soc-ops

sunet-cert/soc-ops

Fork 0

Commit graph

2f0343cfa5

fixes. soc-ops-2024-10-31-v11 Johan Björklund 2024-10-31 14:05:47 +01:00
48201c92cb

Set up SSO. soc-ops-2024-10-31-v10 Johan Björklund 2024-10-31 13:51:26 +01:00
69ee730ec2

Set up acme-d. soc-ops-2024-10-31-v09 Johan Björklund 2024-10-31 13:37:55 +01:00
617b07bfa5

Fixed typio. soc-ops-2024-10-31-v08 Johan Björklund 2024-10-31 13:23:12 +01:00
8a5e8bdef4

vul-dashboard-test.cert.sunet.se added soc-ops-2024-10-31-v07 Johan Björklund 2024-10-31 13:20:10 +01:00
5684d1b892

Preparing vul dashbaord and sso. soc-ops-2024-10-31-v06 Johan Björklund 2024-10-31 13:09:38 +01:00
42ac3c8c42

Fix rendering of satosa docker-compose.yml soc-ops-2024-10-31-v05 Johan Björklund 2024-10-31 09:46:23 +01:00
db85b4fecc

More name fixing. soc-ops-2024-10-31-v04 Johan Björklund 2024-10-31 09:01:17 +01:00
a3c77a05c4

Fix class name, duh. soc-ops-2024-10-31-v03 Johan Björklund 2024-10-31 08:59:12 +01:00
c527adb91e

Fix logic and spelling. soc-ops-2024-10-31-v02 Johan Björklund 2024-10-31 08:58:04 +01:00
ddc22ad91c

Switch to soc::satosa soc-ops-2024-10-31-v01 Johan Björklund 2024-10-31 08:52:40 +01:00
30c1e2cb15

Added som missing secrets. soc-ops-2024-10-30-v13 Johan Björklund 2024-10-30 15:21:31 +01:00
9c6ce45f5f

Fix cdb.json soc-ops-2024-10-30-v12 Johan Björklund 2024-10-30 14:07:07 +01:00
ac3df96a60

Add missing file. soc-ops-2024-10-30-v11 Johan Björklund 2024-10-30 14:06:20 +01:00
959acc2337

Fixing cert locations, this might bomb. soc-ops-2024-10-30-v10 Johan Björklund 2024-10-30 13:58:19 +01:00
5b2bef346d

Testing how to get facts. soc-ops-2024-10-30-v09 Johan Björklund 2024-10-30 13:52:27 +01:00
7171dd5a8a

Testing how to get facts. soc-ops-2024-10-30-v08 Johan Björklund 2024-10-30 13:46:11 +01:00
035581e5b7

more fixes. soc-ops-2024-10-30-v07 Johan Björklund 2024-10-30 13:41:25 +01:00
806735fefa

Fixing with satosa. soc-ops-2024-10-30-v06 Johan Björklund 2024-10-30 13:39:04 +01:00
01880222a4

commit commit. soc-ops-2024-10-30-v05 Johan Björklund 2024-10-30 13:25:26 +01:00
b3ed66c5f6

Setup acme-d. soc-ops-2024-10-30-v04 Johan Björklund 2024-10-30 13:22:22 +01:00
6cb41f4c3f

Switch to Deb12 .. soc-ops-2024-10-30-v03 Johan Björklund 2024-10-30 13:12:03 +01:00
1ef208a0a5

Nope, stdlib on 24.04 no good. soc-ops-2024-10-30-v02 Johan Björklund 2024-10-30 12:34:17 +01:00
e48bff537a

Seems like stdlib is required. soc-ops-2024-10-30-v01 Johan Björklund 2024-10-30 10:50:59 +01:00
b233cbd6a7

Fix ssh key. soc-ops-2024-10-29-v08 Johan Björklund 2024-10-29 14:55:30 +01:00
8d2e570477

Added ssh key. soc-ops-2024-10-29-v07 Johan Björklund 2024-10-29 14:51:27 +01:00
e619ba1683

Set up TLS certificate, fixes. soc-ops-2024-10-29-v06 Johan Björklund 2024-10-29 14:14:48 +01:00
69d3be88fb

Set up TLS certificate soc-ops-2024-10-29-v05 Johan Björklund 2024-10-29 14:12:41 +01:00
9ae2fb898e

Testar lite med metadata. soc-ops-2024-10-29-v04 Johan Björklund 2024-10-29 13:43:43 +01:00
6f7d3600ee

Lite satosa-conf. soc-ops-2024-10-29-v03 Johan Björklund 2024-10-29 13:00:32 +01:00
678e0b4063

test-sso-proxy1.cert.sunet.se added soc-ops-2024-10-29-v02 Johan Björklund 2024-10-29 11:08:00 +01:00
4b11e53200

Added a lot of SSO stuff and base for SSO proxy. soc-ops-2024-10-29-v01 Johan Björklund 2024-10-29 10:59:13 +01:00
0af1dbe562

Fixes for certbot, no certbot script just yet. soc-ops-2024-10-28-v07 Johan Björklund 2024-10-28 15:55:35 +01:00
1dc0a879db

I love YAML. Fix syntax. soc-ops-2024-10-28-v06 Johan Björklund 2024-10-28 15:39:53 +01:00
03694c1384

fixing with modules Johan Björklund 2024-10-28 15:35:05 +01:00
25bb16852c

Spellcheck class ... soc-ops-2024-10-28-v05 Johan Björklund 2024-10-28 15:23:49 +01:00
c2df36a32e

Fix path .. soc-ops-2024-10-28-v04 Johan Björklund 2024-10-28 15:21:56 +01:00
1a62e46d64

Let's see if anything works ... or just bombs soc-ops-2024-10-28-v03 Johan Björklund 2024-10-28 15:19:24 +01:00
3e383c6d68

Created stub for sso groups Johan Björklund 2024-10-28 14:00:55 +01:00
493cb1c1bd

Removed .empty file Johan Björklund 2024-10-28 13:36:25 +01:00
f24f201d46

First sekelton for shib-proxy. Johan Björklund 2024-10-28 13:32:11 +01:00
f4d620ba4d

Added Valerio's ssh key. soc-ops-2024-10-28-v02 Johan Björklund 2024-10-28 11:00:11 +01:00
72488b8586

Add soc class, will it work? soc-ops-2024-10-28-v01 Johan Björklund 2024-10-28 10:34:42 +01:00
69e4bf28cc

Disable fail2ban. soc-ops-2024-10-25-v11 Johan Björklund 2024-10-25 16:04:10 +02:00
2d6151ced5

Test if I must trust jocar ... soc-ops-2024-10-25-v10 Johan Björklund 2024-10-25 16:02:19 +02:00
417e257ac8

Fix fix. soc-ops-2024-10-25-v09 Johan Björklund 2024-10-25 15:06:58 +02:00
4e072df30f

Fixing with modules. soc-ops-2024-10-25-v08 Johan Björklund 2024-10-25 15:04:04 +02:00
b977058867

Add SUNET pupet modules. soc-ops-2024-10-25-v07 Johan Björklund 2024-10-25 14:41:54 +02:00
972b577e52

Don't write git repo URL manually, paste it from platform webgui ... soc-ops-2024-10-25-v06 soc-ops-2024-10-25-v05 Johan Björklund 2024-10-25 14:33:22 +02:00
5d903e4d1a

Fixed, for real, git url. soc-ops-2024-10-25-v04 Johan Björklund 2024-10-25 13:53:55 +02:00
57f2592b03

Fixed repo url soc-ops-2024-10-25-v03 Johan Björklund 2024-10-25 13:51:36 +02:00
1b2f7f5353

internal-sto1-dev-vulndash-1.cert.sunet.se added soc-ops-2024-10-25-v02 Johan Björklund 2024-10-25 13:11:19 +02:00
46d8160c07

First try just to deloy ssh keys. soc-ops-2024-10-25-v01 Johan Björklund 2024-10-25 13:03:34 +02:00
2f82fc55e6

Add repo url to cosmos.conf soc-ops-2024-10-21-v02 Johan Björklund 2024-10-21 16:01:03 +02:00
adb77b7f94

test soc-ops-2024-10-21-v01 Johan Björklund 2024-10-21 14:54:58 +02:00
c2d60bd424 initial trust Johan Björklund 2024-10-21 14:49:48 +02:00
57dcae2cdf

Merge pull request #57 from SUNET/patlu-no-ntp Patrik Lundin 2024-10-21 08:23:46 +02:00
f537508bee

Do not install ntp with cosmos script Patrik Lundin 2024-10-17 16:36:45 +02:00
028ba3d608

Merge pull request #56 from SUNET/pahol-fix-noble-eyaml Patrik Holmqvist 2024-09-10 13:16:19 +02:00
7941e3f970

Merge the 2 patch functions to 1. Patrik Holmqvist 2024-09-09 17:29:31 +02:00
fac9a556ba

Patch for broken eyaml in ubuntu24.04. Patrik Holmqvist 2024-09-09 16:52:38 +02:00
770a5ca3cc

Merge pull request #55 from SUNET/patlu-fleetlock-lock-timeouts Patrik Lundin 2024-07-04 13:07:34 +02:00
aa88795ee0

sunet-fleetlock: also handle ReadTimeout Patrik Lundin 2024-07-03 14:13:22 +02:00
01768129f0

fleetlock: configurable lock/unlock timeout Patrik Lundin 2024-07-03 13:27:52 +02:00
443611dd3f

Merge pull request #49 from SUNET/john-permissions-fix Patrik Lundin 2024-07-03 11:36:21 +02:00
5518048d79

Merge pull request #54 from SUNET/pahol-ubuntu24 Johan Wassberg 2024-06-19 15:07:17 +02:00
4231b4ac1d

Migrate from legacy fact Patrik Holmqvist 2024-06-19 14:07:13 +02:00
bc9d1dc960

Use upstream puppet modules for ubuntu24+. Patrik Holmqvist 2024-06-19 14:02:24 +02:00
5d88e66379

Merge pull request #53 from SUNET/patlu-fleetlock-error-handling Patrik Lundin 2024-06-17 13:27:11 +02:00
e315282bc5

Use more strict exception checking Patrik Lundin 2024-06-17 12:40:12 +02:00
4b8b8887f6

sunet-fleetlock: handle connection errors Patrik Lundin 2024-06-17 11:54:28 +02:00
646c40daf1

Merge pull request #52 from SUNET/jocar-allow-empty-hosts Johan Wassberg 2024-04-15 11:43:21 +02:00
c72f5ccd86

Allow for hosts without class(s) Johan Wassberg 2024-04-12 15:32:40 +02:00
b39960484f

Merge pull request #51 from SUNET/patlu-run-cosmos-fleetlock Micke Nordin 2024-01-25 13:23:27 +01:00
df5558befb

Fix another indentation mismatch Patrik Lundin 2024-01-24 15:09:38 +01:00
4b93d9c426

run-cosmos: support fleetlock unlocking at boot Patrik Lundin 2024-01-24 14:58:21 +01:00
cacb97a22c

Allow running of bumptag with out signed commits or tags Micke Nordin 2023-12-04 14:24:34 +01:00
ecedda68e3

Merge pull request #50 from SUNET/kano-sshproxyjump Johan Wassberg 2023-11-29 12:53:05 +01:00
71e112e009

PREPARE/ADDHOST: allow the ues of proxyjump with ip address Micke Nordin 2023-11-29 12:10:34 +01:00
8d4ce2d1b7

Make sure that COSMOS_BASE is only readable John Van de Meulebrouck Brendgard 2023-11-17 15:03:47 +01:00
75e566ab61

Make sure that /root in overlay is owned by root John Van de Meulebrouck Brendgard 2023-11-17 14:58:51 +01:00
ca353ed406

Set same permissions for /root/.ssh/authorized_keys John Van de Meulebrouck Brendgard 2023-11-17 13:50:02 +01:00
1bd6524ad3

Merge pull request #48 from SUNET/john-bump-tag-from-nunoc-ops Micke Nordin 2023-11-16 13:55:49 +01:00
21c0cad8a0

Consistently use [[ for if statements. John Van de Meulebrouck Brendgard 2023-11-16 12:12:36 +01:00
dc1df6671c

Shellcheck needs to have the PAGER quoted John Van de Meulebrouck Brendgard 2023-11-16 12:11:09 +01:00
fd4523308f

Replaced 'egrep' that is now deprecated. John Van de Meulebrouck Brendgard 2023-11-16 12:09:02 +01:00
cb9e1f8670

Added shellcheck exceptions for misplaced warning. John Van de Meulebrouck Brendgard 2023-11-16 12:07:10 +01:00
5a47b1a3f7

Readded this_branch=$(git rev-parse --abbrev-ref HEAD) John Van de Meulebrouck Brendgard 2023-11-16 12:04:30 +01:00
826b8edf82

Changed from [[ ! -z ... to [[ -n ... John Van de Meulebrouck Brendgard 2023-11-16 11:59:33 +01:00
53c58b413e

Changed from if [[ ${?} ]] to if cmd John Van de Meulebrouck Brendgard 2023-11-16 11:56:49 +01:00
8a7c85dcf0

Added bump-tag from nunoc-ops that has John Van de Meulebrouck Brendgard 2023-11-15 13:44:41 +01:00
083d6eda83 bump-tag: Compare against current branch Micke Nordin 2023-11-15 12:11:52 +01:00
8a947ffa28

Merge pull request #46 from SUNET/jocar-bookworm-depends Micke Nordin 2023-11-14 15:34:44 +01:00
a6a67d355f

Diffable Johan Wassberg 2023-11-14 15:28:46 +01:00
120c4a5a93

A few more depends for Bookworm Johan Wassberg 2023-11-14 15:27:45 +01:00
9b6322c2ec

Merge pull request #45 from SUNET/jocar-bookwork-fix Micke Nordin 2023-10-16 11:03:54 +02:00
69377631a8

Bookwork image runs netplan Johan Wassberg 2023-10-16 09:25:57 +02:00
b057f0aeda

Merge pull request #44 from SUNET/jocar-dont-install-x11 Micke Nordin 2023-10-02 12:58:30 +02:00
58a9ca7aa9

No need of x11 on our servers Johan Wassberg 2023-10-02 12:39:44 +02:00
6ac9294dea A newer bump-tag Micke Nordin 2023-07-12 16:29:42 +02:00