People Duranzed

Duranzed (Sami)
Intern / stagiaire

Projects

Nasqueron Operations Apprentices
Group
Nasqueron security operations squad
Group
Secure HA tunnels
Infrastructure
TLS certificates
Folder
Trusted users
Group

Calendar

User Details

User Since: Jan 29 2026, 16:43 (9 w, 13 h)
Availability: Available

Recent Activity
View All

Wed, Apr 1

Duranzed closed T2225: Reboot WindRiver as Resolved.

Wed, Apr 1, 10:09 · Servers

Duranzed updated the task description for T2225: Reboot WindRiver.

Wed, Apr 1, 10:09 · Servers

Tue, Mar 31

Duranzed accepted D4033: Attach OVH VIP to the CARP MASTER MAC.

Tue, Mar 31, 14:18

Duranzed accepted D4032: Deploy CARP devd configuration via Salt.

Tue, Mar 31, 13:37

Mon, Mar 30

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

removed white lline

Mon, Mar 30, 17:52

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

repair branch

Mon, Mar 30, 12:44

Duranzed moved T2268: Configure IPsec tunnels on Saltstack from WIP to Finished on the User-Duranzed board.

Mon, Mar 30, 09:33 · User-Duranzed, Secure HA tunnels

Duranzed closed T2268: Configure IPsec tunnels on Saltstack as Resolved.

Mon, Mar 30, 09:33 · User-Duranzed, Secure HA tunnels

Duranzed updated the task description for T2268: Configure IPsec tunnels on Saltstack .

Mon, Mar 30, 09:32 · User-Duranzed, Secure HA tunnels

Duranzed updated the task description for T2201: GRE tunnel creation .

Mon, Mar 30, 09:31 · User-Duranzed, Secure HA tunnels

Duranzed updated the task description for T2201: GRE tunnel creation .

Mon, Mar 30, 09:29 · User-Duranzed, Secure HA tunnels

Wed, Mar 25

Duranzed added a comment to D3988: Configure strongSwan as IPsec implementation.

Configuration deployed and running on router-002/router-003 and WindRiver

Wed, Mar 25, 15:48

Duranzed accepted D4024: Make available TeX fonts to all the system on devserver.

Wed, Mar 25, 12:52

Duranzed accepted D4018: Install LLVM 22 on shellserver and devserver roles.

Wed, Mar 25, 12:41

Duranzed accepted D4020: Install GNU findutils.

Wed, Mar 25, 11:31

Duranzed accepted D4029: Allow role router to access ops/secrets/network/router/vault.

Wed, Mar 25, 11:26

Duranzed accepted D3988: Configure strongSwan as IPsec implementation.

Wed, Mar 25, 10:53

Mon, Mar 23

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

removed canonical ipv4 from network.sls and corrected node function

Mon, Mar 23, 18:42

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

better variable name

Mon, Mar 23, 17:47

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

removed for loop

Mon, Mar 23, 17:39

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

testing list format for routers

Mon, Mar 23, 17:19

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

added router parameter

Mon, Mar 23, 16:58

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Light modifications

Mon, Mar 23, 16:46

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

updated for loop syntax

Mon, Mar 23, 14:23

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Added router-002

Mon, Mar 23, 14:14

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Removed cloudhugger

Mon, Mar 23, 14:04

Fri, Mar 20

Duranzed accepted D4015: Allow Docker engines to fetch Anubis private key from Vault.

Fri, Mar 20, 19:59

Duranzed accepted D4014: Restrict Gerrit search to commit hash.

Fri, Mar 20, 18:29

Thu, Mar 19

Duranzed accepted D4009: Read the CARP peer parameter from pillar.

Thu, Mar 19, 18:09

Wed, Mar 18

Duranzed created T2279: Prometheus / IPsec exporter .

Wed, Mar 18, 16:58 · Monitoring and reporting, Secure HA tunnels

Duranzed added a comment to T1965: Decommission CloudHugger .

The tunnel from router-001 to cloudhugger has been destroyed.

Wed, Mar 18, 13:49 · Servers

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

improved indentation

Wed, Mar 18, 12:58

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Added IP canonical IP addresses to router-002 and router-003

Wed, Mar 18, 10:18

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

testing

Wed, Mar 18, 09:23

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

modified network.sls

Wed, Mar 18, 08:42

Tue, Mar 17

Duranzed added a project to T2277: Check DNS records with reference to router-001: DNS.

Tue, Mar 17, 14:47 · DNS, Secure HA tunnels

Duranzed added a project to T2277: Check DNS records with reference to router-001: Secure HA tunnels.

Tue, Mar 17, 14:47 · DNS, Secure HA tunnels

Duranzed created P389 network.sls gre config .

Tue, Mar 17, 14:03

Duranzed updated the task description for T2275: Decommission router-001.

Tue, Mar 17, 13:58 · Secure HA tunnels

Duranzed created T2277: Check DNS records with reference to router-001.

Tue, Mar 17, 13:58 · DNS, Secure HA tunnels

Duranzed updated the task description for T2275: Decommission router-001.

Tue, Mar 17, 13:40 · Secure HA tunnels

Duranzed updated the task description for T2275: Decommission router-001.

Tue, Mar 17, 13:40 · Secure HA tunnels

Duranzed created T2275: Decommission router-001.

Tue, Mar 17, 13:38 · Secure HA tunnels

Mon, Mar 16

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

using for loop to create GRE tunnel on router-002 and 003

Mon, Mar 16, 20:15

Duranzed accepted D4001: Try to install Salt 3006.8 as test dependency.

Mon, Mar 16, 10:15

Duranzed accepted D3943: Add MOTD for router-003 and router-002 to complete router configuration.

Mon, Mar 16, 09:59

Duranzed accepted D3984: Help to install Arcanist dependencies.

Mon, Mar 16, 09:51

Fri, Mar 13

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Cleaning diff

Fri, Mar 13, 22:48

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Roles: update network pillar

Fri, Mar 13, 22:44

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Modified to create tunnels from router-003

Fri, Mar 13, 22:41

Duranzed closed T2222: Add MOTD to router-003 and router-002 as Resolved.

Fri, Mar 13, 22:40 · Secure HA tunnels, User-Duranzed, Salt, Servers

Duranzed accepted D4002: Avoid timeout extracting info from video playlist.

Fri, Mar 13, 22:19

Duranzed updated the diff for D3943: Add MOTD for router-003 and router-002 to complete router configuration.

changed syntax

Fri, Mar 13, 12:05

Duranzed updated the diff for D3943: Add MOTD for router-003 and router-002 to complete router configuration.

public address

Fri, Mar 13, 12:00

Duranzed updated the diff for D3943: Add MOTD for router-003 and router-002 to complete router configuration.

corrected syntax

Fri, Mar 13, 11:46

Thu, Mar 12

Duranzed updated the diff for D3943: Add MOTD for router-003 and router-002 to complete router configuration.

ALigned ip adresses

Thu, Mar 12, 16:56

Duranzed accepted D3986: Configure CARP on routers.

Thu, Mar 12, 12:43

Duranzed accepted D3988: Configure strongSwan as IPsec implementation.

Thu, Mar 12, 12:33

Duranzed retitled D3943: Add MOTD for router-003 and router-002 to complete router configuration from Add MOTD for router-003 to complete router configuration to Add MOTD for router-003 and router-002 to complete router configuration.

Thu, Mar 12, 11:53

Duranzed updated the diff for D3943: Add MOTD for router-003 and router-002 to complete router configuration.

Added private_ipv4 to be able to display on the MOTD files

Thu, Mar 12, 11:52

Duranzed accepted D3974: Synchronize nodes pillar with NetBox information.

Thu, Mar 12, 11:49

Duranzed updated the diff for D3943: Add MOTD for router-003 and router-002 to complete router configuration.

Using correct parameters to display IPs

Thu, Mar 12, 10:49

Wed, Mar 11

Duranzed updated the diff for D3943: Add MOTD for router-003 and router-002 to complete router configuration.

Now using node.resolve_network

Wed, Mar 11, 18:21

Duranzed updated the diff for D3943: Add MOTD for router-003 and router-002 to complete router configuration.

Fixed spaced

Wed, Mar 11, 10:31

Duranzed updated the diff for D3943: Add MOTD for router-003 and router-002 to complete router configuration.

Add Nginx directive to accept files less 100M

Wed, Mar 11, 10:28

Duranzed reopened D3943: Add MOTD for router-003 and router-002 to complete router configuration.

Wed, Mar 11, 10:28

Duranzed updated the diff for D3976: [WIP] Add plugin for terminator to resolve hashes.

Added more details in README.md

Wed, Mar 11, 09:50

Tue, Mar 10

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Added software.sls and modified init.sls

Tue, Mar 10, 15:10

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Improved configuration files and headers

Tue, Mar 10, 14:57

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Updated config files to use node.resolve_gre_tunnels

Tue, Mar 10, 08:23

Fri, Mar 6

Duranzed abandoned D3994: Add Terminator plugin support for resolve-hash.

Fri, Mar 6, 09:23

Thu, Mar 5

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Modified Ysul IP adress in network.sls

Thu, Mar 5, 14:50

Duranzed added a project to D3987: Allow all servers to read IPsec in Vault: User-Duranzed.

Thu, Mar 5, 12:46 · User-Duranzed

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Added service.sls file

Thu, Mar 5, 12:38

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Updated strongswan config files and using a for loop for a more readable code

Thu, Mar 5, 11:58

Wed, Mar 4

Duranzed updated the diff for D3976: [WIP] Add plugin for terminator to resolve hashes.

More detailed README.md

Wed, Mar 4, 15:51

Duranzed requested review of D3995: Add Terminator plugin support for resolve-hash.

Wed, Mar 4, 15:29

Duranzed requested review of D3994: Add Terminator plugin support for resolve-hash.

Wed, Mar 4, 15:15

Duranzed created P388 swanctl.conf.

Wed, Mar 4, 13:32

Duranzed updated the language for P387 ipsec from autodetect to yaml.

Wed, Mar 4, 13:32

Duranzed created P387 ipsec.

Wed, Mar 4, 13:32

Duranzed updated the diff for D3993: Added missing " ".

done

Wed, Mar 4, 11:39

Duranzed updated the diff for D3993: Added missing " ".

updated

Wed, Mar 4, 11:38

Duranzed updated the diff for D3993: Added missing " ".

Fixed commit

Wed, Mar 4, 10:48

Duranzed updated the diff for D3993: Added missing " ".

updated ""

Wed, Mar 4, 10:43

Duranzed updated the diff for D3993: Added missing " ".

Fixed "" position

Wed, Mar 4, 10:41

Duranzed added a reviewer for D3993: Added missing " ": dereckson.

Wed, Mar 4, 10:08

Duranzed requested review of D3993: Added missing " ".

Wed, Mar 4, 09:51

Mar 3 2026

Duranzed accepted D3991: Change db-A-001 to db-a-001 and db-B-001 to db-b-001 on all files.

Mar 3 2026, 16:08

Duranzed updated the task description for T2268: Configure IPsec tunnels on Saltstack .

Mar 3 2026, 15:18 · User-Duranzed, Secure HA tunnels

Duranzed accepted D3991: Change db-A-001 to db-a-001 and db-B-001 to db-b-001 on all files.

Mar 3 2026, 14:48

Duranzed updated the diff for D3988: Configure strongSwan as IPsec implementation.

Added an init.sls pour strongswan

Mar 3 2026, 14:40

Duranzed requested changes to D3991: Change db-A-001 to db-a-001 and db-B-001 to db-b-001 on all files.

Mar 3 2026, 14:22

Duranzed moved T1695: Write a Terminator plugin to resolve hashes from WIP to Finished on the User-Duranzed board.

Mar 3 2026, 13:11 · upstream, User-Duranzed, Python, good-first-issue, Resolve hash

Duranzed closed T1695: Write a Terminator plugin to resolve hashes as Resolved.

resolved here
Ref T1695

Mar 3 2026, 13:11 · upstream, User-Duranzed, Python, good-first-issue, Resolve hash

Duranzed moved T2268: Configure IPsec tunnels on Saltstack from Backlog to Working on on the Secure HA tunnels board.

Mar 3 2026, 09:01 · User-Duranzed, Secure HA tunnels

Duranzed updated the summary of D3988: Configure strongSwan as IPsec implementation.

Mar 3 2026, 08:26

Mar 2 2026

Duranzed requested review of D3988: Configure strongSwan as IPsec implementation.

Mar 2 2026, 19:29

Duranzed added a comment to D3987: Allow all servers to read IPsec in Vault.

$ sudo salt complector state.sls_id salt-node-cloudhugger roles/vault/policies test=True
complector:
----------
          ID: salt-node-cloudhugger
    Function: vault.policy_present
      Result: None
     Comment: Policy would be changed
     Started: 18:09:21.668208
    Duration: 841.275 ms
     Changes:   
              ----------
              salt-node-cloudhugger:
                  ----------
                  change:
                      --- 
                      +++ 
                      @@ -10,3 +10,7 @@
                       path "ops/data/secrets/nasqueron/opensearch/infra-logs/internal_users/dashboards" {
                           capabilities = [ "read" ]
                       }
                      +
                      +path "ops/data/secrets/network/ipsec/key" {
                      +    capabilities = [ "read" ]
                      +}

Mar 2 2026, 18:20 · User-Duranzed

Duranzed updated the summary of D3987: Allow all servers to read IPsec in Vault.

Mar 2 2026, 18:17 · User-Duranzed