matrix-ops/global/overlay/etc/puppet/cosmos-rules.yaml

17 lines
441 B
YAML

# Note that the matching is done with re.match()
.+:
sunet::server:
disable_all_local_users: true
disable_ipv6_privacy: true
encrypted_swap: false
nftables_init: true
fail2ban: true
ssh_allow_from_anywhere: false
unattended_upgrades: true
'^k8sc[1-9].matrix.test.sunet.se$':
sunet::microk8s::node:
channel: 1.28/stable
'^k8sw[1-2].matrix.test.sunet.se$':
sunet::microk8s::node:
channel: 1.28/stable