deployment_type: prod
freezes: false
gw: 10.5.124.254
ipa_client_shell_groups:
  - sysadmin-qa
ipa_client_sudo_groups:
  - sysadmin-qa
ipa_host_group: openqa-workers
ipa_host_group_desc: OpenQA worker hosts
nagios_Check_Services:
  swap: false
nftables: true
openqa_env: production
openqa_env_prefix:
# this is because openqa staging isn't really a staging host
# we don't want to set env_suffix to stg on it because that may
# break some other plays, but we do need the env suffix for the
# fedora-messaging bits, so let's make our own
openqa_env_suffix:
openqa_hostname: openqa01.rdu3.fedoraproject.org
openqa_key: "{{ prod_openqa_apikey }}"
# we are all NFS workers for now at least
openqa_nfs_worker: true
# using u-t for prod temporarily to get QMP USB disconnect feature
# drop when https://bodhi.fedoraproject.org/updates/FEDORA-2025-8a79a3d9af is stable
openqa_repo: updates-testing
openqa_secret: "{{ prod_openqa_apisecret }}"
openqa_workers: 4
primary_auth_source: ipa
# all worker hosts should be encrypted as of 2024-10 redeployment
openqa_nbde: true
zabbix_macros:
  NET.IF.IFNAME.NOT_MATCHES: "^tap.*"
  SWAP.PFREE.MIN.WARN: 0