summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPatrick Uiterwijk <puiterwijk@redhat.com>2017-08-22 21:14:46 +0000
committerPatrick Uiterwijk <puiterwijk@redhat.com>2017-08-22 21:14:46 +0000
commit0c0977367f213791f0840e42c3d2e5a361b79050 (patch)
treeddd185556b75f6149be72516c3f3ee5f56668873
parenta87be8843ad5fe9ab8aa4078e7d420534a8f3f7a (diff)
downloadansible-0c0977367f213791f0840e42c3d2e5a361b79050.tar.gz
ansible-0c0977367f213791f0840e42c3d2e5a361b79050.tar.xz
ansible-0c0977367f213791f0840e42c3d2e5a361b79050.zip
Only run the roles on the masters
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
-rw-r--r--playbooks/groups/os-cluster.yml12
1 files changed, 12 insertions, 0 deletions
diff --git a/playbooks/groups/os-cluster.yml b/playbooks/groups/os-cluster.yml
index a167f7bc4..3fc7f3fcb 100644
--- a/playbooks/groups/os-cluster.yml
+++ b/playbooks/groups/os-cluster.yml
@@ -159,6 +159,18 @@
tasks:
- name: enable nrpe for monitoring (noc01)
iptables: action=insert chain=INPUT destination_port=5666 protocol=tcp source=10.5.126.41 state=present jump=ACCEPT
+
+- name: Post-Install master setup
+ hosts: os-masters-stg:os-masters
+ tags:
+ - os-post-install
+ vars_files:
+ - /srv/web/infra/ansible/vars/global.yml
+ - /srv/private/ansible/vars.yml
+ - /srv/private/ansible/files/openstack/passwords.yml
+ - /srv/web/infra/ansible/vars/{{ ansible_distribution }}.yml
+
+ tasks:
- name: Disallow users from provisioning
command: oadm policy remove-cluster-role-from-group self-provisioner system:authenticated system:authenticated:oauth
changed_when: false