git.lirion.de

Of git, get, and gud

about summary refs log tree commit diff stats

Mode	Name	Size
-rw-r--r--	all_in_one_pe.pp	133	log stats plain
-rw-r--r--	database_server.pp	206	log stats plain
-rw-r--r--	example.pp	25	log stats plain
-rw-r--r--	gitlab.pp	51	log stats plain
-rw-r--r--	webserver.pp	194	log stats plain

preferable over having to manually intervene in some other way if the token file doesn't exist. * Refactor puppetmaster and zack_r10k_webhookNick Walker 2015-12-092-18/+9 | | | | | | | | | | Moved the webhook resource out of puppetmaster and into zack_r10k to support exchaning code_manager in place of zack_r10k As a result I cleaned up some unnecessary parameters. Installing both the r10k webhook and the code_manager at this time for testing * Add support for code manager which will replace zack r10kNick Walker 2015-12-094-1/+86 | | | | | | | | | | | | | | | Add pltraing-rbac module Added a new profile for code_manager that: - creates a service users for code manager - creates a token for that service user - creates a hook on a git server using the token Turns out that the file function in puppet cannot read files in /root. The pe-puppet user needs read permissions on the file and traversal on the directory which giving to /root would probably be a bad idea. So, I just put the file containing the token in /etc/puppetlabs/puppetserver since I'm not sure where would be better. * Merge branch 'production' of https://github.com/npwalker/control-repo into ↵Nick Walker 2015-11-246-0/+170 |\ | | | | | | merge_npwalker_control_repo | * Change owner/group to pe-puppet for hiera moduleNick Walker 2015-11-171-2/+2 | | | | | | | | | | | | | | | | When the owner / group was root this meant that enabling hiera-eyaml wouldn't work properly as the keys couldn't be read by puppetserver. Changing to pe-puppet should resolve the issue. | * fixing a bunch of puppet lint warningsNick Walker 2015-10-302-9/+9 | | | * Refactor webhook profiles into one profile with a parameterNick Walker 2015-10-303-29/+23 | | | | | | | | | | | | | | | | Previously there was a mcollective and no_mcollective version of the webhook profile. They were almost identical so I merged them and manage the difference with a "use_mcollective" parameter. I renamed the webhook profile to zack_r10k_webhook. | * Change the zack/r10k webhook to utilize username and passwordNick Walker 2015-10-302-4/+12 | | | | | | | | | | | | | | To accomodate generating random usernames and passwords, I had to parameterize the profiles which I didn't feel great about but I also didn't want to have to put the username and pass in hiera. | * enable SSL on the zack/r10k webhook