Ketelsen, Sven
db57bcb7ca
DEV-579 add basic auth to prometheus stack
3 years ago
Hoan To
b3d75c4da8
DEV-585: added new infrastructure project in harbor
3 years ago
friedrich goerz
664edd2d43
DEV-592: added stuff for argocd to enable helm sops decryption
3 years ago
Michael Haehnel
0b0cb3dd95
DEV-568: Decreased process priority and count of parallel processes for pg backup task
3 years ago
Ketelsen, Sven
ccdff552f1
DEV-596 playbook update-monitoring is broken
3 years ago
Hoan To
98c5f39c85
DEV-579: added prometheus basic auth
3 years ago
Ketelsen, Sven
f47c5dc345
DEV-578 investigation for hetzner api rate limits
3 years ago
Ketelsen, Sven
9919985e3d
DEV-593 updated versions
3 years ago
Görz, Friedrich
01049bf031
DEV-548: testcluster
3 years ago
friedrich goerz
bad109ad83
DEV-582: rollback prom2teamsd version due to problems during container start
3 years ago
friedrich goerz
0b1ef4f671
DEV-558: pinned helm chart version + adding some values for knative monitoring
3 years ago
Ketelsen, Sven
ac7285bbcf
DEV-572: alertmanager metrics
3 years ago
Hoan To
a49e2923d5
DEV-529: Dynamic shared memory type fix from posix to mmap
3 years ago
Hoan To
1a529cf787
DEV-553: added remove hcloud volumes at the end of restore playbook
3 years ago
friedrich goerz
9e6f28c62a
DEV-563: added hetzner dashboard + svennes dashboard + refactoring alert for hetzner_api_rate_limit
3 years ago
Görz, Friedrich
01c972771b
Rollout main=>qa 13.09.2022
3 years ago
Hoan To
d644293f9b
Dev 544 backup storage
3 years ago
Ketelsen, Sven
e6dddbe4c9
DEV 534: Added hetzner volume to prodnso-postgres-01 for /backups
3 years ago
Görz, Friedrich
ea79ce2a29
DEV-517: changed DO-token due to 'too many request' problem
3 years ago
Sven Ketelsen
4d8ea01578
DEV-507 process start from wordpress is broken
...
- after connect/wordpress update through the portal the
wordpress used a wrong useris in communication with
the connect backend
4 years ago
friedrich goerz
b1541dc747
DEV-497/DEV-505: changed startupprobe params for gitea
4 years ago
Philipp Eichhorn
ab5cba3c7c
SC-05: add devscr variables to create harbor-pull secret
4 years ago
Görz, Friedrich
beb013aca3
DEV-497: added stuff for gitea to for bootstrapping k8s-clsuter
4 years ago
Ketelsen, Sven
ca121933ea
DEV-503: bugfix: added missing configuration for harbor realm
4 years ago
Görz, Friedrich
c744eaa837
DEV-497: created new branch due to git-problems - dunno what exactly
4 years ago
Sven Ketelsen
41a065b048
bugfix: regression for etc/hosts update
...
- shouldn't run for non hcloud servers at all
when expression was wrongly negated
4 years ago
Sven Ketelsen
f00fdbe808
bugfix: fixed when expression (regression from DEV-492)
4 years ago
friedrich goerz
b23b571f79
DEV-492: fix /etc/hosts-issue for DO-VMs
4 years ago
friedrich goerz
9d418ccf11
DEV-476: consolidate dev-blackbox-01 on digitalocean platform
4 years ago
Sven Ketelsen
0186de2e94
feat: rollout certs on qa
4 years ago
Sven Ketelsen
acd2205aed
bugfix: removed variable k8s_namespace
...
- has to be set when a k8s namespace should be created
4 years ago
Sven Ketelsen
1fd63f3676
feat: updated elastic certs on dev stage
...
- create new certificates (--days 1095)
- rollout with playbook smardigo.yml + -t update_certs
all elasticsearch
all kibana
all logstash
- rollout with playbook setup.yml + -t update_certs
all filebeat
- manually updates connect certs
use smardigo.yml + -t update_certs - with connect role
4 years ago
Görz, Friedrich
84a013d169
MOB-148: added k8s cluster for mobene stuff
4 years ago
Görz, Friedrich
0f69260711
DEV-416: added stuff to enable filebeat for postgres + mariabb instances
4 years ago
Sven Ketelsen
55ebe36758
MOB-102: office 365 email account (QA/PROD)
4 years ago
friedrich goerz
8180523963
DEV-480: decrease prometheus retention time for DEV-stage
4 years ago
friedrich goerz
ebf2d41e48
DEV-473: changed custom metric queries to reduce messages in error.log
4 years ago
Görz, Friedrich
1c5b1c44dd
DEV-391: fix merge problems + fixing linter problems
4 years ago
Sven Ketelsen
05ccebc851
feat: added initial password creation to portal
...
- randomize passwords according to password policies
2 Uppercase Characters
2 Lowercase Characters
2 Special Characters
1 Digits
4 years ago
Sven Ketelsen
00ca2bc3f1
feat: added initial password creation to portal
...
- randomize passwords according to password policies
2 Uppercase Characters
2 Lowercase Characters
2 Special Characters
1 Digits
4 years ago
Ketelsen, Sven
8c69471639
DEV-477 bugfix: delete wordpress database when service is deleted by portal
4 years ago
Görz, Friedrich
0eac3f3d3c
DEV-429: mariadb upgrade
4 years ago
Sven Ketelsen
06a395855b
feat: argo-cd
...
- activated json logging
- disabled application set controller
4 years ago
Sven Ketelsen
25bd87846c
feat: kibana - default index patterns
...
- uncategorized-*
- {{ stage }}-*-authlog-*
- {{ stage }}-*-syslog-*
- {{ stage }}-monitoring-*
- {{ stage }}-management-*-connect-*
4 years ago
friedrich goerz
0d5976898a
NOTICKET: corrected bloody typo
4 years ago
Görz, Friedrich
4bf4167216
DEV-386: to use techn.user to scrape metrics for ssh-root-login
4 years ago
Michael Hähnel
ff9c0d94a1
Extended Monitoring/Alerting for PostgreSQL
4 years ago
Sven Ketelsen
acee683569
feat: added workflow heatmap flag to portal
...
- SMA_WORKFLOW_HEATMAP_ENABLED: [false]|true
4 years ago
friedrich goerz
5d1b951f39
DEV-466: added missing but needed package
4 years ago
friedrich goerz
0fe89b4985
DEV-452: tried to fix some stuff
4 years ago
friedrich goerz
0c8bfdb3d9
DEV-452: tried to fix some stuff
4 years ago
friedrich goerz
a3bf98465a
DEV-452: added workaround to fix problem with missing hetzner internal network
4 years ago
friedrich goerz
cd09b5bb5e
DEV-452: added workaround to fix problem with missing hetzner internal network
4 years ago
friedrich goerz
f7a43f5981
DEV-452: added workaround to fix problem with missing hetzner internal network
4 years ago
friedrich goerz
31e79f7ee6
DEV-452: added DEBUG statements to get more information in case of problems
4 years ago
friedrich goerz
5ce99dbb58
DEV-452: pimped recursive _set_server_state.yml - bugfixed
4 years ago
Görz, Friedrich
37ca359842
DEv-452: added recursive _set_server_state.yml to work around hetzners...
4 years ago
Sven Ketelsen
c4a7359e6c
chore: added argo-cd projects
...
- bootstrap
- kube-system
- infrastructure
4 years ago
Sven Ketelsen
104ede597d
chore: removed stage prefix from pull secret (namespace)
4 years ago
Sven Ketelsen
ae1e2854dc
chore: removed stage prefix from pull secret (namespace)
4 years ago
Ketelsen, Sven
60a6c73be6
DEV-424 export for wordpress database (maria)
4 years ago
friedrich goerz
dac7002ad9
DEV-452: added potential fixes for our hetzner create_server - is locked/message problem
4 years ago
Sven Ketelsen
fff42dea2c
chore: removed ignore_errors due to a bug in smardigo
4 years ago
Görz, Friedrich
b4937db87a
DEV-375: bugfix to run stuff for testdb only when is set
4 years ago
Sven Ketelsen
750b109b54
chore: added ignore_errors due to a bug in smardigo
4 years ago
Sven Ketelsen
ad80ceeaaa
SMARCH-126: bootstrap argocd with argocd
4 years ago
Sven Ketelsen
20c745eeb4
SMARCH-126: bootstrap argocd with argocd
4 years ago
Sven Ketelsen
80c94ef184
SMARCH-126: bootstrap argocd with argocd
4 years ago
Ketelsen, Sven
8923ab7574
SMARCH-126: Bootstrap ArgoCD by ArgoCD
4 years ago
Görz, Friedrich
315bee648d
DEV-439: removed leftovers from mariadb-transport-encyrption
4 years ago
Görz, Friedrich
f0eab6d3ae
DEv-421: refactored installation for postgres-exporter + installed newer...
4 years ago
friedrich goerz
f4c97a9a04
DEV-432: ansible stuff to change ssh ciphers on serverside + added new ssh key for fgoerz
4 years ago
friedrich goerz
819a658e50
DEV-422: mariadb deactivate ssl stuff to ensure stable smardigo-ENV
4 years ago
friedrich goerz
ea2e31cd27
DEV-383: fixing bug
4 years ago
Görz, Friedrich
62e0a64f26
DEV-414: follow-up tasks prod@hetzner-incident
4 years ago
Görz, Friedrich
49fc416764
DEV-382: enable SSL for postgres-connections
4 years ago
Sven Ketelsen
d99c9001bf
DEV-383: enable SSL for mariadb-connections
4 years ago
friedrich goerz
7d7dbcf622
NOTICKET: hetzner bugfix
4 years ago
friedrich goerz
fc5745eac2
NOTICKET: fix broken playbook due to renamed yml file
4 years ago
Sven Ketelsen
fe66a12c6e
bugfix: typo
4 years ago
Sven Ketelsen
5a728d97be
bugfix: typo
4 years ago
Görz, Friedrich
6fbc3af3c4
DEV-374: implemented logical restore-test to check if restore was succussful
4 years ago
Görz, Friedrich
43da648df6
DEV-389: added gpg-decryption for backup
4 years ago
Görz, Friedrich
0c9042da83
DEV-373: try to automate restore from database backup
4 years ago
Sven Ketelsen
80b321cd65
DEV-375 feat: new process for backup scheduling
4 years ago
Sven Ketelsen
49aa913213
bugfix: backup runs with gather_facts: false
4 years ago
Sven Ketelsen
1ee340fdd3
bugfix: added awx templates
...
- create-remote-database-backup
4 years ago
Sven Ketelsen
5733b20dc3
bugfix: server creation was broken due to backupuser
4 years ago
Sven Ketelsen
42f0ae114a
DEV-273 added branch to rollout for stages
...
- master/main -> DEV
- qa -> QA
- prodnso -> PRODNSO
4 years ago
Sven Ketelsen
6394d9150c
bugfix: awx uses now own user for automation
4 years ago
Sven Ketelsen
92c11ecef4
bugfix: ansible user for awx
4 years ago
Sven Ketelsen
81d9923332
bugfix: updated ssh key configuration
...
- + peter.heise
- + gitlabci
- - ansible
- added date suffix to outdated ssh keys
- updating root ssh key is now active per default
4 years ago
Ketelsen, Sven
e17c62f81e
DEV-371: added stuff to do remote backup
4 years ago
Sven Ketelsen
9d5105f764
feat: updated awx-operator/awx
...
- extracted argocd revision into variable
- on dev stage revision is main
- default revision is <stage> (qa, prodnso, ...)
4 years ago
Ketelsen, Sven
30c2e8f45a
DEV-379: bugfix: k9s is not installed on kube control plane
4 years ago
Görz, Friedrich
ac8998f212
DEV-273: automate rollout ansible by gitlab
4 years ago
friedrich goerz
4b8a80a4ef
DEV-309: added keycloak PW-policy stuff
4 years ago
friedrich goerz
2b86dfc20c
DEV-308: fixed user keycloak interaction stuff for some technical users
4 years ago
Görz, Friedrich
ea2ef949c9
DEV-360: rollout k8s on prodnso
4 years ago
Sven Ketelsen
7c891e472c
feat: activated jaeger traecing on dev
...
- traefik
- connect
- iam
4 years ago