geteduroam/geteduroam-ops
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Enable fleetlock

Browse source
This commit is contained in:
Johan Wassberg 2024-08-21 13:43:37 +02:00
parent 3355cbe668
commit 268c42ec91
Signed by: jocar
GPG key ID: BE4EC2EEADF2C31B
4 changed files with 29 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
global/overlay/etc/puppet/cosmos-rules.yaml
View file

@ -129,6 +129,7 @@ internal-sto3-test-app-3.geteduroam.sunet.se:
- member
internal-sto1-test-radius-1.geteduroam.sunet.se:
sunet::fleetlock_client:
sunet::dockerhost2:
sunet::geteduroam:
domain: get.test.eduroam.se
@ -138,6 +139,8 @@ internal-sto1-test-radius-1.geteduroam.sunet.se:
sunet::certbot::sync::server:
internal-dco-test-radius-2.geteduroam.sunet.se:
sunet::fleetlock_client:
sunet::dockerhost2:
sunet::dockerhost2:
sunet::geteduroam:
domain: get.test.eduroam.se
@ -146,6 +149,8 @@ internal-dco-test-radius-2.geteduroam.sunet.se:
sunet::certbot::sync::client:
internal-sto3-test-radius-3.geteduroam.sunet.se:
sunet::fleetlock_client:
sunet::dockerhost2:
sunet::dockerhost2:
sunet::geteduroam:
domain: get.test.eduroam.se

8
internal-dco-test-radius-2.geteduroam.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -7,3 +7,11 @@ mariadb_backup_password: ENC[PKCS7,MIIDAgYJKoZIhvcNAQcDoIIC8zCCAu8CAQAxggKaMIICl
shared_secret: ENC[PKCS7,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]
certbot_sync_client_ssh_key: >
ENC[PKCS7,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]
fleetlock_config:
geteduroam-test-radius:
server: https://fl-prod.knubbis.sunet.se
password: ENC[PKCS7,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]
cosmos_fleetlock_config:
fleetlock_group: geteduroam-test-radius
fleetlock_healthcheck_timeout: 300

8
internal-sto1-test-radius-1.geteduroam.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -13,3 +13,11 @@ certbot_acmed_clients:
password: ENC[PKCS7,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]
subdomain: 7ee5bb17-3033-4ceb-8853-0c6ba119184b
username: 67fae7ab-b568-4589-926a-83f8b950a08b
fleetlock_config:
geteduroam-test-radius:
server: https://fl-prod.knubbis.sunet.se
password: ENC[PKCS7,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]
cosmos_fleetlock_config:
fleetlock_group: geteduroam-test-radius
fleetlock_healthcheck_timeout: 300

8
internal-sto3-test-radius-3.geteduroam.sunet.se/overlay/etc/hiera/data/local.eyaml
View file

@ -33,3 +33,11 @@ certbot_sync_client_ssh_key: >
rfiO8zfk3EUae+dJSaVxkW+Var02S1NK7qI/IBB6/UWjYbX+AECiCp686Ia5
EGs/pkqiUH+SLXWYw6wwAiuVL3DkLmluvOoF2ZUistl35XYZG2OUt5N3GMvK
VtFgRHYGzFZqnd2KU4IbY7RO8c6yOPl3xKWuxbDEPoWA==]
fleetlock_config:
geteduroam-test-radius:
server: https://fl-prod.knubbis.sunet.se
password: ENC[PKCS7,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]
cosmos_fleetlock_config:
fleetlock_group: geteduroam-test-radius
fleetlock_healthcheck_timeout: 300