matrix-ops/global/overlay/etc/puppet/cosmos-rules.yaml

19 lines
540 B
YAML

# Note that the matching is done with re.match()
#'^k8sc[1-9].matrix.test.sunet.se$':
# sunet::microk8s::node:
# channel: 1.28/stable
#'^k8sw[1-2].matrix.test.sunet.se$':
# sunet::microk8s::node:
# channel: 1.28/stable
'^k8sw3.matrix.test.sunet.se$':
sunet::microk8s::node:
channel: 1.28/stable
sunet::server:
disable_all_local_users: true
disable_ipv6_privacy: true
encrypted_swap: false
nftables_init: false
fail2ban: true
ssh_allow_from_anywhere: false
unattended_upgrades: true