antpro/infra
1
0
Fork 0
forked from saratov/infra
Code Issues Pull Requests Projects Releases Wiki Activity
102 Commits 2 Branches 2 Tags 210 KiB
390cfa18d3
Commit Graph

74 Commits

Author SHA1 Message Date
Evgeny Sinelnikov
34de85486e roles/pve/tasks/{create_vm,destroy_vm,enable_vlans}: Rename node srv to pve 2021-07-04 05:48:29 +04:00
Ivan A. Melnikov
51ec2730b8 roles/kerberos5: Drop single-DES enctypes 
Beginning with the krb5-1.18 release, single-DES encryption
types are no longer supported, and KDC (as well as some
utilities  like kadmin.local) refuses to work when such
enctypes are present in configuration.
 2020-02-16 00:03:22 +04:00
Igor Chudov
547f85e73b
Don't ignore stop errors 2020-01-13 20:54:35 +04:00
Igor Chudov
03362c0ecf
Increase timeouts on Proxmox actions 2019-11-20 17:09:23 +04:00
Sergey Bubnov (omg)
ef92e28885 update tester role with abstract exploit executor 2019-07-19 17:34:30 +04:00
omgbebebe
1208e753f8
Merge pull request #9 from altlinuxteam/kerberos5-idempotency 
Make Kerberos 5 role idempotent
 2019-07-17 17:05:48 +04:00
Igor Chudov
feccab9e96
Make Kerberos 5 role idempotent 2019-07-17 16:47:19 +04:00
Sergey Bubnov (omg)
a4d31494a5 initial tester role 2019-07-17 14:07:49 +04:00
Igor Chudov
e2af2cbd43 Disabled resolv.conf workarounds for 'systemd-networkd' 2019-07-03 19:19:17 +04:00
Igor Chudov
f63df41138 krb5.conf.j2 - consistently use uppercase and lowercase names 2019-07-03 19:19:17 +04:00
Igor Chudov
f550d0bac9 Role to deploy Kerberos 5 KDC and client introduced 2019-07-03 19:19:17 +04:00
Sergey Bubnov (omg)
284cc6c782 [bind-role] support zones forwarding 2019-06-30 21:49:13 +04:00
Sergey Bubnov (omg)
d026de558d fix bind unit file 2019-06-30 14:18:23 +04:00
Sergey Bubnov (omg)
71cdc425fd put rndc.key to the right place 2019-06-30 13:21:08 +04:00
Sergey Bubnov (omg)
8559e1f3d3 bump submodules commits 2019-06-30 12:41:55 +04:00
Sergey Bubnov (omg)
c2ac109686 use static rndc.key; set localhost as a dns-resolver 2019-06-30 12:39:20 +04:00
Sergey Bubnov (omg)
aa46353af2 allow define network ranges in dhcp config 2019-06-29 15:11:26 +04:00
Sergey Bubnov (omg)
5ebb841c94 fix fetch key in bind role 2019-06-29 15:07:15 +04:00
Sergey Bubnov (omg)
7beb947254 fix fetch key in bind role 2019-06-29 01:27:51 +04:00
Sergey Bubnov (omg)
8dc65328a3 new nginx role 2019-06-29 01:27:16 +04:00
Sergey Bubnov (omg)
859e2575e0 set sisyphus as platform when no node.platform is defined 2019-06-28 16:43:36 +04:00
Sergey Bubnov (omg)
5904a7d0ba use full branch path from env 2019-06-27 14:44:18 +04:00
Sergey Bubnov (omg)
3cdfbf81f3 use url for apt from env 2019-06-27 14:29:55 +04:00
Sergey Bubnov (omg)
f3be7f5c9e fix apt.sources template 2019-06-27 14:15:59 +04:00
Sergey Bubnov (omg)
a9f3258cd9 use keyname and branch prefix from env 2019-06-27 14:09:53 +04:00
Sergey Bubnov (omg)
d89c7ab77e prevent wrong behaviour when more than one dhcp on interfaces 
firts we check that the VM has already get some IP address
and if so we just deploy as usual. If VM have no IP address
on any interface we throw all interfaces except first (eth0) to
the `empty vlan` that have no DHCP server enabled. VLAD ID defined
in environment variable. After network configuration inside VM we
restore propper VLAN IDs on all interfaces. This approach should help
in situations when DHCP available on more than one interfaces and those
interfaces configured as dhcp-clients, thus more than one default gw
will be configured with some metrics and all traffic will be routed
to the right one or will be not.
 2019-06-27 13:21:48 +04:00
Sergey Bubnov (omg)
d0893b87df fix key distribution in bind role 2019-06-27 13:11:40 +04:00
Sergey Bubnov (omg)
d5bf5d23f8 fix default(omit) behaviour 2019-06-26 17:54:02 +04:00
Sergey Bubnov (omg)
2fa7099cbb omit nameserver when undefined 2019-06-26 16:53:24 +04:00
Sergey Bubnov (omg)
aad9337422 omit searchdomain when undefined 2019-06-26 16:45:24 +04:00
Sergey Bubnov (omg)
7913775562 new bind configuration fix 2019-06-26 16:40:14 +04:00
Sergey Bubnov (omg)
b242e30184 support for cloud-init on pve 2019-06-26 16:20:56 +04:00
Igor Chudov
b3f53c4c5e
[ODDJOB-18] Disable 'vagrant' user 
We have boxes built for both Vagrant and testing purposes. We don't
need 'vagrant' user when performing tests so this step deletes this
user completely from the VM.
 2019-06-24 16:03:41 +04:00
Sergey Bubnov
101b41e462 configure PBR after interfaces has come back 2019-06-05 11:10:05 +04:00
Sergey Bubnov
e6eb7015fe check for ip rules existence 2019-06-05 10:41:52 +04:00
Sergey Bubnov
02982f4b66 configure pbr after alterator`s commit 2019-06-04 20:39:17 +04:00
Sergey Bubnov
c7c3317689 use etcnet to configure PBR 2019-06-04 20:23:15 +04:00
Sergey Bubnov
0c285e5bff do not add default gw on priv nics 2019-06-04 18:50:36 +04:00
Sergey Bubnov
d8ce4d57bb fix PBR definitions 2019-06-04 17:46:38 +04:00
Sergey Bubnov
23885617af define PBR when nics count more than one 2019-06-04 16:55:09 +04:00
Sergey Bubnov
59f214ffd7 Revert "disable rp_filter on all interfaces" 
It's useless on client workstations
 2019-06-04 15:19:19 +04:00
Sergey Bubnov
6caf9144d7 disable rp_filter on all interfaces 2019-06-04 14:18:34 +04:00
Sergey Bubnov
e63dc2e79c force stop the VM 2019-05-25 15:05:52 +04:00
Sergey Bubnov
ed5f51053f fix apt and rpm upgrade 2019-05-24 19:30:49 +04:00
Sergey Bubnov
f6386f555b dist-upgrade all nodes 2019-05-24 16:06:30 +04:00
Sergey Bubnov
247db72ed8 set hostane and domainname via alterator computer_name 2018-11-21 12:18:02 +04:00
Sergey Bubnov
63f42eb419 add opennebula role as a submodule 2018-11-14 11:46:37 +04:00
Sergey Bubnov
63c6f80fb3 check tasks list length 2018-11-08 11:43:45 +04:00
Sergey Bubnov
0ce23b4f80 use yes in apt-get install 2018-11-07 17:42:57 +04:00
Sergey Bubnov
529e09583b update packages in case of tasks is defined 2018-11-07 17:27:30 +04:00