Update Ansible playbooks for Fedora 39

QuLogic · QuLogic · commit f549f2244000 · 2024-05-23T03:54:17.000-04:00
Current Ansible / Jinja complains about the interpolation in a string,
so move that to string concatenation instead.

Grafana on Fedora 39 includes an SELinux configuration, which disables
access to other ports, so toggle the boolean that allows connecting to
Prometheus.
diff --git a/README.md b/README.md
@@ -159,10 +159,10 @@ Note down the outputs to verify later, e.g.,
 
 ```
 # Use these for comparison when connecting yourself.
-1024 SHA256:ExviVyBRoNKsZpgmIfBaejh1ElOpJ/9fC+ki2Fn5Xj4 root@venus.matplotlib.org (DSA)
-256 SHA256:hLA7ePr0D4AgiC21IXowtbpcUNnTGgpPB7NOYepQtxg root@venus.matplotlib.org (ECDSA)
-256 SHA256:MggFZQbZ7wID1Se2EmOwAm8AaJeA97L8sD8DhSrKy1g root@venus.matplotlib.org (ED25519)
-3072 SHA256:MCkDgfbn0sMTCtvAtfD0HmGJV3LVTjpUj6IcfWRHRQo root@venus.matplotlib.org (RSA)
+1024 SHA256:J2sbqvhI/VszBtVvPabgxyz6sRnGLrZUn0kqfv4doAM root@mercury.matplotlib.org (DSA)
+256 SHA256:J0rOMayXhL1+5wbm4WQNpAvmscDjqwJjAtk1SLemRMI root@mercury.matplotlib.org (ECDSA)
+256 SHA256:y8EDRGMpLWOW72x47MVKsAfSAl8JHjsOc/RGaiMTPGs root@mercury.matplotlib.org (ED25519)
+3072 SHA256:AyuNO8FES5k9vobv0Pu9XpvtjVFZ1bTTNxb1lo+AuRA root@mercury.matplotlib.org (RSA)
 ```
 
 Finally, you should reboot the droplet. This is due to a bug in cloud-init on
diff --git a/create.yml b/create.yml
@@ -69,7 +69,7 @@
           # Must not be an existing name.
           - >-
             do_droplets.data |
-            selectattr('name', 'equalto', '{{ host }}.matplotlib.org') |
+            selectattr('name', 'equalto', host + '.matplotlib.org') |
             count == 0
           # TODO: Also check that functional name doesn't already exist.
           - functional is regex('^web[0-9][0-9]$')
diff --git a/matplotlib.org.yml b/matplotlib.org.yml
@@ -67,6 +67,12 @@
               - podman
             state: present
 
+        - name: Allow Grafana to connect to Prometheus
+          ansible.posix.seboolean:
+            name: grafana_can_tcp_connect_prometheus_port
+            state: true
+            persistent: true
+
     # Automatic updates
     # #################
     - name: Enable automatic updates
