oh yeah, the play

playbooks/edx-east/gerrit_deploy.yml

----
-# Deploys gerrit on to a server.
-#
-# Usage:
-#   ansible-playbook gerrit_deploy.yml -i gerrit_inventory.ini -e "secure_dir=/path/to/secure/dir"
-
-- name: Install and configure gerrit
-  hosts: gerrit
-  sudo: True
-  gather_facts: True
-  vars_files:
-    - "{{ secure_dir }}/vars/gerrit.yml"
-  pre_tasks:
-    - name: update apt
-      apt: update_cache=yes
-  roles:
-    - gerrit