Jarrod Johnson
02da50af8b
Tighter permissions on /var/log/confluent
2021-12-08 07:42:19 -05:00
Jarrod Johnson
77de3ab25b
Apply more restrictive permissions to /var/log/confluent/
...
While confluent shouldn't put anything sensitive in the log, custom
content may. To mitigate the risk, it will now lock down the
log permissions.
2021-12-07 07:21:04 -05:00
Jarrod Johnson
763feda63b
Fix missed references to old variable names
2021-05-03 15:54:39 -04:00
Jarrod Johnson
c3b954a743
Move suse15 to log like rhel
2021-05-03 14:50:04 -04:00
Jarrod Johnson
d17b1d060c
Prepend confluent_ to vars and switch to explicitly requesting directory
...
The 'profile' variable notably induces dracut to be excruciatingly slow,
mitigate chance by putting confluent before apikey, mgr, and profile.
Further, it has been requested to have the scripts use same name on
server for directory moving forward. Implement this request while
allowing existing OS profiles to keep working.
2021-05-03 12:48:08 -04:00
Jarrod Johnson
7957a6abd4
Add invoking syncfile activity to the default profiles
2021-03-29 14:03:11 -04:00
Jarrod Johnson
f442e949aa
Add firstboot/post ansible play support to SUSE15
2021-03-18 14:37:54 -04:00
Jarrod Johnson
d36712d014
Refactor scripting to custom for suse
...
This makes it marginally easier to modify safely.
Further, it moves progress to after custom scripting
2020-10-16 11:34:43 -04:00
Jarrod Johnson
f157ab1ef3
Use the 'staged' profile in some linux
...
The staged was added to control netboot mostly,
and is mostly optional but change some default
profiles to use it.
2020-07-01 14:20:40 -04:00
Jarrod Johnson
e863edfe3f
Correct a number of mistakes
2020-07-01 09:52:17 -04:00
Jarrod Johnson
886aade5dc
Refactor SUSE installs
...
Apply same comment principles to suse as was
applied to redhat.
2020-06-01 16:01:26 -04:00
Jarrod Johnson
22d5da3ae9
Rename certs to pem
...
There are contexts where the .cert name is not
recognized, go for .pem name instead.
2020-05-21 14:37:17 -04:00
Jarrod Johnson
66f0e8225e
Tighten permissions on confluent config files
...
Prior to copying them, make sure only root can interact.
The directory should protect them as well, but best to
not have anything controversial.
2020-05-19 10:51:32 -04:00
Jarrod Johnson
5f63875cae
Finally fix SuSE certificate handling
...
It was targeting a symlink that went out of chroot,
target the underlying directory instead.
2020-05-19 10:38:31 -04:00
Jarrod Johnson
92f8acab7a
Fix target path of tls anchors
2020-05-18 22:07:03 -04:00
Jarrod Johnson
540d0e1795
Fix SUSE certificate handling
...
SUSE requires things go through update-ca-certificates,
update the generated certs and the post to do that.
2020-05-18 19:37:54 -04:00
Jarrod Johnson
b9cdf0d941
Move TLS certs into correct locations for SuSE
2020-05-18 17:00:05 -04:00
Jarrod Johnson
0c575456e3
Fix SuSE host authentication
...
curl was failing to get allnodes
2020-05-16 11:42:19 -04:00
Jarrod Johnson
24288f988a
Call updatestatus upon completion of suse install
2020-05-14 14:49:53 -04:00
Jarrod Johnson
408d0a8673
Refactor SUSE to have external scripts
...
Try to improve readability of portions of install by
refactoring.
2020-05-14 13:36:23 -04:00
