3b4a515757
feat: rollout new tokens/passwords for prodnso stage
4 years ago
aa09887b9e
feat: rollout new tokens/passwords for qa stage
4 years ago
9c7cdfd24b
feat: rollout new tokens/passwords for dev stage
4 years ago
68bde6085e
DEV-322: enable ApplicationSet CRD for argoCD
...
- added mechanism to apply defined argocd CRD-objects
4 years ago
59a409fc32
DEV-342: added patchday playbook
4 years ago
d7e92c315c
bugfix: removed default connect feature values
...
- configured by portal
4 years ago
11352747b2
feat: added connect feature to portal
...
- webdav
- resubmission
- element_template
- config_delete_Scope
- external_tasks_script_worker
4 years ago
031650c3ed
cleanup
4 years ago
5a45e8325b
chore: added comment for traefik usage
4 years ago
46e021d22c
DEV-327: added several stuff for new prodnso-stage + bugfixing and improving other stuff
4 years ago
cdd9c2543a
cleanup: removed vault for group/all > moved to stage groups
...
- every stage has now its own vault file
4 years ago
190b8394eb
feat: added metricbeat (inactive)
4 years ago
d314e164c7
bugfix: disabled blackbox exporter for connect management
...
- current config didn't works with 302 to login page
4 years ago
df0e320743
bugfix: fixed connect url for blackbox exporter
4 years ago
76289d2242
DEV-316: fixing linter problems
4 years ago
56f7859314
feat: add access to create/edit dashboards/visualizations
4 years ago
77c27e706b
feat: configuration of connections for connect management installation
...
- awx
- teams
4 years ago
b42bcb76cd
chore: updated connect version from 8.5.8 to 8.5.26
4 years ago
44c7509e11
feat: consolidation for harbor
...
- dev-docker-registry-01 -> dev-harbor-01
- qa-docker-registry-01 -> qa-harbor-01
4 years ago
40e0a44043
DEV-279: review / vaulted variables
4 years ago
333823fb4c
DEV-279: implemented 'svensons' review critics
4 years ago
3d304f4ec1
DEV-279: added oidc/rbac for argocd setup (keycloak)
4 years ago
d9d980b009
DEV-282: feat: added configuration of parameters through web portal
4 years ago
5bc712b4f2
DEV-201: added groupvars for gateway-servers to get them out of standard monitoring
4 years ago
212ef00807
bugfix: connect-wordpress orchestration
...
- added missing configuration to wordpress service
REALM_ID
REGISTRATION_ID
CLIENT_ID
CLIENT_SECRET
CLIENT_USERNAME
CLIENT_PASSWORD
SMARDIGO_AUTH_TOKEN_NAME
SMARDIGO_AUTH_TOKEN_VALUE
4 years ago
9f9a192432
DEV-269: added stuff to federate k8s-internal prometheus metrics
4 years ago
ea231be89f
DEV-277 feat: added stage for external usage
...
- stage without shared services
- setup isolated services
4 years ago
5bdff07d1b
DEV-253: digitalocean stuff - add droplet but not idempotentgit branch git branch plz check
4 years ago
54d6b82f1f
DEV-244 feat: added power dns to stage dev
4 years ago
31104d1e16
bugfix/cleanup
...
- update-monitoring
- k8s-cluster -> k8s_cluster
4 years ago
8a64fedc55
Merge remote-tracking branch 'origin/DEV-240'
4 years ago
0eafc32ec9
feat: added borken ip to whitelist
4 years ago
3766911cc5
DEV-241: added monitoring stuff for redis
4 years ago
671c3a9657
DEV-240: added code for k8s-external single-instance redis instance for DEV+QA
4 years ago
aeabec152c
SMARCH-106: added stuff for multi tenant setup
...
- workflow-index-postgres
- workflow-proxy-postgres
- workflow-proxy-realm
4 years ago
7ca09573e3
kubespray: removed cert/ingress
...
- missing configuration, has to be done by kubespray -> rtfm
4 years ago
8f94c4aae0
feat: added hetzner csi plugin
4 years ago
d31810007d
kubespray
...
- renamed groups to match kubespray
kube-master -> kube_control_plane
kube-node -> kube_node
- cert_manager_enabled: false -> true
- ingress_nginx_enabled: false -> true
4 years ago
a9d6249762
feat: rollout gitea on qa
4 years ago
719a3e71d7
feat: kubernetes bootstrap
...
- ccm
- ingress
- certmanager
- argo-cd
{{ stage }}-kube-argocd.{{ domain }}
- prometheus
{{ stage }}-kube-grafana.{{ domain }}
4 years ago
937cbcf84f
bugfix: removed awx from etc/hosts
...
- awx uses public ip as bind address
4 years ago
c207ceb25b
bugfix: setup whole dev stage leftovers
4 years ago
0355c2ed8b
chore: keycloak rollout was broken due to duplicated declaration
4 years ago
211ed6c706
chore: cleanup
4 years ago
b302c4ea6a
chore: renamed kube servers after reset
4 years ago
bf5d2bbc54
chore: stage dev inventory
4 years ago
c256c56bef
feat: kubernetes bootstrap with prometheus stack
...
- kube_proxy_metrics_bind_address
127.0.0.1:10249 > 0.0.0.0:10249
- kube-controller-manager scrape
http > https
10252 > 10257
4 years ago
3d00fdc7a0
DEV-222 kubernetes setup with ansible
4 years ago
aecd51a58b
Feature/dev 243
4 years ago
b89cc602e6
DEV-223: spike kubernetes cluster in der hetzner cloud aufsetzen
4 years ago
8df2970e7c
feat: reverse proxy configuration for gitea
...
- https://...
- ssh@...:2222
4 years ago
da646bf4bd
chore: removed duplications between iam/gitea
...
- deploying is now done by shared role
- only configuration needed by iam/gitea role
4 years ago
6aa4782d34
feat: added new service: gitea
4 years ago
c0c410e914
chore: added k8s group configuration
...
- due to running prometheus updates
4 years ago
ac1fc50e39
chore: new version for management
...
- 8.5.0-SMARCH-98-1-SNAPSHOT -> latest
4 years ago
674e53d62b
bugfix: provisioning on qa stage
4 years ago
37cf451edd
chore: maintenance
...
- added tag awx_repository' > update repository on awx server
- moved wordpress database dump from /tmp to /backups
- switch wordpress dump from <dump>.tar.gz to <dump>.gz
- added hint for upload wordpress dump to README.md
4 years ago
0a9f699f64
bugfix: admin user/pass for management services
4 years ago
efd0f08293
feat: changed awx password for qa stage
4 years ago
79bdb2c1ee
bugfix: connect_elastic_prefix uses now _ instead of -
4 years ago
49cf9e1612
cleanup: factor out docker-compose version (->group all)
4 years ago
be0511e29a
bugfix: awx admin password
4 years ago
99d301234a
DEV-216: added ssh pubkey for fgoerz; changed lookup to find also non-RSA-pubkeys
4 years ago
aad69fcdb0
feat: split management setup into own role (dev)
...
- the smardigo management instance is now configured by group
management. connect is now only for dynamic smardigo instances.
- <stage>-management-01-connect.<domain>
4 years ago
04b5cfb0b7
feat: split management setup into own role (dev)
...
- the smardigo management instance is now configured by group
management. connect is now only for dynamic smardigo instances.
- <stage>-management-01-connect.<domain>
4 years ago
0515a6788d
bugfix: added configuration for qa admin users
4 years ago
80cce15def
bugfix: missing variables for qa stage
4 years ago
5cd34a896b
bugfix: added missing variable for stage management service
4 years ago
d3278b62ac
bugfix: stage-qa configuration
...
- email
- connect api token
4 years ago
f755e52ba5
feat: added smardigo feature flag ELEMENT_TEMPLATE_ENABLED
4 years ago
3aa23fdf72
chore: versions
...
- connect dev/qa -> latest
- iam dev/qa -> latest
4 years ago
1c2da22ef6
feat: synchronize authorized keys for root
4 years ago
335e3bb9dd
chore: cors for swagger on connect/iam
4 years ago
ba861969d5
chore: updated connect/iam versions to XXX-SMARCH-98-1-SNAPSHOT
4 years ago
2faa5e8703
chore: cleanup
4 years ago
f829ea7605
chore: cleanup
4 years ago
2d6350c11c
chore: missing parameters for qa stage
4 years ago
d97bedc8f1
feat: complete qa setup up to smardigo management
4 years ago
c87717f07d
chore: cleanup
4 years ago
3ad1ef73f8
feat: added external task script worker mock support
4 years ago
20df8986c4
feat: changed postgres orchestration
...
- added postgres_listen_addresses to allow configuration
- removed default_master_ip -> shared_service_pg_master_ip
- removed default_slave_ip -> shared_service_pg_slave_ip
- removed default_private_network -> shared_service_network
- stage-qa: bugfix for /etc/exports, wrong ip
4 years ago
8ee702fb68
chore: removed outdated tasks
4 years ago
1427b676c4
bugfix: missing variable
4 years ago
ffb714d7ad
SMARCH-92: setup qa up to docker registry
...
- consolidation between dev/qa
- moved/split variables into vaults for dev/qa
4 years ago
c86ccc48aa
Added postgres exporter + dashboard.
4 years ago
7c0f9c597b
Added mysql/maria-exporter + dashboard.
4 years ago
cd9819eca6
feat: added tenant={{ tenant_id }} as server label if available
4 years ago
ad861db16e
SMARCH-92: split elastic stack services for qa
...
- elasticsearch
- logstash
- kibana
4 years ago
e7f49a40e2
DEV-184 feat: added pgadmin4 as shared service
4 years ago
b6cdd8528b
bugfix: prometheus scrape config
...
- skip traefik scraping when traefik_enabled is false
- skip node_exporter scraping when node_exporter_enabled is false
4 years ago
a8b60e9069
chore: teams alerting hook can now be stage specific
...
- added var netgo_msteams_hook_alerting (DEV)
4 years ago
d7704681ee
bugifx: awx polling configuration produces wrong instance
...
- <url>:80 -> <url>
4 years ago
259da9685f
DEV-173: bugfix: oidc configuration for connect/wordpress
4 years ago
ebad4eade4
chore: new playbook to update local ssh config file
...
{for each host on stage}
Host dev-...
HostName 1.2.3.4
{endfor}
4 years ago
79a423f7b7
chore: updated connect default version to 8.3.0
4 years ago
308fc7e501
DEV-173: cleanup
...
- changed admin user in wordpress database backup
4 years ago
38b103e363
DEV-173: review/regression/cleanup: connect + wordpress
4 years ago
7f4b338477
SMARCH-89: feat: added setup for connect wordpress with database dump
4 years ago
b01ae836f5
DEV-167: feat: creating maria database for connect-wordpres provisioning
4 years ago
488bfa5515
SMARCH-57: feat: added awx to prometheus/grafana
4 years ago
Sven Ketelsen
Görz, Friedrich
friedrich goerz
Ketelsen, Sven
Peter Heise
Paetow, Claus
Gordon, Alexander