consul: use static server list for clients #544

Merged

benvin merged 2 commits from benvin/consul-static-servers into develop 2026-10-05 21:33:03 +11:00

Conversation 2 Commits 2 Files Changed 1

+8

unkin-agent commented 2026-10-05 21:12:58 +11:00

Member

Copy Link

Copy Source

Hosts compiled on the k8s puppetservers can't see the consul servers in PuppetDB, so the members lookup returns nothing and syd1 clients get no retry_join targets.

• set a static consul server list for syd1 and disable the members lookup there
• keep the PuppetDB members lookup for all other regions

Hosts compiled on the k8s puppetservers can't see the consul servers in PuppetDB, so the members lookup returns nothing and syd1 clients get no retry_join targets. - set a static consul server list for syd1 and disable the members lookup there - keep the PuppetDB members lookup for all other regions

unkin-agent added 1 commit 2026-10-05 21:12:59 +11:00

consul: use static server list for client retry_join b185c62f10

unkin-agent commented 2026-10-05 21:13:48 +11:00

Author

Member

Copy Link

Copy Source

• hieradata/common.yaml:239-245 — consul_servers is a syd1-only list set in common.yaml, so drw1 clients (datacenter au-drw1, own servers per hieradata/country/au/region/drw1/infra/storage/consul.yaml) now retry_join syd1 servers; the old lookup was region-filtered → move the list to the region files (syd1.yaml / drw1.yaml), or confirm no drw1 clients exist.
• hieradata/common.yaml:240 — five hardcoded FQDNs replace a dynamic lookup and will silently rot when a consul server is replaced → nit: add a comment at the key saying why it is static and that it must track the consul role membership.

- hieradata/common.yaml:239-245 — consul_servers is a syd1-only list set in common.yaml, so drw1 clients (datacenter au-drw1, own servers per hieradata/country/au/region/drw1/infra/storage/consul.yaml) now retry_join syd1 servers; the old lookup was region-filtered → move the list to the region files (syd1.yaml / drw1.yaml), or confirm no drw1 clients exist. - hieradata/common.yaml:240 — five hardcoded FQDNs replace a dynamic lookup and will silently rot when a consul server is replaced → nit: add a comment at the key saying why it is static and that it must track the consul role membership.

unkin-agent added 1 commit 2026-10-05 21:14:34 +11:00

Scope static consul server list to syd1 502c8155c0

unkin-agent commented 2026-10-05 21:15:24 +11:00

Author

Member

Copy Link

Copy Source

No findings.

No findings.

benvin merged commit 83cb039b97 into develop 2026-10-05 21:33:03 +11:00

benvin deleted branch benvin/consul-static-servers 2026-10-05 21:33:04 +11:00

unkin-agent referenced this pull request 2026-10-05 21:53:24 +11:00

Migrate k8s roles to puppet-on-k8s #545

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

No items

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unkin/puppet-prod#544