summaryrefslogtreecommitdiff
path: root/puppet/manifests
AgeCommit message (Collapse)Author
2016-03-08[feat] Use systemd as service providervarac
Even when the service provider defaults to systemd in latest puppet, it still defaults to 'debian' in puppet 3.7.2 (jessie version). We dropped wheezy support so we should use the systemd provider for now. https://docs.puppetlabs.com/puppet/latest/reference/type.html#service-provider-systemd
2016-01-28[feat] Fix fast deploy using 'leap deploy --fast'varac
This worked before, but somehow stopped working. We need to include 'site_config::slow' top-level scope instead of including it in 'site_config::default', because otherwise it would get tagged with 'leap_base', and would be included always. This way 'site_config::slow' gets included by default, but can be excluded by using 'leap deploy --fast'. See https://leap.se/en/docs/platform/details/under-the-hood#tags - Resolves: #7844
2016-01-22restructured site.pp, now only one class gets included in site.pp per ↵varac
service (Bug #6851) Also, moved global Exec{} defaults to site.pp Change-Id: I9ae91b77afde944d2f1312613b9d9030e32239dd
2015-10-06[feat] remove tapicero leftoversvarac
Soledad now creates user-dbs, which has been done by tapicero in the past. we need to remove any leftovers from tapicero.
2015-04-26Exec[] should log the output of the command on failure #6851varac
Change-Id: If99ae4036f9210516762f5cd7eb66744661a9665
2015-04-21removed leftover puppet/manifests/setup.pp, it's not used anymorevarac
Change-Id: Ib64c9a9d15eb6f276e7928e47e96cd44291583c9
2014-07-01Check appropriately if obfsproxy is included in servicesirregulator
2014-07-01Initial commit for obfsproxy server feature in platformirregulator
2014-06-04bugfix: actually apply modules based on $serviceselijah
2014-06-03move hiera from site.pp to site_config::setupChristoph
the problem was following: if a host has the webapp service, the template for /etc/hosts adds some stuff. But setup.pp did not ask hiera about the services so "/srv/leap/bin/puppet_command set_hostname" always resets the hostname. Since that gets triggered every time you run "leap deploy" the hostname changes, some services restart, then the hostname changes back and the services restart again. The solution is to get the hiera data before every run.
2014-04-04Merge branch '2993_setup_subclass' into 0.6varac
2014-03-25Move setup.pp to a subclass (site_config::setup) (Feature #2993)varac
2014-03-23modules/site_static: part 1 - amberelijah
2013-11-27initial tapicero configurationMicah Anderson
Change-Id: Ie53b09df0758ba01b30ed658bee04682bc180b01
2013-10-20Possibility to include local puppet recipes (Feature #3976)varac
2013-10-16vagrant: support other providers besides virtualbox (Bug #4158), Part 2varac
took out the last remaining virtualbox references
2013-09-20move all resources that are applied on every node into site_config::default ↵varac
(#3782) in commit 338833, we established a relationship between all resources that have a leap_service tag, that are called in site.pp. But we had some resources as default on every node in site.pp (apt::update, Package { require => Exec['apt_updated'] }, site_config::slow and stdlib), that were still lacking any relationship to the leap_service tag. By moving them into default.pp they automatically are executed before resources with a leap_service tag.
2013-09-18include shorewall::interface{eth0} in setup.pp so packages can be installed ↵varac
during main puppetrun, even before shorewall is configured completly
2013-09-05puppet fails if no services are configured (Bug #3747)varac
2013-08-22install a preliminary firewall that blocks everything, except ssh for the ↵Micah Anderson
cases when shorewall doesn't properly come up, ensuring that it fails safe (#3339) Change-Id: Id4f0bf6cf25f420aa2ad67635b37ae95f54e3d38
2013-08-14vagrant: Install squid-deb-proxy on clients (optional) (Feature #3330)varac
squashed commits: site_squid_deb_proxy::client: include shorewall::rules::mdns for avahi discovery added submodule squid_deb_proxy from git://code.leap.se/puppet_squid_deb_proxy updated submodule squid_deb_proxy use squid_deb_proxy::client
2013-07-26Merge branch 'feature/soledad' into feature/leap_mxMicah Anderson
2013-07-26Merge branch 'varac/feature/mx' into feature/leap_mxMicah Anderson
Conflicts: provider_base/services/mx.json puppet/manifests/site.pp puppet/modules/site_mx/manifests/init.pp puppet/modules/site_postfix/manifests/mx.pp Change-Id: Ib2952f6cb972c40a998f20d7bbdb23bb35bef419
2013-07-25initial soledad configurationMicah Anderson
Change-Id: I19e91887c3f8e90764b4baef8c5e29e25658e190
2013-07-25no need to import common anymorevarac
2013-07-25include site_mxvarac
2013-07-09re-add mx servicevarac
2013-07-09no need to import common anymorevarac
2013-06-27update the apt submodule in order to get the fix for unattended_upgrades ↵Micah Anderson
(#2984) and the custom_key_dir as a class parameter remove the global variable from setup.pp and site.pp and instead pass it into the apt class declaration as a parameter Change-Id: I24806f2fd22b5a066b951c5f76f3dd748481b5b6
2013-06-25include global variable for apt config, include Exec[] defaultsvarac
2013-06-20We need to have a newer facter installed in order to get an updated fact for ↵Micah Anderson
piston cloud This moves the apt configuration into the setup.pp run, so we can get the backport source added early which will enable us to install the latest facter from the backports repository. Change-Id: I8ccf1a0445dea72f1b94be08484f33e648439ec1
2013-06-18The way we were testing if $services had a particular word in it is not veryMicah Anderson
good. If we search for the word 'tor' we will find it when the variable contains "monitor". This commit makes the regular expression more specific based on the word boundaries. Change-Id: I4dcd80db7322cabc3f71b77fabf7eacd83b4d572
2013-06-11Fixes #2669 - stop services array from being reported smashed togetherMicah Anderson
Change-Id: I74dfe1941eb338a89be994ac9e1b61739601d9db
2013-05-18added module site_nickserverelijah
2013-04-24take out plain couchdb setup, always deploy bigcouch (Feature #2176)varac
2013-04-10clean up ca_daemon things, it is not used any longer because it has been ↵Micah Anderson
included in the web app (#1978) remove site_ca_daemon module and configuration in site.pp as well as the provider_base/services/ca.json
2013-04-01added setup.ppelijah
2013-03-14evalute $services before including site_config::*varac
2013-03-12enable leap deb package repository and leap apt key on all hostsvarac
2013-03-10use parameterized couchdb class instead of calling site_couchdb::bigcouch ↵varac
directly
2013-03-09use site_couchdb::bigcouchvarac
2013-02-12make sure that apt-get update is run before any package is installed (#1745)Micah Anderson
2013-02-12switch to using stdlib's standard stagesMicah Anderson
2013-02-06add basic tor servicevarac
2013-02-01moved concat::setup to site_config::defaultvarac
Because in site.pp it didn't get the tag "leap_base" and would not be declared with leap cli's default puppet tags. Fixes: parent directory /var/lib/puppet/concat does not exist (Feature#1625)
2013-01-31include site_nagios so every subclass inherits tag 'service'varac
2013-01-31puppet tags: site_config::default and site_config::slowvarac
2013-01-29run stage declaration moved to site.ppvarac
2013-01-27added 'development' hiera hash to exclude certain class for better testingvarac
2013-01-26apply site_nagios::servervarac