git.lirion.de

Of git, get, and gud

aboutsummaryrefslogtreecommitdiffstats
path: root/site/role
Commit message (Collapse)AuthorAgeFilesLines
* Final steps to make Code Manager workNick Walker 2015-12-182-1/+6
| | | | | | | | | | - Moved ssh key generation and git deploy key out of the puppetmaster profile and into zack_r10k and code_manager - Swapped code manager into the all_in_one role - Made a 2015.2 all_in_one role if users prefer to use it - Conditionally move all existing code out of environmentpath to allow file sync to sync files - Update the README to compliment the new puppet code
* Refactor puppetmaster and zack_r10k_webhookNick Walker 2015-12-091-12/+3
| | | | | | | | | | Moved the webhook resource out of puppetmaster and into zack_r10k to support exchaning code_manager in place of zack_r10k As a result I cleaned up some unnecessary parameters. Installing both the r10k webhook and the code_manager at this time for testing
* Merge branch 'production' of https://github.com/npwalker/control-repo into ↵Nick Walker 2015-11-244-0/+35
|\ | | | | | | merge_npwalker_control_repo
| * fixing a bunch of puppet lint warningsNick Walker 2015-10-301-1/+1
| |
| * Refactor webhook profiles into one profile with a parameterNick Walker 2015-10-301-1/+1
| | | | | | | | | | | | | | | | Previously there was a mcollective and no_mcollective version of the webhook profile. They were almost identical so I merged them and manage the difference with a "use_mcollective" parameter. I renamed the webhook profile to zack_r10k_webhook.
| * Change the zack/r10k webhook to utilize username and passwordNick Walker 2015-10-301-2/+12
| | | | | | | | | | | | | | To accomodate generating random usernames and passwords, I had to parameterize the profiles which I didn't feel great about but I also didn't want to have to put the username and pass in hiera.
| * Change to using the webhook without mcollectiveNick Walker 2015-10-161-0/+1
| | | | | | | | | | | | In order to complete the change I refactered the webhook into its own set of profiles, one with mcollective and the other without.
| * Add a gitlab roleNick Walker 2015-08-141-0/+5
| |
| * Update the README, add an all_in_one_pe roleNick Walker 2015-08-131-0/+5
| | | | | | | | | | | | | | | | | | | | | | Updating README for instructions on how to use the control-repo by putting it in your own git server and then using the r10k answers during installation of PE. Removing the manifest for configuring r10k using zack/r10k. Added a role that can be used to bootstrap an all-in-one PE installation.
| * Add a site directory with example role and profile moduleNick Walker 2015-05-272-0/+14
|
* add example files to role and profile directoriesNick Walker 2015-08-251-0/+3
tle='2015-12-09 09:44:50 -0800'>2015-12-093-30/+12 | | | | | | | | | | Moved the webhook resource out of puppetmaster and into zack_r10k to support exchaning code_manager in place of zack_r10k As a result I cleaned up some unnecessary parameters. Installing both the r10k webhook and the code_manager at this time for testing * Add support for code manager which will replace zack r10kNick Walker 2015-12-094-1/+86 | | | | | | | | | | | | | | | Add pltraing-rbac module Added a new profile for code_manager that: - creates a service users for code manager - creates a token for that service user - creates a hook on a git server using the token Turns out that the file function in puppet cannot read files in /root. The pe-puppet user needs read permissions on the file and traversal on the directory which giving to /root would probably be a bad idea. So, I just put the file containing the token in /etc/puppetlabs/puppetserver since I'm not sure where would be better. * Add custom functions for determining some PE settingsNick Walker 2015-11-252-0/+17 | | | | | | Added a function to find the hostname and port of the classifier Added a fucntion to return all puppetdb hostnames * Merge branch 'production' of https://github.com/npwalker/control-repo into ↵Nick Walker 2015-11-2410-0/+205 |\ | | | | | | merge_npwalker_control_repo | * Change owner/group to pe-puppet for hiera moduleNick Walker 2015-11-171-2/+2 | | | | | | | | | | | | | | | | When the owner / group was root this meant that enabling hiera-eyaml wouldn't work properly as the keys couldn't be read by puppetserver. Changing to pe-puppet should resolve the issue. | * fixing a bunch of puppet lint warningsNick Walker 2015-10-303-10/+10 | | | * Refactor webhook profiles into one profile with a parameterNick Walker 2015-10-304-30/+24 | | | | | | | | | | | | | | | | Previously there was a mcollective and no_mcollective version of the webhook profile. They were almost identical so I merged them and manage the difference with a "use_mcollective" parameter. I renamed the webhook profile to zack_r10k_webhook. | * Change the zack/r10k webhook to utilize username and passwordNick Walker 2015-10-303-6/+24 | | | | | | | | | | | | | | To accomodate generating random usernames and passwords, I had to parameterize the profiles which I didn't feel great about but I also didn't want to have to put the username and pass in hiera. | * enable SSL on the zack/r10k webhookNick Walker 2015-10-292-2/+2 | | | * Add $::fqdn to post receive hook titleNick Walker 2015-10-281-3/+3 | | | | | | | | Also, change other references of $fqdn to $::fqdn | * disable SSL on the zack/r10k webhookNick Walker 2015-10-282-2/+1 | | | | | | | | | | The abrader/gms provider for gitlab doesn't support disabling ssl verification but will soon. | * enable ssl on the webhookNick Walker 2015-10-282-15/+17 | | | * make environment timeout setting refresh the puppet master serviceNick Walker 2015-10-261-0/+1 | | | * Fix the update-classes script and set appropriate perms on itNick Walker 2015-10-262-1/+2 | | | * Fix some embarassing typosNick Walker 2015-10-261-1/+1 | | | * Configure the MoM to update the classifier after deploying codeNick Walker 2015-10-262-0/+27 | | | | | | | | | | | | | | | | | | | | This entailed configring the classifier to never sync on a schedule. Changing environment_timeout to unlimited for all masters. Setting a postrun command for r10k that would update the class information in the classifier (the update-classes endpoint). | * fix whitespaceNick Walker 2015-10-211-2/+2 | | | * Change the zack/r10k webhook to not authenticateNick Walker 2015-10-201-0/+2 | | | * Change to using the webhook without mcollectiveNick Walker 2015-10-164-13/+29 | | | | | | | | | | | | In order to complete the change I refactered the webhook into its own set of profiles, one with mcollective and the other without. | * Add some notifies to pe services after making changesNick Walker 2015-10-151-0/+2 | | | * Ensure /etc/gitlab/ssl exists before putting certs in itNick Walker 2015-09-241-0/+4 | | | * add modules for stash and a profile