Patrick Uiterwijk
b716b258f6
Add PHP bits
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 10:48:31 +02:00
Patrick Uiterwijk
cb0848adb4
Add missing name:
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2019-05-11 08:44:39 +00:00
Patrick Uiterwijk
6f3808b191
fas: deploy the new yubikey components
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 10:40:52 +02:00
Patrick Uiterwijk
90221f0471
fas: Add yubikey dc bc and svc
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 10:38:51 +02:00
Patrick Uiterwijk
87bf6c3ea4
fas: Add yubikey configmap
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 10:30:01 +02:00
Patrick Uiterwijk
9890203336
fas: backport stupid patch
...
Just backport and apply this patch during build.
The reasons are too insane for words: cherrypy-2.3.0 is actually not compatible with the Cookie library
from Python2.5 and up, because they add carriage returns.
It actually never broke in production because mod_wsgi daemon mode will handle and toss the \r's.
But gunicorn in EL6 has a backported security fix that throws the header entirely out.
This just took me way too deep down the stacks.
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 02:40:31 +02:00
Patrick Uiterwijk
27e4136913
Add backport for really annoying bug to cherrypy
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 02:38:42 +02:00
Patrick Uiterwijk
f81afda358
Attempt to set up gunicorn
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 01:29:07 +02:00
Patrick Uiterwijk
ab15105711
Start with 1 replica for now for testing
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 00:45:51 +02:00
Patrick Uiterwijk
20b1ed593a
Prefix calls to scripts with bash
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 00:45:32 +02:00
Patrick Uiterwijk
8d3b24ba2f
fas: update service and routes with new names
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 00:43:18 +02:00
Patrick Uiterwijk
67a0f616b2
fas: some static fixes
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 00:40:42 +02:00
Patrick Uiterwijk
f35c7220f5
fas: separate static from non-static
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-11 00:28:39 +02:00
Patrick Uiterwijk
02320458d1
fas: move to worker MPM
...
This reverts commit 159d5e5a6f .
2019-05-10 23:04:27 +02:00
Randy Barlow
71028b6bf0
bodhi: Create a bodhi queue.
...
Signed-off-by: Randy Barlow <randy@electronsweatshop.com >
2019-05-10 21:00:08 +00:00
Patrick Uiterwijk
159d5e5a6f
Sync httpd config with el6
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 22:52:54 +02:00
Kevin Fenzi
54d8b15a04
batcave01: also add sysadmin-copr here or adding it to bastion does no good.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-05-10 20:47:34 +00:00
Patrick Uiterwijk
a4332d2d86
fas: remove rhel7-isms
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 22:40:57 +02:00
Randy Barlow
81eb60d72b
bodhi: Create a queue for Bodhi in Rabbit.
...
Signed-off-by: Randy Barlow <randy@electronsweatshop.com >
2019-05-10 20:40:09 +00:00
Kevin Fenzi
6054632d42
bastion: add sysadmin-copr
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-05-10 20:26:46 +00:00
Patrick Uiterwijk
f839e60271
fas: remove extra &&
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 22:16:47 +02:00
Patrick Uiterwijk
788c027580
fas: add && at the end
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 22:16:47 +02:00
Patrick Uiterwijk
14690255ff
Secret names msut be with hyphen not underscore
...
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com >
2019-05-10 19:59:06 +00:00
Patrick Uiterwijk
65a3d2281e
fas: add secret_name vars
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 21:56:59 +02:00
Patrick Uiterwijk
3288e5fd8c
Sync out keytab as secret
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 21:55:29 +02:00
Patrick Uiterwijk
266eecc0fe
Revert concat changes - {{}} does work
...
This reverts commit 3c493feba9 .
2019-05-10 21:45:21 +02:00
Patrick Uiterwijk
3c493feba9
Fix one more string
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 21:25:47 +02:00
Randy Barlow
8ac5d901ef
bodhi: Give bodhi a RabbitMQ user.
...
Signed-off-by: Randy Barlow <randy@electronsweatshop.com >
2019-05-10 19:24:39 +00:00
Patrick Uiterwijk
d386e0e14d
fas: Attempt string concaT
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 21:23:55 +02:00
Patrick Uiterwijk
41e7ab082b
fas: define vars
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 21:20:05 +02:00
Patrick Uiterwijk
a391d85161
fas: add all config files
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 21:16:40 +02:00
Patrick Uiterwijk
685ae8aa3a
Keytabs will go in the etc
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 20:55:09 +02:00
Patrick Uiterwijk
9cc9707f57
fas: fix combining layers
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 20:52:05 +02:00
Kevin Fenzi
4c41c807dd
virthost-os: Add cloud datacenter so resolv.conf works.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-05-10 18:50:59 +00:00
Patrick Uiterwijk
b1bfae6db8
fas: combine various build layers
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 20:49:46 +02:00
Patrick Uiterwijk
9fbf1f63b8
fas: make epel6 not overwrite rhel6
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 20:49:46 +02:00
Kevin Fenzi
83c4734c43
fedorainfracloud / resolv.conf: remove old tummy unbound ip and replace with rdu2.
...
Signed-off-by: Kevin Fenzi <kevin@scrye.com >
2019-05-10 18:48:48 +00:00
Patrick Uiterwijk
2bcdfab82b
fas: add epel6
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 20:43:56 +02:00
Patrick Uiterwijk
2d3bad95c4
fas: rherl -> rhel
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 20:41:35 +02:00
Patrick Uiterwijk
6fde08c0fa
fas: RHEL6 had yum, not dnf
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 20:40:04 +02:00
Patrick Uiterwijk
896cefc0aa
Add service-fas.yml
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 20:37:44 +02:00
Randy Barlow
d1e95f01f3
bodhi: The RateLimiter setting should be a string.
...
I don't know TOML.
Signed-off-by: Randy Barlow <randy@electronsweatshop.com >
2019-05-10 18:19:54 +00:00
Stephen Smoogen
7778e014f0
when making a new playbook always make sure you give the hosts the correct name. ansible will just keep running and will say it completed everything even if nothing got done.
2019-05-10 18:19:04 +00:00
Randy Barlow
179a661add
bodhi: Quote a messaging config key.
...
It seems that fedora-messaging did not approve of my config, with
this error:
fedora-messaging[17633]: Error: Invalid value: Configuration error:
Failed to parse /etc/fedora-messaging/config.toml: error at line
44, column 2: Found invalid character in key name: ')'. Try quoting
the key name.
So I'm trying to quote the key name. Wish me luck!
Signed-off-by: Randy Barlow <randy@electronsweatshop.com >
2019-05-10 18:10:57 +00:00
Stephen Smoogen
f794e1fe5f
try and use the correct kickstart
2019-05-10 17:58:12 +00:00
Patrick Uiterwijk
b4ff9a9460
Ipsilon: prepare saml2 metadata before start
...
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org >
2019-05-10 19:55:58 +02:00
Stephen Smoogen
53a3b35cbd
ok 30 crashed and burned. back off to 29?
2019-05-10 17:41:16 +00:00
Stephen Smoogen
887da3a225
make a basic playbook for a box we will probably throwaway later
2019-05-10 17:13:06 +00:00
Stephen Smoogen
a84ca8e339
add basic grobisplitter items
2019-05-10 17:13:06 +00:00
Randy Barlow
7b58a639a2
bodhi: StreamHandler isn't in logging.handlers (lolwut)
...
Signed-off-by: Randy Barlow <randy@electronsweatshop.com >
2019-05-10 17:08:40 +00:00