Commit graph

2208 commits

Author SHA1 Message Date
443611dd3f
Merge pull request #49 from SUNET/john-permissions-fix
Enforce more strict permissions for files in Cosmos
2024-07-03 11:36:21 +02:00
52a30ae970
upgrade DEMW application in QA to 3.3.0
ref: SC-2296
2024-07-02 16:15:41 +02:00
994262fddc
let demw in test environement run eidas-test branch 2024-07-01 18:32:17 +02:00
a5a33e95a5
updating docker env parameters 2024-06-27 22:27:16 +02:00
4231b4ac1d
Migrate from legacy fact
This did not work on modern puppet in ubuntu24:
Warning: Interpolation failed with '::lsbdistcodename', but compilation continuing;
New syntax inspiration from:
https://www.puppet.com/docs/puppet/8/hiera_config_yaml_5#configuring_hiera
2024-06-19 14:07:13 +02:00
bc9d1dc960
Use upstream puppet modules for ubuntu24+.
This is how we do it in modern debian so it
makes sense to do it on modern ubuntu as well.
2024-06-19 14:02:24 +02:00
e315282bc5
Use more strict exception checking
This is probably wide enough and we do not need weird extra handling of
our own execption etc.

Thanks to @mickenordin for keeping me honest :).
2024-06-17 12:40:12 +02:00
4b8b8887f6
sunet-fleetlock: handle connection errors
In order to handle upgrades of the fleetlock server when running only
one server we need to handle connection errors like connection refused
or timed out errors gracefully.

Because there are several different ways the connection can fail and it
is hard to keep track of them all, just catch everything. We then also
need special handling of our own timeout execption so we are not
accidentally stuck retrying forever.

Also fix so we actually use the request_timeout arg for individual HTTP
requests instead of the global timeout.

While here run isort to keep imports tidy.
2024-06-17 12:07:22 +02:00
a1eafe1dd1
access for Patrik Holmqvist
ref: SC-2322
2024-06-11 18:19:37 +02:00
a91554f6a1
fixed name and description 2024-06-08 01:48:57 +02:00
5dd8351fc0
fixed named of the host 2024-06-08 01:41:57 +02:00
e19d98175b
fixed nagios checks for demw TEST 2024-06-08 01:37:37 +02:00
7404e8996f
fixed image name & removed slash in the end for a nagios check 2024-06-08 01:14:43 +02:00
39dbd29227
changed the stable tag for demw-1.test.sveidas.se 2024-06-08 00:53:54 +02:00
198ac615f1
fixed syntax 2024-06-08 00:51:07 +02:00
f0692f6354
new demw version 3.2.0 related changes 2024-06-08 00:46:46 +02:00
a3fb9dca52
Variable configuration 2024-06-04 14:31:32 +02:00
5a97372de4
Allow sunet frontend access to qa 2024-06-04 14:17:40 +02:00
625ba6e642
Merge branch 'master' of gitops.sunet.se:eid-ops 2024-06-03 07:40:16 +02:00
7ad90c1f88
updated validity on gpg key. 2024-06-03 07:39:32 +02:00
510003043b
had to specifiy package name 2024-05-31 18:30:06 +02:00
5f738270e4
Some NRPE checks will get fishy results when using a PrivateTmp.
E.g check_apt:
https://askubuntu.com/questions/1415415/check-apt-issue-with-nagios
2024-05-31 17:39:33 +02:00
46d9e4cde6
removed monitoring of old proxy metadata files 2024-05-31 13:34:38 +02:00
0b8094387c
add frontend for idm in qa. SC-2033. 2024-05-31 12:58:22 +02:00
a1962c7e84
Run site aswell 2024-05-31 12:26:08 +02:00
3233ea5e39
upgrade proxy in prod
SC-2309
2024-05-29 18:48:39 +02:00
bc1e1cda7b
upgrade proxy in Test
ref: SC-2309
2024-05-29 18:30:40 +02:00
afbece12d5
Configure mail stuff 2024-05-29 13:57:13 +02:00
51c2e85eb7
new nrpe check 2024-05-27 23:03:57 +02:00
a8458a3d37
updated proxy in QA
ref: SC-2287
2024-05-27 22:51:30 +02:00
a60f6893d8
secrets and IDM QA stuffs 2024-05-27 16:18:48 +02:00
d54f1b25a0
IDM QA stuffs 2024-05-27 15:54:03 +02:00
ed77d7ed58
We need my stuff until merged 2024-05-27 15:00:52 +02:00
a22d5b9cd4
doesn't work with '/' in the end after proxy upgrade 2024-05-23 18:55:55 +02:00
b3ae808483
upgrading eidas proxy in Test to 3.0.1
ref: SC-2287
2024-05-23 18:07:05 +02:00
45b3e753f4
Upgrade proxy in Test
Ref: SC-2287
2024-05-21 11:59:12 +02:00
c9186e2e0e
User SUNET infra cert in natmd-*.komreg.net publisher servers in Prod
Ref: SC-2266
2024-05-20 16:46:23 +02:00
d25b11c53f
turning off infra cert monioring on some servers 2024-05-20 12:36:11 +02:00
cb72857800
changed related to SC-2266 2024-05-16 13:56:00 +02:00
ec04cc6dee
more to update puppet facts 2024-05-13 18:56:03 +02:00
4e008b462a
added facts 2024-05-13 18:50:11 +02:00
9182303511
update cosmos.conf to get common over. 2024-05-08 09:24:16 +02:00
f0727aec57
Merge branch 'master' of gitops.sunet.se:eid-ops 2024-05-07 20:00:38 +02:00
719e1dad42
use infra cert for Swedish publishers in Test
ref: SC-2266
2024-05-07 12:43:00 +02:00
00b8d1d0c0
run new version compatible with bankID in test. 2024-05-07 12:22:49 +02:00
22846692bb
New version of eidas-proxy for BankID OIDC. SC-2072. 2024-05-06 21:21:45 +02:00
7f2a45ddd3
We run this on / 2024-05-02 10:20:08 +02:00
bf89089c00
Match example configuration 2024-04-30 11:12:35 +02:00
610873d482
client-id from Stefan 2024-04-29 11:20:42 +02:00
ce929c5317
removed files and parameters not needed in new version 2024-04-24 19:54:16 +02:00