df371a6b09
feat: syd1 puppetca provisioning
...
- move puppetca to ausyd1nxvm1036
2024-05-28 20:13:08 +10:00
3fce5ae5bf
Merge pull request 'fix: change drw1 puppetmasters to use syd1 approle' ( #228 ) from neoloc/certmanager_syd1_approle into develop
...
Reviewed-on: unkinben/puppet-prod#228
2024-05-26 00:59:13 +09:30
d2d08bc479
fix: change drw1 puppetmasters to use syd1 approle
...
- changing vault url to vault.query.consul forced puppetmasters in drw1
to connect to syd1 vault hosts
- set drw1 puppetmasters to use syd1 approle_id
2024-05-26 01:27:45 +10:00
413bf78827
Merge pull request 'feat: change vault url to vaul.query.consul' ( #227 ) from neoloc/certmanager into develop
...
Reviewed-on: unkinben/puppet-prod#227
2024-05-26 00:53:39 +09:30
b00781b604
feat: change vault url to vaul.query.consul
...
- support access to vault from multiple datacentres for certmanager
2024-05-26 01:23:16 +10:00
ad268e8977
Merge pull request 'feat: vault use vault' ( #226 ) from neoloc/vault_use_vault into develop
...
Reviewed-on: unkinben/puppet-prod#226
2024-05-26 00:38:55 +09:30
ad4f9b81f4
Merge pull request 'neoloc/syd1_certmanager_approle' ( #224 ) from neoloc/syd1_certmanager_approle into develop
...
Reviewed-on: unkinben/puppet-prod#224
2024-05-26 00:38:16 +09:30
7c0bf4a398
feat: vault use vault
...
- change vault to use vault ephemeral certificates
- remove nginx frontend to vault
2024-05-26 01:06:48 +10:00
b9c327799f
feat: add vault service/query altnames
...
- add nginx aliases for vault services
- add additional vault certificates
- change certmanager script to use vault.service.consul
2024-05-25 15:51:09 +10:00
2c3aa2bbdc
feat: vault certmanager tokens
...
- move vault certmanager tokens to drw1/syd1 specific eyaml
- add syd1 certmanger token for syd1 vault
2024-05-25 15:50:59 +10:00
0a49092f52
chore: add syd1 vault ca/int certs
...
- deploy syd1 vault ca certificates
2024-05-25 14:18:56 +10:00
0b549325a1
Merge pull request 'feat: added country-region altnames' ( #223 ) from neoloc/puppetboard_altnames into develop
...
Reviewed-on: unkinben/puppet-prod#223
2024-05-24 23:01:37 +09:30
c883bc8c91
feat: added country-region altnames
...
- add puppetboard.service.au-{syd1|drw1}.consul to:
- vault pki cert
- nginx server aliases
2024-05-24 23:27:07 +10:00
880752c302
Merge pull request 'feat: change drw1 puppetdb -> syd1' ( #222 ) from neoloc/puppetdb_to_consul into develop
...
Reviewed-on: unkinben/puppet-prod#222
2024-05-24 22:37:57 +09:30
cbf3f0e694
feat: change drw1 puppetdb -> syd1
2024-05-24 23:06:18 +10:00
22af602510
Merge pull request 'feat: puppet::client multiple altnames' ( #221 ) from neoloc/puppetdbapi_certs into develop
...
Reviewed-on: unkinben/puppet-prod#221
2024-05-22 22:42:59 +09:30
0901595de9
feat: puppet::client multiple altnames
...
- puppet clients can not request multiple dns alt_names
- set puppetdbapi hosts to request multiple certificates
2024-05-22 23:05:34 +10:00
e19c84b33e
Merge pull request 'feat: puppetboard on consul' ( #220 ) from neoloc/puppetboard_consul into develop
...
Reviewed-on: unkinben/puppet-prod#220
2024-05-22 22:26:44 +09:30
349547c4bc
feat: puppetboard on consul
...
- updated nginx param types
- add nginx aliases, merge with vhost, use as server_names
- add additional vault alt-names
- add prepared query for puppetboard
2024-05-22 22:54:54 +10:00
6bd66724dc
Merge pull request 'neoloc/syd1_puppetdb' ( #219 ) from neoloc/syd1_puppetdb into develop
...
Reviewed-on: unkinben/puppet-prod#219
2024-05-22 22:00:35 +09:30
8fb4c59f88
Merge branch 'develop' into neoloc/syd1_puppetdb
2024-05-22 22:30:10 +10:00
d2235610af
Merge pull request 'feat: set syd1 puppetdb hosts' ( #218 ) from neoloc/puppetboard into develop
...
Reviewed-on: unkinben/puppet-prod#218
2024-05-22 21:58:52 +09:30
25cbff4656
feat: set syd1 puppetdb hosts
...
- change syd1 puppetdb hosts to use consul serivce/query addresses
2024-05-22 22:23:07 +10:00
770c8cc159
feat: update hiera key for puppetdb api/sql
...
- changed to use puppetdbapi and puppetdbsql hiera keys
- updated all classes that referenced old values
2024-05-22 22:18:32 +10:00
9e3b680b0b
feat: add prepared query for puppetdbapi
...
- merge to develop
- add prepared query for puppetdbapi
2024-05-22 22:11:51 +10:00
f6bf504416
Merge branch 'develop' into neoloc/syd1_puppetdb
2024-05-22 22:11:04 +10:00
9d3a57dfc9
Merge pull request 'feat: increase puppetdb api Xmx' ( #217 ) from neoloc/puppetdbmemory into develop
...
Reviewed-on: unkinben/puppet-prod#217
2024-05-22 21:07:46 +09:30
6035af37a1
feat: increase puppetdb api Xmx
...
- change java args to use 2048mb of memory
2024-05-22 21:37:00 +10:00
4b0ff2deee
Merge pull request 'feat: firstrun optimisations' ( #216 ) from neoloc/yumrepos into develop
...
Reviewed-on: unkinben/puppet-prod#216
2024-05-19 22:46:19 +09:30
598a8c0f52
feat: firstrun optimisations
...
- download gpg keys if gpgkey is defined
- ensure the profiles::defaults is called first
2024-05-19 23:11:11 +10:00
adf27a3090
Merge pull request 'fix: repo target changes' ( #215 ) from neoloc/yumrepos into develop
...
Reviewed-on: unkinben/puppet-prod#215
2024-05-19 22:17:04 +09:30
65bd2ae8d5
fix: repo target changes
...
- use per-repo target files
2024-05-19 22:46:27 +10:00
ad38a276f3
Merge pull request 'feat: update all roles for firstrun' ( #214 ) from neoloc/firstrun into develop
...
Reviewed-on: unkinben/puppet-prod#214
2024-05-19 21:53:19 +09:30
2abbfe8feb
feat: update all roles for firstrun
...
- ensure the firstrun is processed before role specific class profiles
2024-05-19 22:11:01 +10:00
29745d07f3
Merge pull request 'feat: firstrun improvements' ( #213 ) from neoloc/firstrun into develop
...
Reviewed-on: unkinben/puppet-prod#213
2024-05-19 21:06:06 +09:30
dde8d5978d
feat: firstrun improvements
...
- add fact to detect firstrun
- run a limited subset of classes on firstrun
- firstrun: includes:
- vault ca certificates
- yum/apt repositories
- fast-install packages with an exec
2024-05-19 21:28:14 +10:00
0e7168026d
Merge pull request 'neoloc/yumrepos' ( #212 ) from neoloc/yumrepos into develop
...
Reviewed-on: unkinben/puppet-prod#212
2024-05-19 20:09:50 +09:30
fd466fcccc
feat: cleanup old repo management
...
- change profiles::puppet::agent to require Yumrepo['puppet']
- remove managed repos hieradata
- remove profiles:😋 :* classes that are not required
- remove missed rebase comment
2024-05-19 20:27:56 +10:00
5f9480f186
feat: direct yumrepo config
...
- deep merge yumrepo resources
- convert repos to direct yumrepo in hieradata
- change from repos.main.unkin.net to edgecache.query.consul
- create all yumrepo resources from $profiles:😋 :global::repos
2024-05-19 20:27:47 +10:00
da2e98ed4d
feat: add centos mirror to edgecache
...
- add centos repo to edgecache
2024-05-19 19:41:15 +10:00
150d5b97a9
feat: cleanup excessive comments
2024-05-19 17:23:00 +10:00
d3e75e9aa2
Merge pull request 'feat: configure edgecache for postgresql' ( #211 ) from neoloc/psql_edgecache into develop
...
Reviewed-on: unkinben/puppet-prod#211
2024-05-19 16:51:39 +09:30
6f9a606549
feat: configure edgecache for postgresql
...
- add fact to record system resolvers
- add resolvers feature in /etc/nginx/conf.d/resolvers.conf
- add rewrite rules for postgres/yum/repodata
2024-05-19 16:56:36 +10:00
2971018b7e
Merge pull request 'neoloc/mariadb_consul' ( #210 ) from neoloc/mariadb_consul into develop
...
Reviewed-on: unkinben/puppet-prod#210
2024-05-19 14:40:18 +09:30
74f60d3101
Merge branch 'develop' into neoloc/mariadb_consul
2024-05-19 15:09:43 +10:00
9640779846
feat: mariadb improvements
...
- add bind-address to local_ip
- add consul service
2024-05-19 14:53:14 +10:00
8f4799ce2a
feat: update consul service service
...
- change edgecache service name from puppet -> edgecache
2024-05-19 14:53:14 +10:00
ec37f86726
Merge pull request 'feat: mariadb improvements' ( #209 ) from neoloc/mariadb_consul into develop
...
Reviewed-on: unkinben/puppet-prod#209
2024-05-12 19:30:28 +09:30
81e4dffa36
feat: mariadb improvements
...
- add bind-address to local_ip
- add consul service
2024-05-12 19:56:46 +10:00
6bddec6bd2
Merge pull request 'feat: manage pgsql settings for puppetdb' ( #208 ) from neoloc/puppetdb_connections into develop
...
Reviewed-on: unkinben/puppet-prod#208
2024-05-12 16:10:42 +09:30
