Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consolidate ansible configuration management into ooni/devops #27

Open
16 of 28 tasks
hellais opened this issue Mar 15, 2024 · 1 comment
Open
16 of 28 tasks

Consolidate ansible configuration management into ooni/devops #27

hellais opened this issue Mar 15, 2024 · 1 comment

Comments

@hellais
Copy link
Member

hellais commented Mar 15, 2024

Migration TODO List

This file is used to keep track of the in-progress migration of roles from
ooni/sysadmin over to ooni/devops.

Playbooks

Playbooks to migrate

These are playbooks that we should be migrating over to ooni/devops, either
as-is or consolidating them together into one.

They are loosely sorted by priority:

  • dom0-bootstrap.yml -> we have a part of this, but we should verify we aren't missing anything
  • ansible-version.yml -> it would be nice to have a hook to send a message when we do a deploy to slack done in Add monitoring #118
  • deploy-backend.yml -> migrate: refactor: make backend-hel functional as the test server #119
  • deploy-monitoring.yml -> migrate: Add monitoring #118
  • deploy-slackin.yml -> last update 2021, requires migration since it's our slack inviter host
  • deploy-countly.yml
  • deploy-th-echo.yml -> last update 2019, we need to setup a new one
  • deploy-th-http.yml
  • deploy-vpsprobes.yml -> last update 2023, would be nice to have something like this for deploying ooniprobe on vps
  • deploy-oonidata.yml

Unused/Depecated Playbooks

  • deploy-matomo.yml -> last update 2019. We aggreed to backup the host and then discontinue the role.
  • deploy-probe-services.yml -> last update 2019, requires finishing the register/login move over to new API, then we can discontinue it.
  • deploy-orchestra.yml -> last update 2018, should backup the DB and finish migration of ooni-registry
  • deploy-vpsbridges.yml -> last update 2023, refers to non-existent vpsbridges group. Maybe discontinue
  • deploy-acme-redirect-helper.yml -> last update 2019, not used anymore
  • deploy-api.yml -> last update 2019, used to deploy legacy-legacy API
  • deploy-cross-monitoring.yml -> last update 2018, would be nice to have something like this now too, but for the moment we just deprecate it.
  • deploy-msg.yml -> last update 2018, no longer used
  • deploy-ooni-orchestrate.yml -> last update 2019, no longer used
  • deploy-orchestra-backend.yml -> last update 2019, no longer used
  • deploy-pipeline-ddl.yml -> last update 2017, refers to pipeline v3 ddl
  • deploy-pipeline.yml -> last update 2018, refers to pipeline v3
  • deploy-postgres-11.yml -> last update 2020, we don't need it anymore
  • deploy-ooni-registry.yml -> last update 2019, can be discontinued
  • deploy-prometheus.yml -> last update 2020, superseeded by mointoring, can be discontinued
  • deploy-superset.yml -> last update 2017, can be discontinued
  • deploy-th-web-connectivity.yml -> last update 2020 and is replace by ooherlpd
  • deploy-tor.yml -> last update 2019, can be discontinued
DecFox added a commit that referenced this issue Jul 21, 2024
This is part of the work being done in:
#27

It adds support for ansible-galaxy so we can use the sshd_user galaxy
module to unify sshd configuration and ensure all users have access to
all hosts

---------

Co-authored-by: Decfox <[email protected]>
hellais pushed a commit that referenced this issue Jul 24, 2024
This is part of the work being done in #27. 

This diff adds support for using the ansible galaxy module
((ansible-sshd){https://github.com/willshersystems/ansible-sshd}) to
configure sshd on the ansible-controller and other hosts (all hosts
using the `ssh_users` role)

---------

Co-authored-by: decfox <[email protected]>
@hellais
Copy link
Member Author

hellais commented Dec 7, 2024

Inside of ooni/sysadmin#523 I have moved all legacy playbooks that don't require migration into their own tree. Every time we complete a migration we should move them in there so that we don't forget.

I also updated the top level comment to reflect this.

hellais added a commit to ooni/sysadmin that referenced this issue Dec 7, 2024
hellais added a commit that referenced this issue Dec 19, 2024
Migrate over the monitoring role from sysadmin to devops.

Related to: #27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants