matrix-ops/global/overlay/etc/puppet/cosmos-rules.yaml

31 lines
793 B
YAML

# Note that the matching is done with re.match()
.+:
sunet::server:
disable_all_local_users: true
disable_ipv6_privacy: true
encrypted_swap: false
nftables_init: true
fail2ban: true
ssh_allow_from_anywhere: false
unattended_upgrades: true
'^k8sc[1-9].matrix.test.sunet.se$':
sunet::microk8s::node:
channel: 1.30/stable
peers:
- 89.47.191.81 k8sc1
- 89.47.191.52 k8sc2
- 89.47.190.141 k8sc3
- 89.47.190.223 k8sw1
- 89.47.190.80 k8sw2
- 89.47.191.178 k8sw3
'^k8sw[1-9].matrix.test.sunet.se$':
sunet::microk8s::node:
channel: 1.30/stable
peers:
- 89.47.191.81 k8sc1
- 89.47.191.52 k8sc2
- 89.47.190.141 k8sc3
- 89.47.190.223 k8sw1
- 89.47.190.80 k8sw2
- 89.47.191.178 k8sw3