unkin/puppet-prod
3
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects Releases Wiki Activity
1,154 Commits 14 Branches 0 Tags
8d8d5fc97a003bacd29bc34829bb2e2c9b679987
Commit Graph

24 Commits

Author SHA1 Message Date
unkinben dbe04a91e3 chore: change to ceph-public loopback (#458) 
- use ceph public loopback port 9443 for dashboard

Reviewed-on: #458
 2026-04-05 22:35:39 +10:00
unkinben dbe1398218 chore: centralise all yum repo configuration (#436) 
- add 30+ repository definitions to AlmaLinux/all_releases.yaml with `ensure: absent` defaults
- update all role-specific hieradata files to use `ensure: present` pattern
- remove duplicated repository URL/GPG key configurations from individual roles
- maintains existing functionality while improving maintainability"

Reviewed-on: #436
 2026-01-15 21:35:13 +11:00
unkinben 0665873dc8 feat: update ospf source for learned routes (#388) 
- enable changing the source address for learned ospf routes
- this enables the loopback0 interface to be used as a default src address
- ensure k8s nodes use loopback0 as default src
- ensure incus nodes use loopback0 as default src

Reviewed-on: #388
 2025-09-07 16:09:21 +10:00
unkinben 8f5d102945 feat: enabling changing ip for consul client (#383) 
- enable ability to set consul client bind/advertise ip

Reviewed-on: #383
 2025-08-14 22:55:35 +10:00
unkinben 62aade77ff feat: add ceph-dashboard to haproxy (#382) 
- add profile to export haproxy backend
- add new cert for dashboard.ceph.unkin.net
- extend balancemember with ipaddress attribute

Reviewed-on: #382
 2025-08-14 11:06:11 +10:00
unkinben 75ca7a5685 feat: add frr_exporter class (#369) 
- add frr exporter to all nodes running frr

Reviewed-on: #369
 2025-08-03 16:15:29 +10:00
unkinben 5a9241940f feat: export ceph metrics (#367) 
- export cephmgr metrics
- will only be availabe from one host at a time

Reviewed-on: #367
 2025-07-29 18:54:49 +10:00
unkinben 1d23fef82e feat: update settings for ceph (#298) 
- enable root logins via ssh with keys
- add ssh key for ceph to root user

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/298
 2025-05-25 20:22:00 +10:00
unkinben 6dcc7343e0 feat: updated ceph ssh authorized_key (#290) 
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/290
 2025-05-17 14:05:25 +10:00
unkinben e7d4c75192 feat: enable ssh access to enp3s0 (#289) 
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/289
 2025-05-17 13:50:35 +10:00
unkinben d9e8637ad6 feat: manage more ceph requirements (#288) 
- add ceph-common to provide utilities for managing ceph
- add root and sysadmin ssh keys for ceph deployments

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/288
 2025-05-17 11:14:45 +10:00
unkinben 92f0ae64b9 feat: enable ssh on all loopbacks (#287) 
- required for cephadm to manage roles

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/287
 2025-05-16 07:05:31 +10:00
unkinben c1637d9f43 feat: add cephadm to incus hosts (#286) 
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/286
 2025-05-16 05:56:28 +10:00
unkinben 87a6c73578 neoloc/loopback_dns (#281) 
- manage all interfaces in dns (except lo and anycast)
- move loopback0 anycast addresses to be anycast0

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/281
 2025-05-11 16:36:04 +10:00
unkinben f322440d01 feat: setup anycast consul dns (#276) 
- manage frrouting repo/ospf
- change to systemd-networkd
- enable ospf on incus nodes bridges

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/276
 2025-05-09 22:07:42 +10:00
unkinben 78f4d2a88f feat: cleanup mpls configuration (#262) 
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/262
 2025-04-26 00:39:23 +10:00
unkinben 2321186ad5 neoloc/mpls_ldp_frr (#255) 
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/255
 2025-04-24 16:51:31 +10:00
unkinben 278f8001b0 feat: add frr synced repo (#252) 
- add frr repo to incus hosts

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/252
 2025-04-18 21:21:23 +10:00
unkinben 25b06cde22 feat: move bridge management to incus (#250) 
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/250
 2025-04-15 00:04:14 +10:00
unkinben 0e3dd4d7d0 feat: initialise barebones server (#248) 
- manage incus servers init

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/248
 2025-04-06 23:56:50 +10:00
unkinben c225564bdb feat: continue incus implementation (#245) 
- migrate to systemd-networkd
- setup dummy, bridge and static/ethernet interfaces
- manage sshd.service droping to start ssh after networking is online
- enable ip forewarding
- add fastpool/data/incus dataset
- enable ospf and frr
- add loopback0 as ssh listenaddress
- add loopback1/2 for ceph cluster/public traffic

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/245
 2025-04-06 16:38:04 +10:00
unkinben 06666fe488 fix: resolve issue with baseos in el9 (#244) 
- was not correctly provisioning the baseos repo for el9 incus hosts

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/244
 2025-04-02 21:02:08 +11:00
unkinben 95bc2716cf neoloc/incus_deploy (#241) 
feat: deploy incus

- manage sysctl based on incus recommendations
- manage limits based on incus recommendations
- manage zpools and zfs datasets
- add incus hiera settings

feat: manage repo for zfs

- dont use zfs module to manage repo, use profiles::yum::global::repos

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/241
 2025-03-31 23:14:05 +11:00
unkinben 6a04701891 feat: add incus role (#229) 
- add basic infra::incus role
- add autossl, consul and ssh-principals for incus

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/229
 2025-03-30 00:56:04 +11:00