Migrate k8s roles to puppet-on-k8s (#545 )

Move the k8s roles to the puppet-on-k8s compilers. Their role code (rke2, frrouting, ceph) has no exported resources or PuppetDB queries; the base consul lookup is covered by the static syd1 server list. - enable profiles::puppet::migrate in the shared roles::infra::k8s hieradata (compute, control, node) Reviewed-on: #545 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>
Migrate incus nodes to puppet-on-k8s (#546 )
2026-10-05 22:10:50 +11:00 · 2026-10-05 22:03:30 +11:00 · 2026-10-05 21:33:03 +11:00 · 2026-10-05 13:36:52 +11:00 · 2026-10-05 12:10:31 +11:00
5 changed files with 16 additions and 2 deletions
@@ -7,3 +7,11 @@ profiles_dns_upstream_forwarder_consul:
  - 198.18.19.14
 profiles_dns_upstream_forwarder_k8s:
  - 198.18.19.20
+profiles::consul::client::members_lookup: false
+# static: k8s-compiled hosts can't see the servers in PuppetDB; update when servers change
+profiles::consul::client::consul_servers:
+  - ausyd1nxvm2005.main.unkin.net
+  - ausyd1nxvm2006.main.unkin.net
+  - ausyd1nxvm2007.main.unkin.net
+  - ausyd1nxvm2008.main.unkin.net
+  - ausyd1nxvm2009.main.unkin.net
@@ -2,6 +2,8 @@
 hiera_include:
  - profiles::nginx::simpleproxy

+profiles::puppet::migrate::enabled: true
+
 profiles::yum::global::repos:
  ceph:
    ensure: present
@@ -14,6 +14,8 @@ hiera_include:
  - profiles::storage::cephfsvols
  - exporters::frr_exporter

+profiles::puppet::migrate::enabled: true
+
 # FIXME: puppet-python wants to try manage python-dev, which is required by the ceph package
 python::manage_dev_package: false

@@ -8,6 +8,8 @@ hiera_include:
  - frrouting
  - rke2

+profiles::puppet::migrate::enabled: true
+
 # manage rke2
 rke2::bootstrap_node: prodnxsr0001.main.unkin.net
 rke2::join_url: https://join-k8s.service.consul:9345
@@ -6,8 +6,8 @@ class nzbget (
  $manage_group       = $nzbget::params::manage_group,
  $service_enable     = $nzbget::params::service_enable,
  $service_name       = $nzbget::params::service_name,
-  $bind_address       = $sonarr::params::bind_address,
-  $port               = $sonarr::params::port,
+  $bind_address       = $nzbget::params::bind_address,
+  $port               = $nzbget::params::port,
 ) inherits nzbget::params {

  include nzbget::install
Author	SHA1	Message	Date
unkin-agent	2e95cd00d7	Migrate k8s roles to puppet-on-k8s (#545 ) Move the k8s roles to the puppet-on-k8s compilers. Their role code (rke2, frrouting, ceph) has no exported resources or PuppetDB queries; the base consul lookup is covered by the static syd1 server list. - enable profiles::puppet::migrate in the shared roles::infra::k8s hieradata (compute, control, node) Reviewed-on: #545 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>	2026-10-05 22:10:50 +11:00
unkin-agent	171cf23a93	Migrate incus nodes to puppet-on-k8s (#546 ) Incus nodes still run against the VM puppetservers; move them to the k8s compilers as part of the puppet-on-k8s migration. - enable profiles::puppet::migrate for roles::infra::incus::node Reviewed-on: #546 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>	2026-10-05 22:03:30 +11:00
unkin-agent	83cb039b97	consul: use static server list for clients (#544 ) Hosts compiled on the k8s puppetservers can't see the consul servers in PuppetDB, so the members lookup returns nothing and syd1 clients get no retry_join targets. - set a static consul server list for syd1 and disable the members lookup there - keep the PuppetDB members lookup for all other regions Reviewed-on: #544 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>	2026-10-05 21:33:03 +11:00
unkin-agent	fc26d3cc4a	nzbget: fix params lookup copied from sonarr (#543 ) nzbget defaulted bind_address and port from sonarr::params, which is not loaded on nzbget-only nodes, so catalog compilation failed with "Unknown variable". - default bind_address/port from nzbget::params Reviewed-on: #543 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>	2026-10-05 13:36:52 +11:00
unkin-agent	5fe9f7a9da	Migrate media roles to puppet-on-k8s (#540 ) The ausyd1nxvm2120 canary is healthy on the puppet-on-k8s servers, so move the next role wave across: the media nodes (ausyd1nxvm2045-2051: nzbget, sonarr, radarr, lidarr, readarr, prowlarr, jellyfin). - enable `profiles::puppet::migrate` in `roles/apps/media.yaml` Reviewed-on: #540 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>	2026-10-05 12:10:31 +11:00