{% if salt['grains.get']('include_secrets', True) %}
include:
- secrets.role.static_master
{% endif %}
profile:
web_static:
expected_gitmodules:
# expected .gitmodules files and their sha256sum
# this ensures we notice .gitmodules changes and can update the salt code accordingly
./static.opensuse.org/.gitmodules: 18c60f122666bed4d7c105a7a3150bb3828548f05110835ad206bbac13c58ba5
git_repos:
# branch defaults to 'master' if not specified
html5test.opensuse.org:
branch: opensuse
repo: https://github.com/openSUSE/HTML5test.git
people.opensuse.org:
branch: gh-pages
repo: https://github.com/openSUSE/people.git
shop.opensuse.org:
repo: https://github.com/openSUSE/shop.o.o.git
static.opensuse.org:
repo: https://github.com/openSUSE/static.opensuse.org.git
static.opensuse.org/login:
repo: https://github.com/openSUSE/openSUSE-login
static.opensuse.org/themes:
repo: https://github.com/openSUSE/opensuse-themes
static.opensuse.org/chameleon:
repo: https://github.com/openSUSE/chameleon.git
static.opensuse.org/chameleon-2.0:
branch: rel-2.0
repo: https://github.com/openSUSE/chameleon.git
static.opensuse.org/chameleon-3.0:
branch: rel-3.0
repo: https://github.com/openSUSE/chameleon.git
studioexpress.opensuse.org:
repo: https://github.com/openSUSE/studioexpress-landing.git
lizards.opensuse.org:
repo: https://github.com/openSUSE/lizards.git
www.opensuse.org:
repo: https://github.com/openSUSE/landing-page.git
# www.o.o/openid/ is not handled by narwal*, haproxy forwards /openid/ to a different server
community.opensuse.org/ebooks:
repo: https://github.com/openSUSE/ebooks-archives.git
branch: main
community.opensuse.org/meetings:
repo: https://github.com/openSUSE/meetings-archives.git
branch: main
ignite.opensuse.org:
repo: https://github.com/openSUSE/fuel-ignition.git
branch: gh-pages
mirrors.opensuse.org:
repo: https://github.com/openSUSE/mirrors-static.git
branch: main
server_list:
- narwal4.infra.opensuse.org
- narwal5.infra.opensuse.org
- narwal6.infra.opensuse.org
- narwal7.infra.opensuse.org
- narwal8.infra.opensuse.org
# ssh_private_key included from pillar/secrets/role/static_master.sls
# ssh_pubkey (for authorized_keys) is in pillar/role/web_static.sls
zypper:
packages:
rsync: {}