Ben Vincent
abdb3ec8cb
- remove almalinux/centos/epel repos - manage consul service `packagerepo` - manage ssh principals - update vault alt-names
76 lines
2.4 KiB
YAML
76 lines
2.4 KiB
YAML
---
|
|
profiles::packages::include:
|
|
createrepo: {}
|
|
|
|
profiles::ssh::sign::principals:
|
|
- packagerepo.service.consul
|
|
- packagerepo.query.consul
|
|
- "packagerepo.service.%{facts.country}-%{facts.region}.consul"
|
|
|
|
# additional altnames
|
|
profiles::pki::vault::alt_names:
|
|
- packagerepo.main.unkin.net
|
|
- packagerepo.service.consul
|
|
- packagerepo.query.consul
|
|
- "packagerepo.service.%{facts.country}-%{facts.region}.consul"
|
|
|
|
# configure consul service
|
|
consul::services:
|
|
jupyterhub:
|
|
service_name: 'packagerepo'
|
|
tags:
|
|
- 'packagerepo'
|
|
address: "%{facts.networking.ip}"
|
|
port: 443
|
|
checks:
|
|
- id: 'packagerepo_http_check'
|
|
name: 'packagerepo HTTP Check'
|
|
http: "https://%{facts.networking.fqdn}"
|
|
method: 'GET'
|
|
tls_skip_verify: true
|
|
interval: '10s'
|
|
timeout: '1s'
|
|
profiles::consul::client::node_rules:
|
|
- resource: service
|
|
segment: packagerepo
|
|
disposition: write
|
|
|
|
profiles::reposync::webserver::nginx_listen_mode: both
|
|
profiles::reposync::webserver::nginx_cert_type: vault
|
|
profiles::reposync::repos_list:
|
|
mariadb_11_2_el8:
|
|
repository: 'el8'
|
|
description: 'MariaDB 11.2'
|
|
osname: 'mariadb'
|
|
release: '11.2'
|
|
baseurl: 'http://mariadb.mirror.digitalpacific.com.au/yum/11.2/rhel8-amd64/'
|
|
gpgkey: 'https://mariadb.mirror.digitalpacific.com.au/yum/RPM-GPG-KEY-MariaDB'
|
|
puppet7_el8:
|
|
repository: '8'
|
|
description: 'Puppet 7 EL8'
|
|
osname: 'puppet7'
|
|
release: 'el'
|
|
baseurl: 'https://yum.puppet.com/puppet7/el/8/x86_64/'
|
|
gpgkey: 'https://yum.puppet.com/RPM-GPG-KEY-puppet-20250406'
|
|
puppet8_el8:
|
|
repository: '8'
|
|
description: 'Puppet 8 EL8'
|
|
osname: 'puppet8'
|
|
release: 'el'
|
|
baseurl: 'https://yum.puppet.com/puppet8/el/8/x86_64/'
|
|
gpgkey: 'https://yum.puppet.com/RPM-GPG-KEY-puppet-20250406'
|
|
postgresql_rhel8_common:
|
|
repository: 'common'
|
|
description: 'PostgreSQL Common RHEL 8'
|
|
osname: 'postgresql'
|
|
release: 'rhel8'
|
|
baseurl: 'https://download.postgresql.org/pub/repos/yum/common/redhat/rhel-8-x86_64/'
|
|
gpgkey: 'https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHEL'
|
|
postgresql_rhel8_16:
|
|
repository: '16'
|
|
description: 'PostgreSQL 16 RHEL 8'
|
|
osname: 'postgresql'
|
|
release: 'rhel8'
|
|
baseurl: 'https://download.postgresql.org/pub/repos/yum/16/redhat/rhel-8-x86_64/'
|
|
gpgkey: 'https://download.postgresql.org/pub/repos/yum/keys/PGDG-RPM-GPG-KEY-RHEL'
|