eid-ops/global/overlay/etc/puppet/cosmos-rules.yaml

'.+':
   common:
   nrpe:
   entropyclient:
   infra_ca_rp:
   mailclient:
      domain: sunet.se
   sunet::rsyslog:
   sunet::server:
      sshd_config: true
      ssh_allow_from_anywhere: true

jmp.komreg.net:
   konsulter:
   sunetops:
   metadatamgrs:
   sunet_iaas_cloud:
   autoupdate:
   sunet::auditd:
   jumphosts:
   sunet::server:
      ssh_allow_from_anywhere: true

'^jump-.+\.komreg\.net$':
   konsulter:
   sunetops:
   metadatamgrs:
   autoupdate:
   jumphosts:
   sunet::server:
      ssh_allow_from_anywhere: true

kvmfe-tug-3.komreg.net:
   sunetops:
   eid::kvmhost:
      vms:
         fe-tug-3.komreg.net:
            mac: '52:54:20:02:01:01'
            ip: '94.176.224.37'
            netmask: '255.255.255.240'
            gateway: '94.176.224.33'
            ip6: '2001:6b0:63:2::37'
            gateway6: '2001:6b0:63:2::1'
            bridge: 'br-fe'
            description: 'eid tug prod frontend'
            cpus: '15'
            memory: '30720'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         fe-tug-1.test.komreg.net:
            mac: '52:54:20:02:01:02'
            ip: '94.176.224.38'
            netmask: '255.255.255.240'
            gateway: '94.176.224.33'
            ip6: '2001:6b0:63:2::38'
            gateway6: '2001:6b0:63:2::1'
            bridge: 'br-fe'
            description: 'eid tug test frontend'
            cpus: '15'
            memory: '30720'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'

kvminfra-tug-3.komreg.net:
   sunetops:
   eid::kvmhost:
      vms:
         log-2.sveidas.se:
            mac: '52:54:20:02:02:01'
            ip: '94.176.224.102'
            netmask: '255.255.255.240'
            gateway: '94.176.224.97'
            bridge: 'br-infra'
            search: ['sveidas.se']
            description: 'eid tug log'
            cpus: '10'
            memory: '20480'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         monitor-tug-3.komreg.net:
            mac: '52:54:20:02:02:02'
            ip: '94.176.224.101'
            netmask: '255.255.255.240'
            gateway: '94.176.224.97'
            bridge: 'br-infra'
            description: 'eid tug monitor'
            cpus: '10'
            memory: '20480'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         validator-2.komreg.net:
            mac: '52:54:20:02:02:03'
            ip: '94.176.224.106'
            netmask: '255.255.255.240'
            gateway: '94.176.224.97'
            bridge: 'br-infra'
            description: 'eid tug validator'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'

kvmmeta-tug-3.komreg.net:
   sunetops:
   eid::kvmhost:
      vms:
         natmd-2.komreg.net:
            mac: '52:54:20:02:03:01'
            ip: '94.176.224.69'
            netmask: '255.255.255.240'
            gateway: '94.176.224.65'
            bridge: 'br-meta'
            description: 'eid tug swedish metadata signer'
            cpus: '10'
            memory: '15360'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eumd-2.komreg.net:
            mac: '52:54:20:02:03:02'
            ip: '94.176.224.70'
            netmask: '255.255.255.240'
            gateway: '94.176.224.65'
            bridge: 'br-meta'
            description: 'eid tug european metadata signer'
            cpus: '10'
            memory: '15360'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         natpub-2.komreg.net:
            mac: '52:54:20:02:03:03'
            ip: '94.176.224.71'
            netmask: '255.255.255.240'
            gateway: '94.176.224.65'
            bridge: 'br-meta'
            description: 'eid tug swedish metadata publisher'
            cpus: '10'
            memory: '15360'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eupub-2.komreg.net:
            mac: '52:54:20:02:03:04'
            ip: '94.176.224.72'
            netmask: '255.255.255.240'
            gateway: '94.176.224.65'
            bridge: 'br-meta'
            description: 'eid tug european metadata publisher'
            cpus: '10'
            memory: '15360'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'

kvmeidas-tug-3.komreg.net:
   sunetops:
   eid::kvmhost:
      vms:
         eidas-connector-2.sveidas.se:
            mac: '52:54:20:02:04:01'
            ip: '94.176.224.5'
            netmask: '255.255.255.240'
            gateway: '94.176.224.1'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid connector'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eidas-connector-4.sveidas.se:
            mac: '52:54:20:02:04:02'
            ip: '94.176.224.6'
            netmask: '255.255.255.240'
            gateway: '94.176.224.1'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid connector'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         prid-2.sveidas.se:
            mac: '52:54:20:02:04:04'
            ip: '94.176.224.8'
            netmask: '255.255.255.240'
            gateway: '94.176.224.1'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid prid'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eidas-test-2.sveidas.se:
            mac: '52:54:20:02:04:07'
            ip: '94.176.224.11'
            netmask: '255.255.255.240'
            gateway: '94.176.224.1'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid tug test SP'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eidas-proxy-2.sveidas.se:
            mac: '52:54:20:02:04:08'
            ip: '94.176.224.12'
            netmask: '255.255.255.240'
            gateway: '94.176.224.1'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid tug proxy'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eidas-proxy-4.sveidas.se:
            mac: '52:54:20:02:04:09'
            ip: '94.176.224.13'
            netmask: '255.255.255.240'
            gateway: '94.176.224.1'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid tug proxy'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'

kvmfe-fre-3.komreg.net:
   sunetops:
   eid::kvmhost:
      vms:
         fe-fre-3.komreg.net:
            mac: '52:54:20:01:00:01'
            ip: '94.176.224.165'
            netmask: '255.255.255.240'
            gateway: '94.176.224.161'
            ip6: '2001:6b0:64:2::165'
            gateway6: '2001:6b0:64:2::1'
            bridge: 'br-fe'
            description: 'eid fre prod frontend'
            cpus: '15'
            memory: '30720'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         fe-fre-1.test.komreg.net:
            mac: '52:54:20:01:00:02'
            ip: '94.176.224.166'
            netmask: '255.255.255.240'
            gateway: '94.176.224.161'
            ip6: '2001:6b0:64:2::166'
            gateway6: '2001:6b0:64:2::1'
            bridge: 'br-fe'
            description: 'eid fre sthb frontend'
            cpus: '15'
            memory: '30720'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'

kvminfra-fre-3.komreg.net:
   sunetops:
   eid::kvmhost:
      vms:
         monitor-fre-3.komreg.net:
            mac: '52:54:20:01:00:02'
            ip: '94.176.224.229'
            netmask: '255.255.255.240'
            gateway: '94.176.224.225'
            bridge: 'br-infra'
            description: 'eid fre monitor'
            cpus: '10'
            memory: '20480'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         log-1.sveidas.se:
            mac: '52:54:20:01:00:03'
            ip: '94.176.224.230'
            netmask: '255.255.255.240'
            gateway: '94.176.224.225'
            bridge: 'br-infra'
            search: ['sveidas.se']
            description: 'eid fre log'
            cpus: '10'
            memory: '20480'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         validator-1.komreg.net:
            mac: '52:54:20:01:00:04'
            ip: '94.176.224.234'
            netmask: '255.255.255.240'
            gateway: '94.176.224.225'
            bridge: 'br-infra'
            description: 'eid fre validator'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'

kvmmeta-fre-3.komreg.net:
   sunetops:
   eid::kvmhost:
      vms:
         natmd-1.komreg.net:
            mac: '52:54:20:01:01:01'
            ip: '94.176.224.197'
            netmask: '255.255.255.240'
            gateway: '94.176.224.193'
            bridge: 'br-meta'
            description: 'eid fre swedish metadata signer'
            cpus: '10'
            memory: '15360'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eumd-1.komreg.net:
            mac: '52:54:20:01:01:02'
            ip: '94.176.224.198'
            netmask: '255.255.255.240'
            gateway: '94.176.224.193'
            bridge: 'br-meta'
            description: 'eid fre european metadata signer'
            cpus: '10'
            memory: '15360'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         natpub-1.komreg.net:
            mac: '52:54:20:01:01:03'
            ip: '94.176.224.199'
            netmask: '255.255.255.240'
            gateway: '94.176.224.193'
            bridge: 'br-meta'
            description: 'eid fre swedish metadata publisher'
            cpus: '10'
            memory: '15360'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eupub-1.komreg.net:
            mac: '52:54:20:01:01:04'
            ip: '94.176.224.200'
            netmask: '255.255.255.240'
            gateway: '94.176.224.193'
            bridge: 'br-meta'
            description: 'eid fre european metadata publisher'
            cpus: '10'
            memory: '15360'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'

kvmeidas-fre-3.komreg.net:
   sunetops:
   eid::kvmhost:
      vms:
         eidas-connector-1.sveidas.se:
            mac: '52:54:20:01:04:01'
            ip: '94.176.224.133'
            netmask: '255.255.255.240'
            gateway: '94.176.224.129'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid connector'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eidas-connector-3.sveidas.se:
            mac: '52:54:20:01:04:02'
            ip: '94.176.224.134'
            netmask: '255.255.255.240'
            gateway: '94.176.224.129'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid connector'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         prid-1.sveidas.se:
            mac: '52:54:20:01:04:04'
            ip: '94.176.224.136'
            netmask: '255.255.255.240'
            gateway: '94.176.224.129'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid prid'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eidas-test-1.sveidas.se:
            mac: '52:54:20:01:04:07'
            ip: '94.176.224.139'
            netmask: '255.255.255.240'
            gateway: '94.176.224.129'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid fre test SP'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eidas-proxy-1.sveidas.se:
            mac: '52:54:20:01:04:08'
            ip: '94.176.224.140'
            netmask: '255.255.255.240'
            gateway: '94.176.224.129'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid fre proxy'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'
         eidas-proxy-3.sveidas.se:
            mac: '52:54:20:01:04:09'
            ip: '94.176.224.141'
            netmask: '255.255.255.240'
            gateway: '94.176.224.129'
            bridge: 'br-eidas'
            search: ['sveidas.se']
            description: 'eid fre proxy'
            cpus: '8'
            memory: '8192'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'

kvmdemw-fre-3a.komreg.net:
   sunetops:
   eid::kvmhost:
      vms:
         demw-1.sveidas.se:
            mac: '52:54:20:01:05:01'
            ip: '94.176.224.252'
            netmask: '255.255.255.248'
            gateway: '94.176.224.249'
            bridge: 'br-demw'
            description: 'eid deutsche middleware'
            cpus: '16'
            memory: '32768'
            size: '100G'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'

kvmdemw-fre-3b.komreg.net:
   sunetops:
   eid::kvmhost:
      vms:
         demw-2.sveidas.se:
            mac: '52:54:20:01:05:02'
            ip: '94.176.224.125'
            netmask: '255.255.255.248'
            gateway: '94.176.224.121'
            bridge: 'br-demw'
            description: 'eid deutsche middleware'
            cpus: '16'
            memory: '32768'
            image_url: 'https://cloud-images.ubuntu.com/focal/current/focal-server-cloudimg-amd64.img'

monitor-fre-3.komreg.net:
   sunetops:
   autoupdate:
   eid::nagios_monitor:

monitor-tug-3.komreg.net:
   sunetops:
   autoupdate:
   eid::nagios_monitor:

country-test-1.test.komreg.net:
   sunetops:
   autoupdate:
   eid::dockerhost:
      version: '5:24.0.5-1~ubuntu.20.04~focal'
      storage_driver: 'overlay2'

natmd-1.komreg.net:
   sunetops:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   metadatamgrs:
   konsulter:
   eidas_hsm_client:
   md_signer:
      name: natmd-prod
      dest_host: natpub-1.komreg.net
      version: 1.1.5-eidas
   md_repo_client:

natmd-test-1.komreg.net:
   sunetops:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
      docker_repo: stable
   metadatamgrs:
   konsulter:
   sunet::metadata::pyff_compose:
      pyff_imagetag: swamid-2023-10-24
      pyff_pipeline: natmd-test-ng.fd
      pyff_update_frequency: 1800
      pyff_extra_volumes:
        - "/etc/credentials:/etc/credentials"
      hsm_client: true
      luna_imagetag: 7.4-dev
   sunet::metadata::mdqp:
      imagetag: v2023-09-13-01
      mdq_service: http://pyff_pyff_1:8080
   sunet::metadata::metadata_repo:
      hostname: r1.komreg.net
      repo: komreg-metadata.git
      signed_repo: true

eumd-1.komreg.net:
   sunetops:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   metadatamgrs:
   konsulter:
   eidas_hsm_client:
   md_signer:
      name: eidas-prod
      dest_host: eupub-1.komreg.net
      version: 1.1.5-eidas
   md_repo_client:

eumd-test-1.komreg.net:
   sunetops:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   metadatamgrs:
   konsulter:
   md_repo_client:
   eidas_hsm_client:
   md_signer:
      name: eidas-test
      dest_host: eupub-test-1.komreg.net
      version: 1.1.5-eidas

natpub-1.komreg.net:
   sunetops:
   autoupdate:
   md_publisher:
     keyname: natpub-1.komreg.net_infra
     signer_ip_adress: '94.176.224.197'
   sunet::frontend::register_sites:
     sites:
       'md.swedenconnect.se':
         frontends:
            - 'fe-fre-3.komreg.net'
            - 'fe-tug-3.komreg.net'
         port: '443'

natpub-test-1.komreg.net:
   sunetops_new:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   metadatamgrs_new:
   sunet::metadata::mdq_publisher:
      valid_until: 7
      xml_dir: role
      validate_cert: '/var/www/html/md-signer.crt'
   sunet::frontend::register_sites:
     sites:
       'test.md.swedenconnect.se':
         frontends:
            - 'fe-fre-1.test.komreg.net'
            - 'fe-tug-1.test.komreg.net'
         port: '443'

eupub-1.komreg.net:
   sunetops:
   autoupdate:
   md_publisher:
     keyname: eupub-1.komreg.net_infra
     signer_ip_adress: '94.176.224.198'
   mdsl_publisher:
   sunet::frontend::register_sites:
     sites:
       'md.eidas.swedenconnect.se':
         frontends:
            - 'fe-fre-3.komreg.net'
            - 'fe-tug-3.komreg.net'
         port: '443'

eupub-test-1.komreg.net:
   sunetops:
   autoupdate:
   md_publisher:
     keyname: eupub-test-1.komreg.net_infra
     signer_ip_adress: '89.45.237.138'
   mdsl_publisher:
   sunet::frontend::register_sites:
     sites:
       'test.md.eidas.swedenconnect.se':
         frontends:
            - 'fe-fre-1.test.komreg.net'
            - 'fe-tug-1.test.komreg.net'
         port: '443'

natmd-2.komreg.net:
   sunetops:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   metadatamgrs:
   konsulter:
   eidas_hsm_client:
   md_signer:
      name: natmd-prod
      dest_host: natpub-2.komreg.net
      version: 1.1.5-eidas
   md_repo_client:

natmd-test-2.komreg.net:
   sunetops:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
      docker_repo: stable
   metadatamgrs:
   konsulter:
   sunet::metadata::pyff_compose:
      pyff_imagetag: swamid-2023-10-24
      pyff_pipeline: natmd-test-ng.fd
      pyff_update_frequency: 1800
      pyff_extra_volumes:
        - "/etc/credentials:/etc/credentials"
      hsm_client: true
      luna_imagetag: 7.4-dev
   sunet::metadata::mdqp:
      imagetag: v2023-09-13-01
      mdq_service: http://pyff_pyff_1:8080
   sunet::metadata::metadata_repo:
      hostname: r1.komreg.net
      repo: komreg-metadata.git
      signed_repo: true

eumd-2.komreg.net:
   sunetops:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   metadatamgrs:
   konsulter:
   eidas_hsm_client:
   md_signer:
      name: eidas-prod
      dest_host: eupub-2.komreg.net
      version: 1.1.5-eidas
   md_repo_client:

eumd-test-2.komreg.net:
   sunetops:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   metadatamgrs:
   konsulter:
   md_repo_client:
   eidas_hsm_client:
   md_signer:
      name: eidas-test
      dest_host: eupub-test-2.komreg.net
      version: 1.1.5-eidas

natpub-2.komreg.net:
   sunetops:
   autoupdate:
   md_publisher:
     keyname: natpub-2.komreg.net_infra
     signer_ip_adress: '94.176.224.69'
   sunet::frontend::register_sites:
     sites:
       'md.swedenconnect.se':
         frontends:
            - 'fe-fre-3.komreg.net'
            - 'fe-tug-3.komreg.net'
         port: '443'

natpub-test-2.komreg.net:
   sunetops_new:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   metadatamgrs_new:
   sunet::metadata::mdq_publisher:
      valid_until: 7
      xml_dir: role
      validate_cert: '/var/www/html/md-signer.crt'
   sunet::frontend::register_sites:
     sites:
       'test.md.swedenconnect.se':
         frontends:
            - 'fe-fre-1.test.komreg.net'
            - 'fe-tug-1.test.komreg.net'
         port: '443'

eupub-2.komreg.net:
   sunetops:
   autoupdate:
   md_publisher:
     keyname: eupub-2.komreg.net_infra
     signer_ip_adress: '94.176.224.70'
   mdsl_publisher:
   sunet::frontend::register_sites:
     sites:
       'md.eidas.swedenconnect.se':
         frontends:
            - 'fe-fre-3.komreg.net'
            - 'fe-tug-3.komreg.net'
         port: '443'

eupub-test-2.komreg.net:
   sunetops:
   autoupdate:
   md_publisher:
     keyname: eupub-test-2.komreg.net_infra
     signer_ip_adress: '89.45.236.73'
   mdsl_publisher:
   sunet::frontend::register_sites:
     sites:
       'test.md.eidas.swedenconnect.se':
         frontends:
            - 'fe-fre-1.test.komreg.net'
            - 'fe-tug-1.test.komreg.net'
         port: '443'

nic.komreg.net:
   sunetops:
   sunet_iaas_cloud:
   autoupdate:
   konsulter:
   eid::nagios_monitor:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'

r1.komreg.net:
   sunetops:
   sunet_iaas_cloud:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   md_repo_server:
      hostname: r1.komreg.net

p1.komreg.net:
   sunetops:
   sunet_iaas_cloud:
   autoupdate:
   md_publisher:
     keyname: p1.komreg.net_infra
     signer_ip_adress: '89.47.184.55'
   sunet::frontend::register_sites:
     sites:
       'qa.md.swedenconnect.se':
         frontends:
            - 'se-fre-lb-1.sunet.se'
            - 'se-tug-lb-1.sunet.se'
         port: '443'

p2.qa.komreg.net:
   sunetops:
   sunet_iaas_cloud:
   autoupdate:
   md_publisher:
     keyname: p2.qa.komreg.net_infra
     signer_ip_adress: '89.47.185.47'
   mdsl_publisher:
   sunet::frontend::register_sites:
     sites:
       'qa.md.eidas.swedenconnect.se':
         frontends:
            - 'se-fre-lb-1.sunet.se'
            - 'se-tug-lb-1.sunet.se'
         port: '443'

md1.komreg.net:
   sunetops:
   autoupdate:
   eidas_metadata_key:
   eid::dockerhost:
      version: '5:24.0.7-1~ubuntu.20.04~focal'
      docker_repo: stable
   metadatamgrs:
   konsulter:
   sunet::metadata::pyff_compose:
      pyff_imagetag: swamid-2023-10-24
      pyff_pipeline: natmd-qa-ng.fd
      pyff_update_frequency: 1800
      pyff_extra_volumes:
        - "/etc/credentials:/etc/credentials"
   sunet::metadata::mdqp:
      imagetag: v2023-09-13-01
      mdq_service: http://pyff_pyff_1:8080
   sunet::metadata::metadata_repo:
      hostname: r1.komreg.net
      repo: komreg-metadata.git
      signed_repo: true

md-eu1.qa.komreg.net:
   sunetops:
   sunet_iaas_cloud:
   autoupdate:
   metadatamgrs:
   konsulter:
   eidas_metadata_key:
   md_signer:
      name: eidas-qa
      dest_host: p2.qa.komreg.net
      version: 1.1.5-eidas
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   md_repo_client:

'^test-[0-9]+\.qa\.sveidas\.se$':
   sunetops:
   sunet_iaas_cloud:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   konsulter:
   autoupdate:
   test_my_eid:
      version: 2.0.1
      hostname: qa.test.swedenconnect.se
   sunet::frontend::register_sites:
     sites:
       'qa.test.swedenconnect.se':
         frontends:
           - 'se-fre-lb-1.sunet.se'
           - 'se-tug-lb-1.sunet.se'
         port: '443'

test-1.test.sveidas.se:
   sunetops:
   sunet_iaas_cloud:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   konsulter:
   autoupdate:
   test_my_eid:
      version: 2.0.1
      hostname: test.test.swedenconnect.se
      environment: default
   sunet::frontend::register_sites:
     sites:
       'test.test.swedenconnect.se':
         frontends:
           - 'fe-fre-1.test.komreg.net'
           - 'fe-tug-1.test.komreg.net'
         port: '443'

'^demw-[0-9]+\.qa\.sveidas\.se$':
   sunetops:
   sunet_iaas_cloud:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   konsulter:
   autoupdate:
   eidas_de_middleware:
      version: 228-sc-p11_hsm2
      hostname: qa.demw.eidas.swedenconnect.se
   saml_metadata:
      filename: /opt/eidas-middleware/configuration/serviceprovider-metadata/connector-metadata.xml
      url: https://qa.connector.eidas.swedenconnect.se/idp/metadata/sp
   webserver:
      enabled: true
   sunet::frontend::register_sites:
     sites:
       'qa.demw.eidas.swedenconnect.se':
         frontends:
           - 'se-fre-lb-1.sunet.se'
           - 'se-tug-lb-1.sunet.se'
         port: '443'

demw-1.sveidas.se:
   sunetops:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
      docker_repo: stable
   konsulter:
   autoupdate:
   eidas_de_middleware_hsm:
      version: 228-sc-p11_hsm2
      hostname: demw.eidas.swedenconnect.se
   saml_metadata:
      filename: /opt/eidas-middleware/configuration/serviceprovider-metadata/connector-metadata.xml
      url: https://connector.eidas.swedenconnect.se/idp/metadata/sp
   webserver:
      enabled: true
   sunet::frontend::register_sites:
     sites:
       'demw.eidas.swedenconnect.se':
         frontends:
           - 'fe-fre-3.komreg.net'
           - 'fe-tug-3.komreg.net'
         port: '443'

demw-2.sveidas.se:
   sunetops:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
      docker_repo: stable
   konsulter:
   autoupdate:
   eidas_de_middleware_hsm:
      version: 227-sc-p11-rce_hsm2
      hostname: demw.eidas.swedenconnect.se
   saml_metadata:
      filename: /opt/eidas-middleware/configuration/serviceprovider-metadata/connector-metadata.xml
      url: https://connector.eidas.swedenconnect.se/idp/metadata/sp
   webserver:
      enabled: false

'^refidp-[0-9]+\.qa\.sveidas\.se$':
   sunetops:
   sunet_iaas_cloud:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   konsulter:
   autoupdate:
   swedenconnect_refidp:
      version: 1.3.1
      hostname: qa.test.swedenconnect.se
      env: qa
   sunet::frontend::register_sites:
     sites:
       'qa.test.swedenconnect.se':
         frontends:
           - 'se-fre-lb-1.sunet.se'
           - 'se-tug-lb-1.sunet.se'
         port: '443'

'^refidp-[0-9]+\.test\.sveidas\.se$':
   sunetops:
   sunet_iaas_cloud:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   konsulter:
   autoupdate:
   swedenconnect_refidp:
      version: 1.3.1
      hostname: test.test.swedenconnect.se
      env: test
   sunet::frontend::register_sites:
     sites:
       'test.test.swedenconnect.se':
         frontends:
           - 'fe-tug-1.test.komreg.net'
           - 'fe-fre-1.test.komreg.net'
         port: '443'

'^eidas-test-[0-9]+\.sveidas\.se$':
   sunetops:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   konsulter:
   autoupdate:
   test_my_eid:
      version: 2.0.1
      hostname: test.swedenconnect.se
      environment: prod
   sunet::frontend::register_sites:
     sites:
       'test.swedenconnect.se':
         frontends:
           - 'fe-fre-3.komreg.net'
           - 'fe-tug-3.komreg.net'
         port: '443'

'^eidas-connector-[0-9]+\.sveidas\.se$':
   sunetops:
   eid::dockerhost:
     version: '5:23.0.6-1~ubuntu.20.04~focal'
     docker_repo: stable
   konsulter:
   autoupdate:
   eidas_connector:
     version: 1.7.0_hsm2_ubuntu
     hostname: connector.eidas.swedenconnect.se
   sunet::frontend::register_sites:
     sites:
       'connector.eidas.swedenconnect.se':
         frontends:
           - 'fe-fre-3.komreg.net'
           - 'fe-tug-3.komreg.net'
         port: '443'

'^prid-[0-9]+\.sveidas\.se$':
   sunetops:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
      docker_repo: stable
   konsulter:
   autoupdate:
   servicemonitor:
   prid:
      version: 1.0.4_ubuntu
      clients: 'prid_prod_clients'
      mdsl: https://md.eidas.swedenconnect.se/mdservicelist-aggregate.xml

'^validator-[0-9]+\.komreg\.net$':
   sunetops:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   konsulter:
   autoupdate:
   validator:
      version: 3.2.0
   sunet::frontend::register_sites:
     sites:
       'validator.swedenconnect.se':
         frontends:
            - 'fe-fre-3.komreg.net'
            - 'fe-tug-3.komreg.net'
         port: '443'

validator-test-1.komreg.net:
   sunetops:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   konsulter:
   autoupdate:
   validator:
      version: 3.2.0
   sunet::frontend::register_sites:
     sites:
       'test.validator.swedenconnect.se':
         frontends:
            - 'fe-fre-1.test.komreg.net'
            - 'fe-tug-1.test.komreg.net'
         port: '443'

'^eidas-proxy-[0-9]+\.sveidas\.se$':
   sunetops:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   konsulter:
   autoupdate:
   proxy_eidas_metadata:
   eidas_proxy:
      version: 2.0.3_hsm2
      hostname: proxy.eidas.swedenconnect.se
      spring_config_param: SPRING_CONFIG_ADDITIONAL_LOCATION
   sunet::frontend::register_sites:
     sites:
       'proxy.eidas.swedenconnect.se':
         frontends:
           - 'fe-fre-3.komreg.net'
           - 'fe-tug-3.komreg.net'
         port: '443'

log-2.sveidas.se:
   sunetops:
   autoupdate:
   konsulter:
   eidas_log:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   eid::telegraf:
   sunet::rsyslog:
      udp_port: 514
      udp_client: 94.176.224.0/24
log-1.sveidas.se:
   sunetops:
   autoupdate:
   konsulter:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   eidas_log:
   eid::telegraf:
   sunet::rsyslog:
      udp_port: 514
      udp_client: 94.176.224.0/24

'^eidas-node-[0-9]+\.qa\.sveidas\.se$':
   sunetops:
   konsulter:
   sunet_iaas_cloud:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   eidas_connector:
     version: 1.7.1_hsm2_ubuntu
     hostname: qa.connector.eidas.swedenconnect.se
   sunet::frontend::register_sites:
     sites:
       'qa.connector.eidas.swedenconnect.se':
         frontends:
           - 'se-fre-lb-1.sunet.se'
           - 'se-tug-lb-1.sunet.se'
         port: '443'

'^eidas-connector-[0-9]+\.test\.sveidas\.se$':
   sunetops:
   sunet_iaas_cloud:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   konsulter:
   autoupdate:
   eidas_connector:
     version: 1.7.1_hsm2_ubuntu
     hostname: test.connector.eidas.swedenconnect.se
     luna_debug: yes
   prid_local:
      version: 1.0.4_ubuntu
      clients: 'prid_qa_clients'
      mdsl: https://test.md.eidas.swedenconnect.se/mdservicelist-aggregate.xml
   sunet::frontend::register_sites:
     sites:
       'test.connector.eidas.swedenconnect.se':
         frontends:
           - 'fe-fre-1.test.komreg.net'
           - 'fe-tug-1.test.komreg.net'
         port: '443'

'^eidas-proxy-[0-9]+\.qa\.sveidas\.se$':
   sunetops:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   konsulter:
   eid::telegraf:
   sunet_iaas_cloud:
   autoupdate:
   proxy_eidas_metadata:
   eidas_proxy:
      version: 2.0.3_hsm2
      hostname: qa.proxy.eidas.swedenconnect.se
      spring_config_param: SPRING_CONFIG_ADDITIONAL_LOCATION
   sunet::frontend::register_sites:
     sites:
       'qa.proxy.eidas.swedenconnect.se':
         frontends:
           - 'se-fre-lb-1.sunet.se'
           - 'se-tug-lb-1.sunet.se'
         port: '443'

'^eidas-proxy-[0-9]+\.test\.sveidas\.se$':
   sunetops:
   sunet_iaas_cloud:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   eid::telegraf:
   konsulter:
   autoupdate:
   proxy_eidas_metadata:
   eidas_proxy:
      version: 2.0.3_hsm2
      hostname: test.proxy.eidas.swedenconnect.se
      spring_config_param: SPRING_CONFIG_ADDITIONAL_LOCATION
   sunet::frontend::register_sites:
     sites:
       'test.proxy.eidas.swedenconnect.se':
         frontends:
           - 'fe-fre-1.test.komreg.net'
           - 'fe-tug-1.test.komreg.net'
         port: '443'

'^prid-[0-9]+\.qa\.sveidas\.se$':
   sunetops:
   konsulter:
   sunet_iaas_cloud:
   autoupdate:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   servicemonitor:
   prid:
      version: 1.0.4_ubuntu
      clients: 'prid_qa_clients'
      mdsl: https://qa.md.eidas.swedenconnect.se/mdservicelist-aggregate.xml

'^fe-.+-\d+\.komreg\.net$':
   sunetops:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
      docker_repo: stable
   sunet::frontend::load_balancer:
   fe_servers:

'^fe-.+-\d+\.test\.komreg\.net$':
   sunetops:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   sunet::frontend::load_balancer:
   fe_servers:

log.qa.sveidas.se:
   sunetops:
   sunet_iaas_cloud:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   eid::telegraf:
      ports: ['127.0.0.1:9999:9999']
   sunet::fticks:
      args: -j
      url: http://127.0.0.1:9999/telegraf
   autoupdate:
   eidas_log:
   sunet::rsyslog:
      udp_port: 514

log-1.test.sveidas.se:
   sunetops:
   autoupdate:
   sunet_iaas_cloud:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   eidas_log:
   eid::telegraf:
   sunet::rsyslog:
      udp_port: 514

eidastest-1.qa.sveidas.se:
   sunetops:
   eid::dockerhost:
      version: '5:23.0.6-1~ubuntu.20.04~focal'
   sunet_iaas_cloud:
   autoupdate:
   eidastest:
   sunet::frontend::register_sites:
     sites:
       'swedenconnect.se':
         frontends:
           - 'se-fre-lb-1.sunet.se'
           - 'se-tug-lb-1.sunet.se'
         port: '443'
       'api.swedenconnect.se':
         frontends:
           - 'se-fre-lb-1.sunet.se'
           - 'se-tug-lb-1.sunet.se'
         port: '443'

'^relay-[0-9]+\.swedenconnect\.se$':
   sunetops:
   sunet_iaas_cloud:
   autoupdate:
   eid::relay:
   sunet::server:
      sshd_config: true
      ssh_allow_from_anywhere: false