Commit Graph

169 Commits

Author SHA1 Message Date
Karsten Hopp
60c2d50072 openvpn: dnf -> package, with_item changes 2019-06-11 15:00:23 +00:00
Stephen Smoogen
ed6ff61a6f [repospanner] add vpn push files for hosts 2019-03-22 19:19:33 +00:00
Rick Elrod
baf7ab6181 move this to cc-rdu01
Signed-off-by: Rick Elrod <relrod@redhat.com>
2019-02-20 02:25:24 +00:00
David Shier
c0f45892ff Removed all traces i could fild of the tagger and statscache (and stats_cache for databases) in ansible, proxy configs, and the nagios config. Pursuant to request in pagzre issue https://pagure.io/fedora-infrastructure/issue/7267 . - Odin2016 2018-10-03 17:50:38 +00:00
Kevin Fenzi
bcc42fad9c Add back a client.conf for rhel6 hosts (fas servers) 2018-09-29 18:28:39 +00:00
Kevin Fenzi
514d2b75ef also masters get messed up by this 2018-09-27 23:10:46 +00:00
Kevin Fenzi
6ca94af4e4 Openshift redeploy to production.
Add 3 more nodes (we might use one later for staging)
move to latest openshift ansible
Change config to do multitenant, have logs and other config tweaks.
2018-09-27 21:04:49 +00:00
Patrick Uiterwijk
325155810b Actually use the ansible hostname
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-09-18 05:51:46 +02:00
Patrick Uiterwijk
8ad630412f Make OpenVPN use tun1 for os-node's
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2018-09-18 05:49:15 +02:00
Kevin Fenzi
d84e1df896 Rename the openvpn ccd file so the new oci-candidate-registry01 gets the right vpn ip 2018-08-22 14:49:04 +00:00
Rick Elrod
9a5b1cdc29 update vpn creds
Signed-off-by: Rick Elrod <relrod@redhat.com>
2018-08-21 18:54:46 +00:00
Patrick Uiterwijk
64f17dd5f7 Also fix paths for el6
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-17 04:55:48 +00:00
Patrick Uiterwijk
78ae75ac8a Fix client cert paths
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-17 04:39:50 +00:00
Patrick Uiterwijk
7b90e30af8 Fix directory name
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-17 04:32:29 +00:00
Patrick Uiterwijk
7016d073a0 Fix up dh2048 path
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-17 04:31:42 +00:00
Patrick Uiterwijk
a1b11705e7 Fix ca.crt path
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-17 04:30:09 +00:00
Patrick Uiterwijk
758af3f7d6 Make bastion use new server cert
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-08-17 04:28:14 +00:00
Kevin Fenzi
aae396bee5 add repospanner instance 2018-08-11 10:24:34 +00:00
Stephen Smoogen
7d853af43b how this worked before is not good 2018-07-10 19:02:14 +00:00
Stephen Smoogen
3db30a5396 add in ccd for download server 2018-07-01 23:28:55 +00:00
Rick Elrod
ffcafa61da add ccd for smtp-mm-cc-rdu01
Signed-off-by: Rick Elrod <relrod@redhat.com>
2018-06-28 19:12:28 +00:00
Mikolaj Izdebski
0879897677 Add missing openvpn config for koschei-web02 2018-05-22 04:02:38 +00:00
Patrick Uiterwijk
2948514084 Use the variable, not the string
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-01-02 02:14:00 +00:00
Patrick Uiterwijk
543acabdb1 Try to ensure that haproxy and varnish get started after VPN comes up on proxies
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2018-01-02 02:11:43 +00:00
Kevin Fenzi
fc484f796c drop some old openvpn stuff 2017-11-25 21:44:59 +00:00
Patrick Uiterwijk
c3e5a23426 Add ccd files
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-23 14:19:11 +00:00
Patrick Uiterwijk
65a6ad06f2 This service does not exist on newly installed boxes
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-11-21 23:07:56 +00:00
Patrick Uiterwijk
50b92d5e54 Nuke transitional datanommer and new db-datanommer01
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-17 22:36:16 +00:00
Patrick Uiterwijk
936e8b261a yum accepted pkg=, package calls it name=
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2017-10-09 00:38:26 +02:00
Patrick Uiterwijk
adcbf72f03 Packageize this, packageize that, packageize the world
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-08 22:25:52 +00:00
Patrick Uiterwijk
466f5c184d add transitional-datanommer01 ccd file
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-10-05 11:25:46 +00:00
Patrick Uiterwijk
d318a7a2b0 Add certgetter01 ccd file
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-09-09 23:27:40 +00:00
Ralph Bean
e6e1faded6 VPN ccd entries for odcs and freshmaker. 2017-08-31 14:48:44 +00:00
Kevin Fenzi
0ed471745c add correct tags here so openvpn is installed 2017-08-22 22:47:14 +00:00
Kevin Fenzi
ab36495dd9 add vpn client and ccd files for os cluster 2017-08-22 21:40:12 +00:00
Ricky Elrod
627708c0ba Initial attempt at docker-registry02.phx2 and docker-registry03.phx2
Signed-off-by: Ricky Elrod <codeblock@fedoraproject.org>
2017-07-19 18:15:59 +00:00
Kevin Fenzi
273093ecbb put server ccd files under server subdir 2017-05-15 02:34:31 +00:00
Kevin Fenzi
881735b5eb another corner case since f24 has systemd and el6 does not 2017-05-14 23:45:27 +00:00
Kevin Fenzi
5055c83e85 and try and handle f24 here too 2017-05-14 23:39:39 +00:00
Kevin Fenzi
636d7623ad try and use correct logic 2017-05-14 23:36:21 +00:00
Kevin Fenzi
489dd32e32 and also handle it here 2017-05-14 23:30:27 +00:00
Kevin Fenzi
52318bbc49 try and handle cases for f24 not being updated to the new setup either 2017-05-14 23:26:45 +00:00
Kevin Fenzi
f381865238 handle server dh file 2017-05-14 22:31:19 +00:00
Kevin Fenzi
f12de13a1f someday I will get these versions all right 2017-05-14 21:59:08 +00:00
Kevin Fenzi
50c070a79b fix version here too 2017-05-14 21:56:00 +00:00
Kevin Fenzi
8c4162eaa4 fix version for rhel 2017-05-14 21:54:22 +00:00
Kevin Fenzi
714506a905 handle poor old rhel6 2017-05-14 21:51:47 +00:00
Kevin Fenzi
f400f56c6b fix handlers and disable notify for now until we roll this out 2017-05-14 21:38:08 +00:00
Kevin Fenzi
4629c0aa58 also install the ca in the right place 2017-05-14 21:02:27 +00:00
Patrick Uiterwijk
4cc1b78ff3 Check the certificate key usage
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2017-05-14 20:57:39 +00:00