git.lirion.de

Of git, get, and gud

path: root/site/profile/manifests/2022-03-191-0/+0

subject'>Move hiera_config to main section of puppet.confNick Walker 2016-01-061-1/+10 | | | | | If it is in master instead of main then puppet apply will give a warning. * Move hiera.yaml to avoid file-sync overwriting itNick Walker 2015-12-181-1/+19 | | | | | | | | File sync appears to sync everything in the $codedir which inlcudes hiera.yaml. When managing hiera.yaml with puppet code you don't want file sync to overwrite its contents. So, I'm moving it out of $codedir and removing the original hiera.yaml to avoid confusion for users investigating later. * Final steps to make Code Manager workNick Walker 2015-12-181-27/+0 | | | | | | | | | | - Moved ssh key generation and git deploy key out of the puppetmaster profile and into zack_r10k and code_manager - Swapped code manager into the all_in_one role - Made a 2015.2 all_in_one role if users prefer to use it - Conditionally move all existing code out of environmentpath to allow file sync to sync files - Update the README to compliment the new puppet code * Refactor puppetmaster and zack_r10k_webhookNick Walker 2015-12-091-16/+3 | | | | | | | | | | Moved the webhook resource out of puppetmaster and into zack_r10k to support exchaning code_manager in place of zack_r10k As a result I cleaned up some unnecessary parameters. Installing both the r10k webhook and the code_manager at this time for testing * Add support for code manager which will replace zack r10kNick Walker 2015-12-091-1/+2 | | | | | | | | | | | | | | | Add pltraing-rbac module Added a new profile for code_manager that: - creates a service users for code manager - creates a token for that service user - creates a hook on a git server using the token Turns out that the file function in puppet cannot read files in /root. The pe-puppet user needs read permissions on the file and traversal on the directory which giving to /root would probably be a bad idea. So, I just put the file containing the token in /etc/puppetlabs/puppetserver since I'm not sure where would be better. * Change owner/group to pe-puppet for hiera moduleNick Walker 2015-11-171-2/+2 | | | | | | | | When the owner / group was root this meant that enabling hiera-eyaml wouldn't work properly as the keys couldn't be read by puppetserver. Changing to pe-puppet should resolve the issue. * Refactor webhook profiles into one profile with a parameterNick Walker 2015-10-301-11/+11 | | | | | | | | Previously there was a mcollective and no_mcollective version of the webhook profile. They were almost identical so I merged them and manage the difference with a "use_mcollective" parameter. I renamed the webhook profile to zack_r10k_webhook. * Change the zack/r10k webhook to utilize username and passwordNick Walker 2015-10-301-2/+5 | | | | | | | To accomodate generating random usernames and passwords, I had to parameterize the profiles which I didn't feel great about but I also didn't want to have to put the username and pass in hiera. * enable SSL on the zack/r10k webhookNick Walker 2015-10-291-1/+1 | * Add $::fqdn to post receive hook titleNick Walker 2015-10-281-3/+3 | | | | Also, change other references of $fqdn to $::fqdn * disable SSL on the zack/r10k webhookNick Walker 2015-10-281-1/+0 | | | | | The abrader/gms provider for gitlab doesn't support disabling ssl verification but will soon. * enable ssl on the webhookNick Walker 2015-10-281-14/+16 | * make environment timeout setting refresh the puppet master serviceNick Walker 2015-10-261-0/+1 | * Fix the update-classes script and set appropriate perms on itNick Walker 2015-10-261-0/+1 | * Fix some embarassing typosNick Walker 2015-10-261-1/+1 | * Configure the MoM to update the classifier after deploying codeNick Walker 2015-10-261-0/+16 | | | | | | | | | | This entailed configring the classifier to never sync on a schedule. Changing environment_timeout to unlimited for all masters. Setting a postrun command for r10k that would update the class information in the classifier (the update-classes endpoint). * Change to using the webhook without mcollectiveNick Walker 2015-10-161-13/+0 | | | | | | In order to complete the change I refactered the webhook into its own set of profiles, one with mcollective and the other without. * Add some notifies to pe services after making changesNick Walker 2015-10-151-0/+2 | * Update the repo name for deploy keys and webhook to match READMENick Walker 2015-08-181-2/+2 | * Move some hieradata around for easier testing in vagrantNick Walker 2015-08-181-0/+1 | | | | | | | | I now have a virtual hierarchy level for setting up my lower memory settings when using vagrant/virtualbox. The gms settings are in an example-puppet-master.yaml file in the nodes directory which are needed for the instructions. * Add webhook config to git management systemNick Walker 2015-08-171-2/+11 | * Add a gitlab profile / add ssh-keygen to puppetmaster profileNick Walker 2015-08-141-0/+38 | * Remove extraneous slash from puppetmaster profileNick Walker 2015-08-141-1/+1 | * Fix some incorrect quoting in the hiera classNick Walker 2015-08-131-3/+3 | | | | | | | I thought I needed to double quote items that had interpolated variables but it turns out I don't need to which is good because I effectively can't due to .to_yaml not doing what I wanted it to do. * Fix some quoting issues and add role:: to the include in site.ppNick Walker 2015-08-131-3/+3 | * Remove hiera.yaml and instead manage it with puppet codeNick Walker 2015-08-031-0/+14 Added hunner/hiera to the Puppetfile and a manifest to use it instead of placing a hiera.yaml in the repo.