Playbook #5

/home/zuul/src/opendev.org/opendev/system-config/playbooks/letsencrypt.yaml

Report Status CLI Date Duration Controller User Versions Hosts Plays Tasks Results Files Records
27 Oct 2025 19:37:47 +0000 00:00:30.16 bridge99.opendev.org root Ansible 2.15.13 ara 1.7.3 (client), 1.7.3 (server) Python 3.10.12 2 5 47 47 33 0
check:False tags:all

File: /etc/ansible/hosts/group_vars/all.yaml

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
# If the bastion ipv4 or v6 addresses aren't available (because this
# job runs in an environment without them) just fall back to the
# defaults for the real bridge.
bastion_ipv4: 104.239.145.128
bastion_public_key: ssh-rsa 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 zuul-build-sshkey
force_docker_io_ipv4: true
# Block IP ranges used only for documentation purposes to ensure that
# our block rules apply cleanly and don't break the rest of our
# iptables ruleset.
iptables_disallowed_hosts_v4:
  - 203.0.113.0/24
iptables_disallowed_hosts_v6:
  - 3fff::/20
iptables_test_public_tcp_ports: [19885, 4444]
iptables_egress_rules:
  - -o lo -j ACCEPT
  - -p tcp -m tcp --dport 25 --tcp-flags FIN,SYN,RST,ACK SYN -j REJECT --reject-with tcp-reset