df8a544a3a
cleanup
4 years ago
4a62bf9813
bugfix: keycloak clients for connect
...
- redirect_uris are broken
- web_origins are broken
4 years ago
a5ff2d53c9
bugfix: rollout new kubernetes cluster
4 years ago
243aa4c584
bugfix: downgraded grafana version to 8.3.5
...
- 8.4.1 is not backwards compatible
4 years ago
1031348887
feat updated prometheus/grafana
4 years ago
af4341f571
bugfix: gitea metrics endpoint is now enabled by default
4 years ago
8b885a30b7
bugfix: patchay was broken due to missing pip dependency
...
- kubernetes
4 years ago
d8acf8b894
consolidation: renamed hetzner-ansible project on gitea
...
- gitea-admin/hetzner-ansible-copy.git
gitea-admin/hetzner-ansible.git
4 years ago
211039f7e6
bugfix: kubernetes deployment without root user and global become
4 years ago
5d604700dd
DEV-319: feat: split dev/qa into own hetzner projects
4 years ago
b24ab2e823
DEV-326: added stuff to configure AWX installation
4 years ago
39c4ee6eb0
bugfix: removed hard coded staged service (dev)
4 years ago
9b7ce348eb
DEV-323: added some stuff
4 years ago
199e49432c
bugfix: connect uses now netgo_msteams_hook_cd as connection
...
- <CI/CD> vs. <Alerting {{ stage }}> channel
4 years ago
aa09887b9e
feat: rollout new tokens/passwords for qa stage
4 years ago
9c7cdfd24b
feat: rollout new tokens/passwords for dev stage
4 years ago
7bd1a1436b
DEv-323: try to fix merge-conflict
4 years ago
68bde6085e
DEV-322: enable ApplicationSet CRD for argoCD
...
- added mechanism to apply defined argocd CRD-objects
4 years ago
5fc9e3233a
DEV-322: enable ApplicationSet CRD for argoCD; added mechanism to apply defined argocd CRD-objects
4 years ago
59a409fc32
DEV-342: added patchday playbook
4 years ago
78d2661c4a
DEV-339: added anti-affinity-rule to improve distribution of ingress-controller pods
4 years ago
11352747b2
feat: added connect feature to portal
...
- webdav
- resubmission
- element_template
- config_delete_Scope
- external_tasks_script_worker
4 years ago
1e2dfc3212
SMARCH-112 feat: read docker images directly from harbor
4 years ago
46e021d22c
DEV-327: added several stuff for new prodnso-stage + bugfixing and improving other stuff
4 years ago
b33fbc3f55
cleanup: removed empty handler/meta files
4 years ago
cdd9c2543a
cleanup: removed vault for group/all > moved to stage groups
...
- every stage has now its own vault file
4 years ago
190b8394eb
feat: added metricbeat (inactive)
4 years ago
6bd573ec24
bugifx: create docker networks only when docker_enabled
4 years ago
70af623ba4
feat: elastic - activated syslog and authlog
...
- filebeat will now ship syslog
{{ inventory_hostname }}-syslog-...
- filebeat will now ship authlog
{{ inventory_hostname }}-authlog-...
- updated filebeat/logstash to "7.16.3"
4 years ago
dc7ab93632
bugfix: harbor - removed full qualified project group
4 years ago
b545432b6a
bugfix: harbor - removed full qualified admin group
4 years ago
7d211d93ad
bugfix: prometheus update_config didn't reload config
...
- container isn't restarted always anymore
- added reload by rest api
4 years ago
58413ca173
bugfix: update awx repository was broken
4 years ago
4004b34b64
Feature/dev 316 3rd
4 years ago
76289d2242
DEV-316: fixing linter problems
4 years ago
56f7859314
feat: add access to create/edit dashboards/visualizations
4 years ago
19fa1db9c8
Feature/dev 315
4 years ago
b7624efbca
feat: configuration of connections for connect management installation
...
- awx
- teams
4 years ago
77c27e706b
feat: configuration of connections for connect management installation
...
- awx
- teams
4 years ago
9ae762b6e1
DEV-315: fixed ansible error to get ansible-lint initially running
4 years ago
591e40a283
DEV-310: git-rm docker-role from geerlingguy - can be used via include...
4 years ago
44c7509e11
feat: consolidation for harbor
...
- dev-docker-registry-01 -> dev-harbor-01
- qa-docker-registry-01 -> qa-harbor-01
4 years ago
d1b41daa87
Feature/dev 302
4 years ago
37d94b5166
DEV-302: abolish manual installation steps
4 years ago
0f35703e03
bugfix: fixed retry logic for hetzner network check
4 years ago
05a6f8a67f
feat: added service filtering for kibana dashboard
4 years ago
40e0a44043
DEV-279: review / vaulted variables
4 years ago
333823fb4c
DEV-279: implemented 'svensons' review critics
4 years ago
f3fc209a02
feat: default configuration for keycloak master realm
...
- mail
- events
- language
4 years ago
1d8b7dae90
bugfix: added group mapper to default keycloak client config
4 years ago
3d304f4ec1
DEV-279: added oidc/rbac for argocd setup (keycloak)
4 years ago
20a2e8a2e3
DEV-257: implemented wish for smardigo star-architect <<sken>> :P
4 years ago
820b162b15
DEV-271: added systemd-file as workaround for hazzle with container start order
4 years ago
baed2bf51b
bugfix: smardigo_user_token creation doesn't require become
4 years ago
79cad695e7
feat: updated keycloak image version
...
- keycloak 12.0.4 -> 14.0.0
- updated smardigo images (netgo branding)
4 years ago
ed4ebc8630
feat: updated keycloak image version
...
- keycloak 12.0.4 -> 14.0.0
- updated smardigo images (netgo branding)
4 years ago
3cffeed705
feat: updated keycloak image version
...
- keycloak 12.0.4 -> 14.0.0
- updated smardigo images (netgo branding)
4 years ago
9eb945812d
feat: uptade prometheus stack images to current versions
4 years ago
c1460fa045
chore: set storage.tsdb.retention.time from 12w to 4w
4 years ago
d9d980b009
DEV-282: feat: added configuration of parameters through web portal
4 years ago
34a88236f3
DEV-298: added hacky shell script to make harbor upgrade a little bit easier
4 years ago
c9131276e3
bugfix: connect-wordpress orchestration
...
- added missing configuration to wordpress service
REALM_ID
REGISTRATION_ID
CLIENT_ID
CLIENT_SECRET
CLIENT_USERNAME
CLIENT_PASSWORD
SMARDIGO_AUTH_TOKEN_NAME
SMARDIGO_AUTH_TOKEN_VALUE
4 years ago
212ef00807
bugfix: connect-wordpress orchestration
...
- added missing configuration to wordpress service
REALM_ID
REGISTRATION_ID
CLIENT_ID
CLIENT_SECRET
CLIENT_USERNAME
CLIENT_PASSWORD
SMARDIGO_AUTH_TOKEN_NAME
SMARDIGO_AUTH_TOKEN_VALUE
4 years ago
abbe742118
feat: set storage.tsdb.retention.time from 15w to 12w
4 years ago
34e5f301e4
bugfix: disabled argocd dex server
...
- service isn't used at all
4 years ago
9f9a192432
DEV-269: added stuff to federate k8s-internal prometheus metrics
4 years ago
a0f70890f1
DEV-258: added code to configure (users|roles) objects in elastic
4 years ago
ea231be89f
DEV-277 feat: added stage for external usage
...
- stage without shared services
- setup isolated services
4 years ago
dabd42d40e
DEV-280: added comment and removed my senseless delay/retries params
4 years ago
e58e5a4e05
CVE-2021-44228: updates es from 7.14.0 to 7.16.1
4 years ago
e0f90428fd
DEV-280: added retries to get hcloud requests from ansible more reliable
4 years ago
9d3e839082
DEV-280: BUGFIXED wait_for task to to fix broken smardigo-step 'create-server'
4 years ago
00aacf90c6
DEV-280: added wait_for task to to fix broken smardigo-step 'create-server'
4 years ago
6f411c9743
feat: Task remove /etc/docker/daemon.json added
4 years ago
b0c3b5d947
feat: Set smardigo-theme for master realm
4 years ago
5bdff07d1b
DEV-253: digitalocean stuff - add droplet but not idempotentgit branch git branch plz check
4 years ago
54d6b82f1f
DEV-244 feat: added power dns to stage dev
4 years ago
dc31119c05
feat: new playbook to manipulate services from portal
...
- update-service-state.yml
service_state
up
down
upgrade
4 years ago
8baf07a85c
feat: added backups to smardigo portal
4 years ago
631e0b8778
bugfix: fixed variable name
...
- vault_replicator_user_password
> postgres_replicator_user_password
4 years ago
d24e009c48
DEV-254: added backup/restore playbooks
4 years ago
a792a7f9e7
feat: integrated monitoring updates in smardigo portal
4 years ago
31104d1e16
bugfix/cleanup
...
- update-monitoring
- k8s-cluster -> k8s_cluster
4 years ago
671c3a9657
DEV-240: added code for k8s-external single-instance redis instance for DEV+QA
4 years ago
bc39cdbb04
feat: added external-dns with digitalocean configuration
4 years ago
aeabec152c
SMARCH-106: added stuff for multi tenant setup
...
- workflow-index-postgres
- workflow-proxy-postgres
- workflow-proxy-realm
4 years ago
0dcdc9a13c
feat: added tag upgrade to playbook setup
...
- Updating apt cache
- Upgrade all packages
4 years ago
b9192557ab
feat: added service monitor for cert-manager (prometheus)
4 years ago
e78a11d431
cleanup:
...
- removed echo server
- stick cert manager to 1.5.4
4 years ago
123d1dd917
chore: prometheus add note for PersistentVolumeClaim
4 years ago
1450f91d2e
cleanup: added some tags to kubernetes roles
4 years ago
575e5cd131
feat: activated public ingress access over hetzner load balancer
...
- disable-public-network: true -> false
4 years ago
31298d109d
feat: deploy docker registry key to namespace
4 years ago
ef3634cf4e
feat: added nginx ingress monitoring
4 years ago
d580278227
Revert "bugfix: kube: monitoring removed wrong labels"
...
This reverts commit 49e7ee6ee7
4 years ago
49e7ee6ee7
bugfix: kube: monitoring removed wrong labels
4 years ago
c2ef361964
kubespray
...
- renamed groups to match kubespray
kube-master -> kube_control_plane
kube-node -> kube_node
4 years ago
8f94c4aae0
feat: added hetzner csi plugin
4 years ago
a9d6249762
feat: rollout gitea on qa
4 years ago
f212c1d362
bugfix: activated present state for networks again
...
- new servers need the private network binding
4 years ago
3f3547bd8f
chore: added host aliases for accessing shared resources
4 years ago
f9b7844c3d
feat: added ingress entries for monitoring
...
- prafana
- prometheus
- alertmanager
4 years ago
fce3c6e8e0
feat: seeting ingress replica count to 3
4 years ago
1be0e7117f
cleanup
4 years ago
99ab6cd390
DEBUGGING hetzner CCM
4 years ago
4e2cfea6c5
chore: deactivated firewall/network provisioning
4 years ago
a9d239f0e8
feat: kubernetes bootstrap
...
- ccm
- ingress
- certmanager
- argo-cd
{{ stage }}-kube-argocd.{{ domain }}
- prometheus
{{ stage }}-kube-grafana.{{ domain }}
4 years ago
a6e603cf76
feat: connect added parameter for activation scope deletion
4 years ago
c207ceb25b
bugfix: setup whole dev stage leftovers
4 years ago
bd13643e30
feat: prometheus now uses stage_server_infos (auto discover task)
4 years ago
0355c2ed8b
chore: keycloak rollout was broken due to duplicated declaration
4 years ago
f6a3ad8368
chore: added tag ingress-controller
4 years ago
4b6fe82843
bugfix: network-zone: dev -> eu-central
4 years ago
c256c56bef
feat: kubernetes bootstrap with prometheus stack
...
- kube_proxy_metrics_bind_address
127.0.0.1:10249 > 0.0.0.0:10249
- kube-controller-manager scrape
http > https
10252 > 10257
4 years ago
3d00fdc7a0
DEV-222 kubernetes setup with ansible
4 years ago
aecd51a58b
Feature/dev 243
4 years ago
b5f076756b
DEV-242: added code snippet to install hetzner CCM
4 years ago
e855d8a742
bugfix: missing character > invalid yml
4 years ago
8df2970e7c
feat: reverse proxy configuration for gitea
...
- https://...
- ssh@...:2222
4 years ago
8bae53875d
feat: added tag <update_etc_hosts>: updating etc/hosts entries
...
- allows updating of etc/hosts entries for the complete stage at once
- (future topic) replace etc/hosts entries by own dns server
4 years ago
da646bf4bd
chore: removed duplications between iam/gitea
...
- deploying is now done by shared role
- only configuration needed by iam/gitea role
4 years ago
8e88f4bf3d
feat: added monitoring for gitea
4 years ago
64146fba78
feat: updated traefik version from 2.4 to 2.5
4 years ago
6aa4782d34
feat: added new service: gitea
4 years ago
674e53d62b
bugfix: provisioning on qa stage
4 years ago
00041b8093
feat: keycloak - new users requirements
...
- UPDATE_PASSWORD
- UPDATE_PROFILE
- VERIFY_EMAIL
4 years ago
5c3f3c76ca
feat: keycloak - new users requirements
...
- UPDATE_PROFILE
- VERIFY_EMAIL
4 years ago
79bd58bfc8
bugfix: keycloak delete client without existing realm
4 years ago
37cf451edd
chore: maintenance
...
- added tag awx_repository' > update repository on awx server
- moved wordpress database dump from /tmp to /backups
- switch wordpress dump from <dump>.tar.gz to <dump>.gz
- added hint for upload wordpress dump to README.md
4 years ago
76ae6eb25a
bugfix: role common: /etc/bash_completion.d not found
4 years ago
d39789b0f8
feat: added awx job templates for deleting resources
4 years ago
02bd428123
bugfix: delete dns entry changed state
4 years ago
8ceda24811
bugfix: remove-database is bow idempotent
4 years ago
6742866961
DEV-198: added stuff to delete data in postgres
4 years ago
7e79a07635
cleanup: consolidation
4 years ago
283376694a
DEV-197: added stuff to remove realm-client
4 years ago
2591c3368d
DEV-196 feat: reverting changes done by create-service
4 years ago
49cf9e1612
cleanup: factor out docker-compose version (->group all)
4 years ago
024d4fe405
bugfix: added missing current_realm_admin_users for role connect
4 years ago
99d301234a
DEV-216: added ssh pubkey for fgoerz; changed lookup to find also non-RSA-pubkeys
4 years ago
04b5cfb0b7
feat: split management setup into own role (dev)
...
- the smardigo management instance is now configured by group
management. connect is now only for dynamic smardigo instances.
- <stage>-management-01-connect.<domain>
4 years ago
6571622662
feat: remove_server playbook
4 years ago
0515a6788d
bugfix: added configuration for qa admin users
4 years ago
80cce15def
bugfix: missing variables for qa stage
4 years ago
5cd34a896b
bugfix: added missing variable for stage management service
4 years ago
d3278b62ac
bugfix: stage-qa configuration
...
- email
- connect api token
4 years ago
7747cff839
chore: cleanup
4 years ago
f755e52ba5
feat: added smardigo feature flag ELEMENT_TEMPLATE_ENABLED
4 years ago
1c2da22ef6
feat: synchronize authorized keys for root
4 years ago
335e3bb9dd
chore: cors for swagger on connect/iam
4 years ago
ab23ffd331
chore: added env variables for cors configuration
4 years ago
2d6350c11c
chore: missing parameters for qa stage
4 years ago
d97bedc8f1
feat: complete qa setup up to smardigo management
4 years ago
c0cd50339c
DEV-163: feat: keycloak prometheus integration
4 years ago
3ad1ef73f8
feat: added external task script worker mock support
4 years ago
20df8986c4
feat: changed postgres orchestration
...
- added postgres_listen_addresses to allow configuration
- removed default_master_ip -> shared_service_pg_master_ip
- removed default_slave_ip -> shared_service_pg_slave_ip
- removed default_private_network -> shared_service_network
- stage-qa: bugfix for /etc/exports, wrong ip
4 years ago
7a9c8e42ae
chore: rework cluster_services parameter
...
- the parameter as list didn't work well
4 years ago
8ee702fb68
chore: removed outdated tasks
4 years ago
ffb714d7ad
SMARCH-92: setup qa up to docker registry
...
- consolidation between dev/qa
- moved/split variables into vaults for dev/qa
4 years ago
c86ccc48aa
Added postgres exporter + dashboard.
4 years ago
7c0f9c597b
Added mysql/maria-exporter + dashboard.
4 years ago
c48f5e0fa9
bugfix: restored hetzner firewall awx
4 years ago
ad861db16e
SMARCH-92: split elastic stack services for qa
...
- elasticsearch
- logstash
- kibana
4 years ago
1bfcac5646
Removed container node-exporter, added system node-exporter, optimized aotidiscover pre-tasks.
4 years ago
e7f49a40e2
DEV-184 feat: added pgadmin4 as shared service
4 years ago
39486c9406
chore: aplit/renamed ansible playbooks
4 years ago
b6cdd8528b
bugfix: prometheus scrape config
...
- skip traefik scraping when traefik_enabled is false
- skip node_exporter scraping when node_exporter_enabled is false
4 years ago
19cd6fda1a
Added fetch/delete task for #DEV-182.
4 years ago
a966d90020
Added MSTeams Alerts for Prometheus
4 years ago
c1c1d34101
chore: updated firewall ips
4 years ago
259da9685f
DEV-173: bugfix: oidc configuration for connect/wordpress
4 years ago
649c28b6be
bugifx: traefik role was broken due to moved folder
4 years ago
ebad4eade4
chore: new playbook to update local ssh config file
...
{for each host on stage}
Host dev-...
HostName 1.2.3.4
{endfor}
4 years ago
38b103e363
DEV-173: review/regression/cleanup: connect + wordpress
4 years ago
7f4b338477
SMARCH-89: feat: added setup for connect wordpress with database dump
4 years ago
b01ae836f5
DEV-167: feat: creating maria database for connect-wordpres provisioning
4 years ago
a32ffa7ea2
SMARCH-39: chore: cleanup
4 years ago
6e74134c9e
SMARCH-81: cleanup
4 years ago
f32234edce
chore: cleanup
4 years ago
622fe5665a
SMARCH-81: bugfix: fixed installation path (webdav -> dev-webdav-01)
4 years ago
488bfa5515
SMARCH-57: feat: added awx to prometheus/grafana
4 years ago
7e16bce314
chore: upgraded prometheus from cx11 to cpx11
4 years ago
ea5c025101
SMARCH-52: setup awx on dev-awx-01
4 years ago
faca99037a
bugfix: duplicated domain usage
4 years ago
3fe81a7ac4
bugfix: cleanup
...
- shared service declaration for maria
- webdav usage out of connect
4 years ago
8cb1e919b3
feature/smarch-78
4 years ago
45f9edbd28
chore: webdav server configuration (w.i.p.)
4 years ago
3c60e35668
SMARCH-81: feat: added webdav as shared service
4 years ago
be4a9c3f5c
SMARCH-63: Feat: Anlegen/Konfigurieren einer Datenbank auf dem DB-Server (DEV)
4 years ago
ecb8a4fc64
feat: added ip for peter heise
4 years ago
e03c7b8ea4
chore: updated elastic cluster to 7.14
...
- manual rolling update from 7.12
4 years ago
84bceb730d
review: setup awx server with ansible
4 years ago
6034d87f97
feature/postgresql-cluster
4 years ago
3042b8cacd
review: setup awx server with ansible
4 years ago
9acca552c1
chore: network settings
4 years ago
4bb091adb0
chore: consolidation
4 years ago
b6d1bd171e
Feature/smarch 59
4 years ago
736c89b6c1
chore: added wordpress (wip)
4 years ago
0e9c26e439
chore: switched workflow search to elastic mode
5 years ago
88a0e6397f
Feature/awx
5 years ago
bf8ed74d3f
SMARCH-46: smardigo self service portal (wip)
5 years ago
0fed0dbdb8
SMARCH-46: smardigo self service portal (wip)
5 years ago
7f7054244b
SMARCH-46: smardigo self service portal (wip)
5 years ago
2c9a9029ad
SMARCH-46: smardigo self service portal (wip)
5 years ago
7b290611e7
feat: provisioning playbook with dynamic inventory (wip)
5 years ago
b27511ea53
feat: provisioning playbook with dynamic inventory (wip)
5 years ago
a12d77390a
chore: use robot account for harbor
5 years ago
1a93b40658
feat: provisioning playbook with dynamic inventory (wip)
5 years ago
982a782ab2
chore: migrated elastic exporter to prometheus community
5 years ago
18f3fd3102
SMARCH-40: monitoring for harbor
5 years ago
ea45d111d9
SMARCH-46: smardigo self service portal (wip)
5 years ago
76554e4612
chore: cleanup
5 years ago
51ba3f7c16
SMARCH-33: added elastic stack setup
5 years ago
26ee698c77
chore: migrate harbor from 2.1.5 to 2.2.2
5 years ago
44a25a875f
bugfix: dynamic ip address resolution for hetzner
5 years ago
affaf901ab
feat: keycloak realm for docker-registry + email setup
5 years ago
896bd7faab
chore: cleanup
5 years ago
ebcab733ef
feat: added mail server
5 years ago
c4d0745ad0
feat: new server dev-mail-01
5 years ago
7970deeb03
bugfix: removed wrong condition
5 years ago
46b2367622
chore: harbor playground
5 years ago
b691447e27
feat: provisioning for docker registry
5 years ago
31450aac16
feat: added elasticsearch exporter setup
5 years ago
53352252da
feat: added connect/keycloak setup
5 years ago
4b8ea52d05
feat: setup connect servers
5 years ago
57ff124d00
feat: setup prometheus stack
5 years ago
c10d556038
chore: setup docker-registry
5 years ago
b741b5872a
chore: cleanup
5 years ago
c63d557861
feat: added traefik and node_exporter
5 years ago
7eefe6b28f
feat: setup servers on hetzner cloud
5 years ago
6c50019d6d
feat: setup servers on hetzner cloud
5 years ago
Sven Ketelsen
Görz, Friedrich
friedrich goerz
Claus Paetow
Ketelsen, Sven
Gordon, Alexander
Peter Heise
Alexander Gordon
Dziedzicki, Daniel