added users to app servers

playbooks/edx-west/carnegie-prod-app.yml

 #- hosts: ~tag_Name_app(1|2)_carn
-#- hosts: ~tag_Name_app1_carn
-- hosts: ~tag_Name_app2_carn
+- hosts: ~tag_Name_app1_carn
+#- hosts: ~tag_Name_app2_carn
 #- hosts: ~tag_Name_app1_carn_test
   sudo: True
   vars_prompt:

playbooks/edx-west/carnegie-prod-worker.yml

@@ -37,31 +37,31 @@
       tags: celery
     - role: nginx
       nginx_sites:
-    #  - xqueue
+      - xqueue
       - basic-auth
       tags: nginx
-    #- role: xqueue
-    #  xqueue_create_db: "no"
-    #  xqueue_create_users: false
-    #  tags: xqueue
+    - role: xqueue
+      xqueue_create_db: "no"
+      xqueue_create_users: false
+      tags: xqueue
     - datadog
 
-#- name: Deploy certs only to first util machine
-#  hosts: ~tag_Name_util(1)_carn
-#  sudo: True
-#  gather_facts: True
-#  vars:
-#    secure_dir: '../../../configuration-secure/ansible'
-#    local_dir: "{{secure_dir}}/local"
-#    migrate_db: "no"
-#  vars_files:
-#    - "roles/common/defaults/main.yml"
-#    - "roles/supervisor/defaults/main.yml"
-#    - "{{ secure_dir }}/vars/edxapp_carnegie_vars.yml"
-#    - "{{ secure_dir }}/vars/certs_carn_vars.yml"
-#  roles:
-#    - role: certs
-#      tags: certs
+- name: Deploy certs only to first util machine
+  hosts: ~tag_Name_util(1)_carn
+  sudo: True
+  gather_facts: True
+  vars:
+    secure_dir: '../../../configuration-secure/ansible'
+    local_dir: "{{secure_dir}}/local"
+    migrate_db: "no"
+  vars_files:
+    - "roles/common/defaults/main.yml"
+    - "roles/supervisor/defaults/main.yml"
+    - "{{ secure_dir }}/vars/edxapp_carnegie_vars.yml"
+    - "{{ secure_dir }}/vars/certs_carn_vars.yml"
+  roles:
+    - role: certs
+      tags: certs
 
 ## run the certificate agent on the first util machine only
 #- hosts: ~tag_Name_util10_carn

playbooks/edx-west/cme-prod-app.yml

@@ -14,9 +14,9 @@
 #- hosts: tag_environment_prod:&tag_function_webserver
 # or we can get subsets of them by name
 #- hosts: ~tag_Name_app(1|2)_cme
-#- hosts: ~tag_Name_app1_cme
+- hosts: ~tag_Name_app1_cme
 #- hosts: ~tag_Name_app2_cme
-- hosts: ~tag_Name_app(1|2)_cme
+#- hosts: ~tag_Name_app(1|2)_cme
   sudo: True
   vars_prompt:
     - name: "migrate_db"

playbooks/edx-west/prod-app.yml

@@ -2,9 +2,9 @@
 #- hosts: tag_environment_prod:&tag_function_webserver
 # or we can get subsets of them by name
 #- hosts: ~tag_Name_app1_prod
-- hosts: ~tag_Name_app2_prod
+#- hosts: ~tag_Name_app2_prod
 ## this is the test box
-#- hosts: ~tag_Name_app4_prod
+- hosts: ~tag_Name_app4_prod
 #- hosts: ~tag_Name_app(4|1|2)_prod
 ## you can also do security group, but don't do that
 #- hosts: security_group_edx-prod-EdxappServerSecurityGroup-NSKCQTMZIPQB