Merge branch 'master' of gitops.sunet.se:eid-ops

eumd-test-1.komreg.net/overlay/etc/hiera/data/local.eyaml

@@ -0,0 +1,29 @@
+
+
+pkcs11pin: ENC[PKCS7,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]
+publisher_ssh_privkey: >
+   ENC[PKCS7,MIIEXgYJKoZIhvcNAQcDoIIETzCCBEsCAQAxggKCMIICfgIBADBmME4xCzAJ
+   BgNVBAYTAlNFMQ4wDAYDVQQKDAVTVU5FVDEOMAwGA1UECwwFRVlBTUwxHzAd
+   BgNVBAMMFmV1bWQtdGVzdC0xLmtvbXJlZy5uZXQCFH9MhVHxArUyasvEzMPz
+   j7yYfYpPMA0GCSqGSIb3DQEBAQUABIICAEIWXbx60EkLJXVwPIHhnq4/em1g
+   enpEQ73qkEliAZkPfIJqiwy4SeZZLwYhnNwhniws/MWooQJqZ800kNqX62cC
+   pNf4pwxB35lMKDyUZAMcM8nvW9e1DhHRigzO8dZd75Yct0C7NwuvzVtdNp0B
+   iHKI5cEBaXNxAMBN4G44Ju1L8VBACzogSuykBnRJCT1m/UFaFEo3brG/Pwcu
+   flg/MBGenN2Rrp/dCBvhNStacK5QM4aNGw3YfbP40Z0mmkmWuaJlaEqLI719
+   +YIJRjtqPZHOf15nzPEAPquuwMtFJllpupPl8F07MM0JC+5k7L/ZcrZi59xN
+   kKnGgjfn7/8B45L/e7nUHj8QOYPV2tTIxYIZClTztfqu/ntlzsWrqF9cU3PK
+   uF9Ih2cN7vAzbZiNc6Ben+fJkaEJ7pyLWNy7LYtxFnit1UAmDpKEvHIQweBT
+   IovVXdF0lYhCrpZuHU/QxM4TFlRywEEebjJc5497SjUTrkI4uKt2YRBXfp2U
+   RtJ3Pi4deLeeIhDHgbOuRUHDPv/1iMSMPQUVfrzbcBvHRyFam71Z2o/GlZES
+   t03Bt/HDwLrcvrFkKhFcKlze4E2lus59BSUXrjLGWw4GPxLrg5IG+WnU/0Yy
+   WEdrTAiAXIhuGXn20nkXbWD6wA9MC29EWsPBvNWN/c8EvptEW3WP0TswMIIB
+   vgYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBKgQQ8ylPa/5ovu23qmpFavIp5ICC
+   AZB5TpNjsrapsJdBCw1EZGheI0hlQFq2SRgfHz7KG5pchsZ/LzhRCfoXp4LV
+   dGU9Dk87vhF0YgRs+5unFJdPhEjUkfjqpR8c7wGzEtvuXccEJr2Sz2q3WEDB
+   696igoEtotyVUsYHPsWHpz+WrHe60U7oTISXaYVxjhF2LwEa20ml9gX1dCfM
+   w3EJZznqxGswWDbBXD/iZdfHQe3o2VMVN/Y+6agNq1eJIwafkvd8dl2EIXd7
+   mEQOs3MySCInPBPkuUY30iuThYW+V/y/t/Pi8x9kklzz0XyWFFqNyVsluh0v
+   +/b+FqVkL4IqIh7sfZmWClCCwBXc+HI0qmTuaWKgVi6GIsT+HU1EjJPDjcxV
+   HajtFS0SXZg+jBT3YJXdsjioww58xYDUPk4SyJcKwD3YwLyW7+q6bnQRlSn5
+   8Z6aVrleqGWA9ieNNLCEv/jBzOFOKGQlWzqHH6AOwAEsKXdMx8r1yTajY5Cq
+   KZOUXQjcpmBZ0EIG0f1/3wf6kQqivWfFkoFX5FhYIyHyiTzjjPKzHNPy]

eumd-test-2.komreg.net/README

@@ -0,0 +1,3 @@
+
+The system documentation is in the docs directory of the multiverse repository.
+

eupub-test-1.komreg.net/README

@@ -0,0 +1,3 @@
+
+The system documentation is in the docs directory of the multiverse repository.
+

eupub-test-1.komreg.net/overlay/etc/hiera/data/local.yaml

@@ -0,0 +1,2 @@
+publisher_ssh_key: AAAAC3NzaC1lZDI1NTE5AAAAINY+lngI6IMvfSMy3tptmQDlmy+VlduWiA8eRzcZYLlm
+publisher_ssh_key_type: ssh-ed25519

eupub-test-2.komreg.net/README

@@ -0,0 +1,3 @@
+
+The system documentation is in the docs directory of the multiverse repository.
+

eupub-test-2.komreg.net/overlay/etc/hiera/data/local.yaml

@@ -0,0 +1,2 @@
+publisher_ssh_key: AAAAC3NzaC1lZDI1NTE5AAAAINY+lngI6IMvfSMy3tptmQDlmy+VlduWiA8eRzcZYLlm
+publisher_ssh_key_type: ssh-ed25519

global/overlay/etc/puppet/cosmos-db.yaml

@@ -460,6 +460,15 @@ classes:
     sunet::rsyslog: null
     sunet::server: *id002
     sunetops: null
+  eumd-test-2.komreg.net:
+    common: null
+    entropyclient: null
+    infra_ca_rp: null
+    mailclient: *id001
+    nrpe: null
+    sunet::rsyslog: null
+    sunet::server: *id002
+    sunetops: null
   eupub-1.komreg.net:
     autoupdate: null
     common: null
@@ -494,6 +503,30 @@ classes:
     sunet::rsyslog: null
     sunet::server: *id002
     sunetops: null
+  eupub-test-1.komreg.net:
+    autoupdate: null
+    common: null
+    entropyclient: null
+    infra_ca_rp: null
+    mailclient: *id001
+    md_publisher: {keyname: eupub-test.komreg.net_infra}
+    mdsl_publisher: null
+    nrpe: null
+    sunet::rsyslog: null
+    sunet::server: *id002
+    sunetops: null
+  eupub-test-2.komreg.net:
+    autoupdate: null
+    common: null
+    entropyclient: null
+    infra_ca_rp: null
+    mailclient: *id001
+    md_publisher: {keyname: eupub-test.komreg.net_infra}
+    mdsl_publisher: null
+    nrpe: null
+    sunet::rsyslog: null
+    sunet::server: *id002
+    sunetops: null
   fe-fre-1.test.komreg.net:
     common: null
     eid::dockerhost: &id020 {version: '5:20.10.12~3-0~ubuntu-focal'}
@@ -1201,6 +1234,23 @@ classes:
     sunet::rsyslog: null
     sunet::server: *id002
     sunetops: null
+  natpub-test-2-komreg.net:
+    autoupdate: null
+    common: null
+    entropyclient: null
+    infra_ca_rp: null
+    mailclient: *id001
+    md_publisher: {keyname: natpub.test.komreg.net_infra}
+    mdsl_publisher: null
+    nrpe: null
+    sunet::frontend::register_sites:
+      sites:
+        test.md.eidas.swedenconnect.se:
+          frontends: [fe-fre-1.test.komreg.net, fe-tug-1.test.komreg.net]
+          port: '443'
+    sunet::rsyslog: null
+    sunet::server: *id002
+    sunetops: null
   nic.komreg.net:
     autoupdate: null
     common: null
@@ -1461,18 +1511,19 @@ members:
     eidas-redis-3.sveidas.se, eidas-redis-4.sveidas.se, eidas-redis-fe-1.sveidas.se,
     eidas-redis-fe-2.sveidas.se, eidas-test-1.sveidas.se, eidas-test-2.sveidas.se,
     eidastest-1.qa.sveidas.se, eumd-1.komreg.net, eumd-2.komreg.net, eumd-test-1.komreg.net,
-    eupub-1.komreg.net, eupub-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net,
+    eumd-test-2.komreg.net, eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net,
-    fe-tug-1.test.komreg.net, fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net,
+    eupub-test-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net, fe-tug-1.test.komreg.net,
-    jump-tug-3.komreg.net, kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
+    fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net, jump-tug-3.komreg.net,
+    kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
     kvmeidas-tug-3.komreg.net, kvmfe-fre-3.komreg.net, kvmfe-tug-3.komreg.net, kvminfra-fre-3.komreg.net,
     kvminfra-tug-3.komreg.net, kvmmeta-fre-3.komreg.net, kvmmeta-tug-3.komreg.net,
     log-1.sveidas.se, log-1.test.sveidas.se, log-2.sveidas.se, log.qa.sveidas.se,
     md-eu1.qa.komreg.net, md1.komreg.net, monitor-fre-3.komreg.net, monitor-tug-3.komreg.net,
     natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net,
-    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, nic.komreg.net,
+    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, natpub-test-2-komreg.net,
-    p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se, prid-2.sveidas.se,
+    nic.komreg.net, p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se,
-    r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se, test-1.test.sveidas.se,
+    prid-2.sveidas.se, r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se,
-    validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
+    test-1.test.sveidas.se, validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
     validator-2.komreg.net, web-1.qa.sveidas.se]
   autoupdate: [demw-1.qa.sveidas.se, demw-1.sveidas.se, demw-2.sveidas.se, eidas-connector-1.sveidas.se,
     eidas-connector-1.test.sveidas.se, eidas-connector-2.sveidas.se, eidas-connector-2.test.sveidas.se,
@@ -1483,14 +1534,15 @@ members:
     eidas-redis-3.sveidas.se, eidas-redis-4.sveidas.se, eidas-redis-fe-1.sveidas.se,
     eidas-redis-fe-2.sveidas.se, eidas-test-1.sveidas.se, eidas-test-2.sveidas.se,
     eidastest-1.qa.sveidas.se, eumd-1.komreg.net, eumd-2.komreg.net, eumd-test-1.komreg.net,
-    eupub-1.komreg.net, eupub-2.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net,
+    eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net, eupub-test-2.komreg.net,
-    jump-tug-3.komreg.net, log-1.sveidas.se, log-1.test.sveidas.se, log-2.sveidas.se,
+    jmp.komreg.net, jump-fre-3.komreg.net, jump-tug-3.komreg.net, log-1.sveidas.se,
-    log.qa.sveidas.se, md-eu1.qa.komreg.net, md1.komreg.net, monitor-fre-3.komreg.net,
+    log-1.test.sveidas.se, log-2.sveidas.se, log.qa.sveidas.se, md-eu1.qa.komreg.net,
-    monitor-tug-3.komreg.net, natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net,
+    md1.komreg.net, monitor-fre-3.komreg.net, monitor-tug-3.komreg.net, natmd-1.komreg.net,
-    natmd-test-2.komreg.net, natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net,
+    natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net, natpub-1.komreg.net,
-    nic.komreg.net, p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se,
+    natpub-2.komreg.net, natpub-test-1-komreg.net, natpub-test-2-komreg.net, nic.komreg.net,
-    prid-2.sveidas.se, r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se,
+    p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se, prid-2.sveidas.se,
-    test-1.test.sveidas.se, validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
+    r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se, test-1.test.sveidas.se,
+    validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
     validator-2.komreg.net, web-1.qa.sveidas.se]
   common: [demw-1.qa.sveidas.se, demw-1.sveidas.se, demw-2.sveidas.se, eidas-connector-1.sveidas.se,
     eidas-connector-1.test.sveidas.se, eidas-connector-2.sveidas.se, eidas-connector-2.test.sveidas.se,
@@ -1501,18 +1553,19 @@ members:
     eidas-redis-3.sveidas.se, eidas-redis-4.sveidas.se, eidas-redis-fe-1.sveidas.se,
     eidas-redis-fe-2.sveidas.se, eidas-test-1.sveidas.se, eidas-test-2.sveidas.se,
     eidastest-1.qa.sveidas.se, eumd-1.komreg.net, eumd-2.komreg.net, eumd-test-1.komreg.net,
-    eupub-1.komreg.net, eupub-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net,
+    eumd-test-2.komreg.net, eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net,
-    fe-tug-1.test.komreg.net, fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net,
+    eupub-test-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net, fe-tug-1.test.komreg.net,
-    jump-tug-3.komreg.net, kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
+    fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net, jump-tug-3.komreg.net,
+    kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
     kvmeidas-tug-3.komreg.net, kvmfe-fre-3.komreg.net, kvmfe-tug-3.komreg.net, kvminfra-fre-3.komreg.net,
     kvminfra-tug-3.komreg.net, kvmmeta-fre-3.komreg.net, kvmmeta-tug-3.komreg.net,
     log-1.sveidas.se, log-1.test.sveidas.se, log-2.sveidas.se, log.qa.sveidas.se,
     md-eu1.qa.komreg.net, md1.komreg.net, monitor-fre-3.komreg.net, monitor-tug-3.komreg.net,
     natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net,
-    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, nic.komreg.net,
+    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, natpub-test-2-komreg.net,
-    p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se, prid-2.sveidas.se,
+    nic.komreg.net, p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se,
-    r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se, test-1.test.sveidas.se,
+    prid-2.sveidas.se, r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se,
-    validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
+    test-1.test.sveidas.se, validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
     validator-2.komreg.net, web-1.qa.sveidas.se]
   eid::dockerhost: [demw-1.qa.sveidas.se, demw-1.sveidas.se, demw-2.sveidas.se, eidas-connector-1.sveidas.se,
     eidas-connector-1.test.sveidas.se, eidas-connector-2.sveidas.se, eidas-connector-2.test.sveidas.se,
@@ -1555,18 +1608,19 @@ members:
     eidas-redis-3.sveidas.se, eidas-redis-4.sveidas.se, eidas-redis-fe-1.sveidas.se,
     eidas-redis-fe-2.sveidas.se, eidas-test-1.sveidas.se, eidas-test-2.sveidas.se,
     eidastest-1.qa.sveidas.se, eumd-1.komreg.net, eumd-2.komreg.net, eumd-test-1.komreg.net,
-    eupub-1.komreg.net, eupub-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net,
+    eumd-test-2.komreg.net, eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net,
-    fe-tug-1.test.komreg.net, fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net,
+    eupub-test-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net, fe-tug-1.test.komreg.net,
-    jump-tug-3.komreg.net, kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
+    fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net, jump-tug-3.komreg.net,
+    kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
     kvmeidas-tug-3.komreg.net, kvmfe-fre-3.komreg.net, kvmfe-tug-3.komreg.net, kvminfra-fre-3.komreg.net,
     kvminfra-tug-3.komreg.net, kvmmeta-fre-3.komreg.net, kvmmeta-tug-3.komreg.net,
     log-1.sveidas.se, log-1.test.sveidas.se, log-2.sveidas.se, log.qa.sveidas.se,
     md-eu1.qa.komreg.net, md1.komreg.net, monitor-fre-3.komreg.net, monitor-tug-3.komreg.net,
     natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net,
-    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, nic.komreg.net,
+    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, natpub-test-2-komreg.net,
-    p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se, prid-2.sveidas.se,
+    nic.komreg.net, p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se,
-    r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se, test-1.test.sveidas.se,
+    prid-2.sveidas.se, r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se,
-    validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
+    test-1.test.sveidas.se, validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
     validator-2.komreg.net, web-1.qa.sveidas.se]
   fe_servers: [fe-fre-1.test.komreg.net, fe-fre-3.komreg.net, fe-tug-1.test.komreg.net,
     fe-tug-3.komreg.net]
@@ -1580,18 +1634,19 @@ members:
     eidas-redis-3.sveidas.se, eidas-redis-4.sveidas.se, eidas-redis-fe-1.sveidas.se,
     eidas-redis-fe-2.sveidas.se, eidas-test-1.sveidas.se, eidas-test-2.sveidas.se,
     eidastest-1.qa.sveidas.se, eumd-1.komreg.net, eumd-2.komreg.net, eumd-test-1.komreg.net,
-    eupub-1.komreg.net, eupub-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net,
+    eumd-test-2.komreg.net, eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net,
-    fe-tug-1.test.komreg.net, fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net,
+    eupub-test-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net, fe-tug-1.test.komreg.net,
-    jump-tug-3.komreg.net, kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
+    fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net, jump-tug-3.komreg.net,
+    kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
     kvmeidas-tug-3.komreg.net, kvmfe-fre-3.komreg.net, kvmfe-tug-3.komreg.net, kvminfra-fre-3.komreg.net,
     kvminfra-tug-3.komreg.net, kvmmeta-fre-3.komreg.net, kvmmeta-tug-3.komreg.net,
     log-1.sveidas.se, log-1.test.sveidas.se, log-2.sveidas.se, log.qa.sveidas.se,
     md-eu1.qa.komreg.net, md1.komreg.net, monitor-fre-3.komreg.net, monitor-tug-3.komreg.net,
     natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net,
-    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, nic.komreg.net,
+    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, natpub-test-2-komreg.net,
-    p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se, prid-2.sveidas.se,
+    nic.komreg.net, p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se,
-    r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se, test-1.test.sveidas.se,
+    prid-2.sveidas.se, r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se,
-    validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
+    test-1.test.sveidas.se, validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
     validator-2.komreg.net, web-1.qa.sveidas.se]
   jumphosts: [jmp.komreg.net, jump-fre-3.komreg.net, jump-tug-3.komreg.net]
   konsulter: [demw-1.qa.sveidas.se, demw-1.sveidas.se, demw-2.sveidas.se, eidas-connector-1.sveidas.se,
@@ -1615,28 +1670,30 @@ members:
     eidas-redis-3.sveidas.se, eidas-redis-4.sveidas.se, eidas-redis-fe-1.sveidas.se,
     eidas-redis-fe-2.sveidas.se, eidas-test-1.sveidas.se, eidas-test-2.sveidas.se,
     eidastest-1.qa.sveidas.se, eumd-1.komreg.net, eumd-2.komreg.net, eumd-test-1.komreg.net,
-    eupub-1.komreg.net, eupub-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net,
+    eumd-test-2.komreg.net, eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net,
-    fe-tug-1.test.komreg.net, fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net,
+    eupub-test-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net, fe-tug-1.test.komreg.net,
-    jump-tug-3.komreg.net, kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
+    fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net, jump-tug-3.komreg.net,
+    kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
     kvmeidas-tug-3.komreg.net, kvmfe-fre-3.komreg.net, kvmfe-tug-3.komreg.net, kvminfra-fre-3.komreg.net,
     kvminfra-tug-3.komreg.net, kvmmeta-fre-3.komreg.net, kvmmeta-tug-3.komreg.net,
     log-1.sveidas.se, log-1.test.sveidas.se, log-2.sveidas.se, log.qa.sveidas.se,
     md-eu1.qa.komreg.net, md1.komreg.net, monitor-fre-3.komreg.net, monitor-tug-3.komreg.net,
     natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net,
-    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, nic.komreg.net,
+    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, natpub-test-2-komreg.net,
-    p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se, prid-2.sveidas.se,
+    nic.komreg.net, p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se,
-    r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se, test-1.test.sveidas.se,
+    prid-2.sveidas.se, r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se,
-    validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
+    test-1.test.sveidas.se, validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
     validator-2.komreg.net, web-1.qa.sveidas.se]
-  md_publisher: [eupub-1.komreg.net, eupub-2.komreg.net, natpub-1.komreg.net, natpub-2.komreg.net,
+  md_publisher: [eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net,
-    natpub-test-1-komreg.net, p1.komreg.net, p2.qa.komreg.net]
+    eupub-test-2.komreg.net, natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net,
+    natpub-test-2-komreg.net, p1.komreg.net, p2.qa.komreg.net]
   md_repo_client: [eumd-1.komreg.net, eumd-2.komreg.net, md-eu1.qa.komreg.net, md1.komreg.net,
     natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net]
   md_repo_server: [r1.komreg.net]
   md_signer: [eumd-1.komreg.net, eumd-2.komreg.net, md-eu1.qa.komreg.net, md1.komreg.net,
     natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net]
-  mdsl_publisher: [eupub-1.komreg.net, eupub-2.komreg.net, natpub-test-1-komreg.net,
+  mdsl_publisher: [eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net,
-    p2.qa.komreg.net]
+    eupub-test-2.komreg.net, natpub-test-1-komreg.net, natpub-test-2-komreg.net, p2.qa.komreg.net]
   metadatamgrs: [eumd-1.komreg.net, eumd-2.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net,
     jump-tug-3.komreg.net, md-eu1.qa.komreg.net, md1.komreg.net, natmd-1.komreg.net,
     natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net]
@@ -1650,18 +1707,19 @@ members:
     eidas-redis-3.sveidas.se, eidas-redis-4.sveidas.se, eidas-redis-fe-1.sveidas.se,
     eidas-redis-fe-2.sveidas.se, eidas-test-1.sveidas.se, eidas-test-2.sveidas.se,
     eidastest-1.qa.sveidas.se, eumd-1.komreg.net, eumd-2.komreg.net, eumd-test-1.komreg.net,
-    eupub-1.komreg.net, eupub-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net,
+    eumd-test-2.komreg.net, eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net,
-    fe-tug-1.test.komreg.net, fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net,
+    eupub-test-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net, fe-tug-1.test.komreg.net,
-    jump-tug-3.komreg.net, kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
+    fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net, jump-tug-3.komreg.net,
+    kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
     kvmeidas-tug-3.komreg.net, kvmfe-fre-3.komreg.net, kvmfe-tug-3.komreg.net, kvminfra-fre-3.komreg.net,
     kvminfra-tug-3.komreg.net, kvmmeta-fre-3.komreg.net, kvmmeta-tug-3.komreg.net,
     log-1.sveidas.se, log-1.test.sveidas.se, log-2.sveidas.se, log.qa.sveidas.se,
     md-eu1.qa.komreg.net, md1.komreg.net, monitor-fre-3.komreg.net, monitor-tug-3.komreg.net,
     natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net,
-    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, nic.komreg.net,
+    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, natpub-test-2-komreg.net,
-    p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se, prid-2.sveidas.se,
+    nic.komreg.net, p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se,
-    r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se, test-1.test.sveidas.se,
+    prid-2.sveidas.se, r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se,
-    validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
+    test-1.test.sveidas.se, validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
     validator-2.komreg.net, web-1.qa.sveidas.se]
   openstack_dockerhost: [web-1.qa.sveidas.se]
   pages: [web-1.qa.sveidas.se]
@@ -1686,9 +1744,9 @@ members:
     eidas-proxy-2.sveidas.se, eidas-proxy-3.sveidas.se, eidas-proxy-4.sveidas.se,
     eidas-test-1.sveidas.se, eidas-test-2.sveidas.se, eidastest-1.qa.sveidas.se, eupub-1.komreg.net,
     eupub-2.komreg.net, natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net,
-    p1.komreg.net, p2.qa.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se,
+    natpub-test-2-komreg.net, p1.komreg.net, p2.qa.komreg.net, refidp-1.qa.sveidas.se,
-    test-1.test.sveidas.se, validator-1.komreg.net, validator-1.qa.komreg.net, validator-2.komreg.net,
+    test-1.qa.sveidas.se, test-1.test.sveidas.se, validator-1.komreg.net, validator-1.qa.komreg.net,
-    web-1.qa.sveidas.se]
+    validator-2.komreg.net, web-1.qa.sveidas.se]
   sunet::fticks: [log.qa.sveidas.se]
   sunet::nagiosapi: [nic.komreg.net]
   sunet::rsyslog: [demw-1.qa.sveidas.se, demw-1.sveidas.se, demw-2.sveidas.se, eidas-connector-1.sveidas.se,
@@ -1700,17 +1758,18 @@ members:
     eidas-redis-3.sveidas.se, eidas-redis-4.sveidas.se, eidas-redis-fe-1.sveidas.se,
     eidas-redis-fe-2.sveidas.se, eidas-test-1.sveidas.se, eidas-test-2.sveidas.se,
     eidastest-1.qa.sveidas.se, eumd-1.komreg.net, eumd-2.komreg.net, eumd-test-1.komreg.net,
-    eupub-1.komreg.net, eupub-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net,
+    eumd-test-2.komreg.net, eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net,
-    fe-tug-1.test.komreg.net, fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net,
+    eupub-test-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net, fe-tug-1.test.komreg.net,
-    jump-tug-3.komreg.net, kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
+    fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net, jump-tug-3.komreg.net,
+    kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
     kvmeidas-tug-3.komreg.net, kvmfe-fre-3.komreg.net, kvmfe-tug-3.komreg.net, kvminfra-fre-3.komreg.net,
     kvminfra-tug-3.komreg.net, kvmmeta-fre-3.komreg.net, kvmmeta-tug-3.komreg.net,
     log-1.sveidas.se, log-1.sveidas.se, log-1.test.sveidas.se, log-1.test.sveidas.se,
     log-2.sveidas.se, log-2.sveidas.se, log.qa.sveidas.se, log.qa.sveidas.se, md-eu1.qa.komreg.net,
     md1.komreg.net, monitor-fre-3.komreg.net, monitor-tug-3.komreg.net, natmd-1.komreg.net,
     natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net, natpub-1.komreg.net,
-    natpub-2.komreg.net, natpub-test-1-komreg.net, nic.komreg.net, p1.komreg.net,
+    natpub-2.komreg.net, natpub-test-1-komreg.net, natpub-test-2-komreg.net, nic.komreg.net,
-    p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se, prid-2.sveidas.se,
+    p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se, prid-2.sveidas.se,
     r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se, test-1.test.sveidas.se,
     validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
     validator-2.komreg.net, web-1.qa.sveidas.se]
@@ -1723,19 +1782,19 @@ members:
     eidas-redis-3.sveidas.se, eidas-redis-4.sveidas.se, eidas-redis-fe-1.sveidas.se,
     eidas-redis-fe-2.sveidas.se, eidas-test-1.sveidas.se, eidas-test-2.sveidas.se,
     eidastest-1.qa.sveidas.se, eumd-1.komreg.net, eumd-2.komreg.net, eumd-test-1.komreg.net,
-    eupub-1.komreg.net, eupub-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net,
+    eumd-test-2.komreg.net, eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net,
-    fe-tug-1.test.komreg.net, fe-tug-3.komreg.net, jmp.komreg.net, jmp.komreg.net,
+    eupub-test-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net, fe-tug-1.test.komreg.net,
-    jump-fre-3.komreg.net, jump-fre-3.komreg.net, jump-tug-3.komreg.net, jump-tug-3.komreg.net,
+    fe-tug-3.komreg.net, jmp.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net, jump-fre-3.komreg.net,
-    kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
+    jump-tug-3.komreg.net, jump-tug-3.komreg.net, kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net,
-    kvmeidas-tug-3.komreg.net, kvmfe-fre-3.komreg.net, kvmfe-tug-3.komreg.net, kvminfra-fre-3.komreg.net,
+    kvmeidas-fre-3.komreg.net, kvmeidas-tug-3.komreg.net, kvmfe-fre-3.komreg.net,
-    kvminfra-tug-3.komreg.net, kvmmeta-fre-3.komreg.net, kvmmeta-tug-3.komreg.net,
+    kvmfe-tug-3.komreg.net, kvminfra-fre-3.komreg.net, kvminfra-tug-3.komreg.net,
-    log-1.sveidas.se, log-1.test.sveidas.se, log-2.sveidas.se, log.qa.sveidas.se,
+    kvmmeta-fre-3.komreg.net, kvmmeta-tug-3.komreg.net, log-1.sveidas.se, log-1.test.sveidas.se,
-    md-eu1.qa.komreg.net, md1.komreg.net, monitor-fre-3.komreg.net, monitor-tug-3.komreg.net,
+    log-2.sveidas.se, log.qa.sveidas.se, md-eu1.qa.komreg.net, md1.komreg.net, monitor-fre-3.komreg.net,
-    natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net,
+    monitor-tug-3.komreg.net, natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net,
-    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, nic.komreg.net,
+    natmd-test-2.komreg.net, natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net,
-    p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se, prid-2.sveidas.se,
+    natpub-test-2-komreg.net, nic.komreg.net, p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se,
-    r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se, test-1.test.sveidas.se,
+    prid-1.sveidas.se, prid-2.sveidas.se, r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se,
-    validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
+    test-1.test.sveidas.se, validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
     validator-2.komreg.net, web-1.qa.sveidas.se]
   sunet_iaas_cloud: [demw-1.qa.sveidas.se, eidas-connector-1.test.sveidas.se, eidas-connector-2.test.sveidas.se,
     eidas-node-1.qa.sveidas.se, eidas-proxy-1.qa.sveidas.se, eidas-proxy-1.test.sveidas.se,
@@ -1752,18 +1811,19 @@ members:
     eidas-redis-3.sveidas.se, eidas-redis-4.sveidas.se, eidas-redis-fe-1.sveidas.se,
     eidas-redis-fe-2.sveidas.se, eidas-test-1.sveidas.se, eidas-test-2.sveidas.se,
     eidastest-1.qa.sveidas.se, eumd-1.komreg.net, eumd-2.komreg.net, eumd-test-1.komreg.net,
-    eupub-1.komreg.net, eupub-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net,
+    eumd-test-2.komreg.net, eupub-1.komreg.net, eupub-2.komreg.net, eupub-test-1.komreg.net,
-    fe-tug-1.test.komreg.net, fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net,
+    eupub-test-2.komreg.net, fe-fre-1.test.komreg.net, fe-fre-3.komreg.net, fe-tug-1.test.komreg.net,
-    jump-tug-3.komreg.net, kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
+    fe-tug-3.komreg.net, jmp.komreg.net, jump-fre-3.komreg.net, jump-tug-3.komreg.net,
+    kvmdemw-fre-3a.komreg.net, kvmdemw-fre-3b.komreg.net, kvmeidas-fre-3.komreg.net,
     kvmeidas-tug-3.komreg.net, kvmfe-fre-3.komreg.net, kvmfe-tug-3.komreg.net, kvminfra-fre-3.komreg.net,
     kvminfra-tug-3.komreg.net, kvmmeta-fre-3.komreg.net, kvmmeta-tug-3.komreg.net,
     log-1.sveidas.se, log-1.test.sveidas.se, log-2.sveidas.se, log.qa.sveidas.se,
     md-eu1.qa.komreg.net, md1.komreg.net, monitor-fre-3.komreg.net, monitor-tug-3.komreg.net,
     natmd-1.komreg.net, natmd-2.komreg.net, natmd-test-1.komreg.net, natmd-test-2.komreg.net,
-    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, nic.komreg.net,
+    natpub-1.komreg.net, natpub-2.komreg.net, natpub-test-1-komreg.net, natpub-test-2-komreg.net,
-    p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se, prid-2.sveidas.se,
+    nic.komreg.net, p1.komreg.net, p2.qa.komreg.net, prid-1.qa.sveidas.se, prid-1.sveidas.se,
-    r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se, test-1.test.sveidas.se,
+    prid-2.sveidas.se, r1.komreg.net, refidp-1.qa.sveidas.se, test-1.qa.sveidas.se,
-    validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
+    test-1.test.sveidas.se, validator-1-test.komreg.net, validator-1.komreg.net, validator-1.qa.komreg.net,
     validator-2.komreg.net, web-1.qa.sveidas.se]
   swedenconnect_refidp: [refidp-1.qa.sveidas.se]
   test_my_eid: [eidas-test-1.sveidas.se, eidas-test-2.sveidas.se, test-1.qa.sveidas.se,

global/overlay/etc/puppet/cosmos-rules.yaml

@@ -564,6 +564,19 @@ natpub-test-1-komreg.net:
             - 'fe-tug-1.test.komreg.net'
          port: '443'
 
+natpub-test-2-komreg.net:
+   autoupdate:
+   md_publisher:
+     keyname: natpub.test.komreg.net_infra
+   mdsl_publisher:
+   sunet::frontend::register_sites:
+     sites:
+       'test.md.eidas.swedenconnect.se':
+         frontends:
+            - 'fe-fre-1.test.komreg.net'
+            - 'fe-tug-1.test.komreg.net'
+         port: '443'
+
 validator-1-test.komreg.net:
    eid::dockerhost:
       version: '5:20.10.6~3-0~ubuntu-focal'
@@ -583,6 +596,18 @@ eupub-1.komreg.net:
             - 'fe-tug-3.komreg.net'
          port: '443'
 
+eupub-test-1.komreg.net:
+   autoupdate:
+   md_publisher:
+     keyname: eupub-test.komreg.net_infra
+   mdsl_publisher:
+
+eupub-test-2.komreg.net:
+   autoupdate:
+   md_publisher:
+     keyname: eupub-test.komreg.net_infra
+   mdsl_publisher:
+
 natmd-2.komreg.net:
    autoupdate:
    eid::dockerhost:

natpub-test-2-komreg.net/README

@@ -0,0 +1,3 @@
+
+The system documentation is in the docs directory of the multiverse repository.
+

natpub-test-2-komreg.net/overlay/etc/hiera/data/local.yaml

@@ -0,0 +1,2 @@
+publisher_ssh_key: AAAAC3NzaC1lZDI1NTE5AAAAINY+lngI6IMvfSMy3tptmQDlmy+VlduWiA8eRzcZYLlm
+publisher_ssh_key_type: ssh-ed25519