Commit Graph

27500 Commits

Author SHA1 Message Date
Patrick Uiterwijk
b716b258f6 Add PHP bits
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 10:48:31 +02:00
Patrick Uiterwijk
cb0848adb4 Add missing name:
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2019-05-11 08:44:39 +00:00
Patrick Uiterwijk
6f3808b191 fas: deploy the new yubikey components
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 10:40:52 +02:00
Patrick Uiterwijk
90221f0471 fas: Add yubikey dc bc and svc
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 10:38:51 +02:00
Patrick Uiterwijk
87bf6c3ea4 fas: Add yubikey configmap
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 10:30:01 +02:00
Patrick Uiterwijk
9890203336 fas: backport stupid patch
Just backport and apply this patch during build.
The reasons are too insane for words: cherrypy-2.3.0 is actually not compatible with the Cookie library
from Python2.5 and up, because they add carriage returns.
It actually never broke in production because mod_wsgi daemon mode will handle and toss the \r's.
But gunicorn in EL6 has a backported security fix that throws the header entirely out.

This just took me way too deep down the stacks.

Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 02:40:31 +02:00
Patrick Uiterwijk
27e4136913 Add backport for really annoying bug to cherrypy
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 02:38:42 +02:00
Patrick Uiterwijk
f81afda358 Attempt to set up gunicorn
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 01:29:07 +02:00
Patrick Uiterwijk
ab15105711 Start with 1 replica for now for testing
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 00:45:51 +02:00
Patrick Uiterwijk
20b1ed593a Prefix calls to scripts with bash
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 00:45:32 +02:00
Patrick Uiterwijk
8d3b24ba2f fas: update service and routes with new names
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 00:43:18 +02:00
Patrick Uiterwijk
67a0f616b2 fas: some static fixes
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 00:40:42 +02:00
Patrick Uiterwijk
f35c7220f5 fas: separate static from non-static
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-11 00:28:39 +02:00
Patrick Uiterwijk
02320458d1 fas: move to worker MPM
This reverts commit 159d5e5a6f.
2019-05-10 23:04:27 +02:00
Randy Barlow
71028b6bf0 bodhi: Create a bodhi queue.
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
2019-05-10 21:00:08 +00:00
Patrick Uiterwijk
159d5e5a6f Sync httpd config with el6
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 22:52:54 +02:00
Kevin Fenzi
54d8b15a04 batcave01: also add sysadmin-copr here or adding it to bastion does no good.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-10 20:47:34 +00:00
Patrick Uiterwijk
a4332d2d86 fas: remove rhel7-isms
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 22:40:57 +02:00
Randy Barlow
81eb60d72b bodhi: Create a queue for Bodhi in Rabbit.
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
2019-05-10 20:40:09 +00:00
Kevin Fenzi
6054632d42 bastion: add sysadmin-copr
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-10 20:26:46 +00:00
Patrick Uiterwijk
f839e60271 fas: remove extra &&
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 22:16:47 +02:00
Patrick Uiterwijk
788c027580 fas: add && at the end
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 22:16:47 +02:00
Patrick Uiterwijk
14690255ff Secret names msut be with hyphen not underscore
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
2019-05-10 19:59:06 +00:00
Patrick Uiterwijk
65a3d2281e fas: add secret_name vars
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 21:56:59 +02:00
Patrick Uiterwijk
3288e5fd8c Sync out keytab as secret
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 21:55:29 +02:00
Patrick Uiterwijk
266eecc0fe Revert concat changes - {{}} does work
This reverts commit 3c493feba9.
2019-05-10 21:45:21 +02:00
Patrick Uiterwijk
3c493feba9 Fix one more string
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 21:25:47 +02:00
Randy Barlow
8ac5d901ef bodhi: Give bodhi a RabbitMQ user.
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
2019-05-10 19:24:39 +00:00
Patrick Uiterwijk
d386e0e14d fas: Attempt string concaT
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 21:23:55 +02:00
Patrick Uiterwijk
41e7ab082b fas: define vars
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 21:20:05 +02:00
Patrick Uiterwijk
a391d85161 fas: add all config files
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 21:16:40 +02:00
Patrick Uiterwijk
685ae8aa3a Keytabs will go in the etc
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 20:55:09 +02:00
Patrick Uiterwijk
9cc9707f57 fas: fix combining layers
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 20:52:05 +02:00
Kevin Fenzi
4c41c807dd virthost-os: Add cloud datacenter so resolv.conf works.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-10 18:50:59 +00:00
Patrick Uiterwijk
b1bfae6db8 fas: combine various build layers
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 20:49:46 +02:00
Patrick Uiterwijk
9fbf1f63b8 fas: make epel6 not overwrite rhel6
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 20:49:46 +02:00
Kevin Fenzi
83c4734c43 fedorainfracloud / resolv.conf: remove old tummy unbound ip and replace with rdu2.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2019-05-10 18:48:48 +00:00
Patrick Uiterwijk
2bcdfab82b fas: add epel6
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 20:43:56 +02:00
Patrick Uiterwijk
2d3bad95c4 fas: rherl -> rhel
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 20:41:35 +02:00
Patrick Uiterwijk
6fde08c0fa fas: RHEL6 had yum, not dnf
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 20:40:04 +02:00
Patrick Uiterwijk
896cefc0aa Add service-fas.yml
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 20:37:44 +02:00
Randy Barlow
d1e95f01f3 bodhi: The RateLimiter setting should be a string.
I don't know TOML.

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
2019-05-10 18:19:54 +00:00
Stephen Smoogen
7778e014f0 when making a new playbook always make sure you give the hosts the correct name. ansible will just keep running and will say it completed everything even if nothing got done. 2019-05-10 18:19:04 +00:00
Randy Barlow
179a661add bodhi: Quote a messaging config key.
It seems that fedora-messaging did not approve of my config, with
this error:

fedora-messaging[17633]: Error: Invalid value: Configuration error:
Failed to parse /etc/fedora-messaging/config.toml: error at line
44, column 2: Found invalid character in key name: ')'. Try quoting
the key name.

So I'm trying to quote the key name. Wish me luck!

Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
2019-05-10 18:10:57 +00:00
Stephen Smoogen
f794e1fe5f try and use the correct kickstart 2019-05-10 17:58:12 +00:00
Patrick Uiterwijk
b4ff9a9460 Ipsilon: prepare saml2 metadata before start
Signed-off-by: Patrick Uiterwijk <patrick@puiterwijk.org>
2019-05-10 19:55:58 +02:00
Stephen Smoogen
53a3b35cbd ok 30 crashed and burned. back off to 29? 2019-05-10 17:41:16 +00:00
Stephen Smoogen
887da3a225 make a basic playbook for a box we will probably throwaway later 2019-05-10 17:13:06 +00:00
Stephen Smoogen
a84ca8e339 add basic grobisplitter items 2019-05-10 17:13:06 +00:00
Randy Barlow
7b58a639a2 bodhi: StreamHandler isn't in logging.handlers (lolwut)
Signed-off-by: Randy Barlow <randy@electronsweatshop.com>
2019-05-10 17:08:40 +00:00