geteduroam/geteduroam-ops
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Wrap in fleetlock

Browse source
This commit is contained in:
Johan Wassberg 2024-08-30 09:34:50 +02:00
parent 267615366f
commit 1ba524c609
Signed by: jocar
GPG key ID: BE4EC2EEADF2C31B
4 changed files with 31 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
global/overlay/etc/puppet/cosmos-rules.yaml
View file

@ -228,6 +228,7 @@ internal-dco-prod-app-2.geteduroam.sunet.se:
- member - member
internal-sto1-prod-radius-1.geteduroam.sunet.se: internal-sto1-prod-radius-1.geteduroam.sunet.se:
sunet::fleetlock_client:
sunet::dockerhost2: sunet::dockerhost2:
sunet::geteduroam: sunet::geteduroam:
domain: geteduroam.se domain: geteduroam.se
@ -237,9 +238,14 @@ internal-sto1-prod-radius-1.geteduroam.sunet.se:
sunet::certbot::sync::server: sunet::certbot::sync::server:
internal-dco-prod-radius-2.geteduroam.sunet.se: internal-dco-prod-radius-2.geteduroam.sunet.se:
sunet::fleetlock_client:
sunet::dockerhost2: sunet::dockerhost2:
sunet::geteduroam: sunet::geteduroam:
domain: geteduroam.se domain: geteduroam.se
realm: v1.geteduroam.se realm: v1.geteduroam.se
app: false app: false
sunet::certbot::sync::client: sunet::certbot::sync::client:
internal-sto3-prod-radius-3.geteduroam.sunet.se:
sunet::fleetlock_client:
sunet::dockerhost2:

8
internal-dco-prod-radius-2.geteduroam.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -31,3 +31,11 @@ certbot_sync_client_ssh_key: >
0bGdiixwbhEgYdTePvTtMUD+A09QOhWdez7tDHtEB72QDv04FGmUiG7BWpN0 0bGdiixwbhEgYdTePvTtMUD+A09QOhWdez7tDHtEB72QDv04FGmUiG7BWpN0
RoiNoRyzNqer1ztrLQrxY2rm8uIB7Z2eox55VpUFxzv7R5SQ/CPLLrwKnran RoiNoRyzNqer1ztrLQrxY2rm8uIB7Z2eox55VpUFxzv7R5SQ/CPLLrwKnran
iuxJAjIdT8zMTkXUdRaNFogLo64tiDJBA/vywxT8G/] iuxJAjIdT8zMTkXUdRaNFogLo64tiDJBA/vywxT8G/]
fleetlock_config:
geteduroam-prod-radius:
server: https://fl-prod.knubbis.sunet.se
password: ENC[PKCS7,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]
cosmos_fleetlock_config:
fleetlock_group: geteduroam-prod-radius
fleetlock_healthcheck_timeout: 300

8
internal-sto1-prod-radius-1.geteduroam.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -11,3 +11,11 @@ certbot_acmed_clients:
password: ENC[PKCS7,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] password: ENC[PKCS7,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]
subdomain: b35f1873-7d25-4df4-8a20-101ccdb7817e subdomain: b35f1873-7d25-4df4-8a20-101ccdb7817e
username: 3fbc82d7-8e72-4ca9-b0aa-d00ed3b964d5 username: 3fbc82d7-8e72-4ca9-b0aa-d00ed3b964d5
fleetlock_config:
geteduroam-prod-radius:
server: https://fl-prod.knubbis.sunet.se
password: ENC[PKCS7,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]
cosmos_fleetlock_config:
fleetlock_group: geteduroam-prod-radius
fleetlock_healthcheck_timeout: 300

9
internal-sto3-prod-radius-3.geteduroam.sunet.se/overlay/etc/hiera/data/local.eyaml Normal file
View file

@ -0,0 +1,9 @@
---
fleetlock_config:
geteduroam-prod-radius:
server: https://fl-prod.knubbis.sunet.se
password: ENC[PKCS7,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]
cosmos_fleetlock_config:
fleetlock_group: geteduroam-prod-radius
fleetlock_healthcheck_timeout: 300