Commit graph

1931 commits

Author SHA1 Message Date
8c03091f45
Added swamid's SSH access to test publisher servers 2023-09-01 10:14:53 +02:00
126498bb7d
update db 2023-08-28 11:42:56 +02:00
9ea7b2b441
changed dockerhost manifest so that storage_driver is a variable 2023-08-28 11:37:29 +02:00
366d5d1d8b
update db 2023-08-25 16:54:06 +02:00
f2c1a53dfa
install docker-ce 2023-08-25 16:53:58 +02:00
3311f0a088
upgrade eidas connector in qa to version 1.7.1 2023-08-16 09:39:35 +02:00
0127cf6468
update db 2023-08-16 09:38:34 +02:00
25ca99c0bb
upgrade eidas connector in test to version 1.7.1 2023-08-15 16:08:21 +02:00
892781a729
update db 2023-08-15 16:07:06 +02:00
63bc7818ea
removed nagios_monitor from cosmos-site.pp and nagiosapifrom nic.komreg.net 2023-07-25 12:02:32 +02:00
fb7a69291f
update db 2023-07-25 12:01:45 +02:00
Micke Nordin
3aac1f97d8
Add additional packages for use with debian 12
This patch will install three packages that is needed for normal operations of puppet using puppet-sunet with multiverse on Debian 12:

cron puppet-module-puppetlabs-cron-core puppet-module-camptocamp-augeas
2023-07-10 16:32:20 +02:00
e360474afc
add jmp.komreg.net ipv6 to mgmt address list 2023-07-07 13:36:54 +02:00
97cec6934f
nagios: only monitor single ip of hosts 2023-07-07 12:54:22 +02:00
2c17067253
added nic.komreg.net ipv6 to nrpe 2023-07-07 12:53:21 +02:00
cd5063d70b
relay fixes 2023-07-07 10:42:18 +02:00
a3ad82444e
update db 2023-07-07 10:41:58 +02:00
7fb0deb905
relay config 2023-07-07 10:31:15 +02:00
5a9ff8039f
update db 2023-07-07 10:30:23 +02:00
261c7831fd
dont enable ufw on newer hosts 2023-07-05 13:27:43 +02:00
ebb2865ff4
update pre-task for puppet 2023-07-05 12:54:50 +02:00
3e218ac8b7
added profile for root 2023-07-05 11:47:17 +02:00
39d6f5dc21
updated scriherder and python3 fixes 2023-07-05 11:43:59 +02:00
5856321204
changed docker_repo to stable 2023-07-05 09:51:41 +02:00
31ee5351ee
fixed warning age, wrong value in previous commit 2023-06-29 14:54:35 +02:00
c06f6d18ce
Merge branch 'master' of gitops.sunet.se:eid-ops 2023-06-29 14:51:28 +02:00
39b405f018
change warning for nagios check for checking aggregated metadata 2023-06-29 14:51:19 +02:00
c01c45bcc1
update db 2023-06-29 13:02:42 +02:00
9f5ed4785f
changed warning age 2023-06-28 15:32:57 +02:00
a04fc831bd
update db 2023-06-26 12:27:42 +02:00
fc473892c9
3 changes for demw-2.sveidas.se
1. updated Image URL for KVM
2. upgraded docker-ce
3. removed registration to FE servers
2023-06-26 12:26:11 +02:00
245dda0c9a
update db 2023-06-26 11:29:02 +02:00
8bb99c4108
removed web-1.qa.sveidas.se and validator-1.qa.komreg.net from cosmos-rules 2023-06-26 11:25:40 +02:00
323000221d
update db 2023-06-26 11:25:12 +02:00
43fad88017
update db 2023-06-26 11:08:00 +02:00
95ca104d31
upgraded docker-ce version & updated image URL 2023-06-26 11:07:43 +02:00
ea33672c82
update db 2023-06-21 11:53:48 +02:00
a303e48eee
updated image URL 2023-06-21 11:53:44 +02:00
1e43cc44f8
update db 2023-06-21 11:05:34 +02:00
ae1268c7b8
change repo to stable 2023-06-21 11:05:19 +02:00
f489dcbe57
update db 2023-06-21 11:02:50 +02:00
5f2c3c4d65
upgrade docker-ce and update image URL 2023-06-21 11:02:41 +02:00
605ac0407e
update db 2023-06-19 11:05:12 +02:00
f15343ccbc
updated image URL for prid-2.sveidas.se 2023-06-19 11:04:48 +02:00
d04e95ae21
update db 2023-06-19 10:06:28 +02:00
d67d1bd671
upgrading image URL and docker-ce for prid-1.sveidas.se
ref: SC-1566
2023-06-19 10:05:20 +02:00
7baf9affb1
Add fleetlock support to run-cosmos
Makes run-cosmos request a fleetlock lock before running cosmos "update"
and "apply" steps. This is helpful for making sure only one (or several)
machine out of some set of machines runs cosmos changes at a time. This
way if cosmos (or puppet) decides that a service needs to be restarted
this will only happen on a subset of machines at a time. When the cosmos
"apply" is done a fleetlock unlock request will be performed so the
other machines can progress.

The unlock code in run-cosmos will also run the new tool
sunet-machine-healthy to decide things are good before unlocking. This
way if a restarted service breaks this will stop the unlock attempt
and in turn make it so the others should not break their service as
well, giving an operator time to figure out what is wrong.
2023-06-17 08:10:00 +02:00
623d8819f6
update db 2023-06-14 13:33:25 +02:00
535082d226
updating Image URL and docker repo for connector servers in prod 2023-06-14 13:33:22 +02:00
72b101404a
update db 2023-06-14 13:25:08 +02:00