Commit Graph

77 Commits

Author SHA1 Message Date
Abir Majumdar
d7b56a3f52
Adding FollowSymLinks 2019-01-09 13:59:49 -05:00
Abir Majumdar
044b982429
Adding ntp to linux progile 2019-01-08 21:44:24 -05:00
Abir Majumdar
70c5f6cc6a
removing ntp 2019-01-08 20:40:47 -05:00
Abir Majumdar
581932ef2a
Removing firewall 2018-09-26 11:37:23 -07:00
Abir Majumdar
c28415873c
Update linux_baseline.pp 2018-09-26 10:47:34 -07:00
Abir Majumdar
66198d77e4
Update linux_baseline.pp 2018-09-21 10:52:58 -07:00
Abir Majumdar
5f13826f51
Removing trailing space 2018-09-21 10:41:52 -07:00
Abir Majumdar
141ffa1920
Update linux_baseline.pp 2018-09-21 10:30:12 -07:00
Abir Majumdar
ce4a8ef917
Update linux.pp 2018-09-18 01:05:20 -04:00
Abir Majumdar
ab9b0c25f9
Fixing formatting again 2018-09-18 01:04:11 -04:00
Abir Majumdar
b5dce88810
Fixing formatting issue 2018-09-18 01:00:35 -04:00
Abir Majumdar
753585482d
Update linux.pp 2018-09-18 00:58:27 -04:00
Abir Majumdar
f218f21ac3
Update windows.pp 2018-09-14 15:22:22 -07:00
Abir Majumdar
97da4055a4
Update windows_baseline.pp 2018-09-14 15:07:36 -07:00
Abir Majumdar
2fb2018d64
Update windows_baseline.pp 2018-09-14 14:53:02 -07:00
Abir Majumdar
d993c90a0d
Update windows.pp 2018-09-14 12:09:30 -07:00
Abir Majumdar
184a35c59b
Merge pull request #17 from maju6406/maju6406-patch-11
Adding compliance classes
2018-09-14 09:50:06 -07:00
maju6406
d5c259a7b9 Adding compliance classes 2018-09-14 09:46:46 -07:00
Abir Majumdar
db60c7f667
Removing user 2018-09-13 12:53:39 -07:00
Abir Majumdar
856b070104
Update windows_baseline.pp 2018-09-13 12:49:46 -07:00
Abir Majumdar
51c3fb1244
Update windows_baseline.pp 2018-09-13 12:37:23 -07:00
Abir Majumdar
09cdf7d217
Updating user 2018-09-13 12:28:37 -07:00
Abir Majumdar
bc474cd5ca
Updating user password 2018-09-13 12:25:10 -07:00
Abir Majumdar
14a0d8ccd9
Update windows_baseline.pp 2018-09-10 17:18:33 -07:00
Abir Majumdar
f99ca0ab41
Update windows_baseline.pp 2018-09-10 11:39:46 -07:00
maju6406
1f5ef05c21 Fixing vro 2018-08-20 22:56:55 -07:00
maju6406
982fdb659b Fixing require 2018-08-20 22:55:20 -07:00
maju6406
97ba73f13d Fixing linting issues 2018-08-20 22:52:05 -07:00
maju6406
9bde731d14 Syncing with starter content 2018-08-20 22:16:14 -07:00
Nick Walker
b3519dd48c Move stash profile out to its own 'profile' module
Prior to this commit, there was a stash profile in the site dir
of this control-repo.

After this commit, the profile has been moved to it's own repo
where it can be used more generally and not tightly coupled to this
repository.
2016-03-24 14:07:16 -07:00
Nick Walker
ff6f140529 Move gitlab profile out to its own 'profile' module
Prior to this commit, there was a gitlab profile in the site dir
of this control-repo.

After this commit, the profile has been moved to it's own repo
where it can be used more generally and not tightly coupled to this
repository.

As a result, the gitlab role has been removed from this repository
as well.
2016-03-24 08:27:17 -07:00
Nick Walker
9503f54349 Move puppetmaster profile to rampup_profile_puppetmaster module
Prior to this commit, the puppetmaster profile was embedded in this
control-repo.

After this commit, the puppetmaster profile is moved out into its
own module.
2016-03-23 15:55:58 -07:00
Nick Walker
00d3aa1f4f Move profile::git_webhook into seperate module pe_code_manager_webhook
Prior to this commit the functionality to setup the either code
manager or zack/r10k was tightly coupled to this control-repo. In
an effort to make that functionality useful to more people we're
splitting it into a dedicated module.

After this commit, the pe_code_manager_webhook module will contain all logic
around setting up the webhook while this control-repo will still
gloss over the details needed to get everything in PE setup correctly
to use that module.

This commit removes the files associated with the profile including
some custom functions that were only there to make it work.

This commit removes the all_in_one_pe_2015_2 role as it was exactly
the same as the all_in_one_pe role.

This commit modifies all_in_one_pe to use the pe_code_manager_webhook module
instead of the profile.
2016-03-17 14:33:01 -07:00
Patrick St. Jean
b415200eb0 Fixed code so hunner/hiera can be pulled from forge 2016-02-04 11:34:52 -06:00
Nick Walker
3f22ce0ae7 Fix hostname on role creation curl command
Prior to the this commit, if you were using the code_manager
profile on a split install it would incorrectly try to curl the
NC api on the master node.

After this commit, it should correctly curl the hostname of the NC

This has no impact on the functionality of the code on a monolithic
PE installation.
2016-01-12 09:32:06 -08:00
Nick Walker
508b9cc600 Move hiera_config to main section of puppet.conf
If it is in master instead of main then puppet apply will give a
warning.
2016-01-06 15:26:08 -08:00
Nick Walker
ad00dd7a9a Add an exec to create the Deploy Environments RBAC Role
Prior to this commit there was a requirement for the user of this
repo to create a RBAC role in order for code manager to work.

After this commit an exec statement will curl the RBAC API to
create the role one time and hopefully it works otherwise the exec
will not run again.
2015-12-28 16:42:40 -08:00
Nick Walker
ec7a8d81a6 Add functionality to disable the zack/r10k webhook
Prior to this commit, if you upgraded from a previous version of
the control-repo both code manager and zack/r10k webhook would
be running and ready to receive data.  This can present problems
if the webhook isn't disbled in the git management system is
sending data to both receivers.

This commit adds rudimentary ability to break the zack/r10k
webhook so it can't receive data.
2015-12-21 15:52:15 -08:00
Nick Walker
d2db275028 Create profile::git_webhook to abstract away the details
Prior to this commit there were two possible webhooks
 - zack/r10k webhook
 - code manager

I moved these two profiles under git_webhook and choose the correct
one based on the version of PE being used.

As a safety hatch, I provide the $force_zack_r10k_webhook param
on profile::git_webhook in case someone needs to continue using it
instead of code manager.
2015-12-21 15:19:38 -08:00
Nick Walker
b8d4980f86 Move hiera.yaml to avoid file-sync overwriting it
File sync appears to sync everything in the $codedir which
inlcudes hiera.yaml.  When managing hiera.yaml with puppet code
you don't want file sync to overwrite its contents.  So, I'm
moving it out of $codedir and removing the original hiera.yaml
to avoid confusion for users investigating later.
2015-12-18 09:24:27 -08:00
Nick Walker
cc34e25fd5 Final steps to make Code Manager work
- Moved ssh key generation and git deploy key out of the puppetmaster
profile and into zack_r10k and code_manager
- Swapped code manager into the all_in_one role
- Made a 2015.2 all_in_one role if users prefer to use it
- Conditionally move all existing code out of environmentpath
to allow file sync to sync files
- Update the README to compliment the new puppet code
2015-12-18 09:22:44 -08:00
Nick Walker
1b0f63be83 Chown files in codedir to pe-puppet 2015-12-09 09:46:56 -08:00
Nick Walker
6ac2b30b38 Allow disabling authentication on code manager webhook 2015-12-09 09:46:45 -08:00
Nick Walker
b71ab8d42e Allow code_manager profile to not error out on first run
Prior to this commit, the code manger profile could not complete
on the first run because the file function would error out

I implemented a new version of the file function that returns
nothing when the file does not exist instead of erroring out which
allows me to gate creating the webhook on whether there is content
in the file.

As a result this means that it takes 2 runs to get everything setup
but this is preferable over having to manually intervene in some
other way if the token file doesn't exist.
2015-12-09 09:44:50 -08:00
Nick Walker
2d7a9a72e1 Refactor puppetmaster and zack_r10k_webhook
Moved the webhook resource out of puppetmaster and into zack_r10k
to support exchaning code_manager in place of zack_r10k

As a result I cleaned up some unnecessary parameters.

Installing both the r10k webhook and the code_manager at this time
for testing
2015-12-09 09:44:50 -08:00
Nick Walker
4c2be74083 Add support for code manager which will replace zack r10k
Add pltraing-rbac module
Added a new profile for code_manager that:
 - creates a service users for code manager
 - creates a token for that service user
 - creates a hook on a git server using the token

Turns out that the file function in puppet cannot read files in
/root.  The pe-puppet user needs read permissions on the file
and traversal on the directory which giving to /root would
probably be a bad idea.  So, I just put the file containing
the token in /etc/puppetlabs/puppetserver since I'm not sure
where would be better.
2015-12-09 09:44:35 -08:00
Nick Walker
afc9a358f3 Merge branch 'production' of https://github.com/npwalker/control-repo into merge_npwalker_control_repo 2015-11-24 11:16:51 -08:00
Nick Walker
7e40513c53 Change owner/group to pe-puppet for hiera module
When the owner / group was root this meant that enabling
hiera-eyaml wouldn't work properly as the keys couldn't
be read by puppetserver.

Changing to pe-puppet should resolve the issue.
2015-11-17 14:10:45 -08:00
Nick Walker
e5be3e2ddd fixing a bunch of puppet lint warnings 2015-10-30 13:50:10 -07:00
Nick Walker
3149d9707f Refactor webhook profiles into one profile with a parameter
Previously there was a mcollective and no_mcollective version of
the webhook profile.  They were almost identical so I merged them
and manage the difference with a "use_mcollective" parameter.

I renamed the webhook profile to zack_r10k_webhook.
2015-10-30 13:42:33 -07:00