94aed2df9c
feat: add pveceph consul services
...
- refacter the pveceph facts
- define consul services for osd, mgr, mds and mons
2024-06-18 21:14:57 +10:00
0ff9b86782
Merge pull request 'chore: change ssh to listen to vmbr1' ( #39 ) from neoloc/proxmox_ips into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/39
2024-06-17 21:55:18 +10:00
7d70b99491
chore: change ssh to listen to vmbr1
...
- changed enp3s0 from static interface to bridge member
- added bridge vmbr1, with enp3s0 as member
2024-06-17 21:54:26 +10:00
c6530e34f6
Merge pull request 'feat: add haproxy exporter' ( #38 ) from neoloc/haproxy_exporter into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/38
2024-06-17 21:36:31 +10:00
5725d092b8
feat: add haproxy exporter
...
- add admin socket for exporter
2024-06-16 20:56:23 +10:00
09f50c9940
Merge pull request 'neoloc/grafana' ( #37 ) from neoloc/grafana into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/37
2024-06-16 18:51:07 +10:00
62cac63f11
feat: add database generation to grafana
...
- ensure a database, user and credential is created for each grafana node
- ensure all databases for a region are included in a mariadb cluster
- refine params with stdlib types
2024-06-16 18:49:59 +10:00
0fe05bb896
Merge branch 'develop' into neoloc/grafana
2024-06-16 00:39:45 +10:00
dd82d63b41
Merge pull request 'feat: puppetserver dropins' ( #36 ) from neoloc/puppetmaster_restart_fixes into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/36
2024-06-16 00:15:43 +10:00
a901a0b868
feat: puppetserver dropins
...
- change ExecStartPost for crl.pem to two commands
- run `puppet generate types` after starting puppet
2024-06-16 00:11:56 +10:00
1e316dc814
Merge pull request 'feat: manage latest crl for puppet' ( #35 ) from neoloc/puppetmaster_restart_fixes into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/35
2024-06-15 23:36:20 +10:00
58acd83410
feat: manage latest crl for puppet
...
- ensure the latest crl.pem exists on each no-ca puppetserver
- ensure the latest crl.pem is used after each start of puppetserver
2024-06-15 23:32:50 +10:00
cc0a9e132e
Merge pull request 'fix: yumrepo purging' ( #34 ) from neoloc/yumresources into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/34
2024-06-14 23:57:54 +10:00
67f831edaf
fix: yumrepo purging
2024-06-14 23:55:31 +10:00
c9abc779a0
Merge pull request 'fix: yumrepo purge after deploy' ( #33 ) from neoloc/yumresources into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/33
2024-06-14 23:32:41 +10:00
380bb7bcb5
fix: yumrepo purge after deploy
...
- ensure the resources resource for yumrepo runs after deploying yumrepo resources
- rm all almalinux*.repo files before attempting to create yumrepo
resources
2024-06-14 23:21:14 +10:00
1b5e6120e7
Merge pull request 'feat: ensure tftpd started on cobbler' ( #32 ) from neoloc/tftpservice into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/32
2024-06-14 23:13:21 +10:00
82ce3ed4d7
feat: ensure tftpd started on cobbler
2024-06-14 23:11:49 +10:00
3adc343f68
Merge pull request 'chore: add ssh principals' ( #31 ) from neoloc/puppetca_ssh_principal into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/31
2024-06-11 20:31:30 +10:00
ca558d493b
Merge pull request 'chore: cleanup old enc class' ( #30 ) from neoloc/cleanup_enc into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/30
2024-06-11 20:31:08 +10:00
cbbcfa3b9e
chore: cleanup old enc class
2024-06-11 20:29:21 +10:00
6b0e0daecb
chore: add ssh principals
...
- add ssh principals for consul service addresses
2024-06-11 20:20:12 +10:00
846e2b71f8
Merge pull request 'fix: add cluster ip to sshd ListenAddress' ( #29 ) from neoloc/proxmox_ssh_ip into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/29
2024-06-11 20:06:35 +10:00
6f7740e6a2
fix: add cluster ip to sshd ListenAddress
...
- ensure cluster communication over ssh can function
2024-06-11 20:02:04 +10:00
e00a78e5fb
Merge pull request 'fix: resolve vncproxy issue' ( #28 ) from neoloc/proxmox_ssh into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/28
2024-06-10 13:02:18 +10:00
a143732b3b
fix: resolve vncproxy issue
...
https://forum.proxmox.com/threads/lc_pve_ticket-not-set-vnc-proxy-without-password-is-forbiddentask-error-failed-to-run-vncproxy.98192/
2024-06-10 13:01:45 +10:00
45f3cb39c7
Merge pull request 'fix: proxmox root ssh' ( #27 ) from neoloc/proxmox_ssh into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/27
2024-06-10 12:07:43 +10:00
2b36ee3efa
fix: proxmox root ssh
...
- allow proxmox hosts to accept root logins
2024-06-10 12:07:08 +10:00
56711212a7
Merge pull request 'Adding hieradata/node/ausyd1nxvm1039.main.unkin.net.yaml' ( #26 ) from autonode/ausyd1nxvm1039.main.unkin.net into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/26
2024-06-10 11:58:06 +10:00
4ab5fd6be3
Adding hieradata/node/ausyd1nxvm1039.main.unkin.net.yaml
2024-06-10 11:57:51 +10:00
42be771732
Merge pull request 'Adding hieradata/node/ausyd1nxvm1038.main.unkin.net.yaml' ( #25 ) from autonode/ausyd1nxvm1038.main.unkin.net into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/25
2024-06-10 11:54:28 +10:00
255cf38c67
Adding hieradata/node/ausyd1nxvm1038.main.unkin.net.yaml
2024-06-10 11:51:29 +10:00
9c23c0005a
Merge pull request 'adding hieradata/nodes/ausyd1nxvm1037.main.unkin.net.yaml' ( #24 ) from autonode/ausyd1nxvm1037.main.unkin.net into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/24
2024-06-10 11:51:04 +10:00
5e13f1a1e8
adding hieradata/nodes/ausyd1nxvm1037.main.unkin.net.yaml
2024-06-10 11:50:15 +10:00
6944d67e04
Merge pull request 'neoloc/sshsign_hostkeys' ( #23 ) from neoloc/sshsign_hostkeys into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/23
2024-06-09 20:39:46 +10:00
965e334636
Merge branch 'develop' into neoloc/sshsign_hostkeys
2024-06-09 20:39:27 +10:00
d4163233f6
Merge branch 'develop' into neoloc/sshsign_hostkeys
2024-06-09 20:38:25 +10:00
52b06dcd8e
feat: manage ssh known hosts
...
- disable use of stored configs for ssh-known-hosts
- manage the /etc/ssh/ssh_known_hosts content
2024-06-09 20:26:34 +10:00
9d3ddb37df
Merge pull request 'fix: dont manage loopback' ( #22 ) from neoloc/networking_loopback into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/22
2024-06-09 09:07:29 +10:00
934f4be03c
fix: dont manage loopback
...
- dont manage the lo interface
- cleanup /etc/hosts records
2024-06-09 09:06:54 +10:00
777fe1aef6
feat: manage ssh server
...
- add ssh module
- include the ssh::server class
- manage sshd settings
2024-06-08 17:20:56 +10:00
57b935b33e
Merge pull request 'neoloc/networking' ( #21 ) from neoloc/networking into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/21
2024-06-08 17:08:51 +10:00
da9d52e117
chore: set per-node interface/gateway details
2024-06-08 17:07:58 +10:00
06545c6298
feat: change hiera_include, hiera_exclude
...
- change hiera_classes to hiera_include
- add method to remove classes from hiera_include through hiera_exclude
2024-06-08 17:07:58 +10:00
51eeb13793
feat: add networking module
...
- manage interfaces and routes
- set default params for hosts
- add params class to networking module
- set defaults for debian
2024-06-08 17:07:51 +10:00
721d14378a
Merge pull request 'feat: manage the facts soft limit' ( #20 ) from neoloc/puppet_fact_soft_limit into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/20
2024-06-08 13:58:39 +10:00
aaf482c9b9
feat: manage the facts soft limit
...
- set the facts soft limit for agents and servers
- prevent warnings about reaching the default 2048 soft limit
2024-06-08 13:56:53 +10:00
33ba0bb896
feat: networking required modules
...
- add networking, kmod and filemapper plugins
2024-06-07 22:12:26 +10:00
07c896b924
Merge pull request 'fix: make ntp check script executable' ( #19 ) from neoloc/consul_ntp_script into develop
...
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/19
2024-06-03 20:24:55 +10:00
6822a39dc3
fix: make ntp check script executable
2024-06-03 20:23:23 +10:00
