unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 7 Actions Packages Projects Releases Wiki Activity

Deliver the cert helpers to the puppet compiler pods #469

Closed
unkin-agent wants to merge 1 commits from benvin/compiler-cert-helpers into main
pull from: benvin/compiler-cert-helpers
merge into: unkin:main
Conversation 0 Commits 1 Files Changed 5
+123
unkin-agent commented 2026-09-13 23:26:44 +10:00
Member
Copy Link
Copy Source

certmanager and sshsignhost are invoked server-side by generate() during catalog compilation but only exist on the legacy VM masters, so compiles on the k8s compilers fail with "No such file or directory".

  • Stage a self-contained EL9 python runtime on the shared bins volume
  • Render both helpers from their puppet-prod ERB templates on the code volume rather than copying the scripts here
  • Mount a name-dispatching launcher at /usr/local/bin/{certmanager,sshsignhost}
  • Mount kubernetes-auth configs at /opt/{certmanager,sshsignhost}/config.yaml

Needs terraform-vault #152 applied and the puppet-prod kubernetes-auth PR merged.

certmanager and sshsignhost are invoked server-side by generate() during catalog compilation but only exist on the legacy VM masters, so compiles on the k8s compilers fail with "No such file or directory". - Stage a self-contained EL9 python runtime on the shared bins volume - Render both helpers from their puppet-prod ERB templates on the code volume rather than copying the scripts here - Mount a name-dispatching launcher at /usr/local/bin/{certmanager,sshsignhost} - Mount kubernetes-auth configs at /opt/{certmanager,sshsignhost}/config.yaml Needs terraform-vault #152 applied and the puppet-prod kubernetes-auth PR merged.
unkin-agent added 1 commit 2026-09-13 23:26:44 +10:00
Deliver the cert helpers to the puppet compiler pods
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details
3fa12e4e5a 
certmanager and sshsignhost are invoked server-side by generate() during catalog compilation but only exist on the legacy VM masters, so compiles on the k8s compilers fail with "No such file or directory".

- Stage a self-contained EL9 python runtime on the shared bins volume
- Render both helpers from their puppet-prod ERB templates on the code volume rather than copying the scripts here
- Mount a name-dispatching launcher at /usr/local/bin/{certmanager,sshsignhost}
- Mount kubernetes-auth configs at /opt/{certmanager,sshsignhost}/config.yaml

Needs terraform-vault #152 applied and the puppet-prod kubernetes-auth PR merged.
unkin-agent closed this pull request 2026-09-19 15:49:26 +10:00
All checks were successful
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Required
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Required
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#469
Delete Branch "benvin/compiler-cert-helpers"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?