Commit Graph

Select branches

Hide Pull Requests

benvin/artifactapi_repos

benvin/backend_dovecot

benvin/certmanager-k8s-auth

benvin/consul-clients-k8s

benvin/consul-dns-k8s

benvin/consul-mesh-gateway

benvin/consul-server-tls-fed

benvin/exporter_ip_loopback

benvin/halb-drop-grafana

benvin/journald-explicit-port

benvin/netbox-facts

benvin/openbao-plugin-socket-tmpfiles

benvin/puppet-migrate-consul

benvin/puppet-migrate-git-redis

benvin/puppet-migrate-vault

benvin/rke2_upgrade

benvin/wgvpn-role

develop

master

neoloc/authproxy

neoloc/ceph

neoloc/exportarr

neoloc/firewall

neoloc/includegroups

neoloc/mpls_mpbgp_rr

neoloc/openldap

neoloc/puppetdb_ssl

#1

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#110

#112

#113

#114

#115

#116

#118

#119

#120

#121

#122

#123

#124

#125

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#150

#151

#152

#153

#154

#155

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#384

#385

#387

#388

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#49

#490

#491

#492

#493

#494

#495

#496

#497

#498

#499

#5

#50

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#519

#520

#521

#522

#523

#524

#525

#526

#527

#528

#529

#53

#530

#531

#532

#533

#534

#535

#536

#537

#538

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#562

#563

#564

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#67

#68

#69

#7

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#90

#91

#92

#93

#94

#95

#96

#97

#98

#99

Mono Color

• 8678e907bc Migrate consul servers to puppet-on-k8s benvin/puppet-migrate-consul unkin-agent 2026-10-25 13:22:18 +11:00
• 3410ac5611 Migrate git redis nodes to puppet-on-k8s benvin/puppet-migrate-git-redis unkin-agent 2026-10-25 13:22:16 +11:00
• 89a78ff5d4 Migrate vault nodes to puppet-on-k8s benvin/puppet-migrate-vault unkin-agent 2026-10-25 13:22:00 +11:00
• faf96a1dca Run detached noop agent after k8s migration repoint (#561) develop unkin-agent 2026-10-25 12:39:01 +11:00
• 015a516f54 Set wgvpn keys and resolve the vpc ospf interface from its subnet benvin/wgvpn-role unkin-agent 2026-10-17 12:51:02 +11:00
• 27071d21ae Add the wgvpn role for the BinaryLane VPN hosts unkin-agent 2026-10-16 23:40:35 +11:00
• e6a06f4845 Add dnsmasq resolver and edge base-class changes to the mail gateway (#554) unkin-agent 2026-10-16 23:17:56 +11:00
• a14cdbb55a Add the bne dmz vpc and move the mta2 edge to bne (#559) unkin-agent 2026-10-16 23:08:56 +11:00
• b338c8420a Move mail DMZ VPC subnet facts to RFC 1918 ranges (#558) unkin-agent 2026-10-16 21:53:13 +11:00
• b1f2fff045 Resolve subnet facts from secondary interfaces (#557) unkin-agent 2026-10-13 21:46:53 +11:00
• 4313b7db49 Fix edge postfix gateway config for unkin.net (#552) unkin-agent 2026-10-13 21:42:38 +11:00
• 693452b4f8 Map the binarylane DMZ VPCs in subnet facts (#556) unkin-agent 2026-10-13 21:37:57 +11:00
• 6bc79dd09c dns: keep VM consul forwarder as fallback benvin/consul-dns-k8s unkin-agent 2026-10-09 23:06:43 +11:00
• 64356b5e88 consul: keep VM servers in syd1 client join list benvin/consul-clients-k8s unkin-agent 2026-10-09 23:06:02 +11:00
• 412771a766 consul: point syd1 clients at k8s consul servers unkin-agent 2026-10-09 23:01:45 +11:00
• 53af06c974 Forward syd1 .consul DNS to the k8s consul LoadBalancer unkin-agent 2026-10-09 23:01:36 +11:00
• 6c880d9794 Add consul server federation SANs to consul server certs (#547) unkin-agent 2026-10-09 21:51:43 +11:00
• f6a429bdf1 Gate mesh gateway resources on the consul class benvin/consul-mesh-gateway unkin-agent 2026-10-09 19:31:58 +11:00
• 20a65dafcd Enable mesh gateway WAN federation on consul servers unkin-agent 2026-10-09 19:31:57 +11:00
• 368e98f747 Merge remote-tracking branch 'origin/benvin/consul-server-tls-fed' into benvin/consul-mesh-gateway unkin-agent 2026-10-09 19:31:42 +11:00
• b1ee318394 Defer mesh gateway WAN federation to the gateway change benvin/consul-server-tls-fed unkin-agent 2026-10-09 19:29:43 +11:00
• 2651449d57 Merge remote-tracking branch 'origin/benvin/consul-server-tls-fed' into benvin/consul-mesh-gateway unkin-agent 2026-10-07 11:58:26 +11:00
• 674f51a44b Add consul grpc_tls port and drop drw1 WAN retry join unkin-agent 2026-10-07 11:54:31 +11:00
• 3e90f5907c Add consul mesh gateway on consul servers unkin-agent 2026-10-07 11:54:02 +11:00
• 9d25ba1d9a Enable TLS and mesh gateway WAN federation on consul servers unkin-agent 2026-10-07 11:48:29 +11:00
• f35b385714 Add consul server federation SANs to consul server certs unkin-agent 2026-10-07 11:46:32 +11:00
• 2e95cd00d7 Migrate k8s roles to puppet-on-k8s (#545) unkin-agent 2026-10-05 22:10:50 +11:00
• 171cf23a93 Migrate incus nodes to puppet-on-k8s (#546) unkin-agent 2026-10-05 22:03:30 +11:00
• 83cb039b97 consul: use static server list for clients (#544) unkin-agent 2026-10-05 21:33:03 +11:00
• fc26d3cc4a nzbget: fix params lookup copied from sonarr (#543) unkin-agent 2026-10-05 13:36:52 +11:00
• 5fe9f7a9da Migrate media roles to puppet-on-k8s (#540) unkin-agent 2026-10-05 12:10:31 +11:00
• c97c7d3a97 Merge remote-tracking branch 'origin/develop' into benvin/halb-drop-grafana benvin/halb-drop-grafana unkin-agent 2026-10-05 01:36:16 +11:00
• 18fd966f92 halb: stop publishing haproxy2 site CNAMEs (#542) unkin-agent 2026-10-05 01:31:54 +11:00
• 98032ae209 Drop grafana.unkin.net from certbot issuer domains unkin-agent 2026-10-05 00:34:34 +11:00
• 069da56856 Drop grafana.unkin.net from halb haproxy unkin-agent 2026-10-05 00:33:09 +11:00
• b74bced771 Persist rp_filter=0 on every router interface (#539) unkin-agent 2026-10-04 16:02:00 +11:00
• 0cfe598f90 Install certmanager and sshsignhost from RPM (#524) unkin-agent 2026-10-04 15:07:54 +11:00
• 0272104504 Add wireguard module (#538) unkin-agent 2026-10-04 14:17:07 +11:00
• 1ed268acda Add dnsmasq module (#537) unkin-agent 2026-10-03 22:40:46 +10:00
• 47e3bdc8f5 Add router role for prodnxsr0020 (#536) unkin-agent 2026-10-03 22:40:01 +10:00
• 410a1f13d0 Add 198.18.2.0/24 router loopback subnet (#535) unkin-agent 2026-10-03 20:46:44 +10:00
• ec74484d89 Pin the journald ingest URL to port 443 (#533) unkin-agent 2026-09-27 11:22:07 +10:00
• 3cdd6fc662 Set explicit :443 on journald inserturl benvin/journald-explicit-port unkin-agent 2026-09-27 11:10:30 +10:00
• c0e65fade3 Ship estate journald logs to the k8s log ingest endpoint (#531) unkin-agent 2026-09-27 10:01:49 +10:00
• 1c01b7e6ca Allow k8s edge health checks on arrstack hosts (#532) unkin-agent 2026-09-27 09:55:58 +10:00
• cb9f8870bf Trust the sshca host CA alongside the legacy signer (#530) unkin-agent 2026-09-24 22:46:30 +10:00
• 734fcb8cf4 Trust the estate CA when fetching ENC facts (#529) unkin-agent 2026-09-20 23:32:16 +10:00
• f933660d3b Fetch agent ENC facts from encapi (#528) unkin-agent 2026-09-20 23:08:20 +10:00
• 3370aff38f Classify puppet masters through encapi (#527) unkin-agent 2026-09-20 22:42:43 +10:00
• 1a907467e9 Shorten metadata_expire on internal RPM repos (#526) unkin-agent 2026-09-20 00:55:19 +10:00
• cf25a20a92 Install encapic ENC client on puppet masters (#525) unkin-agent 2026-09-20 00:32:40 +10:00
• 9db9afae8d Let certmanager and sshsignhost authenticate to Vault by kubernetes auth benvin/certmanager-k8s-auth unkin-agent 2026-09-13 23:06:32 +10:00
• 979c188c34 Bump openbao-plugin-secrets-arrstack to 0.2.0 (#522) unkin-agent 2026-08-30 15:28:47 +10:00
• 7e1f2c336c Install openbao-plugin-secrets-arrstack v0.1.0 (#521) unkin-agent 2026-08-18 23:21:44 +10:00
• 2a329058c0 vault: install openbao-plugin-secrets-ghp on OpenBao nodes (#520) unkin-agent 2026-08-16 14:47:58 +10:00
• 7102ef2b34 vault: move openbao plugin sockets off /tmp onto /run (#509) unkinben 2026-08-09 12:14:02 +10:00
• d859daead4 vault: install netbox and apptoken OpenBao plugin RPMs on bao nodes (#519) unkinben 2026-08-09 01:11:02 +10:00
• 0fd01ac1a7 ceph: manage /etc/ceph/ceph.conf on osd and mon/mgr/mds hosts (#515) unkinben 2026-08-09 00:00:20 +10:00
• 62dff97c98 rke2: taint control-plane nodes NoSchedule (#517) unkinben 2026-08-08 23:19:12 +10:00
• ff1a30823c fix: lock rke2-common and pin rke2 to 1.33.13~rke2r2 to unblock puppet (#516) unkinben 2026-08-08 23:13:40 +10:00
• 804ea06499 ceph: set OSD disk I/O scheduler to none via udev rule (#505) unkinben 2026-08-08 22:33:29 +10:00
• 0fdc7c97d8 rke2,puppet: enforce versionlock before package install (#514) unkinben 2026-08-08 20:00:42 +10:00
• 499251575d lldpd: run on physicals and expose neighbour topology as the lldp fact (#513) unkinben 2026-08-08 18:41:50 +10:00
• 10854b6501 fix: preload correct rke2 airgap images to break CNI bootstrap deadlock (#512) unkinben 2026-08-08 18:18:55 +10:00
• 895ca5b1cb fix: avoid anycast ips (#511) benvin 2026-08-08 00:56:17 +10:00
• caf27e90bd chore: add new physicals (#510) benvin 2026-08-08 00:41:10 +10:00
• 5e8cff921c vault: keep systemd-tmpfiles from reaping openbao plugin sockets benvin/openbao-plugin-socket-tmpfiles unkinben 2026-08-06 22:31:58 +10:00
• 08472ff950 chore: update dns nameserver in dhcp (#507) benvin 2026-08-06 22:23:51 +10:00
• fe3c1a1410 feat: add NetBox IP/interface facts with offline cache benvin/netbox-facts Ben Vincent 2026-08-05 00:45:15 +10:00
• d5cfaed7d4 libs: add ceph_osd_devices fact listing ceph OSD block devices (#504) unkinben 2026-08-02 17:25:18 +10:00
• dd38651a9f puppetserver: auto-restart JVM when its binaries are replaced by an upgrade (#499) unkinben 2026-07-30 20:50:30 +10:00
• 72bcbacddb yum: source AlmaLinux RPM repos from artifactapi, drop legacy unkin repo (#496) unkinben 2026-07-28 21:42:58 +10:00
• 965849594e os/Fedora: add Fedora 44 support for the base role (#497) unkinben 2026-07-28 21:42:32 +10:00
• 83f355cef4 vault: install openbao-plugin-secrets-gitea on the storage role (#498) unkinben 2026-07-27 19:07:30 +10:00
• 82a5b2ee1a dns: stop exporting legacy DNS fragments (manage_export false) (#495) unkinben 2026-07-25 12:29:21 +10:00
• 36d8230ac0 Migrate canary ausyd1nxvm2120 to puppet-on-k8s (#494) unkinben 2026-07-25 00:16:30 +10:00
• aebe80e73f Add profiles::puppet::migrate: repoint VM agents onto puppet-on-k8s (#493) unkinben 2026-07-25 00:04:11 +10:00
• a69318b62d Pin openbao secrets plugins to exact versions (#492) unkinben 2026-07-20 23:46:36 +10:00
• 206a4521e5 Fix cobbler.main.unkin.net CNAME to resolve on k8s DNS (#491) unkinben 2026-07-20 23:17:12 +10:00
• e8443ccfa1 feat: migrate clients to use bind-dns in kubernetes (#490) benvin 2026-07-20 22:41:29 +10:00
• 918c4f20e1 haproxy::dns: fully-qualify halb CNAME targets (#489) unkinben 2026-07-19 01:37:06 +10:00
• 732c938c5a ceph/rgw: add s3.ceph.unkin.net to radosgw cert SAN + nginx aliases (#487) unkinben 2026-07-18 17:01:41 +10:00
• 4230370418 Upgrade openbao-plugin-secrets-rancher to latest (v0.1.1) (#488) unkinben 2026-07-18 17:01:14 +10:00
• 8f49c35c16 yum: point rpmfusion repos at artifactapi (#486) unkinben 2026-07-18 14:30:25 +10:00
• 9aa470d329 dns: exclude k8s/LB ranges from dns-updater; track latest (#485) unkinben 2026-07-18 13:58:43 +10:00
• 6f70594484 Add rpm-vendor yum repository (#484) unkinben 2026-07-18 11:28:01 +10:00
• 9891311d52 Install openbao-plugin-secrets-rancher on vault nodes (#483) unkinben 2026-07-18 11:20:02 +10:00
• d71e221049 dns: deploy dns-updater daemon in place of the shell nsupdate script [HOLD: needs dns-updater RPM published] (#482) unkinben 2026-07-17 23:35:00 +10:00
• 0de3ac2a0b dns: fix dns-update fqdn() double-appending zone to FQDN records (#481) unkinben 2026-07-17 22:50:28 +10:00
• 0702676da6 Install openbao-plugin-secrets-gpg on vault nodes (#480) unkinben 2026-07-16 22:48:08 +10:00
• 88fcb97ad1 dns: nsupdate host records to the authoritative server (#475) unkinben 2026-07-12 22:23:18 +10:00
• 69781df412 chore: change to openbao-plugin-secrets-litellm (#479) benvin 2026-07-06 23:26:21 +10:00
• 2ae215daf7 feat: install vault-plugin-secrets-litellm (#477) benvin 2026-07-06 23:02:12 +10:00
• cd1c3e6ae2 chore: add rpm-internal repo (#476) benvin 2026-07-06 23:02:02 +10:00
• 00a8088aed chore: reduce requsts for all jobs (#478) benvin 2026-07-06 22:22:51 +10:00
• aeae26711f Convert RKE2 registries to template, disable default endpoints (#474) unkinben 2026-06-29 22:30:48 +10:00
• 7b53be7f8c chore: enable rke2 registries (#473) benvin 2026-06-27 22:27:33 +10:00
• 97d21c81c5 feat: make rke2 registries.yaml conditional on manage_registries (#472) benvin 2026-06-27 07:50:31 +10:00
• e140b300bb chore: bump almalinux9 image tags (#471) unkinben 2026-06-07 00:31:30 +10:00
• 57c844b7e8 feat: upgrade grafana from default to 13.0.2 (#470) benvin 2026-06-06 23:46:16 +10:00