Commit graph

2291 commits

Author SHA1 Message Date
29a1671163
downgraded pyff in eumd-test-* servers 2024-12-05 18:51:12 +01:00
d5f91f9b1e
pyff upgrade in the rest of test servers
ref: SC-2613
2024-12-05 18:37:36 +01:00
d4b24c5c2d
upgraded pyff in natmd-tes-1.komreg.net
ref: SC-2613
2024-12-05 18:23:25 +01:00
a5412189d9
added FR in metadata check 2024-12-02 20:42:00 +01:00
c6446202d2
To old puppet sunet 2024-11-25 11:00:11 +01:00
ae472fda10
Try out compose instead 2024-11-25 10:55:55 +01:00
e4ddcec5f2
as.pub nolonger exist 2024-11-22 09:58:45 +01:00
c735a30f82
Remove trailing whitespace 2024-11-21 16:39:52 +01:00
c019dbeef4
Prepare 030puppet for ubuntu-24, SC-2522 2024-11-21 15:01:42 +01:00
7b4de81cbd
Remove some trailing whitespace 2024-11-21 14:33:28 +01:00
04b282c20f
Extend pahol GPG key date 2024-11-05 17:05:03 +01:00
f537508bee
Do not install ntp with cosmos script
This is handled with sunet::server
2024-10-17 16:36:45 +02:00
bae489a528
Add new countries for metadata checking 2024-10-11 15:43:52 +02:00
0ba5675049
Test went fine 2024-10-11 08:00:18 +02:00
d1a072aea7
Test new code 2024-10-11 07:49:17 +02:00
8957839798
updated Johan W's key 2024-09-30 19:02:49 +02:00
7a899efb59
allowing new SUNET LB servers in IDM app servers
Move backend registration to new SUNET LB servers
ref: SC-2460
2024-09-11 11:13:40 +02:00
75fcceacf9
removed Fredrik Kjellman's GPG key 2024-09-06 15:40:01 +02:00
39fa13b641
delete kjellman's ssh key and berra's GPG key 2024-09-06 15:16:26 +02:00
8bcdf11ceb
migrated to new LBs 2024-09-04 15:24:38 +02:00
43dc9b2b20
Bump proxy service in prod to 3.0.3
Ticket ref: SC-2432
2024-09-03 14:44:26 +02:00
86e1af73fe
setup separate tag for puppet-sunet in QA 2024-09-03 14:19:38 +02:00
468b4cf7f6
removed from the list 2024-08-30 17:01:03 +02:00
8c631bde16
removed berra's gpg key
SUNETOPS-1891
2024-08-30 16:51:26 +02:00
634e12142c
removed berra's ssh key 2024-08-30 15:50:42 +02:00
27455f937d
upgraded proxy
ref: SC-2432
2024-08-27 15:16:10 +02:00
ca702e71e5
upgraded proxy
SC-2432
2024-08-27 15:08:37 +02:00
d36aebfceb
upgrade demw in prod to 3.3.0
ref: SC-2296
2024-07-10 10:35:32 +02:00
cfbe5f381b
new directory for hsql db 2024-07-10 10:14:52 +02:00
8817d753a3
upgrade demw application to 3.2.0 in prod
ref: SC-2047
2024-07-08 11:06:39 +02:00
f05da52d8a
run eidas-test branch in idm servers in Test 2024-07-05 17:59:21 +02:00
aa88795ee0
sunet-fleetlock: also handle ReadTimeout
Turns out this was not caught by ConnectionError.
2024-07-03 14:13:22 +02:00
01768129f0
fleetlock: configurable lock/unlock timeout
While we already support setting a healthcheck timeout it probably
makes sense to be able to control how long we wait for a
fleetlock_lock() or fleetlock_unlock() call. This becomes important if
only running cosmos once a night or something like that. In that case we
you probably want to give a physical machine more than than 1 minute to
complete a reboot etc.

This can now be controlled by setting fleetlock_lock_timeout and
fleetlock_unlock_timeout in /etc/run-cosmos-fleetlock-conf. Keep in mind
that while it can make sense to increase the time for taking a lock,
releasing a lock should always be fast (either you have it and release
it, or you dont have it and it is a no-op) so setting a long unlock
timeout should probably never be done.

Since we also potentially wait the unlock timeout at boot (if the
fleetlock server is broken etc) that is another reason to keep it
short. The default 1m is probably OK for most uses.
2024-07-03 13:27:52 +02:00
443611dd3f
Merge pull request #49 from SUNET/john-permissions-fix
Enforce more strict permissions for files in Cosmos
2024-07-03 11:36:21 +02:00
52a30ae970
upgrade DEMW application in QA to 3.3.0
ref: SC-2296
2024-07-02 16:15:41 +02:00
994262fddc
let demw in test environement run eidas-test branch 2024-07-01 18:32:17 +02:00
a5a33e95a5
updating docker env parameters 2024-06-27 22:27:16 +02:00
4231b4ac1d
Migrate from legacy fact
This did not work on modern puppet in ubuntu24:
Warning: Interpolation failed with '::lsbdistcodename', but compilation continuing;
New syntax inspiration from:
https://www.puppet.com/docs/puppet/8/hiera_config_yaml_5#configuring_hiera
2024-06-19 14:07:13 +02:00
bc9d1dc960
Use upstream puppet modules for ubuntu24+.
This is how we do it in modern debian so it
makes sense to do it on modern ubuntu as well.
2024-06-19 14:02:24 +02:00
e315282bc5
Use more strict exception checking
This is probably wide enough and we do not need weird extra handling of
our own execption etc.

Thanks to @mickenordin for keeping me honest :).
2024-06-17 12:40:12 +02:00
4b8b8887f6
sunet-fleetlock: handle connection errors
In order to handle upgrades of the fleetlock server when running only
one server we need to handle connection errors like connection refused
or timed out errors gracefully.

Because there are several different ways the connection can fail and it
is hard to keep track of them all, just catch everything. We then also
need special handling of our own timeout execption so we are not
accidentally stuck retrying forever.

Also fix so we actually use the request_timeout arg for individual HTTP
requests instead of the global timeout.

While here run isort to keep imports tidy.
2024-06-17 12:07:22 +02:00
a1eafe1dd1
access for Patrik Holmqvist
ref: SC-2322
2024-06-11 18:19:37 +02:00
a91554f6a1
fixed name and description 2024-06-08 01:48:57 +02:00
5dd8351fc0
fixed named of the host 2024-06-08 01:41:57 +02:00
e19d98175b
fixed nagios checks for demw TEST 2024-06-08 01:37:37 +02:00
7404e8996f
fixed image name & removed slash in the end for a nagios check 2024-06-08 01:14:43 +02:00
39dbd29227
changed the stable tag for demw-1.test.sveidas.se 2024-06-08 00:53:54 +02:00
198ac615f1
fixed syntax 2024-06-08 00:51:07 +02:00
f0692f6354
new demw version 3.2.0 related changes 2024-06-08 00:46:46 +02:00
a3fb9dca52
Variable configuration 2024-06-04 14:31:32 +02:00