Implemented the new changes to IAAS jump host for eIDAS

2019-07-05 11:02:58 +02:00 · 2019-07-05 11:02:58 +02:00 · f321905710
commit f321905710
parent 23361b61ca
2 changed files with 3 additions and 0 deletions
--- a/global/overlay/etc/hiera/data/common.yaml
+++ b/global/overlay/etc/hiera/data/common.yaml
@ -32,6 +32,7 @@ mgmt_addresses:
    - 2001:6b0:64:5::114 # jump-tug-3.komreg.net
    - 94.176.224.242     # jump-fre-3.komreg.net
    - 2001:6b0:64:5::242 # jump-fre-3.komreg.net
+    - 89.45.233.82       # jmp.komreg.net

 ssh_authorized_keys:

--- a/global/overlay/etc/puppet/cosmos-rules.yaml
+++ b/global/overlay/etc/puppet/cosmos-rules.yaml
@ -17,6 +17,8 @@ jmp.komreg.net:
   autoupdate:
   sunet::auditd:
   jumphosts:
+   sunet::server:
+      ssh_allow_from_anywhere: true

 '^jump-.+\.komreg\.net$':
   konsulter: