cme playbooks

playbooks/edx-west/cme-prod-app.yml

@@ -36,6 +36,12 @@
     - "{{ secure_dir }}/vars/datadog_cme.yml"
   roles:
     #- ansible_debug
+    - role: gh_users
+      gh_users:
+        - sefk
+        - jbau
+        - jrbl
+      tags: users
     - common
     - supervisor
     - role: nginx

playbooks/edx-west/cme-prod-worker.yml

+- name: Basic util setup on cme hosts
 # this gets all running prod webservers
-- hosts: tag_environment_prod_cme:&tag_function_util
+# hosts: tag_environment_prod_cme:&tag_function_util
 # or we can get subsets of them by name
-#- hosts: ~tag_Name_util(10)_cme
+  hosts: ~tag_Name_util(1)_cme
   sudo: True
+  gather_facts: True
   vars:
     secure_dir: '../../../edx-secret/ansible'
     # this indicates the path to site-specific (with precedence)
@@ -11,29 +13,48 @@
     migrate_db: "no"
   vars_files:
     - "{{ secure_dir }}/vars/edxapp_cme_vars.yml"
-    - "{{ secure_dir }}/vars/users.yml"
-    - "{{ secure_dir }}/vars/edxapp_prod_users.yml"
+    - "{{ secure_dir }}/vars/xqueue_cme_vars.yml"
+#    - "{{ secure_dir }}/vars/users.yml"
+#    - "{{ secure_dir }}/vars/edxapp_prod_users.yml"
     - "{{ secure_dir }}/vars/datadog_cme.yml"
   roles:
-    - common
-    - supervisor
-    - { role: 'edxapp', celery_worker: True }
+    - role: gh_users
+      gh_users:
+        - sefk
+        - jbau
+        - jrbl
+      tags: users
+    - role: 'common'
+      tags: common
+    - role: 'supervisor'
+      tags: supervisor
+    - role: 'edxapp'
+      celery_worker: True
+      devstack: false
+      tags: celery
+    - role: nginx
+      nginx_sites:
+      - xqueue
+      - basic-auth
+      tags: nginx
+    - role: xqueue
+      xqueue_create_db: "no"
+      tags: xqueue
     - datadog
-    #- splunkforwarder
 
 # run the certificate agent on the first util machine only
-- hosts: ~tag_Name_util10_cme
-  sudo: True
-  vars:
-    secure_dir: '../../../configuration-secure/ansible'
-    migrate_db: "no"
-  vars_files:
-    - "{{ secure_dir }}/vars/edxapp_cme_vars.yml"
-    - "{{ secure_dir }}/vars/certifier_cme_vars.yml"
-  roles:
-    - common
-    - role: virtualenv
-      virtualenv_user: "certifier"
-      virtualenv_name: "certifier"
-      virtualenv_user_home: "/opt/wwc/certifier"
-    - certificates
+#- hosts: ~tag_Name_util10_cme
+#  sudo: True
+#  vars:
+#    secure_dir: '../../../configuration-secure/ansible'
+#    migrate_db: "no"
+#  vars_files:
+#    - "{{ secure_dir }}/vars/edxapp_cme_vars.yml"
+#    - "{{ secure_dir }}/vars/certifier_cme_vars.yml"
+#  roles:
+#    - common
+#    - role: virtualenv
+#      virtualenv_user: "certifier"
+#      virtualenv_name: "certifier"
+#      virtualenv_user_home: "/opt/wwc/certifier"
+#    - certificates