- Git do Root C3SL

[Git][root/dbroot/postgresql-sync-config][main] feat: upgrade to new setup
by Fernando K (＠fmkiotheka) 06 Ago '25

06 Ago '25

Fernando K pushed to branch main at Root / DBRoot / PostgreSQL Commits: efc8ac18 by Fernando Monteiro Kiotheka at 2025-08-06T16:17:22-03:00 feat: upgrade to new setup - - - - - 4 changed files: - .gitlab-ci.yml - ansible/ansible.cfg - ansible/main.yml - + get-key-from-bao.sh Changes: ===================================== .gitlab-ci.yml ===================================== @@ -24,24 +24,7 @@ sync: stage: deploy allow_failure: true script: - - | - ssh-keygen -t ed25519 -f key -N '' -q <<<y > /dev/null 2>&1 - UNSIGNED_SSH_KEY=$(cat key.pub) - response=$(curl -X POST -H "X-Vault-Token: $CI_VAULT_TOKEN" -d "{\"public_key\": \"$UNSIGNED_SSH_KEY\"}" $CI_VAULT_ADDR/v1/$CI_VAULT_SIGNER_AUTHORITY_PATH) - if [ $? -eq 0 ]; then - SIGNED_KEY=$(echo $response | jq -r .data.signed_key) - if [ "$SIGNED_KEY" != "null" ]; then - echo $SIGNED_KEY > key-cert.pub - chmod 644 key-cert.pub - else - echo "Failed to retrieve SSH key: SSH key is empty" - exit 1 - fi - else - echo "Failed to retrieve SSH key: Request to Vault failed" - exit 1 - fi - + - bash get-key-from-bao.sh - | cd ansible if ./verify-hostnames.sh ../pg_hba.conf; then ===================================== ansible/ansible.cfg ===================================== @@ -1,7 +1,7 @@ [defaults] inventory = inv.ini forks = 150 -remote_user = ansible +remote_user = root remote_tmp = /tmp host_key_checking = no ===================================== ansible/main.yml ===================================== @@ -5,7 +5,6 @@ # - name : Overwrite files hosts : all - become: yes gather_facts: no tasks: ===================================== get-key-from-bao.sh ===================================== @@ -0,0 +1,11 @@ +#!/bin/sh +response=$(curl --no-progress-meter --request POST \ + --header "X-Vault-Token: $VAULT_TOKEN" --data '{"key_type": "ed25519"}' \ + "$VAULT_ADDR/v1/ssh-client-signer/issue/ansible") \ + || { echo "Failed to retrieve SSH key: Request to Vault failed"; exit 1; } +private_key=$(printf "%s" "$response" | jq --raw-output .data.private_key) +signed_key=$(printf "%s" "$response" | jq --raw-output .data.signed_key) +[ "$signed_key" != "null" ] && [ "$private_key" != "null" ] \ + || { echo "Failed to retrieve SSH key: SSH key is empty"; exit 1; } +printf "%s\n" "$private_key" >key && chmod 600 key +printf "%s\n" "$signed_key" >key-cert.pub && chmod 644 key-cert.pub View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/efc… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/efc… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/hosts-conf][main] 3 commits: feat: remove trusted user CA keys from sshd_config
by Fernando K (＠fmkiotheka) 06 Ago '25

06 Ago '25

Fernando K pushed to branch main at Root / Serviços / Hosts Conf Commits: f061c95d by Fernando Monteiro Kiotheka at 2025-08-06T16:12:33-03:00 feat: remove trusted user CA keys from sshd_config - - - - - fa13a69f by Fernando Monteiro Kiotheka at 2025-08-06T16:13:15-03:00 fix: remove TrustedUserCAKeys from hosts - - - - - d7d8e7f7 by Fernando Monteiro Kiotheka at 2025-08-06T16:13:28-03:00 Delete mecreddev - - - - - 6 changed files: - defaults/ssh/sshd_config - defaults/ssh/trusted-user-ca-keys.pem - hosts/c3hpc.c3sl.ufpr.br/sshd_config - hosts/lasi.c3sl.ufpr.br/sshd_config - − hosts/mecreddev.c3sl.ufpr.br/users.yml - − hosts/mecreddev.c3sl.ufpr.br/users.yml.old Changes: ===================================== defaults/ssh/sshd_config ===================================== @@ -37,9 +37,6 @@ StrictModes yes PubkeyAuthentication yes AuthorizedKeysFile .ssh/root_keys .ssh/authorized_keys -# Trusted keys of openbao.c3sl.ufpr.br -TrustedUserCAKeys /etc/ssh/trusted-user-ca-keys.pem - # Don't read the user's ~/.rhosts and ~/.shosts files IgnoreRhosts yes # For this to work you will also need host keys in /etc/ssh_known_hosts ===================================== defaults/ssh/trusted-user-ca-keys.pem ===================================== @@ -1 +1 @@ -ssh-rsa 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 +ssh-rsa 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 ssh-client-signer(a)openbao.c3sl.ufpr.br ===================================== hosts/c3hpc.c3sl.ufpr.br/sshd_config ===================================== @@ -42,8 +42,6 @@ Port 80 # Expect .ssh/authorized_keys2 to be disregarded by default in future. AuthorizedKeysFile .ssh/authorized_keys .ssh/root_keys -TrustedUserCAKeys /etc/ssh/trusted-user-ca-keys.pem - #AuthorizedPrincipalsFile none #AuthorizedKeysCommand none ===================================== hosts/lasi.c3sl.ufpr.br/sshd_config ===================================== @@ -37,9 +37,6 @@ StrictModes yes PubkeyAuthentication yes AuthorizedKeysFile .ssh/root_keys .ssh/authorized_keys -# -TrustedUserCAKeys /etc/ssh/trusted-user-ca-keys.pem - # Don't read the user's ~/.rhosts and ~/.shosts files IgnoreRhosts yes # For this to work you will also need host keys in /etc/ssh_known_hosts ===================================== hosts/mecreddev.c3sl.ufpr.br/users.yml deleted ===================================== @@ -1,57 +0,0 @@ -users: -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOtcZDkZPQmZlLhzmxNZu7LjVdr7sfbk9iSa1+v+vqpl - esrsc23(a)inf.ufpr.br - user: esrsc23 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKohicQbPR596ZOVjkfM/ZrSYJUO1fJiOFAv0T/2rVKI - gcboneti(a)inf.ufpr.br - user: gcboneti -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILeQHrdwtESdH3zcu3aTz9McJHIloDQLqZr7tHcmSp5B - gfd23(a)inf.ufpr.br - user: gfd23 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINa5inpRS2FBgnrdpao7MiOFvW8wXsz7daqojiC+nucN - gus@pc - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOLytX6Oewa3qQhphS59q0cUXtsrRt5pj4n9l/ZAJMz7 - gsf20(a)inf.ufpr.br - user: gsf20 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPYBT+g7tQeEsw/ljP3UCzIKAJIwAoik6vFwCitc0ao5 - jsk22(a)inf.ufpr.br - user: jsk22 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMJrsEh9ntm2M7TyaVlsxPwO6fP4Awr9fi+rijU137dt - mcs22(a)inf.ufpr.br - user: mcs22 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHgn168HznVyMmUvevGswPcL27mnQUG9eLOFbXNg174T - heise@raven - user: rfhferreira -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMq0SJFTFR9LsRW0P5pgjp4BmA8Gkr+TtXYjlLF4OPxr - rpf23(a)inf.ufpr.br - user: rpf23 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDlj+lbM1iPKk4DivhTVr9qemiqE6WIIKSUqBF6aPHuM - tbt20(a)inf.ufbr.br - user: tbt20 ===================================== hosts/mecreddev.c3sl.ufpr.br/users.yml.old deleted ===================================== @@ -1,63 +0,0 @@ -users: -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOtcZDkZPQmZlLhzmxNZu7LjVdr7sfbk9iSa1+v+vqpl - esrsc23(a)inf.ufpr.br - user: esrsc23 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKohicQbPR596ZOVjkfM/ZrSYJUO1fJiOFAv0T/2rVKI - gcboneti(a)inf.ufpr.br - user: gcboneti -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILeQHrdwtESdH3zcu3aTz9McJHIloDQLqZr7tHcmSp5B - gfd23(a)inf.ufpr.br - user: gfd23 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINa5inpRS2FBgnrdpao7MiOFvW8wXsz7daqojiC+nucN - gus@pc - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOLytX6Oewa3qQhphS59q0cUXtsrRt5pj4n9l/ZAJMz7 - gsf20(a)inf.ufpr.br - user: gsf20 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPYBT+g7tQeEsw/ljP3UCzIKAJIwAoik6vFwCitc0ao5 - jsk22(a)inf.ufpr.br - user: jsk22 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMJrsEh9ntm2M7TyaVlsxPwO6fP4Awr9fi+rijU137dt - mcs22(a)inf.ufpr.br - user: mcs22 -- groups: - - root - keys: - - ssh-rsa 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 - nar20(a)inf.ufpr.br - user: nar20 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHgn168HznVyMmUvevGswPcL27mnQUG9eLOFbXNg174T - heise@raven - user: rfhferreira -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMq0SJFTFR9LsRW0P5pgjp4BmA8Gkr+TtXYjlLF4OPxr - rpf23(a)inf.ufpr.br - user: rpf23 -- groups: - - root - keys: - - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDlj+lbM1iPKk4DivhTVr9qemiqE6WIIKSUqBF6aPHuM - tbt20(a)inf.ufbr.br - user: tbt20 View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/hosts-conf/-/compare/5a361f8ee4f6… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/hosts-conf/-/compare/5a361f8ee4f6… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/setup-hosts][main] feat: use user "root" instead of ansible
by Fernando K (＠fmkiotheka) 06 Ago '25

06 Ago '25

Fernando K pushed to branch main at Root / Serviços / Setup Hosts Commits: fbcb69e3 by Fernando Monteiro Kiotheka at 2025-08-06T16:12:11-03:00 feat: use user "root" instead of ansible - - - - - 3 changed files: - configure_hosts.py - env_inventory.py - ssh_config Changes: ===================================== configure_hosts.py ===================================== @@ -59,12 +59,6 @@ if 'ssh' in TAGS or 'all' in TAGS: src=resolve_file_location(config['ssh']['sshdConfigFile']), dest='/etc/ssh/sshd_config' )) - if config['ssh']['trustedUserCAKeysFile']: - put_operations.append(files.put( - name=f"Put file trusted-user-ca-keys.pem", - src=resolve_file_location(config['ssh']['trustedUserCAKeysFile']), - dest='/etc/ssh/trusted-user-ca-keys.pem' - )) if config['ssh']['motdFile']: put_operations.append(files.put( name=f"Put file motd", @@ -90,9 +84,15 @@ netbox_users = get_netbox_users_from_dns_name(host.name, NETBOX_URL, NETBOX_TOKE if ('users/root' in TAGS or 'all' in TAGS): # TODO: immutable? if config['ssh']['manageRootKeys']: + root_keys = '' + if config['ssh']['trustedUserCAKeysFile']: + with open(resolve_file_location(config['ssh']['trustedUserCAKeysFile'])) as f: + root_keys += 'cert-authority,principals="ansible" ' + f.read() + with open(HOSTS_CONF / 'defaults' / 'other' / 'root_keys') as f: + root_keys += f.read() files.put( name="Configure root_keys", - src=HOSTS_CONF / 'defaults' / 'other' / 'root_keys', + src=StringIO(root_keys), dest='/root/.ssh/root_keys', user='root', group='root', @@ -116,11 +116,6 @@ if ('users/root' in TAGS or 'all' in TAGS): # ---------- if ('users/etc' in TAGS or 'all' in TAGS): apt.packages(name="Ensure sudo package is installed", packages='sudo') - files.put( - name="Configure sudo to allow no password", - src=StringIO("%sudo ALL=(ALL) NOPASSWD:ALL\n"), - dest="/etc/sudoers.d/sudo-nopasswd" - ) netbox_groups = set(itertools.chain(*(user.groups for user in netbox_users))) - {'root'} for group in netbox_groups: server.group(name=f"Setup group {group}", group=group) @@ -213,6 +208,16 @@ if ('users/etc' in TAGS or 'all' in TAGS): if found_users != set(netbox_user_names_that_exist): print(f"[{host.name}] New found users: {found_users} - {set(netbox_user_names_that_exist)} = {found_users - set(netbox_user_names_that_exist)}") +# --- +# cleanup +# --- + +server.user('ansible', present=False) +server.group('ansible', present=False) +files.file('/etc/howto', present=False) +files.file('/etc/sudoers.d/ansible-nopasswd', present=False) +files.file('/etc/ssh/trusted-user-ca-keys.pem', present=False) + # TODO: mail # mailRcFile -> /etc/mail.rc # msmtprcFile -> /etc/msmtprc (jinja2) ===================================== env_inventory.py ===================================== @@ -1,8 +1,8 @@ import os -HOSTS = os.environ['HOSTS'] +HOSTS = os.environ['HOSTS'].replace(',', ' ').split() hosts = [ - (host, { 'ssh_config_file': 'ssh_config', '_sudo': True }) + (host, { 'ssh_config_file': 'ssh_config' }) for host in HOSTS ] ===================================== ssh_config ===================================== @@ -1,4 +1,4 @@ Host * - User ansible + User root IdentityFile key CertificateFile key-cert.pub View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/setup-hosts/-/commit/fbcb69e34001… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/setup-hosts/-/commit/fbcb69e34001… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/setup-hosts][main] fix: missing \n in get-key-from-bao.sh
by Fernando K (＠fmkiotheka) 06 Ago '25

06 Ago '25

Fernando K pushed to branch main at Root / Serviços / Setup Hosts Commits: c1441820 by Fernando Monteiro Kiotheka at 2025-08-06T15:42:27-03:00 fix: missing \n in get-key-from-bao.sh - - - - - 1 changed file: - get-key-from-bao.sh Changes: ===================================== get-key-from-bao.sh ===================================== @@ -7,5 +7,5 @@ private_key=$(printf "%s" "$response" | jq --raw-output .data.private_key) signed_key=$(printf "%s" "$response" | jq --raw-output .data.signed_key) [ "$signed_key" != "null" ] && [ "$private_key" != "null" ] \ || { echo "Failed to retrieve SSH key: SSH key is empty"; exit 1; } -printf "%s" "$private_key" >key && chmod 600 key -printf "%s" "$signed_key" >key-cert.pub && chmod 644 key-cert.pub +printf "%s\n" "$private_key" >key && chmod 600 key +printf "%s\n" "$signed_key" >key-cert.pub && chmod 644 key-cert.pub View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/setup-hosts/-/commit/c1441820b63b… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/setup-hosts/-/commit/c1441820b63b… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dhcp][main] feat: use get-key-from-bao.sh
by Fernando K (＠fmkiotheka) 06 Ago '25

06 Ago '25

Fernando K pushed to branch main at Root / Serviços / DHCP Commits: 665ef955 by Fernando Monteiro Kiotheka at 2025-08-06T15:37:32-03:00 feat: use get-key-from-bao.sh - - - - - 2 changed files: - .gitlab-ci.yml - + get-key-from-bao.sh Changes: ===================================== .gitlab-ci.yml ===================================== @@ -3,15 +3,7 @@ stages: sync-dhcp: stage: deploy script: - - | - ssh-keygen -t ed25519 -f key -N '' -q >/dev/null 2>&1 - response=$(curl -X POST -H "X-Vault-Token: $CI_VAULT_TOKEN" \ - -d "{\"public_key\": \"$(cat key.pub)\"}" $CI_VAULT_ADDR/v1/$CI_VAULT_SIGNER_AUTHORITY_PATH \ - ) || { echo "Failed to retrieve SSH key: Request to Vault failed"; exit 1; } - signed_key=$(jq -r .data.signed_key <<<"$response") - [ "$signed_key" != "null" ] || { echo "Failed to retrieve SSH key: SSH key is empty"; exit 1; } - echo "$signed_key" > key-cert.pub - chmod 644 key-cert.pub + - bash get-key-from-bao.sh - chmod 755 ansible && cd ansible && ansible-playbook --private-key ../key sync_kea_dhcp.yml only: refs: ===================================== get-key-from-bao.sh ===================================== @@ -0,0 +1,11 @@ +#!/bin/sh +response=$(curl --no-progress-meter --request POST \ + --header "X-Vault-Token: $VAULT_TOKEN" --data '{"key_type": "ed25519"}' \ + "$VAULT_ADDR/v1/ssh-client-signer/issue/ansible") \ + || { echo "Failed to retrieve SSH key: Request to Vault failed"; exit 1; } +private_key=$(printf "%s" "$response" | jq --raw-output .data.private_key) +signed_key=$(printf "%s" "$response" | jq --raw-output .data.signed_key) +[ "$signed_key" != "null" ] && [ "$private_key" != "null" ] \ + || { echo "Failed to retrieve SSH key: SSH key is empty"; exit 1; } +printf "%s\n" "$private_key" >key && chmod 600 key +printf "%s\n" "$signed_key" >key-cert.pub && chmod 644 key-cert.pub View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/665ef95502405e6ca56… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dhcp/-/commit/665ef95502405e6ca56… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dns][main] fix: missing \n
by Fernando K (＠fmkiotheka) 06 Ago '25

06 Ago '25

Fernando K pushed to branch main at Root / Serviços / DNS Commits: f3ff3e95 by Fernando Monteiro Kiotheka at 2025-08-06T15:32:32-03:00 fix: missing \n - - - - - 1 changed file: - get-key-from-bao.sh Changes: ===================================== get-key-from-bao.sh ===================================== @@ -3,10 +3,9 @@ response=$(curl --no-progress-meter --request POST \ --header "X-Vault-Token: $VAULT_TOKEN" --data '{"key_type": "ed25519"}' \ "$VAULT_ADDR/v1/ssh-client-signer/issue/ansible") \ || { echo "Failed to retrieve SSH key: Request to Vault failed"; exit 1; } -echo $response private_key=$(printf "%s" "$response" | jq --raw-output .data.private_key) signed_key=$(printf "%s" "$response" | jq --raw-output .data.signed_key) [ "$signed_key" != "null" ] && [ "$private_key" != "null" ] \ || { echo "Failed to retrieve SSH key: SSH key is empty"; exit 1; } -printf "%s" "$private_key" >key && chmod 600 key -printf "%s" "$signed_key" >key-cert.pub && chmod 644 key-cert.pub +printf "%s\n" "$private_key" >key && chmod 600 key +printf "%s\n" "$signed_key" >key-cert.pub && chmod 644 key-cert.pub View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/f3ff3e957d4384298250… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/f3ff3e957d4384298250… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dns][main] feat: use get-key-from-bao.sh
by Fernando K (＠fmkiotheka) 06 Ago '25

06 Ago '25

Fernando K pushed to branch main at Root / Serviços / DNS Commits: aa660247 by Fernando Monteiro Kiotheka at 2025-08-06T15:23:09-03:00 feat: use get-key-from-bao.sh - - - - - 2 changed files: - .gitlab-ci.yml - + get-key-from-bao.sh Changes: ===================================== .gitlab-ci.yml ===================================== @@ -3,15 +3,7 @@ stages: sync-dns: stage: deploy script: - - | - ssh-keygen -t ed25519 -f key -N '' -q >/dev/null 2>&1 - response=$(curl -X POST -H "X-Vault-Token: $CI_VAULT_TOKEN" \ - -d "{\"public_key\": \"$(cat key.pub)\"}" $CI_VAULT_ADDR/v1/$CI_VAULT_SIGNER_AUTHORITY_PATH \ - ) || { echo "Failed to retrieve SSH key: Request to Vault failed"; exit 1; } - signed_key=$(jq -r .data.signed_key <<<"$response") - [ "$signed_key" != "null" ] || { echo "Failed to retrieve SSH key: SSH key is empty"; exit 1; } - echo "$signed_key" > key-cert.pub - chmod 644 key-cert.pub + - bash get-key-from-bao.sh - chmod 755 ansible && cd ansible && ansible-playbook --private-key ../key sync_dns.yaml only: refs: ===================================== get-key-from-bao.sh ===================================== @@ -0,0 +1,12 @@ +#!/bin/sh +response=$(curl --no-progress-meter --request POST \ + --header "X-Vault-Token: $VAULT_TOKEN" --data '{"key_type": "ed25519"}' \ + "$VAULT_ADDR/v1/ssh-client-signer/issue/ansible") \ + || { echo "Failed to retrieve SSH key: Request to Vault failed"; exit 1; } +echo $response +private_key=$(printf "%s" "$response" | jq --raw-output .data.private_key) +signed_key=$(printf "%s" "$response" | jq --raw-output .data.signed_key) +[ "$signed_key" != "null" ] && [ "$private_key" != "null" ] \ + || { echo "Failed to retrieve SSH key: SSH key is empty"; exit 1; } +printf "%s" "$private_key" >key && chmod 600 key +printf "%s" "$signed_key" >key-cert.pub && chmod 644 key-cert.pub View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/aa6602472d091a5bc07a… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/aa6602472d091a5bc07a… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] feat(openbao): add name openbao.c3sl.ufpr.br
by Fernando K (＠fmkiotheka) 06 Ago '25

06 Ago '25

Fernando K pushed to branch main at Root / Kubernetes / FluxCD Commits: be986c1b by Fernando Monteiro Kiotheka at 2025-08-06T14:52:12-03:00 feat(openbao): add name openbao.c3sl.ufpr.br - - - - - 1 changed file: - infrastructure/base/openbao/helmrelease.yaml Changes: ===================================== infrastructure/base/openbao/helmrelease.yaml ===================================== @@ -55,7 +55,9 @@ spec: pathType: Prefix hosts: - host: openbao.k8sstage.c3sl.ufpr.br + - host: openbao.c3sl.ufpr.br tls: - secretName: openbao-tls hosts: - openbao.k8sstage.c3sl.ufpr.br + - openbao.c3sl.ufpr.br View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/be986c1b97f169cdde0e0f… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/be986c1b97f169cdde0e0f… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dmarc-report][main] Removing cached files
by Guiusepe (＠godp21) 06 Ago '25

06 Ago '25

Guiusepe pushed to branch main at Root / DMARC Report Commits: 5e6a1243 by godp21 at 2025-08-06T14:45:17-03:00 Removing cached files - - - - - 749 changed files: - .gitignore - − node_modules/.package-lock.json - − node_modules/accepts/HISTORY.md - − node_modules/accepts/LICENSE - − node_modules/accepts/README.md - − node_modules/accepts/index.js - − node_modules/accepts/package.json - − node_modules/body-parser/HISTORY.md - − node_modules/body-parser/LICENSE - − node_modules/body-parser/README.md - − node_modules/body-parser/index.js - − node_modules/body-parser/lib/read.js - − node_modules/body-parser/lib/types/json.js - − node_modules/body-parser/lib/types/raw.js - − node_modules/body-parser/lib/types/text.js - − node_modules/body-parser/lib/types/urlencoded.js - − node_modules/body-parser/lib/utils.js - − node_modules/body-parser/package.json - − node_modules/bytes/History.md - − node_modules/bytes/LICENSE - − node_modules/bytes/Readme.md - − node_modules/bytes/index.js - − node_modules/bytes/package.json - − node_modules/call-bind-apply-helpers/.eslintrc - − node_modules/call-bind-apply-helpers/.github/FUNDING.yml - − node_modules/call-bind-apply-helpers/.nycrc - − node_modules/call-bind-apply-helpers/CHANGELOG.md - − node_modules/call-bind-apply-helpers/LICENSE - − node_modules/call-bind-apply-helpers/README.md - − node_modules/call-bind-apply-helpers/actualApply.d.ts - − node_modules/call-bind-apply-helpers/actualApply.js - − node_modules/call-bind-apply-helpers/applyBind.d.ts - − node_modules/call-bind-apply-helpers/applyBind.js - − node_modules/call-bind-apply-helpers/functionApply.d.ts - − node_modules/call-bind-apply-helpers/functionApply.js - − node_modules/call-bind-apply-helpers/functionCall.d.ts - − node_modules/call-bind-apply-helpers/functionCall.js - − node_modules/call-bind-apply-helpers/index.d.ts - − node_modules/call-bind-apply-helpers/index.js - − node_modules/call-bind-apply-helpers/package.json - − node_modules/call-bind-apply-helpers/reflectApply.d.ts - − node_modules/call-bind-apply-helpers/reflectApply.js - − node_modules/call-bind-apply-helpers/test/index.js - − node_modules/call-bind-apply-helpers/tsconfig.json - − node_modules/call-bound/.eslintrc - − node_modules/call-bound/.github/FUNDING.yml - − node_modules/call-bound/.nycrc - − node_modules/call-bound/CHANGELOG.md - − node_modules/call-bound/LICENSE - − node_modules/call-bound/README.md - − node_modules/call-bound/index.d.ts - − node_modules/call-bound/index.js - − node_modules/call-bound/package.json - − node_modules/call-bound/test/index.js - − node_modules/call-bound/tsconfig.json - − node_modules/content-disposition/HISTORY.md - − node_modules/content-disposition/LICENSE - − node_modules/content-disposition/README.md - − node_modules/content-disposition/index.js - − node_modules/content-disposition/package.json - − node_modules/content-type/HISTORY.md - − node_modules/content-type/LICENSE - − node_modules/content-type/README.md - − node_modules/content-type/index.js - − node_modules/content-type/package.json - − node_modules/cookie-signature/History.md - − node_modules/cookie-signature/LICENSE - − node_modules/cookie-signature/Readme.md - − node_modules/cookie-signature/index.js - − node_modules/cookie-signature/package.json - − node_modules/cookie/LICENSE - − node_modules/cookie/README.md - − node_modules/cookie/SECURITY.md - − node_modules/cookie/index.js - − node_modules/cookie/package.json - − node_modules/debug/LICENSE - − node_modules/debug/README.md - − node_modules/debug/package.json - − node_modules/debug/src/browser.js - − node_modules/debug/src/common.js - − node_modules/debug/src/index.js - − node_modules/debug/src/node.js - − node_modules/depd/History.md - − node_modules/depd/LICENSE - − node_modules/depd/Readme.md - − node_modules/depd/index.js - − node_modules/depd/lib/browser/index.js - − node_modules/depd/package.json - − node_modules/dunder-proto/.eslintrc - − node_modules/dunder-proto/.github/FUNDING.yml - − node_modules/dunder-proto/.nycrc - − node_modules/dunder-proto/CHANGELOG.md - − node_modules/dunder-proto/LICENSE - − node_modules/dunder-proto/README.md - − node_modules/dunder-proto/get.d.ts - − node_modules/dunder-proto/get.js - − node_modules/dunder-proto/package.json - − node_modules/dunder-proto/set.d.ts - − node_modules/dunder-proto/set.js - − node_modules/dunder-proto/test/get.js - − node_modules/dunder-proto/test/index.js - − node_modules/dunder-proto/test/set.js - − node_modules/dunder-proto/tsconfig.json - − node_modules/ee-first/LICENSE - − node_modules/ee-first/README.md - − node_modules/ee-first/index.js - − node_modules/ee-first/package.json - − node_modules/encodeurl/LICENSE - − node_modules/encodeurl/README.md - − node_modules/encodeurl/index.js - − node_modules/encodeurl/package.json - − node_modules/es-define-property/.eslintrc - − node_modules/es-define-property/.github/FUNDING.yml - − node_modules/es-define-property/.nycrc - − node_modules/es-define-property/CHANGELOG.md - − node_modules/es-define-property/LICENSE - − node_modules/es-define-property/README.md - − node_modules/es-define-property/index.d.ts - − node_modules/es-define-property/index.js - − node_modules/es-define-property/package.json - − node_modules/es-define-property/test/index.js - − node_modules/es-define-property/tsconfig.json - − node_modules/es-errors/.eslintrc - − node_modules/es-errors/.github/FUNDING.yml - − node_modules/es-errors/CHANGELOG.md - − node_modules/es-errors/LICENSE - − node_modules/es-errors/README.md - − node_modules/es-errors/eval.d.ts - − node_modules/es-errors/eval.js - − node_modules/es-errors/index.d.ts - − node_modules/es-errors/index.js - − node_modules/es-errors/package.json - − node_modules/es-errors/range.d.ts - − node_modules/es-errors/range.js - − node_modules/es-errors/ref.d.ts - − node_modules/es-errors/ref.js - − node_modules/es-errors/syntax.d.ts - − node_modules/es-errors/syntax.js - − node_modules/es-errors/test/index.js - − node_modules/es-errors/tsconfig.json - − node_modules/es-errors/type.d.ts - − node_modules/es-errors/type.js - − node_modules/es-errors/uri.d.ts - − node_modules/es-errors/uri.js - − node_modules/es-object-atoms/.eslintrc - − node_modules/es-object-atoms/.github/FUNDING.yml - − node_modules/es-object-atoms/CHANGELOG.md - − node_modules/es-object-atoms/LICENSE - − node_modules/es-object-atoms/README.md - − node_modules/es-object-atoms/RequireObjectCoercible.d.ts - − node_modules/es-object-atoms/RequireObjectCoercible.js - − node_modules/es-object-atoms/ToObject.d.ts - − node_modules/es-object-atoms/ToObject.js - − node_modules/es-object-atoms/index.d.ts - − node_modules/es-object-atoms/index.js - − node_modules/es-object-atoms/isObject.d.ts - − node_modules/es-object-atoms/isObject.js - − node_modules/es-object-atoms/package.json - − node_modules/es-object-atoms/test/index.js - − node_modules/es-object-atoms/tsconfig.json - − node_modules/escape-html/LICENSE - − node_modules/escape-html/Readme.md - − node_modules/escape-html/index.js - − node_modules/escape-html/package.json - − node_modules/etag/HISTORY.md - − node_modules/etag/LICENSE - − node_modules/etag/README.md - − node_modules/etag/index.js - − node_modules/etag/package.json - − node_modules/express/History.md - − node_modules/express/LICENSE - − node_modules/express/Readme.md - − node_modules/express/index.js - − node_modules/express/lib/application.js - − node_modules/express/lib/express.js - − node_modules/express/lib/request.js - − node_modules/express/lib/response.js - − node_modules/express/lib/utils.js - − node_modules/express/lib/view.js - − node_modules/express/package.json - − node_modules/finalhandler/HISTORY.md - − node_modules/finalhandler/LICENSE - − node_modules/finalhandler/README.md - − node_modules/finalhandler/index.js - − node_modules/finalhandler/package.json - − node_modules/forwarded/HISTORY.md - − node_modules/forwarded/LICENSE - − node_modules/forwarded/README.md - − node_modules/forwarded/index.js - − node_modules/forwarded/package.json - − node_modules/fresh/HISTORY.md - − node_modules/fresh/LICENSE - − node_modules/fresh/README.md - − node_modules/fresh/index.js - − node_modules/fresh/package.json - − node_modules/function-bind/.eslintrc - − node_modules/function-bind/.github/FUNDING.yml - − node_modules/function-bind/.github/SECURITY.md - − node_modules/function-bind/.nycrc - − node_modules/function-bind/CHANGELOG.md - − node_modules/function-bind/LICENSE - − node_modules/function-bind/README.md - − node_modules/function-bind/implementation.js - − node_modules/function-bind/index.js - − node_modules/function-bind/package.json - − node_modules/function-bind/test/.eslintrc - − node_modules/function-bind/test/index.js - − node_modules/get-intrinsic/.eslintrc - − node_modules/get-intrinsic/.github/FUNDING.yml - − node_modules/get-intrinsic/.nycrc - − node_modules/get-intrinsic/CHANGELOG.md - − node_modules/get-intrinsic/LICENSE - − node_modules/get-intrinsic/README.md - − node_modules/get-intrinsic/index.js - − node_modules/get-intrinsic/package.json - − node_modules/get-intrinsic/test/GetIntrinsic.js - − node_modules/get-proto/.eslintrc - − node_modules/get-proto/.github/FUNDING.yml - − node_modules/get-proto/.nycrc - − node_modules/get-proto/CHANGELOG.md - − node_modules/get-proto/LICENSE - − node_modules/get-proto/Object.getPrototypeOf.d.ts - − node_modules/get-proto/Object.getPrototypeOf.js - − node_modules/get-proto/README.md - − node_modules/get-proto/Reflect.getPrototypeOf.d.ts - − node_modules/get-proto/Reflect.getPrototypeOf.js - − node_modules/get-proto/index.d.ts - − node_modules/get-proto/index.js - − node_modules/get-proto/package.json - − node_modules/get-proto/test/index.js - − node_modules/get-proto/tsconfig.json - − node_modules/gopd/.eslintrc - − node_modules/gopd/.github/FUNDING.yml - − node_modules/gopd/CHANGELOG.md - − node_modules/gopd/LICENSE - − node_modules/gopd/README.md - − node_modules/gopd/gOPD.d.ts - − node_modules/gopd/gOPD.js - − node_modules/gopd/index.d.ts - − node_modules/gopd/index.js - − node_modules/gopd/package.json - − node_modules/gopd/test/index.js - − node_modules/gopd/tsconfig.json - − node_modules/has-symbols/.eslintrc - − node_modules/has-symbols/.github/FUNDING.yml - − node_modules/has-symbols/.nycrc - − node_modules/has-symbols/CHANGELOG.md - − node_modules/has-symbols/LICENSE - − node_modules/has-symbols/README.md - − node_modules/has-symbols/index.d.ts - − node_modules/has-symbols/index.js - − node_modules/has-symbols/package.json - − node_modules/has-symbols/shams.d.ts - − node_modules/has-symbols/shams.js - − node_modules/has-symbols/test/index.js - − node_modules/has-symbols/test/shams/core-js.js - − node_modules/has-symbols/test/shams/get-own-property-symbols.js - − node_modules/has-symbols/test/tests.js - − node_modules/has-symbols/tsconfig.json - − node_modules/hasown/.eslintrc - − node_modules/hasown/.github/FUNDING.yml - − node_modules/hasown/.nycrc - − node_modules/hasown/CHANGELOG.md - − node_modules/hasown/LICENSE - − node_modules/hasown/README.md - − node_modules/hasown/index.d.ts - − node_modules/hasown/index.js - − node_modules/hasown/package.json - − node_modules/hasown/tsconfig.json - − node_modules/http-errors/HISTORY.md - − node_modules/http-errors/LICENSE - − node_modules/http-errors/README.md - − node_modules/http-errors/index.js - − node_modules/http-errors/node_modules/statuses/HISTORY.md - − node_modules/http-errors/node_modules/statuses/LICENSE - − node_modules/http-errors/node_modules/statuses/README.md - − node_modules/http-errors/node_modules/statuses/codes.json - − node_modules/http-errors/node_modules/statuses/index.js - − node_modules/http-errors/node_modules/statuses/package.json - − node_modules/http-errors/package.json - − node_modules/iconv-lite/.github/dependabot.yml - − node_modules/iconv-lite/.idea/codeStyles/Project.xml - − node_modules/iconv-lite/.idea/codeStyles/codeStyleConfig.xml - − node_modules/iconv-lite/.idea/iconv-lite.iml - − node_modules/iconv-lite/.idea/inspectionProfiles/Project_Default.xml - − node_modules/iconv-lite/.idea/modules.xml - − node_modules/iconv-lite/.idea/vcs.xml - − node_modules/iconv-lite/Changelog.md - − node_modules/iconv-lite/LICENSE - − node_modules/iconv-lite/README.md - − node_modules/iconv-lite/encodings/dbcs-codec.js - − node_modules/iconv-lite/encodings/dbcs-data.js - − node_modules/iconv-lite/encodings/index.js - − node_modules/iconv-lite/encodings/internal.js - − node_modules/iconv-lite/encodings/sbcs-codec.js - − node_modules/iconv-lite/encodings/sbcs-data-generated.js - − node_modules/iconv-lite/encodings/sbcs-data.js - − node_modules/iconv-lite/encodings/tables/big5-added.json - − node_modules/iconv-lite/encodings/tables/cp936.json - − node_modules/iconv-lite/encodings/tables/cp949.json - − node_modules/iconv-lite/encodings/tables/cp950.json - − node_modules/iconv-lite/encodings/tables/eucjp.json - − node_modules/iconv-lite/encodings/tables/gb18030-ranges.json - − node_modules/iconv-lite/encodings/tables/gbk-added.json - − node_modules/iconv-lite/encodings/tables/shiftjis.json - − node_modules/iconv-lite/encodings/utf16.js - − node_modules/iconv-lite/encodings/utf32.js - − node_modules/iconv-lite/encodings/utf7.js - − node_modules/iconv-lite/lib/bom-handling.js - − node_modules/iconv-lite/lib/index.d.ts - − node_modules/iconv-lite/lib/index.js - − node_modules/iconv-lite/lib/streams.js - − node_modules/iconv-lite/package.json - − node_modules/inherits/LICENSE - − node_modules/inherits/README.md - − node_modules/inherits/inherits.js - − node_modules/inherits/inherits_browser.js - − node_modules/inherits/package.json - − node_modules/ipaddr.js/LICENSE - − node_modules/ipaddr.js/README.md - − node_modules/ipaddr.js/ipaddr.min.js - − node_modules/ipaddr.js/lib/ipaddr.js - − node_modules/ipaddr.js/lib/ipaddr.js.d.ts - − node_modules/ipaddr.js/package.json - − node_modules/is-promise/LICENSE - − node_modules/is-promise/index.d.ts - − node_modules/is-promise/index.js - − node_modules/is-promise/index.mjs - − node_modules/is-promise/package.json - − node_modules/is-promise/readme.md - − node_modules/math-intrinsics/.eslintrc - − node_modules/math-intrinsics/.github/FUNDING.yml - − node_modules/math-intrinsics/CHANGELOG.md - − node_modules/math-intrinsics/LICENSE - − node_modules/math-intrinsics/README.md - − node_modules/math-intrinsics/abs.d.ts - − node_modules/math-intrinsics/abs.js - − node_modules/math-intrinsics/constants/maxArrayLength.d.ts - − node_modules/math-intrinsics/constants/maxArrayLength.js - − node_modules/math-intrinsics/constants/maxSafeInteger.d.ts - − node_modules/math-intrinsics/constants/maxSafeInteger.js - − node_modules/math-intrinsics/constants/maxValue.d.ts - − node_modules/math-intrinsics/constants/maxValue.js - − node_modules/math-intrinsics/floor.d.ts - − node_modules/math-intrinsics/floor.js - − node_modules/math-intrinsics/isFinite.d.ts - − node_modules/math-intrinsics/isFinite.js - − node_modules/math-intrinsics/isInteger.d.ts - − node_modules/math-intrinsics/isInteger.js - − node_modules/math-intrinsics/isNaN.d.ts - − node_modules/math-intrinsics/isNaN.js - − node_modules/math-intrinsics/isNegativeZero.d.ts - − node_modules/math-intrinsics/isNegativeZero.js - − node_modules/math-intrinsics/max.d.ts - − node_modules/math-intrinsics/max.js - − node_modules/math-intrinsics/min.d.ts - − node_modules/math-intrinsics/min.js - − node_modules/math-intrinsics/mod.d.ts - − node_modules/math-intrinsics/mod.js - − node_modules/math-intrinsics/package.json - − node_modules/math-intrinsics/pow.d.ts - − node_modules/math-intrinsics/pow.js - − node_modules/math-intrinsics/round.d.ts - − node_modules/math-intrinsics/round.js - − node_modules/math-intrinsics/sign.d.ts - − node_modules/math-intrinsics/sign.js - − node_modules/math-intrinsics/test/index.js - − node_modules/math-intrinsics/tsconfig.json - − node_modules/media-typer/HISTORY.md - − node_modules/media-typer/LICENSE - − node_modules/media-typer/README.md - − node_modules/media-typer/index.js - − node_modules/media-typer/package.json - − node_modules/merge-descriptors/index.d.ts - − node_modules/merge-descriptors/index.js - − node_modules/merge-descriptors/license - − node_modules/merge-descriptors/package.json - − node_modules/merge-descriptors/readme.md - − node_modules/mime-db/HISTORY.md - − node_modules/mime-db/LICENSE - − node_modules/mime-db/README.md - − node_modules/mime-db/db.json - − node_modules/mime-db/index.js - − node_modules/mime-db/package.json - − node_modules/mime-types/HISTORY.md - − node_modules/mime-types/LICENSE - − node_modules/mime-types/README.md - − node_modules/mime-types/index.js - − node_modules/mime-types/mimeScore.js - − node_modules/mime-types/package.json - − node_modules/ms/index.js - − node_modules/ms/license.md - − node_modules/ms/package.json - − node_modules/ms/readme.md - − node_modules/negotiator/HISTORY.md - − node_modules/negotiator/LICENSE - − node_modules/negotiator/README.md - − node_modules/negotiator/index.js - − node_modules/negotiator/lib/charset.js - − node_modules/negotiator/lib/encoding.js - − node_modules/negotiator/lib/language.js - − node_modules/negotiator/lib/mediaType.js - − node_modules/negotiator/package.json - − node_modules/object-inspect/.eslintrc - − node_modules/object-inspect/.github/FUNDING.yml - − node_modules/object-inspect/.nycrc - − node_modules/object-inspect/CHANGELOG.md - − node_modules/object-inspect/LICENSE - − node_modules/object-inspect/example/all.js - − node_modules/object-inspect/example/circular.js - − node_modules/object-inspect/example/fn.js - − node_modules/object-inspect/example/inspect.js - − node_modules/object-inspect/index.js - − node_modules/object-inspect/package-support.json - − node_modules/object-inspect/package.json - − node_modules/object-inspect/readme.markdown - − node_modules/object-inspect/test-core-js.js - − node_modules/object-inspect/test/bigint.js - − node_modules/object-inspect/test/browser/dom.js - − node_modules/object-inspect/test/circular.js - − node_modules/object-inspect/test/deep.js - − node_modules/object-inspect/test/element.js - − node_modules/object-inspect/test/err.js - − node_modules/object-inspect/test/fakes.js - − node_modules/object-inspect/test/fn.js - − node_modules/object-inspect/test/global.js - − node_modules/object-inspect/test/has.js - − node_modules/object-inspect/test/holes.js - − node_modules/object-inspect/test/indent-option.js - − node_modules/object-inspect/test/inspect.js - − node_modules/object-inspect/test/lowbyte.js - − node_modules/object-inspect/test/number.js - − node_modules/object-inspect/test/quoteStyle.js - − node_modules/object-inspect/test/toStringTag.js - − node_modules/object-inspect/test/undef.js - − node_modules/object-inspect/test/values.js - − node_modules/object-inspect/util.inspect.js - − node_modules/on-finished/HISTORY.md - − node_modules/on-finished/LICENSE - − node_modules/on-finished/README.md - − node_modules/on-finished/index.js - − node_modules/on-finished/package.json - − node_modules/once/LICENSE - − node_modules/once/README.md - − node_modules/once/once.js - − node_modules/once/package.json - − node_modules/parseurl/HISTORY.md - − node_modules/parseurl/LICENSE - − node_modules/parseurl/README.md - − node_modules/parseurl/index.js - − node_modules/parseurl/package.json - − node_modules/path-to-regexp/LICENSE - − node_modules/path-to-regexp/Readme.md - − node_modules/path-to-regexp/dist/index.d.ts - − node_modules/path-to-regexp/dist/index.js - − node_modules/path-to-regexp/dist/index.js.map - − node_modules/path-to-regexp/package.json - − node_modules/pg-cloudflare/LICENSE - − node_modules/pg-cloudflare/README.md - − node_modules/pg-cloudflare/dist/empty.d.ts - − node_modules/pg-cloudflare/dist/empty.js - − node_modules/pg-cloudflare/dist/empty.js.map - − node_modules/pg-cloudflare/dist/index.d.ts - − node_modules/pg-cloudflare/dist/index.js - − node_modules/pg-cloudflare/dist/index.js.map - − node_modules/pg-cloudflare/esm/index.mjs - − node_modules/pg-cloudflare/package.json - − node_modules/pg-cloudflare/src/empty.ts - − node_modules/pg-cloudflare/src/index.ts - − node_modules/pg-cloudflare/src/types.d.ts - − node_modules/pg-connection-string/LICENSE - − node_modules/pg-connection-string/README.md - − node_modules/pg-connection-string/esm/index.mjs - − node_modules/pg-connection-string/index.d.ts - − node_modules/pg-connection-string/index.js - − node_modules/pg-connection-string/package.json - − node_modules/pg-int8/LICENSE - − node_modules/pg-int8/README.md - − node_modules/pg-int8/index.js - − node_modules/pg-int8/package.json - − node_modules/pg-pool/LICENSE - − node_modules/pg-pool/README.md - − node_modules/pg-pool/esm/index.mjs - − node_modules/pg-pool/index.js - − node_modules/pg-pool/package.json - − node_modules/pg-protocol/LICENSE - − node_modules/pg-protocol/README.md - − node_modules/pg-protocol/dist/b.d.ts - − node_modules/pg-protocol/dist/b.js - − node_modules/pg-protocol/dist/b.js.map - − node_modules/pg-protocol/dist/buffer-reader.d.ts - − node_modules/pg-protocol/dist/buffer-reader.js - − node_modules/pg-protocol/dist/buffer-reader.js.map - − node_modules/pg-protocol/dist/buffer-writer.d.ts - − node_modules/pg-protocol/dist/buffer-writer.js - − node_modules/pg-protocol/dist/buffer-writer.js.map - − node_modules/pg-protocol/dist/inbound-parser.test.d.ts - − node_modules/pg-protocol/dist/inbound-parser.test.js - − node_modules/pg-protocol/dist/inbound-parser.test.js.map - − node_modules/pg-protocol/dist/index.d.ts - − node_modules/pg-protocol/dist/index.js - − node_modules/pg-protocol/dist/index.js.map - − node_modules/pg-protocol/dist/messages.d.ts - − node_modules/pg-protocol/dist/messages.js - − node_modules/pg-protocol/dist/messages.js.map - − node_modules/pg-protocol/dist/outbound-serializer.test.d.ts - − node_modules/pg-protocol/dist/outbound-serializer.test.js - − node_modules/pg-protocol/dist/outbound-serializer.test.js.map - − node_modules/pg-protocol/dist/parser.d.ts - − node_modules/pg-protocol/dist/parser.js - − node_modules/pg-protocol/dist/parser.js.map - − node_modules/pg-protocol/dist/serializer.d.ts - − node_modules/pg-protocol/dist/serializer.js - − node_modules/pg-protocol/dist/serializer.js.map - − node_modules/pg-protocol/esm/index.js - − node_modules/pg-protocol/package.json - − node_modules/pg-protocol/src/b.ts - − node_modules/pg-protocol/src/buffer-reader.ts - − node_modules/pg-protocol/src/buffer-writer.ts - − node_modules/pg-protocol/src/inbound-parser.test.ts - − node_modules/pg-protocol/src/index.ts - − node_modules/pg-protocol/src/messages.ts - − node_modules/pg-protocol/src/outbound-serializer.test.ts - − node_modules/pg-protocol/src/parser.ts - − node_modules/pg-protocol/src/serializer.ts - − node_modules/pg-protocol/src/testing/buffer-list.ts - − node_modules/pg-protocol/src/testing/test-buffers.ts - − node_modules/pg-protocol/src/types/chunky.d.ts - − node_modules/pg-types/.travis.yml - − node_modules/pg-types/Makefile - − node_modules/pg-types/README.md - − node_modules/pg-types/index.d.ts - − node_modules/pg-types/index.js - − node_modules/pg-types/index.test-d.ts - − node_modules/pg-types/lib/arrayParser.js - − node_modules/pg-types/lib/binaryParsers.js - − node_modules/pg-types/lib/builtins.js - − node_modules/pg-types/lib/textParsers.js - − node_modules/pg-types/package.json - − node_modules/pg-types/test/index.js - − node_modules/pg-types/test/types.js - − node_modules/pg/LICENSE - − node_modules/pg/README.md - − node_modules/pg/esm/index.mjs - − node_modules/pg/lib/client.js - − node_modules/pg/lib/connection-parameters.js - − node_modules/pg/lib/connection.js - − node_modules/pg/lib/crypto/cert-signatures.js - − node_modules/pg/lib/crypto/sasl.js - − node_modules/pg/lib/crypto/utils-legacy.js - − node_modules/pg/lib/crypto/utils-webcrypto.js - − node_modules/pg/lib/crypto/utils.js - − node_modules/pg/lib/defaults.js - − node_modules/pg/lib/index.js - − node_modules/pg/lib/native/client.js - − node_modules/pg/lib/native/index.js - − node_modules/pg/lib/native/query.js - − node_modules/pg/lib/query.js - − node_modules/pg/lib/result.js - − node_modules/pg/lib/stream.js - − node_modules/pg/lib/type-overrides.js - − node_modules/pg/lib/utils.js - − node_modules/pg/package.json - − node_modules/pgpass/README.md - − node_modules/pgpass/lib/helper.js - − node_modules/pgpass/lib/index.js - − node_modules/pgpass/package.json - − node_modules/postgres-array/index.d.ts - − node_modules/postgres-array/index.js - − node_modules/postgres-array/license - − node_modules/postgres-array/package.json - − node_modules/postgres-array/readme.md - − node_modules/postgres-bytea/index.js - − node_modules/postgres-bytea/license - − node_modules/postgres-bytea/package.json - − node_modules/postgres-bytea/readme.md - − node_modules/postgres-date/index.js - − node_modules/postgres-date/license - − node_modules/postgres-date/package.json - − node_modules/postgres-date/readme.md - − node_modules/postgres-interval/index.d.ts - − node_modules/postgres-interval/index.js - − node_modules/postgres-interval/license - − node_modules/postgres-interval/package.json - − node_modules/postgres-interval/readme.md - − node_modules/proxy-addr/HISTORY.md - − node_modules/proxy-addr/LICENSE - − node_modules/proxy-addr/README.md - − node_modules/proxy-addr/index.js - − node_modules/proxy-addr/package.json - − node_modules/qs/.editorconfig - − node_modules/qs/.eslintrc - − node_modules/qs/.github/FUNDING.yml - − node_modules/qs/.nycrc - − node_modules/qs/CHANGELOG.md - − node_modules/qs/LICENSE.md - − node_modules/qs/README.md - − node_modules/qs/dist/qs.js - − node_modules/qs/lib/formats.js - − node_modules/qs/lib/index.js - − node_modules/qs/lib/parse.js - − node_modules/qs/lib/stringify.js - − node_modules/qs/lib/utils.js - − node_modules/qs/package.json - − node_modules/qs/test/empty-keys-cases.js - − node_modules/qs/test/parse.js - − node_modules/qs/test/stringify.js - − node_modules/qs/test/utils.js - − node_modules/range-parser/HISTORY.md - − node_modules/range-parser/LICENSE - − node_modules/range-parser/README.md - − node_modules/range-parser/index.js - − node_modules/range-parser/package.json - − node_modules/raw-body/HISTORY.md - − node_modules/raw-body/LICENSE - − node_modules/raw-body/README.md - − node_modules/raw-body/SECURITY.md - − node_modules/raw-body/index.d.ts - − node_modules/raw-body/index.js - − node_modules/raw-body/package.json - − node_modules/router/HISTORY.md - − node_modules/router/LICENSE - − node_modules/router/README.md - − node_modules/router/index.js - − node_modules/router/lib/layer.js - − node_modules/router/lib/route.js - − node_modules/router/package.json - − node_modules/safe-buffer/LICENSE - − node_modules/safe-buffer/README.md - − node_modules/safe-buffer/index.d.ts - − node_modules/safe-buffer/index.js - − node_modules/safe-buffer/package.json - − node_modules/safer-buffer/LICENSE - − node_modules/safer-buffer/Porting-Buffer.md - − node_modules/safer-buffer/Readme.md - − node_modules/safer-buffer/dangerous.js - − node_modules/safer-buffer/package.json - − node_modules/safer-buffer/safer.js - − node_modules/safer-buffer/tests.js - − node_modules/send/HISTORY.md - − node_modules/send/LICENSE - − node_modules/send/README.md - − node_modules/send/index.js - − node_modules/send/package.json - − node_modules/serve-static/HISTORY.md - − node_modules/serve-static/LICENSE - − node_modules/serve-static/README.md - − node_modules/serve-static/index.js - − node_modules/serve-static/package.json - − node_modules/setprototypeof/LICENSE - − node_modules/setprototypeof/README.md - − node_modules/setprototypeof/index.d.ts - − node_modules/setprototypeof/index.js - − node_modules/setprototypeof/package.json - − node_modules/setprototypeof/test/index.js - − node_modules/side-channel-list/.editorconfig - − node_modules/side-channel-list/.eslintrc - − node_modules/side-channel-list/.github/FUNDING.yml - − node_modules/side-channel-list/.nycrc - − node_modules/side-channel-list/CHANGELOG.md - − node_modules/side-channel-list/LICENSE - − node_modules/side-channel-list/README.md - − node_modules/side-channel-list/index.d.ts - − node_modules/side-channel-list/index.js - − node_modules/side-channel-list/list.d.ts - − node_modules/side-channel-list/package.json - − node_modules/side-channel-list/test/index.js - − node_modules/side-channel-list/tsconfig.json - − node_modules/side-channel-map/.editorconfig - − node_modules/side-channel-map/.eslintrc - − node_modules/side-channel-map/.github/FUNDING.yml - − node_modules/side-channel-map/.nycrc - − node_modules/side-channel-map/CHANGELOG.md - − node_modules/side-channel-map/LICENSE - − node_modules/side-channel-map/README.md - − node_modules/side-channel-map/index.d.ts - − node_modules/side-channel-map/index.js - − node_modules/side-channel-map/package.json - − node_modules/side-channel-map/test/index.js - − node_modules/side-channel-map/tsconfig.json - − node_modules/side-channel-weakmap/.editorconfig - − node_modules/side-channel-weakmap/.eslintrc - − node_modules/side-channel-weakmap/.github/FUNDING.yml - − node_modules/side-channel-weakmap/.nycrc - − node_modules/side-channel-weakmap/CHANGELOG.md - − node_modules/side-channel-weakmap/LICENSE - − node_modules/side-channel-weakmap/README.md - − node_modules/side-channel-weakmap/index.d.ts - − node_modules/side-channel-weakmap/index.js - − node_modules/side-channel-weakmap/package.json - − node_modules/side-channel-weakmap/test/index.js - − node_modules/side-channel-weakmap/tsconfig.json - − node_modules/side-channel/.editorconfig - − node_modules/side-channel/.eslintrc - − node_modules/side-channel/.github/FUNDING.yml - − node_modules/side-channel/.nycrc - − node_modules/side-channel/CHANGELOG.md - − node_modules/side-channel/LICENSE - − node_modules/side-channel/README.md - − node_modules/side-channel/index.d.ts - − node_modules/side-channel/index.js - − node_modules/side-channel/package.json - − node_modules/side-channel/test/index.js - − node_modules/side-channel/tsconfig.json - − node_modules/split2/LICENSE - − node_modules/split2/README.md - − node_modules/split2/bench.js - − node_modules/split2/index.js - − node_modules/split2/package.json - − node_modules/split2/test.js - − node_modules/statuses/HISTORY.md - − node_modules/statuses/LICENSE - − node_modules/statuses/README.md - − node_modules/statuses/codes.json - − node_modules/statuses/index.js - − node_modules/statuses/package.json - − node_modules/toidentifier/HISTORY.md - − node_modules/toidentifier/LICENSE - − node_modules/toidentifier/README.md - − node_modules/toidentifier/index.js - − node_modules/toidentifier/package.json - − node_modules/type-is/HISTORY.md - − node_modules/type-is/LICENSE - − node_modules/type-is/README.md - − node_modules/type-is/index.js - − node_modules/type-is/package.json - − node_modules/unpipe/HISTORY.md - − node_modules/unpipe/LICENSE - − node_modules/unpipe/README.md - − node_modules/unpipe/index.js - − node_modules/unpipe/package.json - − node_modules/vary/HISTORY.md - − node_modules/vary/LICENSE - − node_modules/vary/README.md - − node_modules/vary/index.js - − node_modules/vary/package.json - − node_modules/wrappy/LICENSE - − node_modules/wrappy/README.md - − node_modules/wrappy/package.json - − node_modules/wrappy/wrappy.js - − node_modules/xtend/.jshintrc - − node_modules/xtend/LICENSE - − node_modules/xtend/README.md - − node_modules/xtend/immutable.js - − node_modules/xtend/mutable.js - − node_modules/xtend/package.json - − node_modules/xtend/test.js - − package-lock.json - − package.json The diff was not included because it is too large. View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/5e6a1243a44baa86204e… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/5e6a1243a44baa86204e… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/dns][main] Change openbao to point to Kubernetes
by Fernando K (＠fmkiotheka) 06 Ago '25

06 Ago '25

Fernando K pushed to branch main at Root / Serviços / DNS Commits: 332652db by Fernando Monteiro Kiotheka at 2025-08-06T14:42:52-03:00 Change openbao to point to Kubernetes - - - - - 3 changed files: - global-0.8.f.f.0.8.2.8.0.0.1.0.8.2.ip6.arpa.zone - global-202.17.200.in-addr.arpa.zone - global-c3sl.ufpr.br.zone Changes: ===================================== global-0.8.f.f.0.8.2.8.0.0.1.0.8.2.ip6.arpa.zone ===================================== @@ -11,7 +11,7 @@ $TTL 21600 0.5.b.c.1.5.e.f.f.f.a.b.2.e.2.9.1.0 IN PTR forsyn.c3sl.ufpr.br. @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754492311 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754501802 86400 7200 2592000 3600 0.9.0.7.5.b.e.f.f.f.7.0.a.8.6.2.1.0 IN PTR barril1.c3sl.ufpr.br. 0.9.c.f.3.3.e.f.f.f.3.4.7.0.2.0.1.0 IN PTR orval.c3sl.ufpr.br. 0.a.0.0.9.7.e.f.f.f.e.3.6.1.2.0.1.0 IN PTR cpu1.c3sl.ufpr.br. @@ -30,7 +30,6 @@ $TTL 21600 1.c.8.b.7.3.e.f.f.f.c.c.6.1.2.0.1.0 IN PTR bookworm-cloudinit-2.c3sl.ufpr.br. 1.d.0.0.a.a.e.f.f.f.c.c.6.1.2.0.2.0 IN PTR pnldprod.c3sl.ufpr.br. 1.e.0.0.a.a.e.f.f.f.c.c.6.1.2.0.3.0 IN PTR ceib.c3sl.ufpr.br. -1.f.0.0.a.a.e.f.f.f.c.c.6.1.2.0.1.0 IN PTR openbao.c3sl.ufpr.br. 1.f.e.d.b.9.e.f.f.f.c.c.6.1.2.0.1.0 IN PTR farma-alg-ia.c3sl.ufpr.br. 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN PTR sagres.c3sl.ufpr.br. 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0 IN PTR urquell.c3sl.ufpr.br. ===================================== global-202.17.200.in-addr.arpa.zone ===================================== @@ -33,7 +33,6 @@ $TTL 21600 35 IN PTR cpu2.c3sl.ufpr.br. 42 IN PTR prefect.c3sl.ufpr.br. 43 IN PTR cloneimgteste.c3sl.ufpr.br. -51 IN PTR openbao.c3sl.ufpr.br. 55 IN PTR duvel.c3sl.ufpr.br. 62 IN PTR roble.c3sl.ufpr.br. 70 IN PTR tars.c3sl.ufpr.br. @@ -45,4 +44,4 @@ $TTL 21600 197 IN PTR debiansec.c3sl.ufpr.br. @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754490938 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754501799 86400 7200 2592000 3600 ===================================== global-c3sl.ufpr.br.zone ===================================== @@ -95,7 +95,7 @@ c3hpc.docs IN CNAME root.pages @ IN MX 10 mx @ IN NS ns2.c3sl.ufpr.br. @ IN NS ns.c3sl.ufpr.br. -@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754492311 86400 7200 2592000 3600 +@ 21600 IN SOA ns.c3sl.ufpr.br. root.c3sl.ufpr.br. 1754501908 86400 7200 2592000 3600 @ IN TXT "google-site-verification=1QxfWQZw27Mp-PLffYIKhzRAgkU-RHSQPzQPuuHA3Go" @ IN TXT "v=spf1 a:mx.c3sl.ufpr.br mx:inf.ufpr.br mx:c3sl.ufpr.br -all" campanhas.sus IN CNAME sus @@ -349,8 +349,7 @@ ns2 IN AAAA 2801:82:80ff:8000::2 ntp IN CNAME urquell ntpserver IN CNAME urquell okizeme IN CNAME rfhferreirafans -openbao IN A 200.17.202.51 -openbao IN AAAA 2801:82:80ff:8001:216:ccff:feaa:f1 +openbao IN CNAME openbao.k8sstage openbao.k8sstage IN A 200.236.31.214 openbsd IN CNAME sagres opencast IN A 200.238.144.136 View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/332652db29c1cebe6237… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/dns/-/commit/332652db29c1cebe6237… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0