Ansible is used to automate configuration of many lab services. Since the list is ever-growing, see https://github.com/ceph/ceph-cm-ansible for details.

The secrets repo is a private repo containing vars for things we want to keep secret (duh).

Most information one would need is in the READMEs of ceph-cm-ansible and ceph-sepia-secrets. Go there for more details.

To configure sudoers and users on a new infra host installation,

1. Set a password for the root or ubuntu user during install
2. Add to the [production] group in ceph-sepia-secrets
3. Run

   ansible-playbook -k -K --extra-vars '{ansible_ssh_user: root|ubuntu}' --ssh-extra-args="-o PubkeyAuthentication=no -o PasswordAuthentication=yes" ansible_managed.yml --limit="$NEWHOST.front.sepia.ceph.com"
   
   #Enter password when prompted
   
   ansible-playbook -b users.yml --limit="$NEWHOST.front.sepia.ceph.com"