forked from infra/ansible
Kevin Fenzi
537ab5d20f
This reverts commit db0b9e4f0c.
This is not the correct knob to adjust number of attempts.
This is number of things that have to be successfull before unlock.
1 is right here. ;(
64 lines
1.8 KiB
Text
64 lines
1.8 KiB
Text
---
|
|
freezes: false
|
|
|
|
host_group: copr_hypervisor
|
|
|
|
vpn: true
|
|
ipa_client_shell_groups:
|
|
- sysadmin-noc
|
|
- sysadmin-copr
|
|
|
|
ipa_client_sudo_groups:
|
|
- sysadmin-copr
|
|
|
|
ipa_host_group: copr-vmhost
|
|
ipa_host_group_desc: Copr hypervisors
|
|
|
|
postfix_group: vpn
|
|
primary_auth_source: ipa
|
|
|
|
nbde: true
|
|
nbde_device: /dev/md2
|
|
nbde_device2: /dev/md3
|
|
nbde_device3: /dev/md4
|
|
nbde_client_bindings:
|
|
- device: "{{ nbde_device }}"
|
|
encryption_password: "{{ nbde_password }}"
|
|
password_temporary: no
|
|
threshold: 1
|
|
servers:
|
|
- http://tang01.rdu3.fedoraproject.org
|
|
- http://tang02.rdu3.fedoraproject.org
|
|
- device: "{{ nbde_device2 }}"
|
|
encryption_password: "{{ nbde_password }}"
|
|
password_temporary: no
|
|
threshold: 1
|
|
servers:
|
|
- http://tang01.rdu3.fedoraproject.org
|
|
- http://tang02.rdu3.fedoraproject.org
|
|
- device: "{{ nbde_device3 }}"
|
|
encryption_password: "{{ nbde_password }}"
|
|
password_temporary: no
|
|
threshold: 1
|
|
servers:
|
|
- http://tang01.rdu3.fedoraproject.org
|
|
- http://tang02.rdu3.fedoraproject.org
|
|
|
|
libvirt_host: "{{ inventory_hostname }}"
|
|
|
|
nft_custom_rules:
|
|
- add rule {{nft_table_filter}} INPUT iifname virbr0 udp dport bootps accept
|
|
- add rule {{nft_table_filter}} INPUT iifname virbr0 udp dport 53 accept
|
|
- add rule {{nft_table_filter}} INPUT iifname virbr0 tcp dport ssh accept
|
|
- add rule {{nft_table_filter}} FORWARD iifname "virbr0" oif != "virbr0" counter accept
|
|
- add rule {{nft_table_filter}} FORWARD iifname "virbr0" ct state new counter accept
|
|
- add rule {{nft_table_filter}} FORWARD ct state established,related counter accept
|
|
- add rule {{nft_table_filter}} FORWARD ip protocol icmp counter accept
|
|
|
|
zabbix_macros:
|
|
CPU.UTIL.CRIT: 100
|
|
MEMORY.UTIL.MAX: 100
|
|
NET.IF.IFNAME.NOT_MATCHES: "^(vnet.*|virbr.*)"
|
|
SWAP.PFREE.MIN.WARN: 0
|
|
VFS.DEV.READ.AWAIT.WARN: 40
|
|
VFS.DEV.WRITE.AWAIT.WARN: 80
|