48e0bd6796
fix: vault role fails on new servers
...
- vault server fails on new servers
- move unseal class to be included after vault class
2024-02-25 21:06:37 +11:00
bc3084a1e7
Merge pull request 'feat: certmanager output as json' ( #119 ) from neoloc/certmanager_json into develop
...
Reviewed-on: unkinben/puppet-prod#119
2024-02-25 18:03:56 +09:30
f6110f534c
feat: certmanager output as json
...
- prepare certmanager for pki::vault class
- allow puppet to read certmanager config
2024-02-25 19:31:32 +11:00
4cdba982fe
Merge pull request 'feat: add certmanager helper' ( #118 ) from neoloc/certmanager into develop
...
Reviewed-on: unkinben/puppet-prod#118
2024-02-19 19:53:36 +09:30
7f03bc5c76
feat: add certmanager helper
...
- add certmanager script and config.yaml file
- install into pyenv for certmanager
- deploy to puppet-masters only
2024-02-19 21:20:50 +11:00
cd369d8fef
Merge pull request 'refacter: renamed facts to libs' ( #117 ) from neoloc/lib_module into develop
...
Reviewed-on: unkinben/puppet-prod#117
2024-02-17 21:34:34 +09:30
1030ba460e
refacter: renamed facts to libs
2024-02-17 23:03:54 +11:00
e10bed689c
Merge pull request 'refacter: cleanup packages setup' ( #116 ) from neoloc/package_changes into develop
...
Reviewed-on: unkinben/puppet-prod#116
2024-02-17 21:30:49 +09:30
9be1e19900
Merge pull request 'fix: fact was misspelled' ( #115 ) from neoloc/mariadb_fixes into develop
...
Reviewed-on: unkinben/puppet-prod#115
2024-02-17 21:30:27 +09:30
1a33465c7a
Merge pull request 'refacter: tidy facts' ( #114 ) from neoloc/move_facts into develop
...
Reviewed-on: unkinben/puppet-prod#114
2024-02-17 21:29:55 +09:30
1f7b347ef4
refacter: tidy facts
...
- create a facts module, move all facts to this module
2024-02-17 22:57:36 +11:00
12ff053c6d
refacter: cleanup packages setup
2024-02-17 22:49:32 +11:00
d92c13525c
fix: fact was misspelled
...
- fixed fact name
2024-02-17 21:19:55 +11:00
73a21059f8
Merge pull request 'feat: add vault server profile' ( #113 ) from neoloc/vault_server into develop
...
Reviewed-on: unkinben/puppet-prod#113
2024-02-17 19:48:13 +09:30
fe05c86463
feat: add vault server profile
...
- add vault module to puppetfile
- define class to manage the install and config of vault
- manage the datavol and raft storage
- manage the unzip and other compression tools
- define custom unseal script and service
- add documentation on initial setup of vault
2024-02-17 21:12:12 +11:00
Ben Vincent
c690fe5816
Merge pull request 'fix: use fact to determine if selinux in use' ( #112 ) from neoloc/selinux_enhancements into develop
...
Reviewed-on: unkinben/puppet-prod#112
2024-02-11 19:38:59 +09:30
09291da89f
fix: use fact to determine if selinux in use
2024-02-11 21:05:48 +11:00
Ben Vincent
f8b30f335b
Merge pull request 'feat: add consul server profile' ( #111 ) from neoloc/consul_server into develop
...
Reviewed-on: unkinben/puppet-prod#111
2024-02-11 15:56:24 +09:30
8cb6b68b53
feat: add consul server profile
...
- install/configure consul
- install/configure dnsmasq as dns proxy for consul
- add unkin yumrepo definition as source for consul
- update datavol to ensure the /data volume is mounted
2024-02-11 17:12:35 +11:00
Ben Vincent
a0434fc7b5
Merge pull request 'feat: cleanup reposync conf files' ( #110 ) from neoloc/cleanup_reposync_conf into develop
...
Reviewed-on: unkinben/puppet-prod#110
2024-02-10 14:15:00 +09:30
71c316e7ae
feat: cleanup reposync conf files
...
- add feature to /etc/reposync/conf.d to ensure the subfiles are cleaned
up when they are not defined
2024-02-10 15:37:24 +11:00
Ben Vincent
d1c61dd13d
Merge pull request 'feat: cleanup almalinux 8.8 reposync' ( #109 ) from neoloc/cleanup_alma8.8_repos into develop
...
Reviewed-on: unkinben/puppet-prod#109
2024-02-10 14:03:24 +09:30
Ben Vincent
4bce524b49
Merge pull request 'feat: puppet wrapper replace dot' ( #108 ) from neoloc/puppetwrapper_dot into develop
...
Reviewed-on: unkinben/puppet-prod#108
2024-02-10 14:02:48 +09:30
a054a94d98
feat: puppet wrapper replace dot
...
- set puppet wrapper to replace '.' with '_' in the branch name
2024-02-10 15:31:45 +11:00
Ben Vincent
974143c84e
Merge pull request 'fix: recursive restorecon for reposync' ( #107 ) from neoloc/restorecon_repos into develop
...
Reviewed-on: unkinben/puppet-prod#107
2024-02-10 13:50:35 +09:30
8332d4f374
fix: recursive restorecon for reposync
...
- set reposync to restore selinux controls on all files in the new
snap_path
2024-02-10 15:19:12 +11:00
Ben Vincent
6b11ea09c7
Merge pull request 'feat: add vault role' ( #106 ) from neoloc/vault_role into develop
...
Reviewed-on: unkinben/puppet-prod#106
2024-02-10 12:47:12 +09:30
d6eeed0b61
feat: add vault role
...
- add basic vault role to begin building servers
2024-02-10 14:16:51 +11:00
5471294f1e
feat: cleanup almalinux 8.8 reposync
...
- syncing almalinux 8.8 no longer required
2024-02-10 14:13:59 +11:00
Ben Vincent
27d6c15c80
Merge pull request 'feat: add consul role' ( #105 ) from neoloc/consul_role into develop
...
Reviewed-on: unkinben/puppet-prod#105
2024-02-06 21:23:33 +09:30
dc97d15ef9
feat: add consul role
2024-02-06 22:51:59 +11:00
2779de4b9d
Merge pull request 'feat: add haproxy role' ( #103 ) from neoloc/haproxy_role into develop
...
Reviewed-on: unkinben/puppet-prod#103
2024-01-07 17:05:22 +09:30
da53e28f0e
feat: add haproxy role
...
- add infra::halb section for highly available load balancers
2024-01-07 18:34:34 +11:00
86a231b3ee
Merge pull request 'fix: fix minio certificate param' ( #102 ) from neoloc/minio_undef into develop
...
Reviewed-on: unkinben/puppet-prod#102
2024-01-05 20:31:55 +09:30
db23e203c6
fix: fix minio certificate param
...
- change enum['string', undef] to an optional param so undef can be set
2024-01-05 22:00:10 +11:00
Ben Vincent
f2a9f40f7f
Merge pull request 'feat: add minio profile' ( #101 ) from neoloc/minio_profile into develop
...
Reviewed-on: unkinben/puppet-prod#101
2024-01-05 20:16:01 +09:30
d8751ac6c8
feat: add minio profile
...
- add additional modules in Puppetfile
- update puppetlabs-lvm to 2.1.0
- add facts.d base path to hieradata
- add infra/storage and infra/storage/minio role data to hieradata
- add new facts for minio setup status
- add a static yaml minio-facts file to assist dynamic ruby facts
- updated hiera with additional directories (country/{role,region})
2024-01-05 21:44:41 +11:00
Ben Vincent
f260b09d49
Merge pull request 'fix: fixed fact variables in hiera.yaml' ( #100 ) from neoloc/hiera_variables into develop
...
Reviewed-on: unkinben/puppet-prod#100
2023-12-28 16:01:46 +09:30
8e0ab95872
fix: fixed fact variables in hiera.yaml
...
- replaced ${..} with %{..}
2023-12-28 17:30:26 +11:00
Ben Vincent
2b4e1e1d03
Merge pull request 'feat: remove boolean for bind::updater' ( #99 ) from neoloc/add_bind_utils_woops into develop
...
Reviewed-on: unkinben/puppet-prod#99
2023-12-26 15:02:29 +09:30
aabce289a4
feat: remove boolean for bind::updater
...
- default to the default set by the module
2023-12-26 16:31:40 +11:00
Ben Vincent
a049338c9d
Merge pull request 'feat: install bind-utils' ( #98 ) from neoloc/add_bind_utils into develop
...
Reviewed-on: unkinben/puppet-prod#98
2023-12-26 14:58:10 +09:30
a144e4ec2d
feat: install bind-utils
2023-12-26 16:27:28 +11:00
Ben Vincent
920f12b45e
Merge pull request 'feat: add/update location facts' ( #97 ) from neoloc/location_facts into develop
...
Reviewed-on: unkinben/puppet-prod#97
2023-12-26 13:23:17 +09:30
dbec0222b3
feat: add/update location facts
...
- add country fact, change region to exclude country string
2023-12-26 14:51:40 +11:00
42211ddf7d
Merge pull request 'feat: add new datavol' ( #96 ) from neoloc/datavol_define into develop
...
Reviewed-on: unkinben/puppet-prod#96
2023-12-24 12:45:36 +09:30
ff83769ffc
Merge pull request 'feat: add region fact' ( #95 ) from neoloc/region_fact into develop
...
Reviewed-on: unkinben/puppet-prod#95
2023-12-24 12:44:15 +09:30
7431ebf51c
feat: add region fact
...
- add fact that maps primary ip subnet to a region code
- defaults to 'lost' if there is no subnet to region mapping
2023-12-24 14:12:54 +11:00
0c1548fbd8
feat: add new datavol
...
- add datavol define to replace the datavol class, which has more
flexibility through additional params, and the ability to call it
multiple times for multiple datavolumes
2023-12-24 12:54:09 +11:00
a0786f3f67
Merge pull request 'feat: add minio base role' ( #94 ) from neoloc/minio_role into develop
...
Reviewed-on: unkinben/puppet-prod#94
2023-12-22 17:47:47 +09:30
