git.lirion.de

Of git, get, and gud

aboutsummaryrefslogtreecommitdiffstats
path: root/manifests
Commit message (Collapse)AuthorAgeFilesLines
* Provide permalink for filebucket deprecation (#43)Alex Harden 2016-10-261-1/+1
| | | "Latest" stopped resolving several PE releases ago.
* Reduce the scope of the control-repo to mostly an exampleNick Walker 2016-03-291-8/+0
| | | | | | | | | | | | | | | | | | | Prior to this commit, the control-repo was an example of the structure of a control repo but it also included puppet code to help setup code manager and instructions to get that all setup in a very specific way. This was great for users that wanted to follow those instructions exactly but wasn't great for people just looking for an example to start from. After this commit, the control-repo will be just an example once again and a new repo somehwere else will pop up to provide the explicit instructions on how to use the example with code manager. There are links added to puppetlabs/control-repo to a new repo that will have a version of the code that once lived in puppetlabs/control-repo
* Disable file bucket to match default PE2015.3 behaviorNick Walker 2015-12-181-15/+4
|
* Merge branch 'production' of https://github.com/npwalker/control-repo into ↵Nick Walker 2015-11-241-3/+9
|\ | | | | | | merge_npwalker_control_repo
| * fix incorrect curly braceNick Walker 2015-10-221-1/+1
| |
| * fix site.pp to not include a role that is emptyNick Walker 2015-10-221-1/+4
| |
| * Fix some quoting issues and add role:: to the include in site.ppNick Walker 2015-08-131-1/+1
| |
| * Update site.pp to use a trusted fact roleNick Walker 2015-08-031-0/+5
| | | | | | | | | | | | Allow including a role if defined via a trusted fact on the node during provisioning time. This is how I will bootstrap any necessary configuration on the master, or other PE internal nodes.
| * Update site.pp to work OOTBNick Walker 2015-05-111-1/+1
| |
| * Initial CommitNick Walker 2015-01-131-0/+44
| | | | | | | | | | | Stole Gary's puppet_repository and modified it for general general consumption. Upped the version of r10k to newest (1.4.1) Ripped out the hiera examples just left defaults.yaml Tweaked environment.conf
* Add a site.ppNick Walker 2015-08-251-0/+45
I needed to modify the site.pp to use $servername so it would work out of the box and that is the closest thing to the current behavior.
© 2014-2019 lirion.de – served by cgit – All Rights Reverse Engineered
k and choose the correct one based on the version of PE being used. As a safety hatch, I provide the $force_zack_r10k_webhook param on profile::git_webhook in case someone needs to continue using it instead of code manager. * Move hiera.yaml to avoid file-sync overwriting itNick Walker 2015-12-181-1/+19 | | | | | | | | File sync appears to sync everything in the $codedir which inlcudes hiera.yaml. When managing hiera.yaml with puppet code you don't want file sync to overwrite its contents. So, I'm moving it out of $codedir and removing the original hiera.yaml to avoid confusion for users investigating later. * Final steps to make Code Manager workNick Walker 2015-12-185-33/+69 | | | | | | | | | | - Moved ssh key generation and git deploy key out of the puppetmaster profile and into zack_r10k and code_manager - Swapped code manager into the all_in_one role - Made a 2015.2 all_in_one role if users prefer to use it - Conditionally move all existing code out of environmentpath to allow file sync to sync files - Update the README to compliment the new puppet code * Chown files in codedir to pe-puppetNick Walker 2015-12-091-0/+6 | * Allow disabling authentication on code manager webhookNick Walker 2015-12-091-3/+12 | * Allow code_manager profile to not error out on first runNick Walker 2015-12-092-4/+43 | | | | | | | | | | | | | | Prior to this commit, the code manger profile could not complete on the first run because the file function would error out I implemented a new version of the file function that returns nothing when the file does not exist instead of erroring out which allows me to gate creating the webhook on whether there is content in the file. As a result this means that it takes 2 runs to get everything setup but this is preferable over having to manually intervene in some other way if the token file doesn't exist. * Refactor puppetmaster and zack_r10k_webhookNick Walker 2015-12-093-30/+12 | | | | | | | | | | Moved the webhook resource out of puppetmaster and into zack_r10k to support exchaning code_manager in place of zack_r10k As a result I cleaned up some unnecessary parameters. Installing both the r10k webhook and the code_manager at this time for testing * Add support for code manager which will replace zack r10kNick Walker 2015-12-094-1/+86 | | | | | | | | | | | | | | | Add pltraing-rbac module Added a new profile for code_manager that: - creates a service users for code manager - creates a token for that service user - creates a hook on a git server using the token Turns out that the file function in puppet cannot read files in /root. The pe-puppet user needs read permissions on the file and traversal on the directory which giving to /root would probably be a bad idea. So, I just put the file containing the token in /etc/puppetlabs/puppetserver since I'm not sure where would be better. * Add custom functions for determining some PE settingsNick Walker 2015-11-252-0/+17 | | | | | | Added a function to find the hostname and port of the classifier Added a fucntion to return all puppetdb hostnames * Merge branch 'production' of https://github.com/npwalker/control-repo into ↵Nick Walker 2015-11-2410-0/+205 |\ | | | | | | merge_npwalker_control_repo | * Change owner/group to pe-puppet for hiera moduleNick Walker 2015-11-171-2/+2 | | | | | | | | | | | | | | | | When the owner / group was root this meant that enabling hiera-eyaml wouldn't work properly as the keys couldn't be read by puppetserver. Changing to pe-puppet should resolve the issue. | * fixing a bunch of puppet lint warningsNick Walker 2015-10-303-10/+10 | | | * Refactor webhook profiles into one profile with a parameterNick Walker 2015-10-304-30/+24 | | | | | | | | | | | | | | | | Previously there was a mcollective and no_mcollective version of the webhook profile. They were almost identical so I merged them and manage the difference with a "use_mcollective" parameter. I renamed the webhook profile to zack_r10k_webhook. | * Change the zack/r10k webhook to utilize username and passwordNick Walker 2015-10-303-6/+24 | | | | | | | | | | | | | | To accomodate generating random usernames and passwords, I had to parameterize the profiles which I didn't feel great about but I also didn't want to have to put the username and pass in hiera. | * enable SSL on the zack/r10k webhookNick Walker 2015-10-292-2/+2 | | | * Add $::fqdn to post receive hook title