chore: add rpm-internal repo

enable installing locally packaged rpms with no specific linux release

- add the rpm-internal repo from artifactapi

.woodpecker/bolt-validate.yaml

@@ -12,7 +12,7 @@ steps:
         resources:
           requests:
             memory: 512Mi
-            cpu: 250m
+            cpu: 1
           limits:
             memory: 2Gi
             cpu: 1

.woodpecker/epp-validate.yaml

@@ -12,7 +12,7 @@ steps:
         resources:
           requests:
             memory: 512Mi
-            cpu: 250m
+            cpu: 1
           limits:
             memory: 2Gi
             cpu: 1

.woodpecker/erb-validate.yaml

@@ -12,7 +12,7 @@ steps:
         resources:
           requests:
             memory: 512Mi
-            cpu: 250m
+            cpu: 1
           limits:
             memory: 2Gi
             cpu: 1

.woodpecker/puppet-lint.yaml

@@ -12,7 +12,7 @@ steps:
         resources:
           requests:
             memory: 512Mi
-            cpu: 250m
+            cpu: 1
           limits:
             memory: 2Gi
             cpu: 1

.woodpecker/puppet-validate.yaml

@@ -12,7 +12,7 @@ steps:
         resources:
           requests:
             memory: 512Mi
-            cpu: 1
+            cpu: 2
           limits:
             memory: 2Gi
             cpu: 2

.woodpecker/ruby-check.yaml

@@ -12,7 +12,7 @@ steps:
         resources:
           requests:
             memory: 512Mi
-            cpu: 250m
+            cpu: 1
           limits:
             memory: 2Gi
             cpu: 1

.woodpecker/ruby-validate.yaml

@@ -12,7 +12,7 @@ steps:
         resources:
           requests:
             memory: 512Mi
-            cpu: 250m
+            cpu: 1
           limits:
             memory: 2Gi
             cpu: 1

.woodpecker/yamllint.yaml

@@ -12,7 +12,7 @@ steps:
         resources:
           requests:
             memory: 512Mi
-            cpu: 250m
+            cpu: 1
           limits:
             memory: 2Gi
             cpu: 1

hieradata/roles/infra/k8s.yaml

@@ -12,61 +12,6 @@ hiera_include:
 rke2::bootstrap_node: prodnxsr0001.main.unkin.net
 rke2::join_url: https://join-k8s.service.consul:9345
 rke2::manage_registries: true
-rke2::registries:
-  docker.io:
-    endpoint:
-      - "https://artifactapi.k8s.syd1.au.unkin.net"
-    rewrite:
-      "^(.*)$": "dockerhub/$1"
-    disable-default-registry-endpoint: true
-  ghcr.io:
-    endpoint:
-      - "https://artifactapi.k8s.syd1.au.unkin.net"
-    rewrite:
-      "^(.*)$": "ghcr/$1"
-    disable-default-registry-endpoint: true
-  quay.io:
-    endpoint:
-      - "https://artifactapi.k8s.syd1.au.unkin.net"
-    rewrite:
-      "^(.*)$": "quay/$1"
-    disable-default-registry-endpoint: true
-  registry.k8s.io:
-    endpoint:
-      - "https://artifactapi.k8s.syd1.au.unkin.net"
-    rewrite:
-      "^(.*)$": "k8s-registry/$1"
-    disable-default-registry-endpoint: true
-  registry.gitlab.com:
-    endpoint:
-      - "https://artifactapi.k8s.syd1.au.unkin.net"
-    rewrite:
-      "^(.*)$": "gitlab/$1"
-    disable-default-registry-endpoint: true
-  docker.elastic.co:
-    endpoint:
-      - "https://artifactapi.k8s.syd1.au.unkin.net"
-    rewrite:
-      "^(.*)$": "elastic/$1"
-    disable-default-registry-endpoint: true
-  gcr.io:
-    endpoint:
-      - "https://artifactapi.k8s.syd1.au.unkin.net"
-    rewrite:
-      "^(.*)$": "gcr/$1"
-    disable-default-registry-endpoint: true
-  docker.litellm.ai:
-    endpoint:
-      - "https://artifactapi.k8s.syd1.au.unkin.net"
-    rewrite:
-      "^(.*)$": "litellm/$1"
-    disable-default-registry-endpoint: true
-  public.ecr.aws:
-    endpoint:
-      - "https://artifactapi.k8s.syd1.au.unkin.net"
-    rewrite:
-      "^(.*)$": "ecr-public/$1"
-    disable-default-registry-endpoint: true
 rke2::config_hash:
   bind-address: "%{hiera('networking_loopback0_ip')}"
   node-ip: "%{hiera('networking_loopback0_ip')}"

hieradata/roles/infra/storage/vault.yaml

@@ -28,4 +28,3 @@ profiles::nginx::simpleproxy::proxy_path: '/'
 
 profiles::packages::include:
   openbao-plugins: {}
-  openbao-plugin-secrets-litellm: {}

modules/rke2/files/registries.yaml

@@ -0,0 +1,38 @@
+---
+# DO NOT MODIFY - MANAGED BY PUPPET
+mirrors:
+  docker.io:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "dockerhub/$1"
+  ghcr.io:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "ghcr/$1"
+  quay.io:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "quay/$1"
+  registry.k8s.io:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "k8s-registry/$1"
+  registry.gitlab.com:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "gitlab/$1"
+  docker.elastic.co:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "elastic/$1"
+  gcr.io:
+    endpoint:
+      - "https://artifactapi.k8s.syd1.au.unkin.net"
+    rewrite:
+      "^(.*)$": "gcr/$1"

modules/rke2/manifests/config.pp

@@ -8,7 +8,6 @@ class rke2::config (
   String                  $node_token = $rke2::node_token,
   Array[String[1]]        $extra_config_files = $rke2::extra_config_files,
   Boolean                 $manage_registries = $rke2::manage_registries,
-  Hash                    $registries = $rke2::registries,
 ){
 
   # if its not the bootstrap node, add join path to config
@@ -36,7 +35,7 @@ class rke2::config (
       owner   => 'root',
       group   => 'root',
       mode    => '0644',
-      content => epp('rke2/registries.yaml.epp', { registries => $registries }),
+      source  => 'puppet:///modules/rke2/registries.yaml',
       require => Package["rke2-${node_type}"],
       notify  => Service["rke2-${node_type}"],
     }

modules/rke2/manifests/init.pp

@@ -13,7 +13,6 @@ class rke2 (
   Array[String[1]]        $extra_config_files = $rke2::params::extra_config_files,
   Stdlib::HTTPUrl         $container_archive_source = $rke2::params::container_archive_source,
   Boolean                 $manage_registries = $rke2::params::manage_registries,
-  Hash                    $registries = $rke2::params::registries,
 ) inherits rke2::params {
 
   include rke2::install

modules/rke2/manifests/params.pp

@@ -13,5 +13,4 @@ class rke2::params (
   Array[String[1]]        $extra_config_files = [],
   Stdlib::HTTPUrl         $container_archive_source = 'https://github.com/rancher/rke2/releases/download',
   Boolean                 $manage_registries = false,
-  Hash                    $registries = {},
 ) {}

modules/rke2/templates/registries.yaml.epp

@@ -1,20 +0,0 @@
-<%- | Hash $registries | -%>
----
-# DO NOT MODIFY - MANAGED BY PUPPET
-mirrors:
-<%- $registries.each |$registry, $config| { -%>
-  <%= $registry %>:
-    endpoint:
-<%- $config['endpoint'].each |$ep| { -%>
-      - "<%= $ep %>"
-<%- } -%>
-<%- if $config['rewrite'] { -%>
-    rewrite:
-<%- $config['rewrite'].each |$pattern, $replacement| { -%>
-      "<%= $pattern %>": "<%= $replacement %>"
-<%- } -%>
-<%- } -%>
-<%- if $config['disable-default-registry-endpoint'] { -%>
-    disable-default-registry-endpoint: true
-<%- } -%>
-<%- } -%>