summaryrefslogtreecommitdiffstats
path: root/roles/base
Commit message (Collapse)AuthorAgeFilesLines
...
* stage a template to replace syncHttpLogs.sh somedayStephen Smoogen2017-03-171-0/+244
|
* add tag for common scriptsKevin Fenzi2017-03-021-0/+1
|
* rework our conditional reload script to handle systemctl reload changesKevin Fenzi2017-03-021-3/+9
|
* ipv4 on phx2 bastion hostsKevin Fenzi2017-02-141-0/+1
|
* and now have gateway use the milterKevin Fenzi2017-02-141-0/+3
|
* Make it not match autocloud01Patrick Uiterwijk2017-02-081-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* No stg ip override in cloudPatrick Uiterwijk2017-02-081-0/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* ok this should allow smtp to send to bastion for fedorahosted.Stephen Smoogen2017-02-022-4/+5
|
* make fedorahosted on bastonStephen Smoogen2017-02-021-1/+1
|
* drop any relayhost for copr mails, mx1.redhat.com will not relay for itKevin Fenzi2017-01-311-3/+3
|
* for some reason postfix wants this fqdnKevin Fenzi2017-01-191-1/+1
|
* koji builders only should have to deal with ipv4 mailKevin Fenzi2017-01-191-0/+1
|
* we need to add a larger limits for file coverageStephen Smoogen2017-01-182-1/+16
|
* also allow tcp dns for buildersKevin Fenzi2017-01-161-0/+2
|
* we need to do all this stuff in templates.Stephen Smoogen2017-01-161-0/+2
|
* no reverse klingon logic in which files to fixStephen Smoogen2017-01-103-0/+3
|
* Disable rdns on mastersPatrick Uiterwijk2016-12-221-2/+0
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Make sure all machines know which realm to usePatrick Uiterwijk2016-12-201-4/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* adding new qa-prod01.qa host to replace qadevel.qaTim Flink2016-12-151-0/+0
|
* more s390 move changesKevin Fenzi2016-12-071-2/+2
|
* Fix missing )Kevin Fenzi2016-12-051-1/+1
|
* Simplify this conditional for iptables.Kevin Fenzi2016-12-051-1/+1
|
* Set NM_CONTROLLED=yes in our hosts that are in fact NM_CONTROLLED.Kevin Fenzi2016-12-051-0/+1
|
* Exclude the osbs hosts from our default iptables template as they have their ↵Kevin Fenzi2016-12-051-1/+1
| | | | own more complex one.
* fix missing close in jinja template for ipa masters configKevin Fenzi2016-12-051-1/+1
|
* Only apply on stg for nowPatrick Uiterwijk2016-12-041-2/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* No canonicalization or rdnsPatrick Uiterwijk2016-12-041-0/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Setup a proxyreload for httpd that looks for the ticketkey. If it's not ↵Kevin Fenzi2016-12-011-0/+25
| | | | there, assume the proxy is just being configured and don't reload httpd.
* update files to put basics for proxy13/proxy14 into beingStephen Smoogen2016-12-011-0/+2
|
* policycoreutils-python is what we want for semanage on rhelKevin Fenzi2016-11-301-1/+1
|
* Revert "adding default for sshd_port in base role"Tim Flink2016-11-301-2/+0
| | | | This reverts commit ecd13fdfa2102b7a2ba0de221c1f9eeaaf2253c4.
* adding default for sshd_port in base roleTim Flink2016-11-301-0/+2
|
* adding check for non-standard ssh and semanage adjustment if foundTim Flink2016-11-301-0/+38
|
* RHEL6 doesn't have the https proxyPatrick Uiterwijk2016-11-291-0/+4
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Use id.fp.o for krb everywherePatrick Uiterwijk2016-11-281-26/+5
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* This is also env-dependantPatrick Uiterwijk2016-11-231-1/+5
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Seems IPA masters need a different krb5 confPatrick Uiterwijk2016-11-232-0/+57
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Make builders use the https proxy for krbPatrick Uiterwijk2016-11-031-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Apply krb5 no_canonicalize on all stg buildvmsPatrick Uiterwijk2016-11-011-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* In ansible 2.2 always_run is depreciated. Switch to check_mode.Kevin Fenzi2016-11-012-3/+3
|
* Temporarily wrap it in an if to prevent this on a day of freeze startPatrick Uiterwijk2016-11-011-0/+2
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Disable hostname canoncalizationPatrick Uiterwijk2016-11-011-0/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Use kdcproxy outside of PHX2Patrick Uiterwijk2016-10-311-2/+9
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Revert "Enable GSSAPI for ssh"Patrick Uiterwijk2016-10-273-6/+6
| | | | This reverts commit b4f1088938888893d7feae60884952b6892204c8.
* Allow specifying additionally needed host keytabsPatrick Uiterwijk2016-10-271-0/+26
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Enable GSSAPI for sshPatrick Uiterwijk2016-10-273-6/+6
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Move keytab stuff into the base rolePatrick Uiterwijk2016-10-272-0/+107
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Create role for host keytab to test before putting in basePatrick Uiterwijk2016-10-271-1/+1
| | | | Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
* Move some things around to get resolv.conf right on pgbdrKevin Fenzi2016-10-202-0/+85
|
* fix syntax errorKevin Fenzi2016-10-171-2/+2
|
generated by cgit (git 2.34.1) at 2025-09-25 20:10:59 +0000