f6bf504416
Merge branch 'develop' into neoloc/syd1_puppetdb
2024-05-22 22:11:04 +10:00
39aa6e114e
feat: puppetdb sql updates
...
- add consul support
- enable local script checks in consul agents
- add a test DB/User for consult to verify the psql instance is running
- manage the postgresql repo and gpg key
2024-05-22 22:05:54 +10:00
9d3a57dfc9
Merge pull request 'feat: increase puppetdb api Xmx' ( #217 ) from neoloc/puppetdbmemory into develop
...
Reviewed-on: unkinben/puppet-prod#217
2024-05-22 21:07:46 +09:30
6035af37a1
feat: increase puppetdb api Xmx
...
- change java args to use 2048mb of memory
2024-05-22 21:37:00 +10:00
4b0ff2deee
Merge pull request 'feat: firstrun optimisations' ( #216 ) from neoloc/yumrepos into develop
...
Reviewed-on: unkinben/puppet-prod#216
2024-05-19 22:46:19 +09:30
598a8c0f52
feat: firstrun optimisations
...
- download gpg keys if gpgkey is defined
- ensure the profiles::defaults is called first
2024-05-19 23:11:11 +10:00
adf27a3090
Merge pull request 'fix: repo target changes' ( #215 ) from neoloc/yumrepos into develop
...
Reviewed-on: unkinben/puppet-prod#215
2024-05-19 22:17:04 +09:30
65bd2ae8d5
fix: repo target changes
...
- use per-repo target files
2024-05-19 22:46:27 +10:00
ad38a276f3
Merge pull request 'feat: update all roles for firstrun' ( #214 ) from neoloc/firstrun into develop
...
Reviewed-on: unkinben/puppet-prod#214
2024-05-19 21:53:19 +09:30
2abbfe8feb
feat: update all roles for firstrun
...
- ensure the firstrun is processed before role specific class profiles
2024-05-19 22:11:01 +10:00
29745d07f3
Merge pull request 'feat: firstrun improvements' ( #213 ) from neoloc/firstrun into develop
...
Reviewed-on: unkinben/puppet-prod#213
2024-05-19 21:06:06 +09:30
dde8d5978d
feat: firstrun improvements
...
- add fact to detect firstrun
- run a limited subset of classes on firstrun
- firstrun: includes:
- vault ca certificates
- yum/apt repositories
- fast-install packages with an exec
2024-05-19 21:28:14 +10:00
0e7168026d
Merge pull request 'neoloc/yumrepos' ( #212 ) from neoloc/yumrepos into develop
...
Reviewed-on: unkinben/puppet-prod#212
2024-05-19 20:09:50 +09:30
fd466fcccc
feat: cleanup old repo management
...
- change profiles::puppet::agent to require Yumrepo['puppet']
- remove managed repos hieradata
- remove profiles:😋 :* classes that are not required
- remove missed rebase comment
2024-05-19 20:27:56 +10:00
5f9480f186
feat: direct yumrepo config
...
- deep merge yumrepo resources
- convert repos to direct yumrepo in hieradata
- change from repos.main.unkin.net to edgecache.query.consul
- create all yumrepo resources from $profiles:😋 :global::repos
2024-05-19 20:27:47 +10:00
da2e98ed4d
feat: add centos mirror to edgecache
...
- add centos repo to edgecache
2024-05-19 19:41:15 +10:00
150d5b97a9
feat: cleanup excessive comments
2024-05-19 17:23:00 +10:00
d3e75e9aa2
Merge pull request 'feat: configure edgecache for postgresql' ( #211 ) from neoloc/psql_edgecache into develop
...
Reviewed-on: unkinben/puppet-prod#211
2024-05-19 16:51:39 +09:30
6f9a606549
feat: configure edgecache for postgresql
...
- add fact to record system resolvers
- add resolvers feature in /etc/nginx/conf.d/resolvers.conf
- add rewrite rules for postgres/yum/repodata
2024-05-19 16:56:36 +10:00
2971018b7e
Merge pull request 'neoloc/mariadb_consul' ( #210 ) from neoloc/mariadb_consul into develop
...
Reviewed-on: unkinben/puppet-prod#210
2024-05-19 14:40:18 +09:30
74f60d3101
Merge branch 'develop' into neoloc/mariadb_consul
2024-05-19 15:09:43 +10:00
9640779846
feat: mariadb improvements
...
- add bind-address to local_ip
- add consul service
2024-05-19 14:53:14 +10:00
8f4799ce2a
feat: update consul service service
...
- change edgecache service name from puppet -> edgecache
2024-05-19 14:53:14 +10:00
ec37f86726
Merge pull request 'feat: mariadb improvements' ( #209 ) from neoloc/mariadb_consul into develop
...
Reviewed-on: unkinben/puppet-prod#209
2024-05-12 19:30:28 +09:30
81e4dffa36
feat: mariadb improvements
...
- add bind-address to local_ip
- add consul service
2024-05-12 19:56:46 +10:00
6bddec6bd2
Merge pull request 'feat: manage pgsql settings for puppetdb' ( #208 ) from neoloc/puppetdb_connections into develop
...
Reviewed-on: unkinben/puppet-prod#208
2024-05-12 16:10:42 +09:30
5774ebd614
feat: manage pgsql settings for puppetdb
...
- deep merge postgresql_config_entries in common.yaml
- add postgresql_config_entries into a new hieradata/roles/infra/puppetdb/sql.yaml
- set puppetdb role to import the options
2024-05-12 16:36:43 +10:00
48b9177e05
Merge pull request 'feat: prepare syd1 mariadb cluster' ( #207 ) from neoloc/mariadb_syd1 into develop
...
Reviewed-on: unkinben/puppet-prod#207
2024-05-12 15:44:03 +09:30
2aa5ead9d1
feat: prepare syd1 mariadb cluster
...
- update role to wait for enc_role
- move hiera data to country/region/role specific location
2024-05-12 15:40:43 +10:00
89fcddf161
Merge pull request 'feat: improve first run on el8' ( #206 ) from neoloc/firstrun_improvements into develop
...
Reviewed-on: unkinben/puppet-prod#206
2024-05-12 14:41:03 +09:30
bed0ef3c79
feat: improve first run on el8
...
- change defaults for yumrepo resources
2024-05-12 15:06:47 +10:00
9eacb9ec08
Merge pull request 'fix: cobbler host' ( #205 ) from neoloc/cobbler_server into develop
...
Reviewed-on: unkinben/puppet-prod#205
2024-05-11 22:40:09 +09:30
4a1848db38
fix: cobbler host
...
- fixed name of cobbler host in yaml
2024-05-11 23:09:30 +10:00
5577e368e9
Merge pull request 'chore: move pxeboot to syd1 cobbler' ( #204 ) from neoloc/dhcp_syd1_cobbler into develop
...
Reviewed-on: unkinben/puppet-prod#204
2024-05-11 21:36:23 +09:30
dca99d2716
chore: move pxeboot to syd1 cobbler
...
- update nameservers for syd1 to use local dns resolvers
- update pxeserver to au-syd1 cobbler
2024-05-11 22:05:21 +10:00
ec6e49e37a
Merge pull request 'feat: change cobbler master' ( #203 ) from neoloc/cobbler_master into develop
...
Reviewed-on: unkinben/puppet-prod#203
2024-05-11 21:20:56 +09:30
3e233ea688
feat: change cobbler master
...
- promote ausyd1nxvm1017
2024-05-11 21:50:02 +10:00
fdb02277ec
Merge pull request 'neoloc/edgecache' ( #202 ) from neoloc/edgecache into develop
...
Reviewed-on: unkinben/puppet-prod#202
2024-05-11 21:18:05 +09:30
cb54cd2dba
feat: add edgecache prepared_query
...
- add edgecache as a prepared_query in consul
2024-05-11 21:47:14 +10:00
4171427e7b
feat: add edgecache role
...
- add edge-caching role
- add mirror for debian, almalinux and epel repositories
- export service as edgecache in consul
2024-05-11 21:46:20 +10:00
9edd060367
feat: deep merge /etc/hosts
...
- allow managing /etc/hosts on multiple levels of hiera
2024-05-11 21:45:24 +10:00
b66615a522
Merge pull request 'fix: move selinux profile to cobbler' ( #201 ) from neoloc/selinux_fix into develop
...
Reviewed-on: unkinben/puppet-prod#201
2024-05-11 15:01:59 +09:30
eeb21081d3
Merge branch 'develop' into neoloc/selinux_fix
2024-05-11 15:01:38 +09:30
6633f07d8b
feat: install policycoreutils
...
- install policycoreutils on all almalinux releases
2024-05-11 15:30:01 +10:00
a618962d07
fix: move selinux profile to cobbler
...
- only import the selinux enforce profile in cobbler
2024-05-11 15:22:16 +10:00
911e284586
Merge pull request 'fix: export cobbler DNS if is_cobbler_master' ( #200 ) from neoloc/cobbler_dns into develop
...
Reviewed-on: unkinben/puppet-prod#200
2024-05-11 14:13:37 +09:30
a05f81799d
fix: export cobbler DNS if is_cobbler_master
...
- set prodinf01n48 as primary cobbler node
- ensure the cobbler DNS record is created
2024-05-11 14:36:28 +10:00
ce3e0f2320
Merge pull request 'neoloc/cobbler_refacter' ( #199 ) from neoloc/cobbler_refacter into develop
...
Reviewed-on: unkinben/puppet-prod#199
2024-05-09 22:45:33 +09:30
fee0bde604
feat: complete cobbler automation
...
- add facts to manage the /var/www/cobbler and /data/cobbler directories
- move /var/www/cobbler -> /data/cobbler
- create symlink from /var/www/cobbler -> /data/cobbler
- ensure that cobbler nodes are set to permissive selinux mode
2024-05-09 22:44:55 +10:00
72077d64a2
refactor: reconfigure cobbler to module style
...
- split params into class
- split class into individual functions
2024-05-07 22:44:01 +10:00