opendev/system-config
Code Issues Proposed changes
Files
master
system-config/playbooks
History
Clark Boylan 73bcec03f1 Disable modsecurity response body access in two static vhosts 
We're currently only looking at request details not response details for
our modsecurity rules. This means we shouldn't need modsecurity access
to the responses for anything. Disable this access in two vhosts that
may serve large files to keep memory consumption down.

Change-Id: I19aa313a322f6973c0927cf20753b71a0fe421be
2026-03-13 08:50:13 -07:00
..
filter_plugins
…
group_vars
Track our OpenMetal environment HTTPS cert expiry
2024-08-16 18:32:18 +00:00
k8s
Add resources for deploying rook and xtradb to kuberenets
2019-02-05 18:52:21 +00:00
library
Add inline_python module
2022-05-25 18:14:21 +00:00
module_utils/facts/system
…
periodic
Correct static known_hosts entry for goaccess jobs
2023-08-07 21:27:40 +00:00
roles
Disable modsecurity response body access in two static vhosts
2026-03-13 08:50:13 -07:00
templates/clouds
Add note about OVH swift regions to clouds.yaml
2025-10-28 14:44:35 -07:00
zuul
Add Gerrit 3.13 images and testing
2026-03-10 14:08:05 -07:00
apply-package-updates.yaml
launch: use apt to update packages
2023-04-13 14:14:58 +10:00
base.yaml
infra-prod: run job against linaro
2023-03-15 12:00:25 +11:00
bootstrap-bridge.yaml
install-ansible: overhaul install ansible requirements
2022-12-06 13:27:46 +11:00
bootstrap-k8s-nodes.yaml
Stop running k8s-on-openstack nested
2019-02-12 18:17:46 +00:00
gitea-rename-setup-org.yaml
…
gitea-rename-tasks.yaml
Use the gitea api in the gitea renaming playbook
2021-08-03 08:47:16 -07:00
install_puppet.yaml
…
letsencrypt.yaml
Refactor adns variables
2023-03-10 09:36:01 +11:00
manage-projects.yaml
Add comments to manage-projects about project-config syncing
2021-10-21 11:44:02 -07:00
remote_puppet_adhoc.yaml
…
remote_puppet_else.yaml
Cleanup eavesdrop puppet references
2021-06-10 09:02:23 +10:00
rename_repos.yaml
Fix zuul scheduler container name in docker exec commands
2025-07-03 06:52:40 -07:00
run_cloud_launcher.yaml
…
run-accessbot.yaml
Sync project-config before deploying accessbot
2021-07-09 23:15:52 +00:00
service-afs.yaml
Refactor AFS groups
2021-02-11 13:35:16 +11:00
service-borg-backup.yaml
service-borg-backup: preload backup server facts
2021-02-23 13:04:20 +11:00
service-bridge.yaml
bridge: switch OSC from container to local install
2022-11-25 09:37:40 +00:00
service-codesearch.yaml
encrypt-logs: turn on for all prod playbooks
2022-02-24 09:57:55 +11:00
service-dstatlogger.yaml
Use dstat to record performance of system-config-run hosts
2021-02-16 14:31:30 -08:00
service-eavesdrop.yaml
ptgbot: setup web interface
2021-10-06 15:39:25 +11:00
service-etherpad.yaml
Make etherpad configuration more generic for multiple hosts
2023-04-05 08:36:27 -07:00
service-gitea-lb.yaml
Make haproxy role more generic
2021-12-01 09:55:45 +11:00
service-gitea.yaml
Use the apache-ua-filter role on Gitea servers
2020-10-16 17:45:19 +00:00
service-grafana.yaml
Cleanup grafana.openstack.org
2020-10-29 07:59:42 +11:00
service-graphite.yaml
Cleanup graphite01
2020-09-30 11:55:24 +10:00
service-kerberos.yaml
kerberos-kdc: role to manage Kerberos KDC servers
2021-03-17 08:30:52 +11:00
service-keycloak.yaml
Add a keycloak server
2021-12-03 14:17:23 -08:00
service-lists3.yaml
Add a mailman3 list server
2022-11-11 23:20:19 +00:00
service-meetpad.yaml
…
service-mirror-update.yaml
Add kerberos-client group
2021-03-18 11:59:30 +11:00
service-mirror.yaml
Add kerberos-client group
2021-03-18 11:59:30 +11:00
service-nameserver.yaml
Refactor adns variables
2023-03-10 09:36:01 +11:00
service-paste.yaml
Remove paste01.openstack.org
2021-07-15 23:25:10 +00:00
service-registry.yaml
…
service-review.yaml
Remove review02 from the inventory
2025-04-21 11:07:22 -07:00
service-static.yaml
Add kerberos-client group
2021-03-18 11:59:30 +11:00
service-tracing.yaml
Add Jaeger tracing server
2022-09-15 19:21:33 -07:00
service-zookeeper.yaml
…
service-zuul-db.yaml
Add a standalone zuul db server
2024-04-04 12:25:23 -07:00
service-zuul-lb.yaml
Add Zuul load balancer
2022-02-10 13:24:42 -08:00
service-zuul-preview.yaml
…
service-zuul.yaml
Add clouds.yaml to zuul schedulers
2024-10-14 11:32:49 -07:00
set-hostnames.yaml
…
start-mergers-executors.yaml
Update zuul-executor stop/start playbook
2020-07-17 16:18:26 -07:00
stop-mergers-executors.yaml
Update zuul-executor stop/start playbook
2020-07-17 16:18:26 -07:00
sync-gitea-projects.yaml
Disable recursive git clones with ansible
2025-07-08 18:22:59 -07:00
test-borg-backup-pre.yaml
backups: add retirement and purge lists
2024-11-08 22:30:49 +11:00
test-borg-backup.yaml
borg-backup: implement saving a stream, use for database backups
2021-02-03 11:43:12 +11:00
test-codesearch.yaml
hound: enable detect-ref
2022-02-25 17:27:35 +11:00
test-etherpad.yaml
Update Etherpad to 2.3.0
2025-04-10 07:49:55 -07:00
test-gitea.yaml
Reapply "Switch Gerrit replication to a larger RSA key"
2023-12-06 09:02:17 -08:00
test-grafana.yaml
grafana: take some screenshots during testing
2021-02-17 10:43:26 +11:00
test-inline-python.yaml
Add inline_python module
2022-05-25 18:14:21 +00:00
test-kerberos.yaml
kerberos-kdc: role to manage Kerberos KDC servers
2021-03-17 08:30:52 +11:00
test-manage-projects.yaml
Don't always update gitea project descriptions
2021-03-16 13:06:16 -07:00
test-paste.yaml
Remove paste01.openstack.org
2021-07-15 23:25:10 +00:00
test-update-zuul-description.yaml
Abstract name of bastion host for testing path
2022-10-20 09:00:43 +11:00
unattended_upgrades.yml
…
update_puppet_version.yaml
Fix URLs after OpenDev rename
2020-03-18 18:23:17 +01:00
zuul_pull.yaml
Run zuul-launcher
2024-09-18 16:37:40 -07:00
zuul_reboot.yaml
Update zuul_reboot package upgrade error conditions
2025-11-24 15:39:35 -08:00
zuul_reconfigure.yaml
…
zuul_restart.yaml
…
zuul_rolling_restart.yaml
Add the start of a Zuul rolling restart playbook
2022-05-25 09:48:28 -07:00
zuul_start.yaml
Run zuul-launcher
2024-09-18 16:37:40 -07:00
zuul_stop.yaml
Run zuul-launcher
2024-09-18 16:37:40 -07:00