From 36d8230ac01b889461ac3a946719a4c4d5a594fb Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Sat, 25 Jul 2026 00:16:30 +1000 Subject: [PATCH] Migrate canary ausyd1nxvm2120 to puppet-on-k8s (#494) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit First live agent migration to the k8s puppetserver, using the single-boolean mechanism from #493 on the lowest-risk host (roles::base test host). - Adds hieradata/nodes/ausyd1nxvm2120.main.unkin.net.yaml with profiles::puppet::migrate::enabled: true On merge: the node's next run (from the old master) rewrites puppet.conf to the k8s server/ca_server with a fresh ssl-k8s ssldir; the run after enrols against the k8s CA (autosigned) and compiles from the k8s compilers (ENC=encapi). Verify: node appears in the k8s PuppetDB with a fresh report. Rollback: revert this file — legacy ssldir/cert remain intact. Reviewed-on: https://git.unkin.net/unkin/puppet-prod/pulls/494 Co-authored-by: Ben Vincent Co-committed-by: Ben Vincent --- hieradata/nodes/ausyd1nxvm2120.main.unkin.net.yaml | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 hieradata/nodes/ausyd1nxvm2120.main.unkin.net.yaml diff --git a/hieradata/nodes/ausyd1nxvm2120.main.unkin.net.yaml b/hieradata/nodes/ausyd1nxvm2120.main.unkin.net.yaml new file mode 100644 index 0000000..6c2f338 --- /dev/null +++ b/hieradata/nodes/ausyd1nxvm2120.main.unkin.net.yaml @@ -0,0 +1,3 @@ +--- +# Canary for the puppet-on-k8s migration (roles::base test host). +profiles::puppet::migrate::enabled: true