|
Christian Boltz |
c34100 |
{% if salt['grains.get']('include_secrets', True) %}
|
|
Christian Boltz |
c34100 |
include:
|
|
Christian Boltz |
c34100 |
- secrets.role.static_master
|
|
Christian Boltz |
c34100 |
{% endif %}
|
|
Christian Boltz |
c34100 |
|
|
Christian Boltz |
c34100 |
profile:
|
|
Christian Boltz |
c34100 |
web_static:
|
|
Christian Boltz |
c34100 |
expected_gitmodules:
|
|
Christian Boltz |
c34100 |
# expected .gitmodules files and their sha256sum
|
|
Christian Boltz |
c34100 |
# this ensures we notice .gitmodules changes and can update the salt code accordingly
|
|
Christian Boltz |
ae78e0 |
./static.opensuse.org/.gitmodules: 4b5edd2bade58ef6d68396213f15ed50074f05c3fd83ad1e87a9fc5c9a063dac
|
|
Christian Boltz |
c34100 |
./static.opensuse.org/hosts/www.o.o/.gitmodules: e2da74eed7fcfed7f08669f6bff9d89e0d5f2f02ee8f2c6ad43afe4996cc57f1
|
|
Christian Boltz |
c34100 |
git_repos:
|
|
Christian Boltz |
c34100 |
# branch defaults to 'master' if not specified
|
|
Christian Boltz |
c34100 |
html5test.opensuse.org:
|
|
Christian Boltz |
c34100 |
branch: opensuse
|
|
Christian Boltz |
c34100 |
repo: https://github.com/openSUSE/HTML5test.git
|
|
Christian Boltz |
ef7a1f |
people.opensuse.org:
|
|
Christian Boltz |
ef7a1f |
branch: gh-pages
|
|
Christian Boltz |
ef7a1f |
repo: https://github.com/openSUSE/people.git
|
|
Christian Boltz |
c34100 |
shop.opensuse.org:
|
|
Christian Boltz |
c34100 |
repo: https://github.com/openSUSE/shop.o.o.git
|
|
Christian Boltz |
c34100 |
static.opensuse.org:
|
|
Christian Boltz |
c34100 |
repo: https://github.com/openSUSE/static.opensuse.org.git
|
|
Christian Boltz |
c34100 |
static.opensuse.org/hosts/www.o.o:
|
|
Christian Boltz |
c34100 |
repo: https://github.com/openSUSE/old-landing-page.git
|
|
Christian Boltz |
c34100 |
static.opensuse.org/login:
|
|
Christian Boltz |
c34100 |
repo: https://github.com/openSUSE/openSUSE-login
|
|
Christian Boltz |
c34100 |
static.opensuse.org/themes:
|
|
Christian Boltz |
c34100 |
repo: https://github.com/openSUSE/opensuse-themes
|
|
Christian Boltz |
c34100 |
static.opensuse.org/chameleon:
|
|
Christian Boltz |
648b49 |
repo: https://github.com/openSUSE/chameleon.git
|
|
Christian Boltz |
648b49 |
static.opensuse.org/chameleon-2.0:
|
|
Christian Boltz |
648b49 |
branch: rel-2.0
|
|
Christian Boltz |
648b49 |
repo: https://github.com/openSUSE/chameleon.git
|
|
Christian Boltz |
ae78e0 |
static.opensuse.org/chameleon-3.0:
|
|
Christian Boltz |
ae78e0 |
branch: rel-3.0
|
|
Christian Boltz |
ae78e0 |
repo: https://github.com/openSUSE/chameleon.git
|
|
Christian Boltz |
c34100 |
studioexpress.opensuse.org:
|
|
Christian Boltz |
c34100 |
repo: https://github.com/openSUSE/studioexpress-landing.git
|
|
Stasiek Michalski |
e604bd |
lizards.opensuse.org:
|
|
Stasiek Michalski |
e604bd |
repo: https://github.com/openSUSE/lizards.git
|
|
Christian Boltz |
c48073 |
www.opensuse.org:
|
|
Christian Boltz |
c48073 |
repo: https://github.com/openSUSE/landing-page.git
|
|
Christian Boltz |
c48073 |
# www.o.o/openid/ is not handled by narwal*, haproxy forwards /openid/ to a different server
|
|
Christian Boltz |
c34100 |
server_list:
|
|
Christian Boltz |
c34100 |
- narwal5.infra.opensuse.org
|
|
Christian Boltz |
c34100 |
- narwal6.infra.opensuse.org
|
|
Christian Boltz |
b41f26 |
- narwal7.infra.opensuse.org
|
|
Christian Boltz |
c34100 |
# ssh_known_hosts: use ssh-keyscan 192.168.122.x,narwalX.infra.opensuse.org | grep nist
|
|
Christian Boltz |
c34100 |
ssh_known_hosts: |
|
|
Christian Boltz |
973b29 |
192.168.47.68,narwal5.infra.opensuse.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBCbQYnUEulrX3eOcDJB23gIlSUojFL1+s1ugd1t98EDgoc+fWGvT0qX5iMS3rDA6SRwsu20/lQMhLmsS8G0Gi3w=
|
|
Christian Boltz |
973b29 |
192.168.47.69,narwal6.infra.opensuse.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBOQE0iipddghKK64jQhTNzN+oUJrBDroWlA2QGZXGFm1qZtWyBdmtzU58bLJyceMW5urKBMLCPWCHZ1oyxtNtOA=
|
|
Christian Boltz |
973b29 |
192.168.47.70,narwal7.infra.opensuse.org ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBF210DU6QxFc4eelUjwJR8AnmdF/PjFmnRFU/A69LbGDqABql4sHWhl2n0pMJifrjBBCEyKeNt64apyIaTlDZ7M=
|
|
Christian Boltz |
c34100 |
# ssh_private_key included from pillar/secrets/role/static_master.sls
|
|
Christian Boltz |
c34100 |
# ssh_pubkey (for authorized_keys) is in pillar/role/web_static.sls
|