psf-salt/pillar/dev/top.sls at ced030b677befd7b42c39b93955fd17a4a1ef8ac · python/psf-salt · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
base:
  '*':
    - consul
    - firewall.consul
    - networking
    - roles
    - sudoers
    - tls
    - users.*
    - postgres.clusters
    - pebble # needing to do this to have pebble rum in dev
    # - secrets.sentry # Uncomment and update sentry secrets if you want to work in dev

  'backup-server':
    - match: nodegroup
    - backup.*

  'bugs':
    - match: nodegroup
    - secrets.bugs
    - bugs
    - firewall.bugs

  'cdn-logs':
    - match: nodegroup
    - fastly-logging
    - firewall.fastly-logging

  'codespeed':
    - match: nodegroup
    - firewall.codespeed
    - secrets.codespeed
    - secrets.postgresql-users.codespeed
    - codespeed

  'docs':
    - match: nodegroup
    - firewall.rs-lb-backend
    - groups.docs
    - secrets.docs
    - backup.docs

  'downloads':
    - match: nodegroup
    - firewall.rs-lb-backend
    - groups.downloads
    - backup.downloads

  'gnumailman':
    - match: nodegroup
    - firewall.mail
    - mail-opt-out

  'hg':
    - match: nodegroup
    - firewall.rs-lb-backend

  'loadbalancer':
    - match: nodegroup
    - haproxy
    - firewall.loadbalancer
    - secrets.fastly
    - secrets.tls.certs.loadbalancer
    - bugs

  'mail':
    - match: nodegroup
    - firewall.mail
    - groups.mail
    - mail-opt-out

  'planet':
    - match: nodegroup
    - planet
    - firewall.planet

  'salt-master':
    - match: nodegroup
    - firewall.salt
    - pebble
    - firewall.postgresql
    - postgresql.server
    - postgres.databases
    - secrets.postgresql-admin
    - secrets.postgresql-users.all

  'tracker':
    - match: nodegroup
    - secrets.postgresql-users.tracker

  'wiki':
    - match: nodegroup
    - moin
    - firewall.rs-lb-backend