Refs. swh/infra/sysadm-environment#4818

Refs. swh/infra/sysadm-environment#4809

Refs. swh/infra/sysadm-environment#4809

Related to swh/infra/sysadm-environment#4805

Refs. swh/infra/sysadm-environment#4759

Otherwise, the certificates could not match the name
used by the client to reach the servers

Related to swh/infra/sysadm-environment#4815

Ref. swh/infra/sysadm-environment#4760

Refs. swh/infra/sysadm-environment#4808

So the link to authenticate in that webapp instance is able to connect the
user in keycloak as well. It will be more practical when one uses that
instance to check things.

It enables CORS between Software Heritage web applications (GraphiQL
client for instance) and Keycloak server when using the swh-web client.

Related to swh/devel/swh-graphql#4652

Related to swh/infra/sysadm-environment#4804

Refs. swh/infra/sysadm-environment#4808

Related to swh/infra/sysadm-environment#4804

Related to swh/infra/sysadm-environment#4804

This reverts commit 32116116.

We'll not use the rack affinity because our server dispatching
in the rack is not compatible with the cassandra needs.
It will also add some constraints on the cluster provisionning
we could not afford (need to keep the same number of servers in
all the racks)

Related to swh/infra/sysadm-environment#4801

Refs. swh/infra/sysadm-environment#4802

Refs. swh/infra/sysadm-environment#4770

Related to swh/infra/sysadm-environment#4801

Related to swh/infra/sysadm-environment#4800

Related to data/subnets/vagrant.yaml

Ref. swh/infra/sysadm-environment#4737

The upstream dashboards expect this.

Ref. swh/infra/sysadm-environment#4795

Closes swh/infra/sysadm-environment#4795

It's set as is for staging nodes for now. It needs to be set to a minimal of
262144 as a tryout elasticsearch will run there.

Refs. swh/infra/sysadm-environment#4524

Related to swh/infra/sysadm-environment#4734

So the ssl key configuration are not generated in the configuration. As, for
newest version, this creates startup services issues if those are still
present while disabled.

Refs. swh/infra/sysadm-environment#4777

So the ssl key configuration are not generated in the configuration. As, for
newest version, this creates startup services issues if those are still
present while disabled.

Refs. swh/infra/sysadm-environment#4777

This reverts commit 7c7d4d3f.

So the ssl key configuration are skipped when ssl is disabled. For newest version, this
creates startup services issues if those are present while disabled.

Refs. swh/infra/sysadm-environment#4777

Beaubourg is not responding so in the meantime switching
to the main database server

```
Error: Failed to apply catalog: Parameter type failed on Ssh_authorized_key[zack
zack@noziere]: Invalid value "no-touch-required sk-ssh-ed25519@openssh.com". Valid
values are ssh-dss, ssh-rsa, ecdsa-sha2-nistp256, ecdsa-sha2-nistp384,
ecdsa-sha2-nistp521, ssh-ed25519. (file:
/etc/puppet/code/environments/production/site-modules/profile/manifests/ssh/server.pp,
line: 37)
```

bin/octo is happy:

```
diff origin/production/thyssen.internal.softwareheritage.org current/thyssen.internal.softwareheritage.org
*******************************************
  Ssh_authorized_key[zack zack@noziere2] =>
   parameters =>
     type =>
      - no-touch-required sk-ssh-ed25519@openssh.com
      + ssh-ed25519
*******************************************
  Ssh_authorized_key[zack zack@noziere] =>
   parameters =>
     type =>
      - no-touch-required sk-ssh-ed25519@openssh.com
      + ssh-ed25519
*******************************************
*** End octocatalog-diff on thyssen.internal.softwareheritage.org
```

Refs. swh/infra/sysadm-environment#4770

octo-diff happy:

```
diff origin/production/thyssen.internal.softwareheritage.org current/node
*******************************************
+ Ssh_authorized_key[zack zack@noziere2] =>
   parameters =>
     "ensure": "present",
     "key": "AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIOEeNPkjSRDvG4jC+u8DNG+t...
     "type": "no-touch-required sk-ssh-ed25519@openssh.com",
     "user": "zack"
*******************************************
+ Ssh_authorized_key[zack zack@noziere] =>
   parameters =>
     "ensure": "present",
     "key": "AAAAGnNrLXNzaC1lZDI1NTE5QG9wZW5zc2guY29tAAAAIB63mVv7CC3IQ6vO7s4H/Cei...
     "type": "no-touch-required sk-ssh-ed25519@openssh.com",
     "user": "zack"
*******************************************
*** End octocatalog-diff on node
```

Refs. swh/infra/sysadm-environment#4770

Related to swh/infra/sysadm-environment#4747

Related to swh/infra/sysadm-environment#4747