carnegie app + worker

playbooks/edx-west/carnegie-prod-app.yml

 #- hosts: ~tag_Name_app(10|20)_carn
 #- hosts: ~tag_Name_app10_carn
 #- hosts: ~tag_Name_app20_carn
-- hosts: ~tag_Name_app1_carn
+- hosts: ~tag_Name_app1_carn_test
   sudo: True
   vars_prompt:
     - name: "migrate_db"
@@ -22,6 +22,12 @@
     - "{{ secure_dir }}/vars/edxapp_prod_users.yml"
     - "{{ secure_dir }}/vars/datadog_carn.yml"
   roles:
+    - role: gh_users
+      gh_users:
+        - sefk
+        - jbau
+        - jrbl
+      tags: users
     - common
     - supervisor
     - php
@@ -30,7 +36,7 @@
       - lms
       - cms
       - lms-preview
-      - phpmyadmin
+      - phpmyadminc
       nginx_template_directory: "{{local_dir}}/nginx/templates/carnegie/"
       nginx_conf: true
     - {'role': 'edxapp', 'openid_workaround': true, 'template_subdir': 'carnegie'}

playbooks/edx-west/carnegie-prod-worker.yml

+- name: Basic util setup on carnegie workers
 # this gets all running prod webservers
-- hosts: tag_environment_prod_carn:&tag_function_util
+# hosts: tag_environment_prod_carn:&tag_function_util
 # or we can get subsets of them by name
-#- hosts: ~tag_Name_util(10)_carn
+# hosts: ~tag_Name_util(10)_carn
+  hosts: ~tag_Name_util(1)_carn
+  gather_facts: True
   sudo: True
   vars:
     secure_dir: '../../../edx-secret/ansible'
@@ -11,29 +14,37 @@
     migrate_db: "no"
   vars_files:
     - "{{ secure_dir }}/vars/edxapp_carnegie_vars.yml"
-    - "{{ secure_dir }}/vars/users.yml"
-    - "{{ secure_dir }}/vars/edxapp_prod_users.yml"
     - "{{ secure_dir }}/vars/datadog_carn.yml"
   roles:
-    - common
-    - supervisor
-    - { role: 'edxapp', celery_worker: True }
+    - role: gh_users
+      gh_users:
+        - sefk
+        - jbau
+        - jrbl
+      tags: users
+    - role: 'common'
+      tags: common
+    - role: 'supervisor'
+      tags: supervisor
+    - role: 'edxapp'
+      celery_worker: True
+      devstack: false
+      tags: celery
     - datadog
-    #- splunkforwarder
 
-# run the certificate agent on the first util machine only
-- hosts: ~tag_Name_util10_carn
-  sudo: True
-  vars:
-    secure_dir: '../../../configuration-secure/ansible'
-    migrate_db: "no"
-  vars_files:
-    - "{{ secure_dir }}/vars/edxapp_carnegie_vars.yml"
-    - "{{ secure_dir }}/vars/certifier_carn_vars.yml"
-  roles:
-    - common
-    - role: virtualenv
-      virtualenv_user: "certifier"
-      virtualenv_name: "certifier"
-      virtualenv_user_home: "/opt/wwc/certifier"
-    - certificates
+## run the certificate agent on the first util machine only
+#- hosts: ~tag_Name_util10_carn
+#  sudo: True
+#  vars:
+#    secure_dir: '../../../configuration-secure/ansible'
+#    migrate_db: "no"
+#  vars_files:
+#    - "{{ secure_dir }}/vars/edxapp_carnegie_vars.yml"
+#    - "{{ secure_dir }}/vars/certifier_carn_vars.yml"
+#  roles:
+#    - common
+#    - role: virtualenv
+#      virtualenv_user: "certifier"
+#      virtualenv_name: "certifier"
+#      virtualenv_user_home: "/opt/wwc/certifier"
+#    - certificates