node-lookup (and pblastreport) need a single merged view over the two PuppetDBs
that coexist during the VM -> k8s Puppet migration. pdbmux provides that merged
PuppetDB v4 surface. Per the all-in-kubernetes direction it runs in-cluster
rather than as a per-VM systemd service.
- Add apps/base/pdbmux/ (namespace, configmap, deployment, service, gateway,
httproute) modeled on the encapi app.
- Deployment: 2 replicas, image git.unkin.net/unkin/pdbmux:v0.6.0, port 8080,
/healthz liveness+readiness, PDBMUX_* env from a configmap. Backends: old =
http://puppetdbapi.service.consul:8080, new =
http://puppetdb.puppet.svc.cluster.local:8080 (in-cluster, preferred); new is
primary/prefer.
- Expose over HTTPS at pdbmux.k8s.syd1.au.unkin.net via a traefik-internal
Gateway (cert-manager vault-issuer, external-dns), plain-HTTP backend, same
shape as the puppetdb/encapi gateways, so VM/workstation node-lookup can reach
it.
- Add apps/overlays/au-syd1/pdbmux/ and wire it into the platform
ApplicationSet + AppProject (pdbmux namespace destination), as encapi is.
unkinben
b82ae4d935