Add network infrastructure

Add network group for filtering network hosts
Add network target for auth'ing to network hosts
Update playbooks to filter out network targets

ansible

@@ -1,8 +1,7 @@
 #!/usr/bin/env bash
 
-ANSIBLE_CONFIG=''
-ANSIBLE_FILTER_PLUGINS=''
-ANSIBLE_LIBRARY=''
-ANSIBLE_INVENTORY=$(pwd)/inventory.yaml
-
-"ansible-$1" ${@:2}
+ANSIBLE_LIBRARY='' \
+  ANSIBLE_FILTER_PLUGINS='' \
+  ANSIBLE_CONFIG='' \
+  ANSIBLE_INVENTORY=$(pwd)/inventory.yaml \
+  "ansible-$1" ${@:2}

inventory.yaml

@@ -7,6 +7,18 @@ all:
     ansible_user: ansible
     ansible_ssh_common_args: "-o ControlMaster=auto -o ControlPersist=60s -o ForwardAgent=yes"
 
+en1:
+  vars:
+    skylab_location: Newton MA
+  children:
+    network:
+      hosts:
+        core:
+          ansible_host: core.net.enp.one
+          ansible_port: 4242
+          skylab_description: Core Router
+          skylab_targets: [network]
+
 en2:
   vars:
     skylab_location: DigitalOcean NYC1

playbooks/provision.yaml

@@ -1,6 +1,6 @@
 ---
 - name: Bootstrap remote ansible environment
-  hosts: all
+  hosts: all,!network,!network
   tags:
     - always
   tasks:
@@ -51,7 +51,7 @@
 
 
 - name: Configure common server settings
-  hosts: all
+  hosts: all,!network
   vars_files:
     - vars/packages.yaml
   tasks:
@@ -104,7 +104,7 @@
 
 
 - name: Configure SSH
-  hosts: all
+  hosts: all,!network
   handlers:
     - name: restart-sshd
       become: true

playbooks/update.yaml

@@ -1,6 +1,6 @@
 ---
 - name: Update system
-  hosts: all
+  hosts: all,!network
   tags:
     - packages
   vars_files:
@@ -14,7 +14,7 @@
         state: latest
 
 - name: Update unix accounts
-  hosts: all
+  hosts: all,!network
   tags:
     - accounts
     - access

vars/access.yaml

@@ -3,13 +3,13 @@ skylab_accounts:
   - name: enpaul
     uid: 1300
     fullname: Ethan N. Paul
-    targets: [cloud]
+    targets: [cloud, network]
     admin: true
     password: $y$j9T$cWkd9aGj4sNepyJm5NVZl0$yBhFy3cN3syM8r4doGYnsLZhsaTLQVoDIBs2kkXtxY2
 
   - name: ansible
     uid: 1400
-    targets: [cloud]
+    targets: [cloud, network]
     admin: true
     service: true
     password: $y$j9T$w/pIBtZIMo3PmXccZ.LHi1$AbMVIks.P10CyuK8tWt21O4JuLpKGpWTFgX0WlTbiw6