Set wgvpn keys and resolve the vpc ospf interface from its subnet
ci/woodpecker/pr/bolt-validate Pipeline was successful
ci/woodpecker/pr/erb-validate Pipeline was successful
ci/woodpecker/pr/ruby-validate Pipeline was successful
ci/woodpecker/pr/puppet-lint Pipeline was successful
ci/woodpecker/pr/yamllint Pipeline was successful
ci/woodpecker/pr/epp-validate Pipeline was successful
ci/woodpecker/pr/puppet-validate Pipeline was successful
ci/woodpecker/pr/ruby-check Pipeline was successful

This commit is contained in:
2026-10-17 12:51:02 +11:00
parent 27071d21ae
commit 015a516f54
5 changed files with 19 additions and 8 deletions
@@ -1,7 +1,6 @@
---
networking_loopback0_ip: 198.18.2.162
networking_wg_link: 198.18.2.178/31
networking_vpc_iface: eth1
networking_vpc_cidr: 172.18.32.0/24
# wg0 p2p to prodnxsr0020; lab routes stay pinned to wg0 sourced from the /31 until ospf learns them
@@ -14,9 +13,9 @@ wireguard::interfaces:
post_up:
- ip route replace 198.18.0.0/16 dev wg0 src 198.18.2.179
- ip route replace 10.10.12.200/32 dev wg0 src 198.18.2.179
private_key: ''
private_key: ENC[PKCS7,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]
peers:
- public_key: ''
- public_key: 'mPiOahdhI4jyS7IpkSW1HV7ERd8VH53yv/H4hCxES1g='
endpoint: 103.216.191.185:51822
allowed_ips:
- 224.0.0.5/32
@@ -1,7 +1,6 @@
---
networking_loopback0_ip: 198.18.2.161
networking_wg_link: 198.18.2.176/31
networking_vpc_iface: eth1
networking_vpc_cidr: 172.18.30.0/24
# wg0 p2p to prodnxsr0020; lab routes stay pinned to wg0 sourced from the /31 until ospf learns them
@@ -14,9 +13,9 @@ wireguard::interfaces:
post_up:
- ip route replace 198.18.0.0/16 dev wg0 src 198.18.2.177
- ip route replace 10.10.12.200/32 dev wg0 src 198.18.2.177
private_key: ''
private_key: ENC[PKCS7,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]
peers:
- public_key: ''
- public_key: 'XB2X5NwuoE+QJLjZG4i/0+6Jj0AtfK+UsZZ7wEfYLjk='
endpoint: 103.216.191.185:51821
allowed_ips:
- 224.0.0.5/32
+2 -1
View File
@@ -27,7 +27,8 @@ frrouting::ospfd_interfaces:
dum0:
area: 0.0.0.0
passive: true
"%{hiera('networking_vpc_iface')}":
frrouting::ospfd_network_interfaces:
"%{hiera('networking_vpc_cidr')}":
area: 0.0.0.0
passive: true
frrouting::ospfd_redistribute: