From 18fd966f923af174aceb7960bbabb9569efaa32e Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Mon, 5 Oct 2026 01:31:54 +1100 Subject: [PATCH] halb: stop publishing haproxy2 site CNAMEs (#542) The haproxy2 VMs are being decommissioned and the site names they front move to bind-internal DNSRecord CRs in argocd-apps. dns-updater on these hosts deletes records that leave its records file, so the CNAMEs drop once this applies. - empty profiles::haproxy::dns::vrrp_cnames for haproxy2 - empty profiles::haproxy::dns::cnames for haproxy2 Reviewed-on: https://git.unkin.net/unkin/puppet-prod/pulls/542 Co-authored-by: unkin-agent Co-committed-by: unkin-agent --- .../au/region/syd1/infra/halb/haproxy2.yaml | 22 ++----------------- 1 file changed, 2 insertions(+), 20 deletions(-) diff --git a/hieradata/country/au/region/syd1/infra/halb/haproxy2.yaml b/hieradata/country/au/region/syd1/infra/halb/haproxy2.yaml index ea957a6..1c89eed 100644 --- a/hieradata/country/au/region/syd1/infra/halb/haproxy2.yaml +++ b/hieradata/country/au/region/syd1/infra/halb/haproxy2.yaml @@ -3,23 +3,7 @@ haproxy_server_k8s_syd1_traefik_internal: 'k8s-traefik-internal 198.18.200.4:443 haproxy_server_k8s_syd1_traefik_external: 'k8s-traefik-external 198.18.199.0:443 ssl verify none check inter 2s rise 3 fall 2' profiles::haproxy::dns::ipaddr: "%{hiera('anycast_ip')}" -profiles::haproxy::dns::vrrp_cnames: - - sonarr.main.unkin.net - - radarr.main.unkin.net - - lidarr.main.unkin.net - - readarr.main.unkin.net - - prowlarr.main.unkin.net - - nzbget.main.unkin.net - - git.unkin.net - - fafflix.unkin.net - - grafana.unkin.net - - dashboard.ceph.unkin.net - - mail-webadmin.main.unkin.net - - mail-in.main.unkin.net - - mail.main.unkin.net - - autoconfig.main.unkin.net - - autodiscover.main.unkin.net - - auth.unkin.net +profiles::haproxy::dns::vrrp_cnames: [] profiles::haproxy::mappings: fe_http: @@ -432,9 +416,7 @@ profiles::pki::vault::alt_names: - mail-webadmin.main.unkin.net # additional cnames -profiles::haproxy::dns::cnames: - - au-syd1-pve.main.unkin.net - - au-syd1-pve-api.main.unkin.net +profiles::haproxy::dns::cnames: [] # letsencrypt certificates certbot::client::service: haproxy