Improve NTP handling: (!316) · Merge requests · Platform / Infrastructure / Puppet / puppet-swh-site · GitLab

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption, please take a look at our documentation.

Nicolas Dandrimont requested to merge generated-differential-D5126-source into generated-differential-D5126-target Feb 22, 2021

Drop specific NTP configuration on subnets behind the new firewall
Add the public debian ntp pool to the sesi_rocquencourt subnet
Add an icinga check for ntp synchronization on all linux hosts

Related to T3063

Test Plan

tested NTP changes on worker01, icinga changes on pergamon

Migrated from D5126 (view on Phabricator)