5cd09c7682
DEV-822 feat: ssh key für Hans-Peter Wissenbach hinzugefügt
3 years ago
8a9e7bfee5
DEV-788: increased keycloak version - pimped dockercompose jinja template due...
3 years ago
76c7b4b628
DEV-679 New Role+Playbook for infrastructure realm
3 years ago
a12c9c3973
DEV-735 updated default firewall rules
3 years ago
1c6f257b28
DEV-730: added sep. keycloak instance
3 years ago
52d89b5259
NOTICKET: changed keycloak version from 14.0.0.2 to 14.0.0.4
...
- get rid of the stupid small role selects
3 years ago
7e80cfaa0e
DEV-711 use servers without shared_service_network
3 years ago
982ec72f28
DEV-695: fixing buggy firewall stuff
3 years ago
2ef6773ed3
DEV-701: changed node-exporter installation from ubuntu-repo to...
3 years ago
2da1f1ee28
DEV-687 aachen ip hcloud fw
3 years ago
c9c09828bb
DEV-677 update hetzner firewall rules for new k8s worker node on dev
3 years ago
1bbd04b131
DEV-533: added IP for aachen to whitelist and firewalls
3 years ago
9f76d05353
SMA-1993 new platform qa server
3 years ago
e343b5f76e
DEV-647 added hetzner domain smardigo.dev
3 years ago
35b94aab8a
DEV-649 updated pip to >=2.28.1
3 years ago
ad6f470920
Revert "DEV-647 added hetzner domain smardigo.dev"
...
This reverts commit 0b7b2a0f01
3 years ago
0b7b2a0f01
DEV-647 added hetzner domain smardigo.dev
3 years ago
a9c0e86f36
Revert "DEV-647 added hetzner domain smardigo.dev"
3 years ago
7cdc602534
DEV-647 added hetzner domain smardigo.dev
3 years ago
8f4b884ba1
added bootstrap for prodwork01
3 years ago
b9e48a3260
DEV-601 added playbook for bdev demo setup
3 years ago
959dcc6832
NOTICKET: someone broke sth
3 years ago
db57bcb7ca
DEV-579 add basic auth to prometheus stack
3 years ago
17e923b9b4
Feature/dev 583 new cluster
3 years ago
e5e2bdf93e
DEV-597 removed ssh keys
3 years ago
9919985e3d
DEV-593 updated versions
3 years ago
01049bf031
DEV-548: testcluster
3 years ago
ac7285bbcf
DEV-572: alertmanager metrics
3 years ago
01c972771b
Rollout main=>qa 13.09.2022
3 years ago
45f4fd20f3
DEV-537: added availability check for kube-awx-domain
3 years ago
6027ba958e
added hoan.to ssh-key
3 years ago
6200deea76
DEV-489: add ssh key for philipp.eichhorn@netgo.de
4 years ago
84a013d169
MOB-148: added k8s cluster for mobene stuff
4 years ago
05ccebc851
feat: added initial password creation to portal
...
- randomize passwords according to password policies
2 Uppercase Characters
2 Lowercase Characters
2 Special Characters
1 Digits
4 years ago
51c1a79eb1
chore: apt: removed duplicated iotop entry
4 years ago
0eac3f3d3c
DEV-429: mariadb upgrade
4 years ago
ea827b727e
feat: apt: added iotop to defaults
4 years ago
6c6dd5c1ae
DEV-442: added threshold for pg_repl_lag to avoid false positives on DEV-stage
4 years ago
c112a780f1
Extend hetzner_ssh_keys for michael.haehnel
4 years ago
10bd066617
DEV-456: Added SSH key for michael.haehnel
4 years ago
ab790591c2
chore: whitelisted admin ips
4 years ago
a2fa12ef40
DEV-396: changed diskspace alert from predictive to alert of current usage
4 years ago
62e0a64f26
DEV-414: follow-up tasks prod@hetzner-incident
4 years ago
49fc416764
DEV-382: enable SSL for postgres-connections
4 years ago
d99c9001bf
DEV-383: enable SSL for mariadb-connections
4 years ago
6297ad954e
feat: removed admin ips from firewalls
4 years ago
0b18fc9bc2
MOB-28: added custom whitelisted ips for services
4 years ago
fec11415bc
MOB-28: added firewall whitelist for mobene - keycloak
4 years ago
7bb1c9eed3
chore: update of ip whitelist
4 years ago
43da648df6
DEV-389: added gpg-decryption for backup
4 years ago
0c9042da83
DEV-373: try to automate restore from database backup
4 years ago
49aa913213
bugfix: backup runs with gather_facts: false
4 years ago
68f1c76919
bugfix: timestamp wasn't stabel anymore
4 years ago
5733b20dc3
bugfix: server creation was broken due to backupuser
4 years ago
b35744a3b3
bugfix: used wrong email address for hetzner key
4 years ago
8dbd533c97
DEV-273 added branch to rollout for stages
...
- master/main -> DEV
- qa -> QA
- prodnso -> PRODNSO
4 years ago
42f0ae114a
DEV-273 added branch to rollout for stages
...
- master/main -> DEV
- qa -> QA
- prodnso -> PRODNSO
4 years ago
6394d9150c
bugfix: awx uses now own user for automation
4 years ago
92c11ecef4
bugfix: ansible user for awx
4 years ago
e17c62f81e
DEV-371: added stuff to do remote backup
4 years ago
ac8998f212
DEV-273: automate rollout ansible by gitlab
4 years ago
ea2ef949c9
DEV-360: rollout k8s on prodnso
4 years ago
c732ab8eb3
DEV-341: tried to implement review critics
4 years ago
e353d718ba
bugfix: removed "ignore_errors: true" from patchday (kubernetes)
4 years ago
8b885a30b7
bugfix: patchay was broken due to missing pip dependency
...
- kubernetes
4 years ago
5d604700dd
DEV-319: feat: split dev/qa into own hetzner projects
4 years ago
aa09887b9e
feat: rollout new tokens/passwords for qa stage
4 years ago
59a409fc32
DEV-342: added patchday playbook
4 years ago
46e021d22c
DEV-327: added several stuff for new prodnso-stage + bugfixing and improving other stuff
4 years ago
cdd9c2543a
cleanup: removed vault for group/all > moved to stage groups
...
- every stage has now its own vault file
4 years ago
190b8394eb
feat: added metricbeat (inactive)
4 years ago
d314e164c7
bugfix: disabled blackbox exporter for connect management
...
- current config didn't works with 302 to login page
4 years ago
df0e320743
bugfix: fixed connect url for blackbox exporter
4 years ago
76289d2242
DEV-316: fixing linter problems
4 years ago
44c7509e11
feat: consolidation for harbor
...
- dev-docker-registry-01 -> dev-harbor-01
- qa-docker-registry-01 -> qa-harbor-01
4 years ago
212ef00807
bugfix: connect-wordpress orchestration
...
- added missing configuration to wordpress service
REALM_ID
REGISTRATION_ID
CLIENT_ID
CLIENT_SECRET
CLIENT_USERNAME
CLIENT_PASSWORD
SMARDIGO_AUTH_TOKEN_NAME
SMARDIGO_AUTH_TOKEN_VALUE
4 years ago
9f9a192432
DEV-269: added stuff to federate k8s-internal prometheus metrics
4 years ago
ea231be89f
DEV-277 feat: added stage for external usage
...
- stage without shared services
- setup isolated services
4 years ago
5bdff07d1b
DEV-253: digitalocean stuff - add droplet but not idempotentgit branch git branch plz check
4 years ago
54d6b82f1f
DEV-244 feat: added power dns to stage dev
4 years ago
0eafc32ec9
feat: added borken ip to whitelist
4 years ago
aeabec152c
SMARCH-106: added stuff for multi tenant setup
...
- workflow-index-postgres
- workflow-proxy-postgres
- workflow-proxy-realm
4 years ago
8f94c4aae0
feat: added hetzner csi plugin
4 years ago
a9d6249762
feat: rollout gitea on qa
4 years ago
719a3e71d7
feat: kubernetes bootstrap
...
- ccm
- ingress
- certmanager
- argo-cd
{{ stage }}-kube-argocd.{{ domain }}
- prometheus
{{ stage }}-kube-grafana.{{ domain }}
4 years ago
3d00fdc7a0
DEV-222 kubernetes setup with ansible
4 years ago
8df2970e7c
feat: reverse proxy configuration for gitea
...
- https://...
- ssh@...:2222
4 years ago
37cf451edd
chore: maintenance
...
- added tag awx_repository' > update repository on awx server
- moved wordpress database dump from /tmp to /backups
- switch wordpress dump from <dump>.tar.gz to <dump>.gz
- added hint for upload wordpress dump to README.md
4 years ago
49cf9e1612
cleanup: factor out docker-compose version (->group all)
4 years ago
99d301234a
DEV-216: added ssh pubkey for fgoerz; changed lookup to find also non-RSA-pubkeys
4 years ago
d3278b62ac
bugfix: stage-qa configuration
...
- email
- connect api token
4 years ago
1c2da22ef6
feat: synchronize authorized keys for root
4 years ago
335e3bb9dd
chore: cors for swagger on connect/iam
4 years ago
8ee702fb68
chore: removed outdated tasks
4 years ago
ffb714d7ad
SMARCH-92: setup qa up to docker registry
...
- consolidation between dev/qa
- moved/split variables into vaults for dev/qa
4 years ago
c86ccc48aa
Added postgres exporter + dashboard.
4 years ago
7c0f9c597b
Added mysql/maria-exporter + dashboard.
4 years ago
ad861db16e
SMARCH-92: split elastic stack services for qa
...
- elasticsearch
- logstash
- kibana
4 years ago
a8b60e9069
chore: teams alerting hook can now be stage specific
...
- added var netgo_msteams_hook_alerting (DEV)
4 years ago
d7704681ee
bugifx: awx polling configuration produces wrong instance
...
- <url>:80 -> <url>
4 years ago
Sven Ketelsen
Görz, Friedrich
Michael Hähnel
friedrich goerz
Hoan To
sven.ketelsen
Michael Hähnel
Eichhorn, Philipp
Ketelsen, Sven
Peter Heise