Deliver the cert helpers to the puppet compiler pods #469
Closed
unkin-agent
wants to merge 1 commits from
benvin/compiler-cert-helpers into main
pull from: benvin/compiler-cert-helpers
merge into: unkin:main
unkin:main
unkin:benvin/bind-external-mail-zones
unkin:benvin/consul-dns-k8s
unkin:benvin/consul-k8s-servers
unkin:benvin/kea-operator-v0.1.6
unkin:benvin/drop-acme-apex-ns
unkin:benvin/agent-observability-rbac
unkin:benvin/kubeconform-helm-kubeversion
unkin:benvin/jellyfin-sso-valkey-state
unkin:benvin/revert-artifactapi-oauth2
unkin:benvin/oauth2-proxy-image-fix
unkin:benvin/media-apps-argocd
unkin:benvin/traefik-ldaps-entrypoint
unkin:benvin/externaldns-fix
unkin:benvin/litellm-sso
unkin:benvin/resolver-validate-except
unkin:benvin/grafana-schemas
unkin:benvin/grafana-operator
unkin:benvin/add-bind-operator
unkin:benvin/artifactapi-tf-signing
unkin:benvin/kubeconform-crd-schemas
unkin:fix-kanidm-replication-config
unkin:issue-155-open-webui-litellm
unkin:benvin/opa_policies
unkin:benvin/postfix
unkin:benvin/stalwart
unkin:benvin/externaldns-debug-logging
unkin:benvin/fix-externaldns-crashing
unkin:benvin/argocd-image-updater-deploy
unkin:benvin/helm_virtual
unkin:benvin/artifactkeeper
1 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
 unkin-agent
|
3fa12e4e5a |
Deliver the cert helpers to the puppet compiler pods
certmanager and sshsignhost are invoked server-side by generate() during catalog compilation but only exist on the legacy VM masters, so compiles on the k8s compilers fail with "No such file or directory".
- Stage a self-contained EL9 python runtime on the shared bins volume
- Render both helpers from their puppet-prod ERB templates on the code volume rather than copying the scripts here
- Mount a name-dispatching launcher at /usr/local/bin/{certmanager,sshsignhost}
- Mount kubernetes-auth configs at /opt/{certmanager,sshsignhost}/config.yaml
Needs terraform-vault #152 applied and the puppet-prod kubernetes-auth PR merged.
|