| Age | Commit message (Collapse) | Author |
|---|
|
- #7591 Net::SSH::Exception: could not settle on kex algorithm
We need to disable the ssh hardened mode, because it will not work
together with the net-ssh gem leap_cli is pinned to.
All other options that would be included by this parameter are
included by '$::sshd::tail_additional_options'.
|
|
Puppet 3 shows now deprecation warnings if the "@" is missing.
see https://docs.puppetlabs.com/puppet/latest/reference/lang_template_erb.html#non-printing-tags#[bug|feat|docs|style|refactor|test|pkg|i18n]
|
|
- sshd
- haproxy
- unbound
|
|
Using $::apache_version won't work because the facts are
evaluated before compiling the catalog and with this, before
the installation of apache. so on an install from scratch, this
fact won't contain anything.
|
|
- Related: #6920
|
|
- Resolves: #7580
|
|
- Related: #6920
|
|
from https://docs.puppetlabs.com/puppet/latest/reference/lang_template_erb.html#calling-puppet-functions-from-templates:
"The arguments of the function must be provided as an array, even if
there is only one argument."
This is a hard requirement in puppet 3 now.
- Related: #6920
|
|
because ruby-1.9.3 is not available on jessie.
- Related: #6920
|
|
- Related: #6920
|
|
|
|
These packages are a dependency of build-essential and will
get installed anyway.
- Related: #6920
|
|
- Related: #6920
|
|
- Related: #6920
|
|
- sshd
- couchdb
- apache
- Related: #6920
|
|
leap_cli integrates a check for running mx procs already,
which is also integrated into nagios (called "Mx/Are_MX_daemons_running")
|
|
Change-Id: I8756c5c3212a3d7e3c44414fdf6bfff5cd29d70f
|
|
Change-Id: Ied475dd1d555a2388034012f5a799a202dcc6ee7
|
|
|
|
Change-Id: I6a6e68908b71d7499eb3ef3c7f0173b3d5b7baa2
|
|
issue #5924
Change-Id: I6aa1e7751633407d441cbc6436d8426d37dbbfa7
|
|
|
|
Duplicate declaration:
File[/srv/leap/nagios/plugins/check_unix_open_fds.pl] is already
declared in file
/srv/leap/puppet/modules/site_check_mk/manifests/agent/couchdb/bigcouch.pp
at line 44; cannot redeclare at
/srv/leap/puppet/modules/site_check_mk/manifests/agent/couchdb.pp:23 on
node rewdevcouch1.rewire.org
|
|
When migrating from bigcouch to couchdb, we need to remove leftover nagios
tests for bigcouch.
- Added new classes: site_check_mk::agent::couchdb::bigcouch and
site_check_mk::agent::couchdb::master
- Tested: unstable.pixelated-project.org
- Resolves: https://github.com/pixelated/pixelated-platform/issues/126
|
|
- Restructure soledad class
- Include soledad::client class on webapp nodes
- Tested: [unstable.bitmask.net]
- Related: #7523
|
|
- Tested: [unstable.pixelated-project.org]
- Related: https://github.com/pixelated/pixelated-platform/issues/127
|
|
|
|
Without this configuration, a very basic, and non-functional virtualhost
is created, making the hidden service not work
Change-Id: Ibe87c6acf5c21cff2388247c4ba320a5b6af7933
|
|
Redirect to webapp_domain instead of domain
This is needed for webapp when running on a subdomain.
See merge request !80
|
|
redirects (#7540)
Change-Id: Ic77c64c03a99dad951f42633de04c352bed17c1e
|
|
This is needed for webapp when running on a subdomain.
|
|
- Tested: [local singlenode, citest]
- Resolves: #7530
|
|
Change-Id: I398b929fc96cf64e46075266ace0d8d1145b3aac
|
|
|
|
as a pre-requisite
Change-Id: Ic9c8cc6ccfb31ce5e56937a2d95de7974707c368
|
|
Change-Id: Ic9f022dcbb9f2096b933c898ae43023e0bf278c6
|
|
|
|
messages, these are spamming provider's logs and will continue to do so
until we have ipv6 working for the VPN (#6540)
Change-Id: I80673bb64d8239e478bc042794929640f7a7cc39
|
|
|
|
anymore by the nagios module, and our config template has drifted.
Fixes: #7527
Change-Id: I56c3492056fcb95c499cf78b893249adcf0ae67f
|
|
7514 remove tapicero couchdb user
- Resolves: #7514
this depends on this couchdb m.r.: https://gitlab.com/leap/couchdb/merge_requests/2
See merge request !78
|
|
whitelisting (#3625)
Change-Id: I15985ca00ee95bc62855f098a78e364ebbc32616
|
|
- Resolves: #7514
|
|
|
|
|
|
We need to remove local check-mk-agent checks on the tapicero
nodes, and want to notify the monitoring server to re-inventarize the
local checks.
This doesn't work when both services run on different hosts, it will
fail with:
Could not find dependent Exec[check_mk-refresh] for Tidy[checkmk_logwatch_spool]
So i remove the notifies, because we will re-inventarize of local checks
by a daily cronjob anyway, see #6873.
...
- Resolves: #XYZ
- Related: #XYZ
- Documentation: #XYZ
- Releases: XYZ
|
|
Done by including a service-dependend site_config::remove::webapp
class.
|
|
|
|
Remove from:
- platform white-box tests (couchdb user ACLs, tapicero daemon test)
- provider_base/ dir that handles the compilation of the hiera config
file
- Resolves: #7501
|
|
Soledad now creates user-dbs, which has been done by tapicero
in the past. we need to remove any leftovers from tapicero.
|
