unkinben
05318553d6
## Why The puppet-on-k8s compilers classify nodes with a uv/python ENC script (`encapi-enc`). Each fresh compiler pod resolves the script's python dependencies on first invocation, and that resolution fails on cold pods (observed exits 135/2), breaking puppet agent catalog compilation. `encapic` (git.unkin.net/unkin/encapic) is a stdlib-only Go replacement with no runtime dependency resolution — a behavioural drop-in whose output matches the python script byte-for-byte. ## Changes - Points the compiler `external_nodes` at `/opt/bin/encapic`. - Reworks the `setup-shared-bins` init container to `curl` the encapic `v0.1.0` `encapic_linux_amd64` release binary (sha256-verified against the published `.sha256`, installed mode 0755) into the shared bins dir, instead of copying the python script and installing uv. - Removes the `puppet-encapi-enc` configmap generator, its volume and mount, and the `resources/encapi-enc` script. uv was consumed solely by that script (grep of `apps/base/puppet` confirms no other consumer), so its installation is removed too. `kubectl kustomize apps/overlays/au-syd1/puppet` builds clean. ## Merge gate Do not merge until the encapic `v0.1.0` release assets exist: `https://git.unkin.net/unkin/encapic/releases/download/v0.1.0/encapic_linux_amd64` (+ `.sha256`). The init container pulls them at pod start. ## Rollback Revert this PR to restore the `encapi-enc` configmap script + uv install and repoint `external_nodes`. --------- Co-authored-by: benvin <neotheo@gmail.com> Reviewed-on: #277 Co-authored-by: Ben Vincent <ben@unkin.net> Co-committed-by: Ben Vincent <ben@unkin.net>
24 lines
742 B
Plaintext
24 lines
742 B
Plaintext
[main]
|
|
server = puppetserver-compiler
|
|
serverport = 8140
|
|
dns_alt_names = puppetserver-compiler,puppet-headless,puppet,puppet.k8s.syd1.au.unkin.net
|
|
codedir = /etc/puppetlabs/code
|
|
environmentpath = /etc/puppetlabs/code/environments
|
|
|
|
[server]
|
|
vardir = /opt/puppetlabs/server/data/puppetserver
|
|
logdir = /var/log/puppetlabs/puppetserver
|
|
rundir = /var/run/puppetlabs/puppetserver
|
|
pidfile = /var/run/puppetlabs/puppetserver/puppetserver.pid
|
|
node_terminus = exec
|
|
external_nodes = /opt/bin/encapic
|
|
autosign = /etc/puppetlabs/puppet/autosign.conf
|
|
storeconfigs = true
|
|
storeconfigs_backend = puppetdb
|
|
reports = puppetdb
|
|
usecacheonfailure = false
|
|
|
|
[user]
|
|
default_manifest = /etc/puppetlabs/code/environments/develop/manifests
|
|
default_environment = develop
|