summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-12-10Fix internal domain name generation (#6477)varac
Before, under certain circumstances, the internal domain names were capped from i.e. 'dev.example.com' to 'dev.i' Change-Id: Ibd4998a7ba128dcbce5ccb9d0a52006ed4431f01
2014-12-10Merge branch 'bug/6512' into 'develop'varac
Bug/6512 See merge request !5
2014-12-10Merge branch '6511_ignore_transient_tapicero_errors_creating_a_db' into ↵varac
'develop' 6511 ignore transient tapicero errors creating a db https://leap.se/code/issues/6511 this updates a previous m.r. from micah (https://gitlab.com/leap/platform/merge_requests/4), but puts the content in puppet/modules/site_check_mk/files/agent/logwatch/syslog/tapicero.cfg instead of puppet/modules/site_check_mk/files/agent/logwatch/syslog_tail.cfg (which only should host patterns that are generic to all servers). See merge request !6
2014-12-10ignore transient Tapicero errors when creating a db (Bug #6511)varac
Change-Id: I0939070482fad4f99f03e41094a3df42ff5063e4
2014-12-09Ignore rexi_EXIT bigcouch error (Bug #6512)Micah Anderson
Change-Id: I03842b65329aabb012cc2c7514007e174cbd8fc0
2014-12-09Merge branch '6520_soledad_check_needs_python_u1db' into 'develop'Micah
6520 soledad check needs python u1db https://leap.se/code/issues/6520 See merge request !2
2014-12-09Soledad sync check needs python-u1db package installed (Bug #6520)varac
Change-Id: I8a6c27434f548f24d9dba1a969699200ab307477
2014-12-09add dependency on the stunnel service so refresh_stunnel is not run until ↵Micah Anderson
the service has been started (#6495) Change-Id: Id48fedb5731117b68b7386c4ce22516333d94081
2014-12-09Merge branch '5142_purge_old_checks_from_checkmk' into developvarac
2014-12-09updated submodule check_mk in order to purge old checks from ↵varac
check_mk_objects.cfg (Feature #5142) Change-Id: Ib0283806b5485a9d15f0aa7e09142989367dae20
2014-12-09added http verb to test error messageselijah
2014-12-09Merge branch '6485_deploy_ca_for_smtp_tls_config' into developvarac
2014-12-09Merge branch '6476_ignore_postfix_lost_connection' into developvarac
2014-12-09Deploy leap ca cert for smtp tls config (Bug #6485)varac
Change-Id: I029ffabd33299a5b42e5f262e372eafb6272d094
2014-12-09 logwatch: ignore postfix errors on lost connection (Bug #6476)varac
Change-Id: I0b1eec11a3b3da39d65572b6bee8b3ce892e08ac
2014-12-09add 'local' contactgroup to local environmet monitoring nodevarac
Change-Id: I1618a8c7f2f7c905b354dbe363fc91b690725479
2014-12-05Merge branch 'develop' of ssh://code.leap.se/leap_platform into developvarac
2014-12-04tests - better errors, ensure tmp users are deleted, remove bad 'pass()' ↵elijah
call that made tmp_user tests always succeed.
2014-12-04remove webapp python tests, because they are integrated into the platform ↵varac
now (Bug #6489) Change-Id: Iaec748a173b6e11bb3ab3c11ca152809817644f9
2014-12-04Merge "Change nagios mail To: Header to contain the actual platform ↵Varac
environment's contact email (Bug #6466)" into develop
2014-12-02add soledad sync test to `leap test`. closes #6431elijah
2014-12-02Change nagios mail To: Header to contain the actual platform environment's ↵Micah Anderson
contact email (Bug #6466) Change-Id: Ib86ae771e0ac3b6f329a517a8a31c9ec54d33a05
2014-12-02Ignore bigcouch conflict errors, mainly coming from tapicero creating new ↵varac
users (Feature #6481) There are potentially many tapicero daemons running, and they all try to do the same thing at the same time. It is basically designed to create race conditions. All tapicero daemons try to create the user db at the same time. Only one of them wins the race and actually creates it. We need to fix this later (see https://leap.se/code/issues/6480) but for now, we ignore them because conflict errors should be handled by the applictation anyway. Change-Id: I91095b1901d238e3d199954ba3716023d3fd49c1
2014-12-02Merge remote-tracking branch 'gerrit/develop' into developMicah Anderson
Change-Id: I2fa85918af8199fbc41bb4e58dae6c78911ab626
2014-12-02Use include to avoid redeclaration of class { 'tor::daemon': }. Fixes #6479guido
Change-Id: Ibd1b1eef7afca10cf2a2d56a24e703636d6a52c6
2014-12-02Use $hostname to locate tor.key. Fixes #6478guido
Change-Id: Ibbe3687d5a773b444f6e9145bf235aaeea637e1d
2014-12-02minor lintingMicah Anderson
Change-Id: Idf550ed004bcb42d6e19ac0a2c5286f52a390935
2014-12-01Increase the nagios alert thresholds for bigcouch open file descriptors (#6473)Micah Anderson
Change-Id: I2549d781427fffc865c2bdcd1e950d60dad509fd
2014-12-01Increase nagios max_checks_attempts from 1 to 4 so notifications won't be ↵varac
sent out on first failed check_mk check (Bug #6461) Change-Id: I1bd47b3c3d17508488a4db90d74118006d85a03a
2014-12-01ignore ntp check because it's flapping to often (Bug #6407)varac
Change-Id: I52e19bbdfcf6576bd9c247d99aace47eb86c8116
2014-11-30minor: ensure there is only one tapicero processelijah
2014-11-30pin tapicero to version/0.6elijah
2014-11-25Merge remote-tracking branch 'elijah/bugfix/atomictests' into developMicah Anderson
2014-11-25atomic tests for webapp apielijah
2014-11-25include a host information in ssh_config for ever possible host a given node ↵elijah
might communicate with. this includes port and host key algorithm. closes #6432
2014-11-24bind webapp to version/0.6 branchelijah
2014-11-24fixed bug when there is no vpn serviceelijah
2014-11-23Merge remote-tracking branch 'elijah/feature/soledadtest' into developMicah Anderson
2014-11-23fix dependency on x509 ca_bundle class (#6410)Micah Anderson
Change-Id: Ia1e7009240d61464d7ba45ad07291664f6a3b768
2014-11-21Merge "Fix Check_mk notifications (Bug #6403)" into develop0.6.0rc1Varac
2014-11-20Fix Check_mk notifications (Bug #6403)varac
Let check_mk put all hosts into the same "admin" contactgroup, which is defined as default contactgroup by nagios. Change-Id: I13b434925711ef2037de0cf6e919ce39a8255a94
2014-11-20ship a modified runit config for bigcouch that raises the open fileMicah Anderson
descriptor limits to account for bigcouch sync spikes (#4935) Change-Id: I242fba31f961b6139ec641e1708b170f5c0d009b
2014-11-20Make sure openvpn is restarted when cert/key change (#6405)Micah Anderson
I reformatted the section below for consistency. Change-Id: I18f5e23850e0c1ab4b1f2ee467d5af54ae9ff303
2014-11-20Make sure that stunnel restarts when cert/key change (#6181)Micah Anderson
Change-Id: I5085247a87018e18e73833119ac73225afbfea1e
2014-11-20specify the destination IP for DNAT rules for gateway addresses on port 443 ↵Micah Anderson
(#6388) Previously the DNAT rule would redirect the incoming port 443 requests to openvpn, which was the wrong thing to do on the primary IP (but the right thing to do on the openvpn gateway IPs). This manifested in the webapp not being available when it was also configured as a service on the node. Change-Id: Ic8c6b6c0389859fab168a7df687351e11263277a
2014-11-20minor lintingMicah Anderson
Change-Id: I6d04cc7e028e86ee0012d96d7ef075fdd7ecef19
2014-11-19test if soledad daemon is runningelijah
2014-11-15don't enable Tor DirPort if openvpn is running on port 80 (Bug #6377)Micah Anderson
We need to check the openvpn hiera value, which may or may not be set. If it is not set, then we need to not lookup the $openvpn['ports]' values or we will get an error because it wont be the correct type. If we do have it, then $openvpn_ports gets set with the hash, otherwise it gets set to an empty hash (otherwise puppet will complain when we try to query the member() later with "member(): Requires array to work with"). Finally, if it is set to port 80, we don't include the tor::daemon::directory Change-Id: Ic366c72e966cae9d611e8fe5aa7ea7943be51241
2014-11-15Merge remote-tracking branch 'gerrit/develop' into developMicah Anderson
2014-11-16Merge "add local 50unattended-upgrades to fix unattended-upgrades not ↵micah anderson
upgrading leap packages (#4425)" into develop
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-04 10:47:24 +0000