Commit message (Collapse) | Author | Age | Lines | |
---|---|---|---|---|
* | Use Ansible Vault for storing users | 2024-04-15 | -2/+3 | |
| | | | | Closes #211. | |||
* | Update vars to have the role name as a prefix | 2024-04-15 | -16/+16 | |
| | ||||
* | Bump ruff to latest | 2024-04-15 | -216/+215 | |
| | ||||
* | Ensure linting CI runs when we update dependency versions | 2024-04-15 | -0/+2 | |
| | ||||
* | Update Olli targets with new namespaces | 2024-04-15 | -1/+1 | |
| | ||||
* | Move olli to monitoring namespace | 2024-04-15 | -0/+1 | |
| | ||||
* | Move metabase to tooling namespace | 2024-04-15 | -0/+3 | |
| | ||||
* | Move rTeX to apis namespace | 2024-04-15 | -0/+38 | |
| | ||||
* | Move pixels to pixels namespace | 2024-04-15 | -0/+7 | |
| | | | | Also add a pull secret for the new namespace | |||
* | Move blackbox to databases ns | 2024-04-15 | -1/+3 | |
| | ||||
* | Move pinnwand to web | 2024-04-15 | -0/+4 | |
| | ||||
* | Move public stats | 2024-04-15 | -0/+2 | |
| | ||||
* | Move site namespace | 2024-04-15 | -0/+4 | |
| | ||||
* | Move API services to apis namespace | 2024-04-15 | -0/+7 | |
| | ||||
* | Move snekbox to new namespace | 2024-04-15 | -0/+3 | |
| | ||||
* | Move forms to new namespace | 2024-04-15 | -0/+2 | |
| | ||||
* | Move services to tooling namespace | 2024-04-15 | -0/+8 | |
| | ||||
* | Remove unused services | 2024-04-15 | -117/+0 | |
| | ||||
* | Bump ansible-lint version (#221) | 2024-04-15 | -176/+15 | |
| | | | | | Removing extra that no longer exists Signed-off-by: Bradley Reynolds <[email protected]> | |||
* | Add ghcr secret to new bots namespace | 2024-04-14 | -0/+0 | |
| | ||||
* | Move all bots to designated namespaces | 2024-04-14 | -1/+14 | |
| | ||||
* | Configure Ansible for user authentication (#213) | 2024-04-14 | -2/+1 | |
| | ||||
* | Log the result of the status embed request (#215) | 2024-04-14 | -1/+1 | |
| | | | Allow us to debug the issue raised in #214. | |||
* | Add a users role | 2024-04-13 | -1/+33 | |
| | | | | | | | | The new `pydis-users` role allows us to manage user accounts and move away from the root user setup script, eventually locking down SSH access to the root user. Joe, Chris and me have been added as users. | |||
* | Copy root bashrc from skel | 2024-04-12 | -0/+1 | |
| | ||||
* | Configure SSH daemon options in unit dropin | 2024-04-12 | -9/+20 | |
| | | | | | | Disable password authentication and root logins and use a configuration file that is independent of the `sshd_config` that `apt` itself will modify on upgrades. | |||
* | Install unattended-upgrades on our nodes | 2024-04-12 | -0/+8 | |
| | ||||
* | Bump idna from 3.6 to 3.7 (#210) | 2024-04-12 | -3/+3 | |
| | | | | | | | | | | | | | | | Bumps [idna](https://github.com/kjd/idna) from 3.6 to 3.7. - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](https://github.com/kjd/idna/compare/v3.6...v3.7) --- updated-dependencies: - dependency-name: idna dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> | |||
* | Enable scraping of Loki and Loki Canary pod | 2024-04-10 | -0/+11 | |
| | | | | | | Adds the necessary Pod annotations (prometheus.io/scrape, etc.) to pods to have Prometheus service discovery automatically pick up on them and start scraping. | |||
* | Document loki values file | 2024-04-10 | -2/+20 | |
| | ||||
* | Document alloy values file | 2024-04-10 | -1/+11 | |
| | ||||
* | Add Loki Helm values | 2024-04-10 | -0/+46 | |
| | ||||
* | Add Alloy Helm values | 2024-04-10 | -0/+69 | |
| | ||||
* | Add logging documentation | 2024-04-10 | -0/+25 | |
| | ||||
* | Add /tmp volume to Grafana for plugin install | 2024-04-10 | -0/+5 | |
| | ||||
* | Add Explore Logs plugin to Grafana | 2024-04-10 | -0/+3 | |
| | ||||
* | Bump Grafana and enable new features | 2024-04-10 | -2/+2 | |
| | ||||
* | Expand permission checks for Grafana | 2024-04-10 | -1/+1 | |
| | ||||
* | Remove custom postgres-exporter queries | 2024-04-09 | -11/+0 | |
| | | | | These feature has been deprecated by postgres-exporter, and the only query currently defined in our file didn't work anyway. | |||
* | Enable sticky session cookie for AlertManager | 2024-04-09 | -0/+5 | |
| | | | | Add a session cookie to AlertManager to always route requests to the same instance | |||
* | Bump ruff from 0.3.4 to 0.3.5 (#203) | 2024-04-08 | -20/+20 | |
| | | | | | | | | | | | | | | | | Bumps [ruff](https://github.com/astral-sh/ruff) from 0.3.4 to 0.3.5. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/v0.3.4...v0.3.5) --- updated-dependencies: - dependency-name: ruff dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> | |||
* | Exclude HTTP 444 from 4XX alerts as it is manually sent | 2024-04-04 | -1/+1 | |
| | ||||
* | Return HTTP 444 on HEAD requests to pinnwand | 2024-04-04 | -0/+5 | |
| | | | | This is a special code handled by NGINX to close the connection | |||
* | enable some grafana feature flags | 2024-04-02 | -1/+1 | |
| | ||||
* | fix EOF in django alerts file | 2024-04-02 | -1/+1 | |
| | ||||
* | update routing configuration for alertmanager | 2024-04-02 | -1/+9 | |
| | ||||
* | update alert priorities | 2024-04-02 | -5/+15 | |
| | ||||
* | Increase KubernetesNodeCordoned wait duration | 2024-04-01 | -2/+2 | |
| | ||||
* | Line endings in memory.yaml | 2024-04-01 | -1/+1 | |
| | ||||
* | Update wording of OOM alert | 2024-04-01 | -1/+1 | |
| | | | Co-authored-by: jchristgit <[email protected]> |