Commit graph

1907 commits

Author SHA1 Message Date
619d9903a0
upgrading docker-ce 2023-03-07 13:32:29 +01:00
2eadaabc58
added new nagios checks for Test sites 2023-02-23 17:13:08 +01:00
8e647bfe06
update db 2023-02-16 21:03:59 +01:00
ef8653b67f
upgrading docker-ce in test FEs 2023-02-16 21:03:55 +01:00
5af8093338
Add support for eyaml in Hiera
And at the same time remove support for gpg.

The modern version of the configuration (v5) has been tested with 20.04 but
might work with older dists.
2023-02-16 07:44:37 +01:00
75778383c8
removed old influxdb setting in telegraf 2023-02-14 17:10:40 +01:00
c400bba97d
remove 'make db'
The db-file, essentially providing reverse lookup of classes to host
names, is only used by some Nagios configuration instances and causes
continuing operational headaches in those ops-repos.

It should be kept/refactored to only apply to the monitoring hosts in
the cases where it is used, but we don't want any new ops-repos to use
it hence it should be removed from upstream multiverse.
2023-02-07 14:21:29 +01:00
12b2412ea7
run cron at boot too, to e.g. get new firewall rules installed 2023-02-06 17:12:01 +01:00
79606f2a6d
check for /etc/no-automatic-cosmos in the wrapper, and allow arguments to be passed 2023-02-06 16:47:41 +01:00
3988f5beb0
shellcheck fixes 2023-02-06 16:47:30 +01:00
906edf3caf
Merge pull request #32 from SUNET/feature-ft-install_eyaml
Install eyaml on newer hosts
2023-02-06 12:31:31 +01:00
708c6c1b64
add set -e, and do some shellcheck cleanup 2023-02-03 16:05:09 +01:00
25463e6013
respect COSMOS_VERBOSE 2023-02-03 16:04:51 +01:00
f9a286fc05
install eyaml on Ubuntu from 18.04 and Debian from version 10 2023-02-03 15:40:15 +01:00
e08346aa30
cleanup, use stamp-file, only run on old OS versions 2023-02-03 15:39:49 +01:00
Micke Nordin
ba1e40ffd3
Merge pull request #31 from theseal/wrap-cosmos
Wrap cosmos
2023-02-02 13:01:02 +01:00
84b29e4eaa
Executable 2023-02-02 11:49:10 +01:00
49ba964897
Wrap cosmos in scriptherder if available
nunoc-ops and others has been doing this for ages by just modifing the cron
file.
2023-02-02 11:45:54 +01:00
e212b6f56f
Support master branch being renamed to main
Fixes:
```
70run-post-tasks: invoking /var/cache/cosmos/model/post-tasks.d/018packages
Your configuration specifies to merge with the ref 'refs/heads/master'
from the remote, but no such ref was fetched.
```
2023-01-31 08:52:28 +01:00
4601e0bf08
make sure we get clean checkouts 2023-01-30 14:56:15 +01:00
d604d2fab5
set no-protection on the private key 2023-01-30 12:07:33 +01:00
bc17ee1354
Don't confuse containers to connect to them self
When the hostname pointed to loopback the containers tried to connect to them
self instead of the host.
2023-01-24 10:01:59 +01:00
715105aadb
add documentation for dynamically generated cosmos-modules.conf 2023-01-19 17:56:51 +01:00
c3c6171f96
modules, not models 2023-01-19 17:30:18 +01:00
e2e394a9af
generate /etc/puppet/cosmos-modules.conf dynamically 2023-01-19 17:19:42 +01:00
fb4849a0df
Use puppet that comes with OS
nunoc-ops does like this since 2018 so I think it will fly.

Also the package `puppet` seems to been around since at-least Ubuntu 14.04.
2023-01-17 13:53:13 +01:00
68d0083557
Make overlay permission script global
This will make sure /root has proper permissions on our machines.
2022-12-05 15:02:37 +01:00
72ac430948
upgrade metadata-validator to 3.1.3 2022-12-02 12:07:11 +01:00
43bf9034a3
update db 2022-12-02 12:06:37 +01:00
1f26285c34
upgrade validator-test-1.komreg.net to version 3.1.3 2022-12-02 10:47:34 +01:00
dedd1bb1e0
update db 2022-12-02 10:47:06 +01:00
cfeed88b6e
impvored nagios check scripts 2022-11-21 17:37:25 +01:00
3ef4e47ff6
Handle multiple versions of cosmos .deb
Before this change there was a need to keep addhost and
bootstrap-cosmos.sh in sync regarding what version of the cosmos deb to
scp over and later run.

Now we find the latest version as decided by `sort -V` in both addhost
and bootstrap-cosmos.sh.

Solution discussed with @fredrikt.
2022-11-15 18:26:36 +01:00
f7a38c4479 updated cosmos modules to use eidas-prod-2* 2022-11-15 15:04:03 +01:00
a567d569b7
Changing the script 2022-11-11 19:37:23 +01:00
b0031a7f4d
changes in the script 2022-11-11 19:28:39 +01:00
e266fb5389
fixed scripts 2022-11-10 13:43:18 +01:00
2af8478ae1
forgot to add the command, now did 2022-11-10 12:17:43 +01:00
6cbfd488af
add new eidastest check
Updated QA check
2022-11-10 11:59:43 +01:00
13095af981 added cosmos-modules-prod.conf 2022-11-01 09:50:16 +01:00
3f83cc97d6
update db 2022-11-01 09:39:01 +01:00
edf14ae00a
Allowing SSH from anywhere to all the servers 2022-11-01 09:38:56 +01:00
020b8fe34c
Enable "set -e" again
Good idea to fail when unexpected things go wrong. Additional fixes
added to the script to not stop where we can expect a non-zero return
code.

Requested by @fredrikt who also reviewed the patch before going in,
thanks!
2022-10-12 16:47:20 +02:00
c55e5535a2
Add gpg to cosmos bootstrap script
Without this Debian 11 fails to bootstrap:
```
/etc/cosmos/gpg.d/50gpg: 36: gpg: not found
```
2022-10-10 17:27:15 +02:00
Linus Nordberg
0692cabba3
Remove that '.novalocal' line in /etc/hosts, added by cloud-init
It messes up `hostname -f` on Debian, even if there's a correct line
further down in /etc/hosts.
2022-10-10 17:26:56 +02:00
John Van de Meulebrouck Brendgard
3b80ba32c7
Set manage_etc_hosts to false for cloudimage based hosts
this is needed so that our changes in /etc/hosts
are not overwritten.
2022-10-10 17:26:45 +02:00
b2272d409f
free-hand updates from eduid-ops 2022-10-10 17:26:18 +02:00
19304f2d79
short hostname i /etc/hosts 2022-10-10 17:23:39 +02:00
378dfe04fa
try very hard to find git 2022-10-10 17:23:23 +02:00
7f0c457a33
try very hard to find git 2022-10-10 17:22:56 +02:00