SUNET/net-ops
9
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

cisoas manifest removal of funs

Browse source
This commit is contained in:
Rasmus Thorslund 2025-01-31 14:12:11 +01:00
parent c5e961ccf0
commit ad388877e7
No known key found for this signature in database
GPG key ID: 502D33332E9E305D
1 changed files with 49 additions and 49 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

98
global/overlay/etc/puppet/modules/net/manifests/cisoassistant.pp
View file

@ -24,57 +24,57 @@ class net::cisoassistant {
* => $params, * => $params,
} }
} }
file { '/etc/docker/daemon.json': # file { '/etc/docker/daemon.json':
mode => '0744', # mode => '0744',
owner => 'root', # owner => 'root',
group => 'root', # group => 'root',
content => file('net/cisoassistant/daemon.json'), # content => file('net/cisoassistant/daemon.json'),
} # }
file { '/opt/cisoas/ciso-assistant-community/enterprise/docker-compose.yml': # file { '/opt/cisoas/ciso-assistant-community/enterprise/docker-compose.yml':
mode => '0744', # mode => '0744',
owner => 'root', # owner => 'root',
group => 'root', # group => 'root',
content => file('net/cisoassistant/docker-compose.yml'), # content => file('net/cisoassistant/docker-compose.yml'),
} # }
file { '/opt/cisoas/ciso-assistant-community/enterprise/update-cisoas-enterprise.sh': # file { '/opt/cisoas/ciso-assistant-community/enterprise/update-cisoas-enterprise.sh':
mode => '0744', # mode => '0744',
owner => 'root', # owner => 'root',
group => 'root', # group => 'root',
content => file('net/cisoassistant/update-cisoas-enterprise.sh'), # content => file('net/cisoassistant/update-cisoas-enterprise.sh'),
} # }
sunet::scriptherder::cronjob { 'Upgrade cisoassistant images': sunet::scriptherder::cronjob { 'Upgrade cisoassistant images':
cmd => '/opt/cisoas/ciso-assistant-community/enterprise/update-cisoas-enterprise.sh', cmd => '/opt/cisoas/ciso-assistant-community/enterprise/update-cisoas-enterprise.sh',
weekday => 'Saturday', weekday => 'Saturday',
ok_criteria => ['exit_status=0', 'max_age=10d'], ok_criteria => ['exit_status=0', 'max_age=10d'],
} }
file { '/opt/cisoas/ciso-assistant-community/enterprise/rotate-certs.sh': # file { '/opt/cisoas/ciso-assistant-community/enterprise/rotate-certs.sh':
mode => '0744', # mode => '0744',
owner => 'root', # owner => 'root',
group => 'root', # group => 'root',
content => file('net/cisoassistant/rotate-certs.sh'), # content => file('net/cisoassistant/rotate-certs.sh'),
} # }
sunet::scriptherder::cronjob { 'Rotate le certificates': # sunet::scriptherder::cronjob { 'Rotate le certificates':
cmd => '/opt/cisoas/ciso-assistant-community/enterprise/rotate-certs.sh', # cmd => '/opt/cisoas/ciso-assistant-community/enterprise/rotate-certs.sh',
hour => '1', # hour => '1',
ok_criteria => ['exit_status=0', 'max_age=48h'], # ok_criteria => ['exit_status=0', 'max_age=48h'],
} # }
file { '/opt/cisoas/ciso-assistant-community/enterprise/Caddyfile': # file { '/opt/cisoas/ciso-assistant-community/enterprise/Caddyfile':
mode => '0744', # mode => '0744',
owner => 'root', # owner => 'root',
group => 'root', # group => 'root',
content => file('net/cisoassistant/Caddyfile'), # content => file('net/cisoassistant/Caddyfile'),
} # }
file { "/etc/systemd/system/sunet-cisoas.service": # file { "/etc/systemd/system/sunet-cisoas.service":
mode => '0644', # mode => '0644',
owner => 'root', # owner => 'root',
group => 'root', # group => 'root',
content => file('net/cisoassistant/sunet-cisoas.service'), # content => file('net/cisoassistant/sunet-cisoas.service'),
notify => [Class['sunet::systemd_reload']], # notify => [Class['sunet::systemd_reload']],
} # }
service { 'sunet-cisoas' : # service { 'sunet-cisoas' :
ensure => 'running', # ensure => 'running',
enable => true, # enable => true,
require => File['/etc/systemd/system/sunet-cisoas.service'], # require => File['/etc/systemd/system/sunet-cisoas.service'],
provider => 'systemd', # provider => 'systemd',
} # }
} #}