- Git do Root C3SL

[Git][root/services/setup-hosts][main] feat: add custom port support, always create users.yml
by Fernando K (＠fmkiotheka) 08 Ago '25

08 Ago '25

Fernando K pushed to branch main at Root / Serviços / Setup Hosts Commits: ad015921 by Fernando Monteiro Kiotheka at 2025-08-08T14:44:42-03:00 feat: add custom port support, always create users.yml - - - - - 3 changed files: - all_inventory.py - configure_hosts.py - env_inventory.py Changes: ===================================== all_inventory.py ===================================== @@ -1,6 +1,7 @@ from pathlib import Path import os import requests +import yaml NETBOX_URL = os.environ['NETBOX_URL'] NETBOX_TOKEN = os.environ['NETBOX_TOKEN'] @@ -23,10 +24,24 @@ for vm in response['data']['device_list']: if primary_ip: names.add(primary_ip['dns_name']) SCRIPT_DIR = Path(__file__).resolve().parent +HOSTS_CONF = SCRIPT_DIR / 'hosts-conf' +HOSTS_DIR = HOSTS_CONF / 'hosts' -configured_hosts = set(d.name for d in (SCRIPT_DIR / 'hosts-conf' / 'hosts').iterdir()) +configured_hosts = set(d.name for d in HOSTS_DIR.iterdir()) + +with open(HOSTS_CONF / 'defaults' / 'config.yml') as f: + default_config = yaml.safe_load(f) + +def get_port_for_host(name): + config_file = HOSTS_DIR / name / 'config.yml' + if config_file.exists(): + with open(config_file) as f: + host_config = yaml.safe_load(f) + if 'port' in host_config: + return host_config['port'] + return default_config['port'] hosts = [ - (host, { 'ssh_config_file': 'ssh_config' }) + (host, { 'ssh_config_file': 'ssh_config', 'ssh_port': get_port_for_host(host) }) for host in (names & configured_hosts) ] ===================================== configure_hosts.py ===================================== @@ -33,7 +33,7 @@ if host_config_path.exists(): config = dict() for section, defaults in default_config.items(): config[section] = defaults - if section in host_config: + if section in host_config and isinstance(host_config[section], dict): for key, value in host_config[section].items(): if key not in config[section]: raise Exception(f'[{host.name}] invalid key in config: {section}.{key}') @@ -176,7 +176,7 @@ if ('users/etc' in TAGS or 'all' in TAGS): with open(users_path, 'w') as f: yaml.dump({ 'users': users_new_config }, f) - if changed: + if changed or not users_path.exists(): python.call( name="Replace users.yml in the repository", function=replace_users, ===================================== env_inventory.py ===================================== @@ -1,8 +1,9 @@ import os +from all_inventory import get_port_for_host HOSTS = os.environ['HOSTS'].replace(',', ' ').split() hosts = [ - (host, { 'ssh_config_file': 'ssh_config' }) + (host, { 'ssh_config_file': 'ssh_config', 'ssh_port': get_port_for_host(host) }) for host in HOSTS ] View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/setup-hosts/-/commit/ad01592105a8… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/setup-hosts/-/commit/ad01592105a8… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/services/hosts-conf][main] Add SUS machines
by Fernando K (＠fmkiotheka) 08 Ago '25

08 Ago '25

Fernando K pushed to branch main at Root / Serviços / Hosts Conf Commits: 9448d306 by Fernando Monteiro Kiotheka at 2025-08-08T14:44:27-03:00 Add SUS machines - - - - - 23 changed files: - defaults/config.yml - + hosts/bd.sus.c3sl.ufpr.br/users.yml - + hosts/c3hpc.c3sl.ufpr.br/users.yml - + hosts/capacitacao1.sus.c3sl.ufpr.br/users.yml - + hosts/capacitacao2.sus.c3sl.ufpr.br/users.yml - + hosts/email.sus.c3sl.ufpr.br/users.yml - + hosts/ids.sus.c3sl.ufpr.br/users.yml - + hosts/jughisto.c3sl.ufpr.br/users.yml - + hosts/jughisto.c3sl.ufpr.br/users.yml.old - + hosts/listas.sus.c3sl.ufpr.br/users.yml - + hosts/log.sus.c3sl.ufpr.br/users.yml - + hosts/mapas.sus.c3sl.ufpr.br/users.yml - + hosts/matrix.sus.c3sl.ufpr.br/users.yml - hosts/mecredhomologa.c3sl.ufpr.br/users.yml - hosts/mecredhomologa.c3sl.ufpr.br/users.yml.old - + hosts/metabase.sus.c3sl.ufpr.br/users.yml - + hosts/sapsrouter.saps.c3sl.ufpr.br/config.yml - + hosts/sapsrouter.saps.c3sl.ufpr.br/sshd_config - + hosts/sapsrouter.saps.c3sl.ufpr.br/users.yml - + hosts/smbilamir.c3sl.ufpr.br/users.yml - + hosts/sumidouro.sus.c3sl.ufpr.br/users.yml - + hosts/superset.sus.c3sl.ufpr.br/users.yml - + hosts/sus.c3sl.ufpr.br/users.yml Changes: ===================================== defaults/config.yml ===================================== @@ -1,3 +1,4 @@ +port: 22 ssh: sshdConfigFile: "/defaults/ssh/sshd_config" trustedUserCAKeysFile: "/defaults/ssh/trusted-user-ca-keys.pem" ===================================== hosts/bd.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,25 @@ +users: +- groups: + - sudo + keys: + - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwpJSzCY5cNCLaNXa0kUtxzKwdtC+YTRpk7eLoQmmD01bmYZMmzxhoHthlmAcbDIGCftRLzPDYtTBdWnRUtPIbuxcIjhg7AGSz8FjE5DJC2hKpy8WvpCtkwS3MvJLAkURAZ9+NSie+T7SeX7QHsEGg+2YQJBpj7rgI12Q3wurmdwj0v7L+TM6aGLokqqkkozo10qsFDT2jhj3FnIolBYHlIYCtywziTt2vRbKiygU2R2LjmZ7EKAM+YSAo1v8+n/EjHJWNWOmOOi1ljKgP4JS1vVZtzrG5PESITz4OhDj5K+XMVGc8QZrDWCQwstNbMlQAfeiwDFWbXLFYDbtdRpMG8u9ybpQMp5C3f2vfL8q9yjk373R6CnFrmJJbycFF65F2nA+/xBhXBv2nZTdkipsuRWzMewCqmhDUD9mE0CtyPbvdK4cptVcHoroN2dAa4rh2spQZ2x10jIQm2fEw6oT9uNlsGvR4z+sgx0lm+tqS0pmbNtat1DWlbnLCYF2H5TLy8nu6UPuCQcbjIL8vq9E8AAYINiRtEjpfMlPoKO+sa2Nj5IaaAtd2F8/suR8mIXep4QJOMwnu8rXd0Bi3wdhDyNDvXverNvUe7YLLekU8kOF7XHHr4Z09xIasREVqQEli8vedLlUas6HLgnRfuBFz6W60qJXdeDgdTEH23Sq67w== + helcio@DESKTOP-K2TH5GS + user: helcio +- groups: + - sudo + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJC8A3P2c98gyMJJVPPivjsAow6XZJVgk9y0nKfT9qFB + mgy20(a)inf.ufpr.br + user: mgy20 +- groups: + - sudo + keys: + - ssh-rsa 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 + casa@DESKTOP-4BKGDQ0 + user: sergio +- groups: + - sudo + keys: + - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF655Zn6b1Hq+42jth1S01uvv6F54MVxps9m+gKLsRCu1hPPHn0nXSnnk/kz7dJbLU3EndNL3B6wz5HZa/Ue/dOXOqW2UVrr6b9+/hdXVrL6nav0RCBlx975N1W0SAM6OFwwa/2wPys1m2NfuAz639HCXZ4plC2wZaYFGUnvHrvQqKFDL9SEV/dyUKMU4FwBgK3cYrGpuHPnUzA/Bw0XE7TawzzI0h/kHXjMK3p2f07cEbfgShGakJu7SULpyIH4dVQ6v9PfxctjtQt6qIMurlL6eGXoQIryvWcfgxxyR0xLNIIgZ1EEGn2PWzUdSUiLjxfvsrTobfnNZBBvqUV/tJ + sdominico@macalan + user: simone ===================================== hosts/c3hpc.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1 @@ +users: [] ===================================== hosts/capacitacao1.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,37 @@ +users: +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE/aQyld+bwlxffrxc4cy/lKRtDUD5b2gqEO8npsi86p + edvs19@macalan + user: evsenoski +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKohicQbPR596ZOVjkfM/ZrSYJUO1fJiOFAv0T/2rVKI + gcboneti(a)inf.ufpr.br + user: gcboneti +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHGgFWsyhEeFmv1lOLRL06Olm8WsjYgVSxImwO20QQgQ + gabrielafanaia(a)gmail.com + user: gfadd22 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJC8A3P2c98gyMJJVPPivjsAow6XZJVgk9y0nKfT9qFB + mgy20(a)inf.ufpr.br + user: mgy20 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN3upYrggp2OO9xsDMelm/9D3SCImfrjRKqWbhieVPDx + fpesserl7(a)gmail.com + user: pfp22 +- groups: + - root + keys: + - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF655Zn6b1Hq+42jth1S01uvv6F54MVxps9m+gKLsRCu1hPPHn0nXSnnk/kz7dJbLU3EndNL3B6wz5HZa/Ue/dOXOqW2UVrr6b9+/hdXVrL6nav0RCBlx975N1W0SAM6OFwwa/2wPys1m2NfuAz639HCXZ4plC2wZaYFGUnvHrvQqKFDL9SEV/dyUKMU4FwBgK3cYrGpuHPnUzA/Bw0XE7TawzzI0h/kHXjMK3p2f07cEbfgShGakJu7SULpyIH4dVQ6v9PfxctjtQt6qIMurlL6eGXoQIryvWcfgxxyR0xLNIIgZ1EEGn2PWzUdSUiLjxfvsrTobfnNZBBvqUV/tJ + sdominico@macalan + user: simone ===================================== hosts/capacitacao2.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,37 @@ +users: +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE/aQyld+bwlxffrxc4cy/lKRtDUD5b2gqEO8npsi86p + edvs19@macalan + user: evsenoski +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKohicQbPR596ZOVjkfM/ZrSYJUO1fJiOFAv0T/2rVKI + gcboneti(a)inf.ufpr.br + user: gcboneti +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHGgFWsyhEeFmv1lOLRL06Olm8WsjYgVSxImwO20QQgQ + gabrielafanaia(a)gmail.com + user: gfadd22 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJC8A3P2c98gyMJJVPPivjsAow6XZJVgk9y0nKfT9qFB + mgy20(a)inf.ufpr.br + user: mgy20 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN3upYrggp2OO9xsDMelm/9D3SCImfrjRKqWbhieVPDx + fpesserl7(a)gmail.com + user: pfp22 +- groups: + - root + keys: + - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF655Zn6b1Hq+42jth1S01uvv6F54MVxps9m+gKLsRCu1hPPHn0nXSnnk/kz7dJbLU3EndNL3B6wz5HZa/Ue/dOXOqW2UVrr6b9+/hdXVrL6nav0RCBlx975N1W0SAM6OFwwa/2wPys1m2NfuAz639HCXZ4plC2wZaYFGUnvHrvQqKFDL9SEV/dyUKMU4FwBgK3cYrGpuHPnUzA/Bw0XE7TawzzI0h/kHXjMK3p2f07cEbfgShGakJu7SULpyIH4dVQ6v9PfxctjtQt6qIMurlL6eGXoQIryvWcfgxxyR0xLNIIgZ1EEGn2PWzUdSUiLjxfvsrTobfnNZBBvqUV/tJ + sdominico@macalan + user: simone ===================================== hosts/email.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1 @@ +users: [] ===================================== hosts/ids.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1 @@ +users: [] ===================================== hosts/jughisto.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,7 @@ +users: +- groups: + - sudo + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBZ1Jlgb4JWmXfE24VOBC8zzPmIzFwmj/cgQPZhi585o + fmkiotheka(a)inf.ufpr.br + user: fmkiotheka ===================================== hosts/jughisto.c3sl.ufpr.br/users.yml.old ===================================== @@ -0,0 +1 @@ +users: [] ===================================== hosts/listas.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,19 @@ +users: +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID3DWDFZIbjKth73jKz18K7R1n6jLjq+FCgMBfIwuYdk + dcr23(a)inf.ufpr.br + user: dcr23 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIT+iW47jvl5QybNCHLx+loYTiawWVAplYRoFGPY1faG + rui@rui-secret + user: rm23 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOiPQfmRo12CbAiHohOTT5RnI4l6YZe6mhx0T1ZJDqtx + vitor@comp + user: vmafonso ===================================== hosts/log.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1 @@ +users: [] ===================================== hosts/mapas.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,19 @@ +users: +- groups: + - sudo + keys: + - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCwpJSzCY5cNCLaNXa0kUtxzKwdtC+YTRpk7eLoQmmD01bmYZMmzxhoHthlmAcbDIGCftRLzPDYtTBdWnRUtPIbuxcIjhg7AGSz8FjE5DJC2hKpy8WvpCtkwS3MvJLAkURAZ9+NSie+T7SeX7QHsEGg+2YQJBpj7rgI12Q3wurmdwj0v7L+TM6aGLokqqkkozo10qsFDT2jhj3FnIolBYHlIYCtywziTt2vRbKiygU2R2LjmZ7EKAM+YSAo1v8+n/EjHJWNWOmOOi1ljKgP4JS1vVZtzrG5PESITz4OhDj5K+XMVGc8QZrDWCQwstNbMlQAfeiwDFWbXLFYDbtdRpMG8u9ybpQMp5C3f2vfL8q9yjk373R6CnFrmJJbycFF65F2nA+/xBhXBv2nZTdkipsuRWzMewCqmhDUD9mE0CtyPbvdK4cptVcHoroN2dAa4rh2spQZ2x10jIQm2fEw6oT9uNlsGvR4z+sgx0lm+tqS0pmbNtat1DWlbnLCYF2H5TLy8nu6UPuCQcbjIL8vq9E8AAYINiRtEjpfMlPoKO+sa2Nj5IaaAtd2F8/suR8mIXep4QJOMwnu8rXd0Bi3wdhDyNDvXverNvUe7YLLekU8kOF7XHHr4Z09xIasREVqQEli8vedLlUas6HLgnRfuBFz6W60qJXdeDgdTEH23Sq67w== + helcio@DESKTOP-K2TH5GS + user: helcio +- groups: + - sudo + keys: + - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQDRhMqzOAfbujvq2V9/zvynAonW37rgiWMDmHc80W3C4LPxfZT1+yzYeJW2eSBhdCGno7q8Z/X6J6G/ojzDJwxnpegTjr6dTQ7KkXy2vVr4CHwdAhwlZXvPkPO/ZeuC9lofAm1+yxOJveKCdpCqeWyWb5S0tdMrFSKZiqTwG+PgI8tdbLSs4X/lAAacbRugqW7TxYzPXrL2wtVz3AMJEEmkOaAV5BHQXDL+NUe/wT3w29Ty84yq1GHC5zGFgF+vqK+VUg5F8ZDJ4AlgEvmbKCecDSKTPkWG7rclyYxno2O4JX7fspEWmVsARzOY7d2Qghq4I3tbyURXG4BRk/sSRrCjLmUcZRC5ET5aw8M3AcCQICqLlEUV5r+j4ZYG9CPK1n0oGl3ZK4Am4aChHbdwDwh/jfY47TT2QTSihOFn9bBVgnSnD6t2TY1Rty5g3LHo+xWSMs+/QuwwfloVcEClQY+8qsfWCeNnrXhJ+pTp9Zs2Fuly0i5QuquiXq5NDgUge7RokZSrU+UNVvGLfGqBmXzlVCWLUTENbuL2A1NnLtytav44vtPTz53QPpBFJYv+YmLbLDH7fL/IXzKOkLRlwbsw9Xxk3Pnjru5V9mWE/6D9ZrPNU5r1uzTuTWorZ9tq53z0TzY3PecVNiUjuavD2ybDrY7gF4jTbyvMWgPrgoMmFw== + casa@DESKTOP-4BKGDQ0 + user: sergio +- groups: + - sudo + keys: + - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF655Zn6b1Hq+42jth1S01uvv6F54MVxps9m+gKLsRCu1hPPHn0nXSnnk/kz7dJbLU3EndNL3B6wz5HZa/Ue/dOXOqW2UVrr6b9+/hdXVrL6nav0RCBlx975N1W0SAM6OFwwa/2wPys1m2NfuAz639HCXZ4plC2wZaYFGUnvHrvQqKFDL9SEV/dyUKMU4FwBgK3cYrGpuHPnUzA/Bw0XE7TawzzI0h/kHXjMK3p2f07cEbfgShGakJu7SULpyIH4dVQ6v9PfxctjtQt6qIMurlL6eGXoQIryvWcfgxxyR0xLNIIgZ1EEGn2PWzUdSUiLjxfvsrTobfnNZBBvqUV/tJ + sdominico@macalan + user: simone ===================================== hosts/matrix.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,19 @@ +users: +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID3DWDFZIbjKth73jKz18K7R1n6jLjq+FCgMBfIwuYdk + dcr23(a)inf.ufpr.br + user: dcr23 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIT+iW47jvl5QybNCHLx+loYTiawWVAplYRoFGPY1faG + rui@rui-secret + user: rm23 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOiPQfmRo12CbAiHohOTT5RnI4l6YZe6mhx0T1ZJDqtx + vitor@comp + user: vmafonso ===================================== hosts/mecredhomologa.c3sl.ufpr.br/users.yml ===================================== @@ -1,4 +1,10 @@ users: +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILTI6UGIods8AyP762V1jxF8kJ2HL/XSIrfXCZNnm1uv + user@d12-personal + user: jrandreotti - groups: - root keys: ===================================== hosts/mecredhomologa.c3sl.ufpr.br/users.yml.old ===================================== @@ -5,12 +5,6 @@ users: - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMJrsEh9ntm2M7TyaVlsxPwO6fP4Awr9fi+rijU137dt mcs22(a)inf.ufpr.br user: mcs22 -- groups: - - root - keys: - - ssh-rsa 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 - nar20(a)inf.ufpr.br - user: nar20 - groups: - root keys: ===================================== hosts/metabase.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,13 @@ +users: +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJC8A3P2c98gyMJJVPPivjsAow6XZJVgk9y0nKfT9qFB + mgy20(a)inf.ufpr.br + user: mgy20 +- groups: + - root + keys: + - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF655Zn6b1Hq+42jth1S01uvv6F54MVxps9m+gKLsRCu1hPPHn0nXSnnk/kz7dJbLU3EndNL3B6wz5HZa/Ue/dOXOqW2UVrr6b9+/hdXVrL6nav0RCBlx975N1W0SAM6OFwwa/2wPys1m2NfuAz639HCXZ4plC2wZaYFGUnvHrvQqKFDL9SEV/dyUKMU4FwBgK3cYrGpuHPnUzA/Bw0XE7TawzzI0h/kHXjMK3p2f07cEbfgShGakJu7SULpyIH4dVQ6v9PfxctjtQt6qIMurlL6eGXoQIryvWcfgxxyR0xLNIIgZ1EEGn2PWzUdSUiLjxfvsrTobfnNZBBvqUV/tJ + sdominico@macalan + user: simone ===================================== hosts/sapsrouter.saps.c3sl.ufpr.br/config.yml ===================================== @@ -0,0 +1,3 @@ +port: 37710 +ssh: + sshdConfigFile: "./sshd_config" ===================================== hosts/sapsrouter.saps.c3sl.ufpr.br/sshd_config ===================================== @@ -0,0 +1,92 @@ +# $OpenBSD: sshd_config,v 1.100 2016/08/15 12:32:04 naddy Exp $ + +# This is the sshd server system-wide configuration file. See +# sshd_config(5) for more information. + +# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin + +# The strategy used for options in the default sshd_config shipped with +# OpenSSH is to specify options with their default value where +# possible, but leave them commented. Uncommented options override the +# default value. + +Port 37710 +#AddressFamily any +#ListenAddress 0.0.0.0 +#ListenAddress :: +Protocol 2 +#AddressFamily inet + +# HostKeys for protocol version 2 +#HostKey /etc/ssh/ssh_host_rsa_key +#HostKey /etc/ssh/ssh_host_dsa_key +#HostKey /etc/ssh/ssh_host_ecdsa_key + +#Privilege Separation is turned on for security +UsePrivilegeSeparation yes + +# Logging +SyslogFacility AUTH +LogLevel INFO + +# Authentication: +LoginGraceTime 120 +PermitRootLogin without-password +StrictModes yes + +PubkeyAuthentication yes +AuthorizedKeysFile .ssh/root_keys .ssh/authorized_keys + +# Don't read the user's ~/.rhosts and ~/.shosts files +IgnoreRhosts yes +# For this to work you will also need host keys in /etc/ssh_known_hosts +# similar for protocol version 2 +HostbasedAuthentication no +# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication +#IgnoreUserKnownHosts yes + +# To disable tunneled clear text passwords, change to no here! +PasswordAuthentication no +PermitEmptyPasswords no + +# Change to yes to enable challenge-response passwords (beware issues with +# some PAM modules and threads) +ChallengeResponseAuthentication no + +# Kerberos options +#KerberosAuthentication no +#KerberosOrLocalPasswd yes +#KerberosTicketCleanup yes +#KerberosGetAFSToken no + +# GSSAPI options +#GSSAPIAuthentication no +#GSSAPICleanupCredentials yes +#GSSAPIStrictAcceptorCheck yes +#GSSAPIKeyExchange no + +X11Forwarding yes +X11DisplayOffset 10 +PrintMotd no +PrintLastLog yes +TCPKeepAlive yes +#UseLogin no + +#MaxStartups 10:30:60 +#Banner /etc/ssh/banner + +# Allow client to pass locale environment variables +#AcceptEnv LANG LC_* + +Subsystem sftp /usr/lib/openssh/sftp-server + +# Set this to 'yes' to enable PAM authentication, account processing, +# and session processing. If this is enabled, PAM authentication will +# be allowed through the ChallengeResponseAuthentication and +# PasswordAuthentication. Depending on your PAM configuration, +# PAM authentication via ChallengeResponseAuthentication may bypass +# the setting of "PermitRootLogin without-password". +# If you just want the PAM account and session checks to run without +# PAM authentication, then enable this but set PasswordAuthentication +# and ChallengeResponseAuthentication to 'no'. +UsePAM yes ===================================== hosts/sapsrouter.saps.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,13 @@ +users: +- groups: + - sudo + keys: + - ssh-rsa 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 + helcio@DESKTOP-K2TH5GS + user: helcio +- groups: + - sudo + keys: + - ssh-rsa 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 + rfp2005(a)gmail.com + user: rogeriofox ===================================== hosts/smbilamir.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1 @@ +users: [] ===================================== hosts/sumidouro.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,19 @@ +users: +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID3DWDFZIbjKth73jKz18K7R1n6jLjq+FCgMBfIwuYdk + dcr23(a)inf.ufpr.br + user: dcr23 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIT+iW47jvl5QybNCHLx+loYTiawWVAplYRoFGPY1faG + rui@rui-secret + user: rm23 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOiPQfmRo12CbAiHohOTT5RnI4l6YZe6mhx0T1ZJDqtx + vitor@comp + user: vmafonso ===================================== hosts/superset.sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,37 @@ +users: +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIE/aQyld+bwlxffrxc4cy/lKRtDUD5b2gqEO8npsi86p + edvs19@macalan + user: evsenoski +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKohicQbPR596ZOVjkfM/ZrSYJUO1fJiOFAv0T/2rVKI + gcboneti(a)inf.ufpr.br + user: gcboneti +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHGgFWsyhEeFmv1lOLRL06Olm8WsjYgVSxImwO20QQgQ + gabrielafanaia(a)gmail.com + user: gfadd22 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJC8A3P2c98gyMJJVPPivjsAow6XZJVgk9y0nKfT9qFB + mgy20(a)inf.ufpr.br + user: mgy20 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKgJpqaIhSnkM6tAg8NB5oh4EwmiamP662MGSLQ/q/MI + mateusherbelemc(a)gmail.com + user: msh22 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIN3upYrggp2OO9xsDMelm/9D3SCImfrjRKqWbhieVPDx + fpesserl7(a)gmail.com + user: pfp22 ===================================== hosts/sus.c3sl.ufpr.br/users.yml ===================================== @@ -0,0 +1,41 @@ +users: +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINyllTiglDedt/8JVMsP5f32TQX7WM80h6vsYws482iB + claudio@claudio-ideapad + user: ctjunior +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAID3DWDFZIbjKth73jKz18K7R1n6jLjq+FCgMBfIwuYdk + dcr23(a)inf.ufpr.br + user: dcr23 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIqDp8MpP1w7DhQiIi/gLtH35vYUmt/pRxq0vC38KYgZ + lucas@bellat + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJsOH4QhiVWKErtoX8gw40CEpoUuX3x5twv6Rdafd/d+ + alionco + user: laperez +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIC+tU5QRWW99zohf5OYoUOUo9+I+l/NFPe3UWQXBrCSj + chablau@siricutico + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILpVWLPg7206tGRdUd3IMbB4AxrasAUTV8+AnsV9DOP1 + phfr24@macalan + user: phfr24 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIT+iW47jvl5QybNCHLx+loYTiawWVAplYRoFGPY1faG + rui@rui-secret + user: rm23 +- groups: + - root + keys: + - ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOiPQfmRo12CbAiHohOTT5RnI4l6YZe6mhx0T1ZJDqtx + vitor@comp + user: vmafonso View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/hosts-conf/-/commit/9448d306e8324… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/services/hosts-conf/-/commit/9448d306e8324… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] feat(matrix): disable element call
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD Commits: 3cb06510 by MarcusVRP at 2025-08-08T14:32:25-03:00 feat(matrix): disable element call - - - - - 1 changed file: - apps/base/matrix/helmrelease.yaml Changes: ===================================== apps/base/matrix/helmrelease.yaml ===================================== @@ -98,26 +98,9 @@ spec: oidc-config: configSecret: matrix configSecretKey: masOidcConfig + # Fork of this Helm chart needed to make this RTC thing work properly with TURN matrixRTC: - enabled: true - replicas: 1 - ingress: - host: rtc.matrix.c3sl.ufpr.br - tlsSecret: rtc-tls - # sfu: - # additional: - # turn-config: - # config: | - # rtc: - # tcp_port: 7881 - # port_range_start: 50000 - # port_range_end: 60000 - # use_external_ip: true - # turn: - # enabled: true - # domain: turn.c3sl.ufpr.br - # tls_port: 3478 - # secretName: + enabled: false wellKnownDelegation: ingress: tlsSecret: well-known-tls View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/3cb06510b08aca69a71293… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/3cb06510b08aca69a71293… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] fix(matrix): wrong turn secret name
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD Commits: fa278c0a by MarcusVRP at 2025-08-08T14:21:44-03:00 fix(matrix): wrong turn secret name - - - - - 1 changed file: - apps/base/matrix/es.yaml Changes: ===================================== apps/base/matrix/es.yaml ===================================== @@ -19,10 +19,10 @@ spec: remoteRef: key: matrix property: synapseS3Config - - secretKey: masTurnConfig + - secretKey: synapseTurnConfig remoteRef: key: matrix - property: masTurnConfig + property: synapseTurnConfig - secretKey: synapsePostgresPassword remoteRef: key: matrix View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/fa278c0a0e4f1fc12216f8… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/fa278c0a0e4f1fc12216f8… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] feat(matrix): add turn configuration
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD Commits: 77b29e34 by MarcusVRP at 2025-08-08T14:19:16-03:00 feat(matrix): add turn configuration - - - - - 2 changed files: - apps/base/matrix/es.yaml - apps/base/matrix/helmrelease.yaml Changes: ===================================== apps/base/matrix/es.yaml ===================================== @@ -19,6 +19,10 @@ spec: remoteRef: key: matrix property: synapseS3Config + - secretKey: masTurnConfig + remoteRef: + key: matrix + property: masTurnConfig - secretKey: synapsePostgresPassword remoteRef: key: matrix ===================================== apps/base/matrix/helmrelease.yaml ===================================== @@ -75,6 +75,9 @@ spec: config: | database: allow_unsafe_locale: true + turn-config: + configSecret: matrix + configSecretKey: synapseTurnConfig matrixAuthenticationService: replicas: 3 ingress: @@ -96,28 +99,25 @@ spec: configSecret: matrix configSecretKey: masOidcConfig matrixRTC: - replicas: 3 + enabled: true + replicas: 1 ingress: host: rtc.matrix.c3sl.ufpr.br tlsSecret: rtc-tls - sfu: - additional: - turn-config: - config: | - rtc: - tcp_port: 7881 - port_range_start: 50000 - port_range_end: 60000 - use_external_ip: true - keys: - # key-value pairs - # your_api_key: <your_api_secret> - turn: - enabled: true - # domain must match tls certificate - domain: rtc.matrix.c3sl.ufpr.br - # defaults to 3478. If not using a load balancer, must be set to 443. - tls_port: 3478 + # sfu: + # additional: + # turn-config: + # config: | + # rtc: + # tcp_port: 7881 + # port_range_start: 50000 + # port_range_end: 60000 + # use_external_ip: true + # turn: + # enabled: true + # domain: turn.c3sl.ufpr.br + # tls_port: 3478 + # secretName: wellKnownDelegation: ingress: tlsSecret: well-known-tls View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/77b29e345c643318186168… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/77b29e345c643318186168… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dmarc-report][main] [ci skip] [ADD] /reports/extended, adicionado paginação, comentários, metas novas
by Guiusepe (＠godp21) 08 Ago '25

08 Ago '25

Guiusepe pushed to branch main at Root / DMARC Report Commits: d2a7bb35 by godp21 at 2025-08-08T14:01:37-03:00 [ci skip] [ADD] /reports/extended, adicionado paginação, comentários, metas novas - - - - - 2 changed files: - README.md - backend.js Changes: ===================================== README.md ===================================== @@ -1,18 +1,33 @@ # TODO [x] Renomear /data pra /reports/. + [x] Renomear a rota /details?serial=:serial para /reports/details/:serial. + [x] ip e ip6 tão vindo em número/bytes, dá pra vir como uma string formatada de IP. + [x] Criar uma rota pra baixar o XML, algo tipo /reports/:id.xml + [x] Converter as datas para padrão BR + [x] Mudar padrão de argumentos pela URL para usar query + [x] Adicionar ordenação, tipo um ?sort ou ?order, daí a ordenação padrão poderia ser ?order=-maxdate, ou seja data máxima descendente. -[ ] Adicionar paginação, ?page, ?offset, algo tipo 50 resultados por página ou escolhe via ?per_page. -[ ] Adicionar um /reports/extended/ que vem com cada linha "expandida", ou seja, já vem tipo um details em cada linha. +[x] Adicionar paginação, ?page, ?offset, algo tipo 50 resultados por página ou escolhe via ?per_page. + +[x] Adicionar um /reports/extended/ que vem com cada linha "expandida", ou seja, já vem tipo um details em cada linha. + +[ ] Mudar respostas de erros para http500 + +[ ] Remover duplicação de código + [ ]O dmarc_result_max é igual ao dmarc_result_min no details, dá pra só mudar pra dmarc_result, esse é tipo um "score" do que passou. ### Filtros [ ] ?maxdate__gte=2025-07-24T03:00:00Z (depois ou igual a data) + [ ] ?maxdate__lt=2025-07-24T05:00:00Z (antes de data) + [ ] ?domain= (domínio exato) + [ ] ?dmarc_result_min__lte (score de DMARC menor ou igual) ===================================== backend.js ===================================== @@ -116,6 +116,10 @@ const reports_query = ` report.serial = rptrecord.serial ORDER BY @@@@ + LIMIT + $1 + OFFSET + $2 ` ; const details_query = ` @@ -162,6 +166,7 @@ app.get('/', (req, res) => { app.get('/reports', (req, res) => { const { sort } = req.query ; + // Inject string in query to sort results var sortStr = "" ; switch (sort) { case "maxdate": @@ -177,7 +182,12 @@ app.get('/reports', (req, res) => { sortStr = "maxdate DESC" ; } - pgClient.query(reports_query.replace("@@@@", sortStr), (err, result) => { + // Arguments for paging + var { page, perPage } = req.query ; + if(!page) page=1 ; if(!perPage) perPage=50; + + // replaces the sorting column, adds arguments + pgClient.query(reports_query.replace("@@@@", sortStr), [perPage, ((page-1) * perPage)], (err, result) => { if (err) { console.log("ERROR: Unable to run query") ; } else { @@ -194,11 +204,13 @@ app.get('/reports', (req, res) => { // Individual report details app.get('/reports/details', (req, res) => { + // Serial required in URL const { serial } = req.query ; if (! serial) { res.send("No serial specified...") ; return } + pgClient.query(details_query, [serial], (err, result) => { if (err) { console.log("ERROR: Unable to run query") ; @@ -220,6 +232,63 @@ app.get('/reports/details', (req, res) => { //############################################################################## + +// Reports extended +app.get('/reports/extended', async (req, res) => { + let { page, perPage, sort } = req.query; + if (!page) page = 1; + if (!perPage) perPage = 50; + + // Validate and format sort string + let sortStr; + switch (sort) { + case 'maxdate': + sortStr = 'maxdate ASC'; + break; + case 'mindate': + sortStr = 'mindate ASC'; + break; + case '-mindate': + sortStr = 'mindate DESC'; + break; + default: + sortStr = 'maxdate DESC'; + } + + try { + // Equivalent to route /reports + const resultO = await pgClient.query(reports_query.replace('@@@@', sortStr), [perPage, (page - 1) * perPage]); + + const rows = resultO.rows; + + // Async gets the /details for each serial in the /reports query + await Promise.all( + rows.map(async (row) => { + const detailResult = await pgClient.query(details_query, [row.serial]); + detailResult.rows.forEach((row, index) => { + // Conversion for /details data + row["ip"] = ip.fromLong(row["ip"]) ; + if (row["ip6"] != null) { + row["ip6"] = ip.fromLong(row["ip6"]) ; + } + }) ; + // Conversion for /reports data + row.details = detailResult.rows; + row.maxdate = convertDate(row.maxdate) ; + row.mindate = convertDate(row.mindate) ; + }) + ); + res.send(rows); + + } catch (err) { + console.error(err); + res.status(500).send('Error fetching data'); + } +}); +//############################################################################## + + + // Download xml app.get('/reports/:serial.xml', (req, res) => { pgClient.query(xml_query, [req.params.serial], (err, result) => { View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/d2a7bb35735fa3d9a38f… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dmarc-report/-/commit/d2a7bb35735fa3d9a38f… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] feat(cert-manager): namespace privileged
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD Commits: 8cfa509a by MarcusVRP at 2025-08-08T13:10:35-03:00 feat(cert-manager): namespace privileged - - - - - 1 changed file: - infrastructure/base/cert-manager/ns.yaml Changes: ===================================== infrastructure/base/cert-manager/ns.yaml ===================================== @@ -2,3 +2,5 @@ apiVersion: v1 kind: Namespace metadata: name: cert-manager + labels: + pod-security.kubernetes.io/enforce: privileged View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/8cfa509acb6434c46f3565… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/8cfa509acb6434c46f3565… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] 2 commits: feat(fluxcd): add disableWait
by yyvf22 (＠yyvf22) 08 Ago '25

08 Ago '25

yyvf22 pushed to branch main at Root / Kubernetes / FluxCD Commits: 113d3dc3 by yyvf at 2025-08-08T13:09:13-03:00 feat(fluxcd): add disableWait - - - - - 5d1ebfc0 by yyvf at 2025-08-08T13:09:33-03:00 Merge branch 'main' of gitlab.c3sl.ufpr.br:root/k8s/fluxcd - - - - - 8 changed files: - apps/base/matrix/helmrelease.yaml - apps/base/nextcloud/helmrelease.yaml - infrastructure/base/ceph-csi/helmrelease.yaml - infrastructure/base/cert-manager/helmrelease.yaml - infrastructure/base/cilium/helmrelease.yaml - infrastructure/base/external-secrets/helmrelease.yaml - infrastructure/base/harbor/helmrelease.yaml - infrastructure/base/openbao/helmrelease.yaml Changes: ===================================== apps/base/matrix/helmrelease.yaml ===================================== @@ -4,6 +4,10 @@ metadata: name: matrix namespace: matrix spec: + install: + disableWait: true + upgrade: + disableWait: true interval: 1m chart: spec: ===================================== apps/base/nextcloud/helmrelease.yaml ===================================== @@ -5,6 +5,10 @@ metadata: namespace: nextcloud spec: interval: 1m + install: + disableWait: true + upgrade: + disableWait: true chart: spec: chart: nextcloud ===================================== infrastructure/base/ceph-csi/helmrelease.yaml ===================================== @@ -5,6 +5,10 @@ metadata: namespace: ceph spec: interval: 1m + install: + disableWait: true + upgrade: + disableWait: true chart: spec: chart: ceph-csi-rbd ===================================== infrastructure/base/cert-manager/helmrelease.yaml ===================================== @@ -5,6 +5,10 @@ metadata: namespace: cert-manager spec: interval: 1m + install: + disableWait: true + upgrade: + disableWait: true chart: spec: chart: cert-manager ===================================== infrastructure/base/cilium/helmrelease.yaml ===================================== @@ -6,6 +6,10 @@ metadata: spec: releaseName: cilium interval: 15m + install: + disableWait: true + upgrade: + disableWait: true chart: spec: chart: cilium ===================================== infrastructure/base/external-secrets/helmrelease.yaml ===================================== @@ -5,6 +5,10 @@ metadata: namespace: external-secrets spec: interval: 1m + install: + disableWait: true + upgrade: + disableWait: true chart: spec: chart: external-secrets ===================================== infrastructure/base/harbor/helmrelease.yaml ===================================== @@ -5,6 +5,10 @@ metadata: namespace: harbor spec: interval: 1m + install: + disableWait: true + upgrade: + disableWait: true chart: spec: chart: harbor ===================================== infrastructure/base/openbao/helmrelease.yaml ===================================== @@ -5,6 +5,10 @@ metadata: namespace: openbao spec: interval: 1m + install: + disableWait: true + upgrade: + disableWait: true chart: spec: chart: openbao View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/compare/3bcb60a10a2e005384035… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/compare/3bcb60a10a2e005384035… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/dbroot/postgresql-sync-config][main] Add permissions to Guilherme.
by mgy20 (＠mgy20) 08 Ago '25

08 Ago '25

mgy20 pushed to branch main at Root / DBRoot / PostgreSQL Commits: a2dd7c02 by mgy20 at 2025-08-08T15:02:12+00:00 Add permissions to Guilherme. - - - - - 1 changed file: - pg_hba.conf Changes: ===================================== pg_hba.conf ===================================== @@ -14,8 +14,9 @@ hostssl all all postgres.c3sl.ufpr.br s # Time de dados hostssl portalmec gcboneti 10.254.221.0/24 scram-sha-256 hostssl mecred gcboneti 10.254.221.0/24 scram-sha-256 -hostssl mecred_dev gcboneti 10.254.221.0/24 scram-sha-256 -hostssl portalmec pfpesserl 10.254.221.0/24 scram-sha-256 +hostssl mecred_homologa gcboneti 10.254.221.0/24 scram-sha-256 + +# hostssl portalmec pfpesserl 10.254.221.0/24 scram-sha-256 # hostssl mecred_dev pfpesserl 10.254.221.0/24 scram-sha-256 # hostssl mecred_teste pfpesserl 10.254.221.0/24 scram-sha-256 View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/a2d… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/dbroot/postgresql-sync-config/-/commit/a2d… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0

[Git][root/k8s/fluxcd][main] feat(cert-manager): add csi-driver
by MarcusVRP (＠mvreisdoefer) 08 Ago '25

08 Ago '25

MarcusVRP pushed to branch main at Root / Kubernetes / FluxCD Commits: 3bcb60a1 by MarcusVRP at 2025-08-08T12:00:31-03:00 feat(cert-manager): add csi-driver - - - - - 1 changed file: - infrastructure/base/cert-manager/helmrelease.yaml Changes: ===================================== infrastructure/base/cert-manager/helmrelease.yaml ===================================== @@ -14,3 +14,17 @@ spec: values: crds: enabled: true +--- +apiVersion: helm.toolkit.fluxcd.io/v2 +kind: HelmRelease +metadata: + name: cert-manager-csi-driver + namespace: cert-manager +spec: + interval: 1m + chart: + spec: + chart: cert-manager-csi-driver + sourceRef: + kind: HelmRepository + name: cert-manager View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/3bcb60a10a2e0053840353… -- View it on GitLab: https://gitlab.c3sl.ufpr.br/root/k8s/fluxcd/-/commit/3bcb60a10a2e0053840353… You're receiving this email because of your account on gitlab.c3sl.ufpr.br.

1 0