system-config/playbooks/roles
Ian Wienand c1aff2ed38 kerberos-kdc: role to manage Kerberos KDC servers
This adds a role and related testing to manage our Kerberos KDC
servers, intended to replace the puppet modules currently performing
this task.

This role automates realm creation, initial setup, key material
distribution and replica host configuration.  None of this is intended
to run on the production servers which are already setup with an
active database, and the role should be effectively idempotent in
production.

Note that this does not yet switch the production servers into the new
groups; this can be done in a separate step under controlled
conditions and with related upgrades of the host OS to Focal.

Change-Id: I60b40897486b29beafc76025790c501b5055313d
2021-03-17 08:30:52 +11:00
..
accessbot Split eavesdrop into its own playbook 2020-04-23 14:34:28 -05:00
afs-release Add a new docs.airshipit.org vhost on static01 2020-03-20 19:09:13 +00:00
afsmon afsmon: install python3-pip 2020-02-12 16:39:11 +11:00
apache-ua-filter Block restricted user agents for the tarballs site 2020-10-16 17:45:12 +00:00
base install-ansible: ensure stevedore 2021-03-04 08:29:01 +11:00
borg-backup borg-backup: send explicit email on backup failure 2021-02-16 14:49:38 +11:00
borg-backup-server borg-backup-server: make sure to append verification logs 2021-02-15 14:45:03 +11:00
codesearch codesearch: Add robots.txt 2020-11-20 19:13:32 +11:00
configure-kubectl Configure .kube/config on bridge 2019-02-06 15:43:19 -08:00
configure-openstacksdk Update the limestone cert in our clouds.yaml 2020-08-25 15:25:25 -07:00
disable-puppet-agent Stop running mcollective 2020-05-05 15:00:04 -05:00
dstat-logger Use dstat to record performance of system-config-run hosts 2021-02-16 14:31:30 -08:00
edit-secrets-script Add edit-secrets script to bridge.o.o 2019-02-27 08:45:11 -08:00
etherpad Merge "etherpad: fix robots.txt" 2021-02-24 00:02:04 +00:00
gerrit Merge "Stop using mysqlclient ssl flag" 2021-02-23 05:00:42 +00:00
gerritbot docker: install rsyslog to capture container output 2020-10-19 16:06:03 +11:00
gitea gitea: fix db backup script 2021-02-23 02:00:20 +00:00
gitea-git-repos Merge "gitea-git-repos: update deprecated API path" 2021-03-16 04:00:30 +00:00
grafana grafana: update to 7.4.2 2021-02-19 09:54:31 +11:00
graphite graphite: also deny account page 2020-12-10 09:21:48 +11:00
haproxy Remove the tcplog option from haproxy configs 2020-06-30 22:22:28 +00:00
import-gpg-key reprepro: convert to Ansible 2020-10-19 14:06:57 +11:00
install-ansible Merge "install-ansible: ensure stevedore" 2021-03-09 02:52:10 +00:00
install-ansible-roles puppet: don't run module install steps multiple times 2020-09-03 09:23:05 +10:00
install-apt-repo Vendor the apt repo gpg keys used for Zuul 2020-05-20 13:17:09 -07:00
install-borg borg-backup: add fuse 2020-11-05 11:56:46 +11:00
install-certcheck Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
install-docker install-docker: remove fix from prior change 2021-02-25 09:19:02 +11:00
install-kubectl Remove snap cleanup tasks 2020-04-16 12:45:36 -05:00
install-osc-container Use openstackclient from container 2020-04-23 07:46:28 -05:00
install-podman Run a gerrit container on review-dev01 2019-10-29 08:29:17 +09:00
iptables Run iptables in service playbooks instead of base 2020-06-04 07:44:22 -05:00
jitsi-meet Merge "Indicate firefox is suboptimal in meetpad" 2020-06-03 17:48:46 +00:00
kerberos-kdc kerberos-kdc: role to manage Kerberos KDC servers 2021-03-17 08:30:52 +11:00
letsencrypt-acme-sh-install ansible-lint : disable 503 2020-03-06 09:57:00 +11:00
letsencrypt-config-certcheck Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
letsencrypt-create-certs Deploy refstack with ansible docker 2021-02-05 19:23:34 +00:00
letsencrypt-install-txt-record letsencrypt-install-txt-record: pause after adding TXT records 2020-10-30 16:49:31 +11:00
letsencrypt-request-certs Generate ssl check list directly from letsencrypt variables 2020-05-20 14:27:14 +10:00
logrotate reprepro: convert to Ansible 2020-10-19 14:06:57 +11:00
master-nameserver Don't log the public loop on master-nameserver 2020-04-08 16:38:15 -05:00
mirror mirror: remove old ceph links 2020-10-28 14:18:24 +11:00
mirror-update Added Fedora 33 mirror-update role 2020-12-17 09:28:52 +01:00
nameserver nameserver: Allow master server to notify via ipv6 2020-10-28 09:26:14 +00:00
nodepool-base Revert "Revert "Add Zookeeper TLS support"" 2020-07-15 15:45:48 -07:00
nodepool-base-legacy Add initial Ansible for nodepool hosts 2020-03-06 14:02:52 +11:00
nodepool-builder Add pull tasks for nodepool/zuul 2021-02-19 15:42:40 -08:00
nodepool-launcher Add pull tasks for nodepool/zuul 2021-02-19 15:42:40 -08:00
openafs-db-server openafs-<db|file>-server: fix role name 2021-02-10 13:49:12 +11:00
openafs-file-server openafs-<db|file>-server: fix role name 2021-02-10 13:49:12 +11:00
openafs-server-config Add afsdb03 openstack.org 2021-03-01 15:51:49 +11:00
pip3 Change get-pip url 2021-03-08 15:03:43 +01:00
puppet-run puppet: don't run module install steps multiple times 2020-09-03 09:23:05 +10:00
puppet-setup-ansible install-ansible: move install_modules.sh to puppet-setup-ansible 2020-09-03 09:28:16 +10:00
rax-dns-backup rax-dns-backup: fix copy file typo 2020-06-17 09:29:11 +10:00
refstack refstack: fix backup script typo 2021-03-16 15:12:41 +11:00
registry Install docker-compose from pypi 2020-04-16 12:08:00 -07:00
reprepro reprepro: only rotate .log files 2021-01-18 08:29:49 +11:00
root-keys roles: Add README.rst and lint 2018-08-23 21:34:42 +10:00
run-selenium run-selenium: run selenium on a node 2021-01-18 07:58:23 -08:00
static Revert "Temporarily serve static sites from AFS R+W vols" 2021-01-14 20:14:13 +00:00
sync-project-config Stop logging the rsync of puppet 2020-04-30 16:11:42 -05:00
vos-release Add missing newline in vos_release.sudo 2019-11-21 19:08:30 +00:00
zk-ca Zookeeper: listen on plain and TLS ports 2020-06-17 10:38:59 -07:00
zookeeper Enable srvr, stat and dump commands in the zk cluster 2021-03-15 16:57:21 -07:00
zuul zuul: increase git timeout 2020-12-10 15:04:30 +11:00
zuul-executor Update zuul-executor shutdown handling 2021-02-26 08:12:30 -08:00
zuul-merger Add pull tasks for nodepool/zuul 2021-02-19 15:42:40 -08:00
zuul-preview Install docker-compose from pypi 2020-04-16 12:08:00 -07:00
zuul-scheduler Add pull tasks for nodepool/zuul 2021-02-19 15:42:40 -08:00
zuul-status-backup Add --fail flag to zuul status backup curl 2020-04-28 08:33:05 -05:00
zuul-user Split eavesdrop into its own playbook 2020-04-23 14:34:28 -05:00
zuul-web Add pull tasks for nodepool/zuul 2021-02-19 15:42:40 -08:00
set-hostname Split eavesdrop into its own playbook 2020-04-23 14:34:28 -05:00