unkin/puppet-prod
2
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity
1,128 Commits 18 Branches 0 Tags 3 MiB
57870658b5
Commit Graph

16 Commits

Author SHA1 Message Date
Ben Vincent
8f5d102945 feat: enabling changing ip for consul client (#383) 
- enable ability to set consul client bind/advertise ip

Reviewed-on: #383
 2025-08-14 22:55:35 +10:00
Ben Vincent
40c57ede59 feat: add ci build task (#342) 
- a ci workflow for build tests
- run pre-commit against all files

Reviewed-on: #342
 2025-07-08 20:19:36 +10:00
Ben Vincent
60834ced00 feat: nomad cni additions (#314) 
- add consul-cni package
- enable grpc for consul servers
- enable consul connect for consul servers
- set recursors for consul
- add ports to consul agent (grpc, dns, http for nomad)

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/314
 2025-06-14 18:47:24 +10:00
Ben Vincent
a70b6492b0 feat: update consul/dnsmasq (#274) 
- update params with bind/advertise addr
- update params with anycast ip option
- migrate dnsmasq config to template

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/274
 2025-05-03 23:51:29 +10:00
Ben Vincent
829b1b05fd feat: cleanup consul from url install (#239) 
- set bind_dir to be /usr/bin for rhel, /usr/local/bin for debian
- remove url-installed consul from rhel

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/239
 2025-03-30 18:40:09 +11:00
Ben Vincent
39aa6e114e feat: puppetdb sql updates 
- add consul support
- enable local script checks in consul agents
- add a test DB/User for consult to verify the psql instance is running
- manage the postgresql repo and gpg key
 2024-05-22 22:05:54 +10:00
Ben Vincent
8a241d6b96 feat: add prepared_query capabilities to consul 
- add prepared query for:
  - vault
  - puppet
  - puppetca
 2024-05-04 15:46:47 +10:00
Ben Vincent
6020143f76 feat: consul multi-datacentre joining 
- add method to join multiple consul datacentres
- set syd1 as the primary datacentre
- use default token from au-syd1 cluster in all locations
- add replication token
 2024-05-04 00:39:18 +10:00
Ben Vincent
8df927de18 feat: add node_token to agent config 
- move policy rules to hiera array[hash]
- add node_token to agent as the default token
 2024-04-28 17:06:06 +10:00
Ben Vincent
0f0d392fb4 feat: deploy consul agent 
- install the consul agent on all nodes, except consul servers
 2024-04-28 13:23:43 +10:00
Ben Vincent
6fc5829fce feat: simple nginx proxy 
- merge consul/vault nginx proxy into single class
- replace nginx proxy classes for consul/vault with simpleproxy class
 2024-04-28 00:32:04 +10:00
Ben Vincent
f536d19034 feat: generate consul policy/tokens 
- generate policy/token to add nodes
- generate policy/token for all nodes
- add base::root profile to manage aspects of the root user
 2024-04-27 20:21:57 +10:00
Ben Vincent
a7e9f1590e fix: move primary_datacenter to region/role 
- set syd1 as primary consul datacentre
- add consul.service.consul zone
- add nginx reverse proxy for consul webui
- set dns zones/acls/views/keys to be deep merged from hiera
- update default token
- add consul/consul.service.consul/consul.main.unkin.net to vault cert
 2024-04-26 23:11:38 +10:00
Ben Vincent
3ca92ee1f3 fix: consul members role key 
- moved members_role for consul to common yaml
 2024-04-25 00:00:24 +10:00
Ben Vincent
b6d3fc26de fix: enable new consul clusters to be started 
- wait for the enc_role fact to be correct, as this is required to find
  all keys in hiera
 2024-04-24 23:51:26 +10:00
Ben Vincent
8cb6b68b53 feat: add consul server profile 
- install/configure consul
- install/configure dnsmasq as dns proxy for consul
- add unkin yumrepo definition as source for consul
- update datavol to ensure the /data volume is mounted
 2024-02-11 17:12:35 +11:00