kosmos/chef
kosmos
/
chef
8
3
Fork 0
Code Issues 34 Pull Requests 2 Projects 1 Activity

Set up LDAP/dirsrv replication #453

Merged
greg merged 5 commits from feature/ldap_replication into master 2022-12-08 13:12:22 +00:00
Conversation 0 Commits 5 Files Changed 17 +92 -24
17 changed files with 92 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
clients/ldap-4.json Normal file
View File

@ -0,0 +1,4 @@
{
"name": "ldap-4",
"public_key": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzFyZh5/J2BsKRunghis\nwUGbv4j/ynAF7QY+CYoOwDBcbLHk6odn1JyUqCgfhCIX0mh8F/fDKyU9Aw6+HHZ/\nX0DTt/enLTaWc2vxRfyJLRXP7/ymHOr4u6HYEINMdVJp4yQ9XLcWpuRHfA+fHrZ7\n9fI8sCMSEawvVpEKytYdVnm3VCjfIVrfCAkY0lP0mNG908edX2ZuJ4GS1UwADUZX\nLZuMhbGX9JqIQYWCyiMDakD7P7PlEDf/JVkvkao4HQatkqJGmGDhvfIPodIo8JC0\n6FsYxWtvrLJBArYjnVBKRuxIlBqq/7Yx0gj09kGf84aSXvkMDgio7AO4xSp9GJTJ\n4wIDAQAB\n-----END PUBLIC KEY-----\n"
}

5
nodes/akkounts-1.json
View File

@ -78,8 +78,9 @@
}
},
"run_list": [
"recipe[kosmos-base]",
"role[base]",
"role[kvm_guest]",
"role[ldap_client]",
"role[akkounts]"
]
}
}

5
nodes/ejabberd-4.json
View File

@ -59,8 +59,9 @@
}
},
"run_list": [
"recipe[kosmos-base]",
"role[base]",
"role[kvm_guest]",
"role[ldap_client]",
"role[ejabberd]"
]
}
}

3
nodes/ejabberd-8.json
View File

@ -57,8 +57,9 @@
}
},
"run_list": [
"recipe[kosmos-base]",
"role[base]",
"role[kvm_guest]",
"role[ldap_client]",
"role[ejabberd]"
]
}

1
nodes/gitea-2.json
View File

@ -64,6 +64,7 @@
"run_list": [
"role[base]",
"role[kvm_guest]",
"role[ldap_client]",
"role[garage_gateway]",
"role[gitea]"
]

4
nodes/ldap-3.kosmos.org.json
View File

@ -59,6 +59,6 @@
"run_list": [
"recipe[kosmos-base]",
"role[kvm_guest]",
"role[dirsrv_primary]"
"role[dirsrv_supplier]"
]
}
}

57
nodes/ldap-4.kosmos.org.json Normal file
View File

@ -0,0 +1,57 @@
{
"name": "ldap-4.kosmos.org",
"normal": {
"knife_zero": {
"host": "10.1.1.106"
}
},
"automatic": {
"fqdn": "ldap-4.kosmos.org",
"os": "linux",
"os_version": "5.4.0-1079-kvm",
"hostname": "ldap-4",
"ipaddress": "192.168.122.73",
"roles": [
"base",
"kvm_guest"
],
"recipes": [
"kosmos-base",
"kosmos-base::default",
"kosmos_kvm::guest",
"apt::default",
"timezone_iii::default",
"timezone_iii::debian",
"ntp::default",
"ntp::apparmor",
"kosmos-base::systemd_emails",
"apt::unattended-upgrades",
"kosmos-base::firewall",
"kosmos-postfix::default",
"postfix::default",
"postfix::_common",
"postfix::_attributes",
"postfix::sasl_auth",
"hostname::default"
],
"platform": "ubuntu",
"platform_version": "20.04",
"cloud": null,
"chef_packages": {
"chef": {
"version": "17.10.3",
"chef_root": "/opt/chef/embedded/lib/ruby/gems/3.0.0/gems/chef-17.10.3/lib",
"chef_effortless": null
},
"ohai": {
"version": "17.9.0",
"ohai_root": "/opt/chef/embedded/lib/ruby/gems/3.0.0/gems/ohai-17.9.0/lib/ohai"
}
}
},
"run_list": [
"role[base]",
"role[kvm_guest]",
"role[dirsrv_supplier]"
]
}

5
nodes/wiki-1.json
View File

@ -74,8 +74,9 @@
}
},
"run_list": [
"recipe[kosmos-base]",
"role[base]",
"role[kvm_guest]",
"role[ldap_client]",
"recipe[kosmos-mediawiki]"
]
}
}

2
roles/dirsrv_primary.rb → roles/dirsrv_supplier.rb
View File

@ -1,4 +1,4 @@
name "dirsrv_primary"
name "dirsrv_supplier"
run_list %w(
recipe[kosmos-dirsrv]

2
roles/hubot.rb
View File

@ -7,6 +7,6 @@ default_run_list = %w(
env_run_lists(
'_default' => default_run_list,
'development' => [],
'development' => default_run_list,
'production' => default_run_list
)

5
roles/ldap_client.rb Normal file
View File

@ -0,0 +1,5 @@
name "ldap_client"
run_list %w(
kosmos-dirsrv::hostsfile
)

1
site-cookbooks/kosmos-akkounts/recipes/default.rb
View File

@ -22,7 +22,6 @@ package "libpq-dev"
include_recipe 'kosmos-nodejs'
include_recipe "kosmos-redis"
include_recipe "kosmos-dirsrv::hostsfile"
npm_package "yarn" do
version "1.22.4"

9
site-cookbooks/kosmos-dirsrv/recipes/default.rb
View File

@ -3,12 +3,15 @@
# Recipe:: default
#
include_recipe "kosmos-dirsrv::hostsfile"
credentials = data_bag_item("credentials", "dirsrv")
local_hostname = "#{node["hostname"]}.kosmos.local"
hostsfile_entry "127.0.0.1" do
hostname local_hostname
end
dirsrv_instance "master" do
hostname "ldap.kosmos.local"
hostname local_hostname
admin_password credentials['admin_password']
suffix "dc=kosmos,dc=org"
end

8
site-cookbooks/kosmos-dirsrv/recipes/hostsfile.rb
View File

@ -3,12 +3,12 @@
# Recipe:: hostsfile
#
dirsrv_primary = search(:node, "role:dirsrv_primary AND chef_environment:#{node.chef_environment}").first
dirsrv_supplier = search(:node, "role:dirsrv_supplier AND chef_environment:#{node.chef_environment}").first
unless dirsrv_primary.nil?
primary_ip = dirsrv_primary['knife_zero']['host']
unless dirsrv_supplier.nil?
supplier_ip = dirsrv_supplier['knife_zero']['host']
hostsfile_entry primary_ip do
hostsfile_entry supplier_ip do
hostname "ldap.kosmos.local"
unique true
end

2
site-cookbooks/kosmos-ejabberd/recipes/default.rb
View File

@ -3,8 +3,6 @@
# Recipe:: default
#
include_recipe "kosmos-dirsrv::hostsfile"
ejabberd_credentials = data_bag_item("credentials", "ejabberd")
ejabberd_version = node["kosmos-ejabberd"]["version"]

1
site-cookbooks/kosmos-mediawiki/recipes/default.rb
View File

@ -27,7 +27,6 @@
include_recipe 'apt'
include_recipe 'ark'
include_recipe 'composer'
include_recipe 'kosmos-dirsrv::hostsfile'
server_name = 'wiki.kosmos.org'

2
site-cookbooks/kosmos_gitea/recipes/default.rb
View File

@ -3,8 +3,6 @@
# Recipe:: default
#
include_recipe "kosmos-dirsrv::hostsfile"
working_directory = node["gitea"]["working_directory"]
git_home_directory = "/home/git"
repository_root_directory = "#{git_home_directory}/gitea-repositories"