summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-11-04change ordering hints to use refresh_stunnel exec instead of service (#6287)Micah Anderson
In a multi-node couch deployment, it was observed that the Service['stunnel'] would be activated, and then later a stunnel::client was created which would trigger an Exec['refresh_stunnel']. Because of this, and the ordering hints that were in place, the service would get started, and then the couchdb databases, users, designs, etc. were being put into place and then a stunnel client was created, triggering the refresh_stunnel exec, which would cause an interruption in the connectivity and result in failures. This change replaces the Service['stunnel'] hint with the the Exec['refresh_stunnel'] to make sure that the stunnels are fully setup before attempting couch operations. Change-Id: I33ddd24884b3c23a1df5555ca53ca65cd703da50
2014-11-02add missing TLSv1 sslversion parameter to site_stunnel::serviersMicah Anderson
Change-Id: I48dc8135943393bd11c7181853985f4a5799011e
2014-11-01stop using bad nist curve for ssh host key (#6294)Micah Anderson
update port parameter in site_sshd to be an array, otherwise puppet errors about it being a Fixnum with new sshd module Change-Id: I854d042edb98817169eef5e758d04d60d3c71dd5
2014-10-31Merge branch 'develop' of ssh://review.leap.se:29418/Platform into developvarac
2014-10-31Fix deprecated dynamic lookups of variables in site_couchdb (#6286)Micah Anderson
Change-Id: I318944a6872a53ff9c533704514da339426d9401
2014-10-31add support for property tor.keyelijah
2014-10-29added webapp.forbidden_usernames property to allow configuration of ↵elijah
usernames to block.
2014-10-29Merge "upgrade unattended-upgrades on deploy (#6245)" into developmicah anderson
2014-10-28upgrade unattended-upgrades on deploy (#6245)Micah Anderson
unattended-upgrades is not able to upgrade itself in certain situations, such as when the conffile prompt is generated due to the config being changed. We want to set this package as latest in the platform so that it is upgraded on every deploy (we deploy the config anyway). Change-Id: I8c99bfb1b001079f0e1a4ffbf048e0e867633335
2014-10-27Change stunnel default sslversion to be TLSv1, instead of the defaultMicah Anderson
SSLv3 (#6261) Change-Id: I7ab5a6455e434f8359169d31febed8b92f84bbcc
2014-10-22Merge "modify the leap repository contents so they pick the correct ↵Varac
repository, based on the hiera value 'major_version' (#6251)" into develop
2014-10-22Merge "implement custom puppet support (#6201, #6226)" into developVarac
2014-10-21modify the leap repository contents so they pick the correct repository,Micah Anderson
based on the hiera value 'major_version' (#6251) Change-Id: I10532ef83e3aa2d35d9c0be241952a35e366bba4
2014-10-21update platform to take advantage of new platform.rb. requires leap_cli 1.6elijah
2014-10-21implement custom puppet support (#6201, #6226)Micah Anderson
change puppet command to include in the --modulepath /srv/leap/files/puppet/modules If a provider places puppet code under files/puppet it will be sync'd over to all the nodes, once leap cli #6225 is merged. The custom puppet entry point is in class 'custom' which can be put into files/puppet/modules/custom/manifests/init.pp Change-Id: I74879c6ee056b03cd4691aa81a7668b60383bdad
2014-10-20bumped default server certificate bit size to 4096elijah
2014-10-15Disable SSLv3, and RC4 ciphersMicah Anderson
Change-Id: I7214aa4334e3d817dd1b6d8dce43523e3d955b5d
2014-10-08Merge branch '5216_nagios_hostgroups' into developvarac
2014-10-08include different nagios::defaults classes manually (#5216)varac
nagios::defaults will include nagios::defaults::hostgroups which add "all" and "centos_servers" hostgroups which we don't want. Change-Id: If42faa11c167fb7305ebbb21dc358a8813afaa25
2014-10-08every environment is defined as nagios hostsgroup (#5216)varac
Change-Id: I6508ce0d06b37a1c5601a0e981a59f7fda47f76a
2014-10-05Merge remote-tracking branch 'cz8s/fix_iptables_proxy_forbidden' into developMicah Anderson
2014-09-25Merge branch 'develop' of ssh://review.leap.se:29418/Platform into developvarac
2014-09-25Merge branch 'irregulator/develop' into developvarac
2014-09-25allow all outgoing trafficChristoph Kluenter
as discussed on #leap
2014-09-25Use member function instead of regexp to check services arrayirregulator
2014-09-25Merge branch '6138_fix_rsyslog-gnutls_install' into developvarac
2014-09-25remove /etc/apt/preferences.d/fixed_rsyslog_anon_package (#6138)varac
This was a leftover from earlier versions, where we installed rsyslog from the leap debian package repo. Change-Id: I88a852f08b5aff3bd7b591b6220ac354463a9786
2014-09-25stop logging user-agent in apache, fixes #6129Micah Anderson
Change-Id: I66384ae4a723be063790362f70e57228a0f1539b
2014-09-23couch: for neighbors, use 'couch.mode' instead of 'couch.master' (which ↵elijah
might be false even for multimaster). closes #6064
2014-09-22stop logging user-agent in apache, fixes #6129Micah Anderson
Change-Id: I66384ae4a723be063790362f70e57228a0f1539b
2014-09-18Merge branch 'bugfix/fqdn' into developvarac
added fact override for domain too
2014-09-17override facter fact for fqdnelijah
2014-09-17allow outgoing port 3142 for apt-cacher proxyChristoph
2014-09-17update rsyslog module to fix #6019Micah Anderson
Change-Id: I8c64a0c530d44e55963060d52d31a0da1a88615c
2014-09-17Increase wait-for-couch timeout (Bug #3735)varac
Site_couchdb::Bigcouch::Settle_cluster/Exec[wait_for_couch_nodes] waits 60s for all nodes to be member of the cluster. Because we deploy to multiple nodes in parallel, not all nodes are ready at the same time, so we increased the timeout from 60s to 120s.
2014-09-17disable ACL enforcement, because it's a known issue with bigcouchvarac
otherwise it will only confuse the user see https://leap.se/code/issues/6030 for more details
2014-09-15Merge branch 'make_shorewall_optional' into developMicah Anderson
2014-09-15Merge branch 'add_ignore' into developMicah Anderson
2014-09-15tests: make shorewall optionalMicah Anderson
Change-Id: I1703ff7b3dafe5d0562a7c34c1851ebfedc569a8
2014-09-15tests: add 'ignore' command to testsMicah Anderson
Change-Id: I8ac3b6edd6a0cf7eae5486d61d1680765a8fad13
2014-09-15tests: make warnings not produce a non-zero exit codeMicah Anderson
Change-Id: I60d51728128b95c77d52ab4e8c61966cfa59ff2f
2014-09-03Merge branch 'master' into developvarac
Conflicts: platform.rb puppet/modules/site_config/manifests/hosts.pp
2014-09-02tests: make warnings not produce a non-zero exit code, add 'ignore' command ↵elijah
to tests, make shorewall optional.
2014-08-28Merge tag '0.5.4.1'Micah Anderson
Tag 0.5.4.1 hotfix release
2014-08-28update version number for 0.5.4.1 hotfix release0.5.4.1Micah Anderson
Change-Id: I0d629c56b86cd4de5a6560d58715de7ec93dd4e3
2014-08-28syslog logs everything but webapp FIX #6020guido
2014-08-26default to multimaster if no nodes are defined as masterelijah
2014-08-26update version number for 0.5.4 hotfix release0.5.4Micah Anderson
Change-Id: Ia34388c5095301d3a72070737fdb9df758610581
2014-08-26Fix Tapicero not starting after first deploy (#6004)varac
Added a dependency on the couchdb "tapicero" user to get created before starting the tapicero daemon.
2014-08-22FQDN should come first in /etc/hostsvarac
fixes /etc/hosts: wrong order (Bug #5835) (now for real) before, /etc/hosts contained i.e. 127.0.1.1 plain1 plain1.bitmask.net plain1.bitmask.i which resulted in no fqdn reported both by "hostname -f" and "facter fqdn" this fix produces this order which is needed to report a fqdn: 127.0.1.1 plain1.bitmask.net plain1 plain1.bitmask.i
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-02 05:36:24 +0000