Ben Vincent 7aed499b8c puppetdb: isolate only the stockpile queue per pod, not the whole vardir ...

PR #340 made the entire vardir (/opt/puppetlabs/server/data/puppetdb)
per-pod via subPathExpr. That also isolated the SSL keypair under
vardir/certs, so freshly-rolled pods had an empty certs dir and crashed:
"No keypair on disk and CA already has signed certificate for openvoxdb"
(all pods share certname openvoxdb). puppetdb went CrashLoopBackOff.

Keep the vardir shared (certs + logs as before) and make only the
command queue per-pod: nest-mount the same PVC at vardir/stockpile with
subPathExpr stockpile/$(POD_NAME). The init container pre-creates and
chowns the per-pod stockpile dir.

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT

2026-08-08 20:13:46 +10:00

..

base

puppetdb: isolate only the stockpile queue per pod, not the whole vardir

2026-08-08 20:13:46 +10:00

overlays/au-syd1

Enable Reloader secret watching, scope existing auto to configmap-only (#326) (#339)

2026-08-08 19:35:31 +10:00