allow catalog-diff to compile catalogs on the puppet compilers #462

Merged
benvin merged 1 commits from benvin/puppetserver-authconf-v4-catalog into main 2026-09-12 16:31:08 +10:00
Member

catalog-diff compiles a host's catalog in two environments and diffs them to validate puppet-prod changes before merge, which means compiling catalogs on behalf of other nodes via POST /puppet/v4/catalog. The compilers run the image default auth.conf, where that endpoint is denied.

  • add a compiler auth.conf allowing catalog-diff.main.unkin.net to POST /puppet/v4/catalog
  • add a pre-default entrypoint script seeding it into conf.d, failing hard if the source is absent
  • mount both onto the compiler deployment via configMapGenerator
catalog-diff compiles a host's catalog in two environments and diffs them to validate puppet-prod changes before merge, which means compiling catalogs on behalf of other nodes via POST /puppet/v4/catalog. The compilers run the image default auth.conf, where that endpoint is denied. - add a compiler auth.conf allowing catalog-diff.main.unkin.net to POST /puppet/v4/catalog - add a pre-default entrypoint script seeding it into conf.d, failing hard if the source is absent - mount both onto the compiler deployment via configMapGenerator
unkin-agent added 1 commit 2026-09-12 15:56:17 +10:00
allow catalog-diff to compile catalogs on the puppet compilers
ci/woodpecker/pr/vector-test Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
f719e20cb7
benvin merged commit 55af4b2f16 into main 2026-09-12 16:31:08 +10:00
benvin deleted branch benvin/puppetserver-authconf-v4-catalog 2026-09-12 16:31:09 +10:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#462