do not use testing repositories on production
|
|
testing: False
|
|
virt_install_command: "{{ virt_install_command_two_nic }}"
|