Commit e5189d62 by Joe Blaylock

Stanford incremental updates

* Making newly merged release branch get closer to working
parent b0051518
../ansible.cfg
\ No newline at end of file
../ansible.cfg
\ No newline at end of file
#- hosts: tag_environment_stage:&tag_function_webserver #- hosts: tag_environment_stage:&tag_function_webserver
- hosts: ~tag_Name_app10_stage #- hosts: ~tag_Name_app10_stage
- hosts: ~tag_Name_app1_stage
sudo: True sudo: True
vars_prompt: vars_prompt:
- name: "migrate_db" - name: "migrate_db"
......
# this gets all running stage util machines - name: Basic util setup on all hosts
- hosts: tag_environment_stage:&tag_function_util #- hosts: tag_environment_stage:&tag_function_util
# or we can get subsets of them by name hosts: ~tag_Name_util1_stage
#- hosts: ~tag_Name_util(1|2)_stage
sudo: True sudo: True
gather_facts: True
vars: vars:
# this indicates the path to site-specific (with precedence)
# things like nginx template files
secure_dir: ../../../edx-secret/ansible secure_dir: ../../../edx-secret/ansible
local_dir: "{{secure_dir}}/local" local_dir: "{{secure_dir}}/local"
migrate_db: "no" migrate_db: "no"
...@@ -17,39 +15,41 @@ ...@@ -17,39 +15,41 @@
roles: roles:
- common - common
- supervisor - supervisor
- { role: 'edxapp', celery_worker: True } - role: 'edxapp'
celery_worker: True
tags: celery
- role: xqueue
tags: xqueue
- datadog - datadog
#- splunkforwarder
# run the notifier on the first util machine only - name: Deploy certs, notifier only to first util machine
- hosts: ~tag_Name_util10_stage hosts: ~tag_Name_util1_stage
sudo: True sudo: True
gather_facts: True
vars: vars:
secure_dir: '../../../configuration-secure/ansible' secure_dir: '../../../configuration-secure/ansible'
local_dir: "{{secure_dir}}/local"
migrate_db: "no" migrate_db: "no"
vars_files: vars_files:
- "{{ secure_dir }}/vars/edxapp_stage_vars.yml" - "{{ secure_dir }}/vars/edxapp_stage_vars.yml"
- "{{ secure_dir }}/vars/notifier_stage_vars.yml" - "{{ secure_dir }}/vars/notifier_stage_vars.yml"
roles: roles:
- role: virtualenv - certs
virtualenv_user: "notifier"
virtualenv_user_home: "/opt/wwc/notifier"
virtualenv_name: "notifier"
- notifier - notifier
# run the certificate agent on the first util machine only #- name: Deploy certs to first util machine
- hosts: ~tag_Name_util10_stage # hosts: ~tag_Name_util1_stage
sudo: True # sudo: True
vars: # vars:
secure_dir: '../../../configuration-secure/ansible' # secure_dir: '../../../configuration-secure/ansible'
migrate_db: "no" # migrate_db: "no"
vars_files: # vars_files:
- "{{ secure_dir }}/vars/edxapp_stage_vars.yml" # - "{{ secure_dir }}/vars/edxapp_stage_vars.yml"
- "{{ secure_dir }}/vars/certifier_stage_vars.yml" # - "{{ secure_dir }}/vars/certifier_stage_vars.yml"
roles: # roles:
- common # - common
- role: virtualenv # - role: virtualenv
virtualenv_user: "certifier" # virtualenv_user: "certifier"
virtualenv_name: "certifier" # virtualenv_name: "certifier"
virtualenv_user_home: "/opt/wwc/certifier" # virtualenv_user_home: "/opt/wwc/certifier"
- certificates # - certificates
...@@ -183,8 +183,7 @@ ...@@ -183,8 +183,7 @@
- "{{ sandbox_base_requirements }}" - "{{ sandbox_base_requirements }}"
- "{{ sandbox_local_requirements }}" - "{{ sandbox_local_requirements }}"
- "{{ sandbox_post_requirements }}" - "{{ sandbox_post_requirements }}"
#when: not EDXAPP_PYTHON_SANDBOX when: not EDXAPP_PYTHON_SANDBOX
when: install_sandbox_reqs_into_regular_venv
sudo_user: "{{ edxapp_user }}" sudo_user: "{{ edxapp_user }}"
when: not inst.stat.exists or new.stat.md5 != inst.stat.md5 when: not inst.stat.exists or new.stat.md5 != inst.stat.md5
notify: notify:
...@@ -206,7 +205,7 @@ ...@@ -206,7 +205,7 @@
- name: Install sandbox requirements into sandbox venv - name: Install sandbox requirements into sandbox venv
shell: > shell: >
cd {{ edx_platform_code_dir }} && cd {{ edxapp_app_dir }} &&
{{ EDXAPP_SANDBOX_VENV_DIR }}/bin/pip install -i {{ PYPI_MIRROR_URL }} --exists-action w --use-mirrors {{ EDXAPP_SANDBOX_VENV_DIR }}/bin/pip install -i {{ PYPI_MIRROR_URL }} --exists-action w --use-mirrors
--upgrade --no-deps -r {{ item }} --upgrade --no-deps -r {{ item }}
with_items: with_items:
......
...@@ -13,6 +13,7 @@ ...@@ -13,6 +13,7 @@
user: > user: >
name="{{ edxapp_user }}" home="{{ edxapp_app_dir }}" name="{{ edxapp_user }}" home="{{ edxapp_app_dir }}"
createhome=no shell=/bin/false createhome=no shell=/bin/false
ignore_errors: True
notify: notify:
- "edxapp | restart edxapp" - "edxapp | restart edxapp"
- "edxapp | restart edxapp_workers" - "edxapp | restart edxapp_workers"
...@@ -143,8 +144,6 @@ ...@@ -143,8 +144,6 @@
tags: tags:
- edxapp-sandbox - edxapp-sandbox
- include: npm.yml
- include: ruby.yml
- include: deploy.yml - include: deploy.yml
- name: edxapp | create a symlink for venv python - name: edxapp | create a symlink for venv python
......
...@@ -4,7 +4,7 @@ ...@@ -4,7 +4,7 @@
#include <abstractions/base> #include <abstractions/base>
{{ EDXAPP_SANDBOX_VENV_DIR }}/** mr, {{ EDXAPP_SANDBOX_VENV_DIR }}/** mr,
{{ edx_platform_code_dir }}/common/lib/sandbox-packages/** r, {{ edxapp_code_dir }}/common/lib/sandbox-packages/** r,
/tmp/codejail-*/ rix, /tmp/codejail-*/ rix,
/tmp/codejail-*/** rix, /tmp/codejail-*/** rix,
......
...@@ -49,13 +49,7 @@ ...@@ -49,13 +49,7 @@
notify: nginx | reload nginx notify: nginx | reload nginx
- name: nginx | Copying nginx configs for {{ nginx_sites }} - name: nginx | Copying nginx configs for {{ nginx_sites }}
<<<<<<< HEAD
template: src={{nginx_template_directory}}{{ item }}.j2 dest=/etc/nginx/sites-available/{{ item }} owner=root group=root mode=0600 template: src={{nginx_template_directory}}{{ item }}.j2 dest=/etc/nginx/sites-available/{{ item }} owner=root group=root mode=0600
=======
template: >
src={{ item }}.j2 dest={{ nginx_sites_available_dir }}/{{ item }}
owner=root group={{ common_web_user }} mode=0640
>>>>>>> origin/release
notify: nginx | reload nginx notify: nginx | reload nginx
with_items: nginx_sites with_items: nginx_sites
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment