unkin/puppet-prod
2
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity
303 Commits 18 Branches 0 Tags 3 MiB
e02921be75
Commit Graph

30 Commits

Author SHA1 Message Date
Ben Vincent
15e4e11097 feat: require vaultca for all yumrepos 2024-03-10 19:01:14 +11:00
Ben Vincent
05d2599bc5 feat: ensure vaultca certificate is trusted 
- install the vault rootca on all nodes
- update ca-trust store on changes to the rootca certificate deployed
 2024-03-03 14:54:59 +11:00
Ben Vincent
8009b59514 feat: automatically generate vault certs 
- certificate will be generated for:
  - fqdn
  - hostname
  - primary ip address
  - localhost
  - 127.0.0.1
- update base profile to generate vault certificate for all
- create facts for use with vault_certs
 2024-03-03 13:38:52 +11:00
Ben Vincent
12ff053c6d refacter: cleanup packages setup 2024-02-17 22:49:32 +11:00
Ben Vincent
685d7db264 feat: add nodelookup 
- add helper script to make quering puppetdb easier and more efficient
 2023-12-11 21:15:48 +11:00
Ben Vincent
08c14c2329 feat: split agent service/package from config 
- split package/service from config so puppetservers agents can be
  managed in the same was as clients
 2023-12-03 16:49:38 +11:00
Ben Vincent
92269ae94b Merge branch 'develop' into neoloc/node_exporter 2023-11-17 23:20:02 +11:00
Ben Vincent
6b9d9e6aa7 Merge branch 'develop' into neoloc/resolvconf 2023-11-17 23:17:59 +11:00
Ben Vincent
7cc1a1ddc0 Merge pull request 'feat: manage qemu-agent' (#66) from neoloc/qemuagent into develop 
Reviewed-on: unkinben/puppet-prod#66
 2023-11-17 21:46:08 +09:30
Ben Vincent
a21b7ffc96 feat: setup metrics agents 
- set puppet::puppetdb_api class to export puppetdb
- set infra::dns::server class to export bind
- set all to export node and systemd metrics
 2023-11-17 23:12:37 +11:00
Ben Vincent
d6f3262836 feat: manage qemu-agent 2023-11-17 22:25:43 +11:00
Ben Vincent
8d80fa3c51 feat: manage cloudinit 
- add/remove cloud-init, default to remove
 2023-11-17 22:17:24 +11:00
Ben Vincent
fdb13b7338 feat: find resolvers by role 
- use puppetdbquery module to query puppetdb for resolvers
- move dns client config to profiles::dns::base
- manage the /etc/resolv.conf file
 2023-11-17 21:54:20 +11:00
Ben Vincent
76b54fc59d feat: add dns resolver/master classes 
- define resolver and master dns server
- export A and PTR records from dns clients
- collect exported resources for master
- create hiera structure for acls, zones and views
 2023-11-13 21:42:57 +11:00
Ben Vincent
9cb730d116 feat: add ntp server/client 
- add ntp client and server class
- add ntp server role
- update hiera.yaml to work with enc_role
- cleanup base profile
 2023-11-10 23:59:10 +11:00
Ben Vincent
19836e2069 feat: adding reposync wrapper and tooling 
- add autosyncer/autopromoter scripts
- add timer and service to initial sync process
- add timer/service for daily/weekly/monthly autopromote
- add define to manage each repo
- add nginx webserver to share repos
- add favion.ico if enabled
- add selinux management, and packages for selinux
- cleanup package management, sorting package groups into package classes
 2023-11-08 23:16:56 +11:00
Ben Vincent
0cc0bacad3 feat: add motd and facts 
- use parameters created by the enc to create external facts
- use external facts to generate the motd
- use features from unkinben/puppet-enc#22
 2023-11-04 20:11:20 +11:00
Ben Vincent
130669a130 feat: manage puppet clients 
- manage the service
- manage the package, version lock it
- deploy the /etc/puppetlabs/puppet/puppet.conf from template for puppet
  clients only
 2023-10-29 20:26:39 +11:00
Ben Vincent
6bb52f2a15 feat: add firewalld management profile 
- basic profile to enable/disable, and install/remove
- defaulting to enabled and installed, but set to disabled and removed
  in hiera
 2023-10-22 19:54:10 +11:00
Ben Vincent
95434214a9 feat: add management of /etc/hosts 
- add class to manage the /etc/hosts file
- add static hosts to /etc/hosts file via hiera array/hash
 2023-10-22 00:34:22 +11:00
Ben Vincent
e847954e03 Merge branch 'develop' into neoloc/puppet_wrapper 2023-10-22 00:00:52 +11:00
Ben Vincent
86a6c1bd96 feat: add sudo secure_path 
- update the sudo class from an include to a definition
- set the secure_path variable to include /usr/local/{bin,sbin}
 2023-10-21 23:52:48 +11:00
Ben Vincent
ac27a9ce0b Merge branch 'develop' into neoloc/puppetdb 2023-10-21 23:30:40 +11:00
Ben Vincent
080cdd8884 Setup PuppetDB/Puppetboard 
- install modules required
    - puppetdb
    - postgresql
    - puppetboard
    - python
  - create new profiles to manage each item (puppetdb/puppetboard)
  - added puppetdb role
  - include the puppetdb::master::config in puppetmaster role
  - re-organised the puppetfile
  - moved python to be managed by the python module
  - added postgresql to list of managed repos
 2023-10-21 23:11:40 +11:00
Ben Vincent
2b11a9417c Account/Sudo management 
- imported account and sudo puppet modules
  - created account management wrapper
  - defined sysadmin account, set to be created on all nodes
  - removed sudo from base packages as its managed by sudo module now
 2023-08-29 23:25:10 +10:00
Ben Vincent
116342bdaa Added class to manage a default set of scripts 
- included scripts into profiles::base
  - updated hiera with list of scripts to create and their template name
  - created template for a puppet wrapper
 2023-08-26 16:11:53 +10:00
Ben Vincent
d48283734c Added a new profile to manage common packages 
* will by default pull data from hiera
  * could change it on a per-distro/role basis
  * requires stdlib for ensure_packages
 2023-07-02 14:55:02 +10:00
Ben Vincent
c00821763e Added a base role 
* base role imports the base profile
  * updated profiles::base to work with debian family
 2023-06-27 20:37:06 +10:00
Ben Vincent
7f2c82e07d Add a switch to check for os family 
This is so I can include either apt or yum/dnf based profiles. This can
be expanded easily if new families are added, or if new base role
includes are added that are different based on the family of the os.
 2023-06-25 13:31:29 +10:00
Ben Vincent
87c38eadf2 Renamed role/profile directories 
* renamed role to roles
  * renamed profile to profiles
  * cleaned up all profiles/roles/hieradata to match new paths
 2023-06-25 13:24:07 +10:00