feat(puppet): migrate puppetdb Ingress to Gateway API #131

Merged
unkinben merged 3 commits from benvin/puppetdb-gateway-api into main 2026-05-23 16:05:27 +10:00
Owner

Summary

  • Replace Ingress (nginx) with Gateway + HTTPRoute using traefik-internal GatewayClass
  • TLS terminated at the Gateway listener; cert-manager provisions the certificate via vault-issuer
  • external-dns annotations moved to the Gateway
  • ingress_puppetboard.yaml is unchanged in this PR (separate PR)

Test plan

  • ArgoCD syncs the puppet app cleanly
  • cert-manager issues the puppetdb-tls certificate
  • external-dns creates the DNS record
  • https://puppetdb.k8s.syd1.au.unkin.net is reachable
## Summary - Replace `Ingress` (nginx) with `Gateway` + `HTTPRoute` using `traefik-internal` GatewayClass - TLS terminated at the Gateway listener; cert-manager provisions the certificate via `vault-issuer` - external-dns annotations moved to the Gateway - `ingress_puppetboard.yaml` is unchanged in this PR (separate PR) ## Test plan - [ ] ArgoCD syncs the puppet app cleanly - [ ] cert-manager issues the `puppetdb-tls` certificate - [ ] external-dns creates the DNS record - [ ] `https://puppetdb.k8s.syd1.au.unkin.net` is reachable
unkinben force-pushed benvin/puppetdb-gateway-api from 809edcf52d to 12b6b5e038 2026-05-23 01:34:04 +10:00 Compare
unkinben merged commit 90ddd932fe into main 2026-05-23 16:05:27 +10:00
unkinben deleted branch benvin/puppetdb-gateway-api 2026-05-23 16:05:27 +10:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#131