unkin/puppet-prod
2
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity
918 Commits 18 Branches 0 Tags 3 MiB
8eb751e22f
Commit Graph

11 Commits

Author SHA1 Message Date
Ben Vincent
39aa6e114e feat: puppetdb sql updates 
- add consul support
- enable local script checks in consul agents
- add a test DB/User for consult to verify the psql instance is running
- manage the postgresql repo and gpg key
 2024-05-22 22:05:54 +10:00
Ben Vincent
8a241d6b96 feat: add prepared_query capabilities to consul 
- add prepared query for:
  - vault
  - puppet
  - puppetca
 2024-05-04 15:46:47 +10:00
Ben Vincent
6020143f76 feat: consul multi-datacentre joining 
- add method to join multiple consul datacentres
- set syd1 as the primary datacentre
- use default token from au-syd1 cluster in all locations
- add replication token
 2024-05-04 00:39:18 +10:00
Ben Vincent
8df927de18 feat: add node_token to agent config 
- move policy rules to hiera array[hash]
- add node_token to agent as the default token
 2024-04-28 17:06:06 +10:00
Ben Vincent
0f0d392fb4 feat: deploy consul agent 
- install the consul agent on all nodes, except consul servers
 2024-04-28 13:23:43 +10:00
Ben Vincent
6fc5829fce feat: simple nginx proxy 
- merge consul/vault nginx proxy into single class
- replace nginx proxy classes for consul/vault with simpleproxy class
 2024-04-28 00:32:04 +10:00
Ben Vincent
f536d19034 feat: generate consul policy/tokens 
- generate policy/token to add nodes
- generate policy/token for all nodes
- add base::root profile to manage aspects of the root user
 2024-04-27 20:21:57 +10:00
Ben Vincent
a7e9f1590e fix: move primary_datacenter to region/role 
- set syd1 as primary consul datacentre
- add consul.service.consul zone
- add nginx reverse proxy for consul webui
- set dns zones/acls/views/keys to be deep merged from hiera
- update default token
- add consul/consul.service.consul/consul.main.unkin.net to vault cert
 2024-04-26 23:11:38 +10:00
Ben Vincent
3ca92ee1f3 fix: consul members role key 
- moved members_role for consul to common yaml
 2024-04-25 00:00:24 +10:00
Ben Vincent
b6d3fc26de fix: enable new consul clusters to be started 
- wait for the enc_role fact to be correct, as this is required to find
  all keys in hiera
 2024-04-24 23:51:26 +10:00
Ben Vincent
8cb6b68b53 feat: add consul server profile 
- install/configure consul
- install/configure dnsmasq as dns proxy for consul
- add unkin yumrepo definition as source for consul
- update datavol to ensure the /data volume is mounted
 2024-02-11 17:12:35 +11:00