unkin/puppet-prod
2
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

promote develop to master #6

Merged
unkinben merged 449 commits from develop into master 2024-06-01 14:48:48 +10:00
Conversation 0 Commits 449 Files Changed 291 +9121 -583
unkinben commented 2024-06-01 14:48:25 +10:00
Owner
Copy Link
No description provided.
unkinben added 449 commits 2024-06-01 14:48:26 +10:00 
Reviewed-on: unkinben/puppet-prod#19
- added way to manage individual nodes
  - added defaults for domains, subnets and nodes
  - updated comments and doc
Reviewed-on: unkinben/puppet-prod#20
- set through puppet.conf
  - created symbolic link from develop -> production in code/environments
  - changed puppet-g10k script to be generated from a template
  - parameterised g10k into hieradata
- included scripts into profiles::base
  - updated hiera with list of scripts to create and their template name
  - created template for a puppet wrapper
Reviewed-on: unkinben/puppet-prod#21
Reviewed-on: unkinben/puppet-prod#22
- set the config_version in the environment.conf file
Reviewed-on: unkinben/puppet-prod#23
- imported account and sudo puppet modules
  - created account management wrapper
  - defined sysadmin account, set to be created on all nodes
  - removed sudo from base packages as its managed by sudo module now
Reviewed-on: unkinben/puppet-prod#24
- install modules required
    - puppetdb
    - postgresql
    - puppetboard
    - python
  - create new profiles to manage each item (puppetdb/puppetboard)
  - added puppetdb role
  - include the puppetdb::master::config in puppetmaster role
  - re-organised the puppetfile
  - moved python to be managed by the python module
  - added postgresql to list of managed repos
Reviewed-on: unkinben/puppet-prod#25
- update the sudo class from an include to a definition
- set the secure_path variable to include /usr/local/{bin,sbin}
Reviewed-on: unkinben/puppet-prod#26
Reviewed-on: unkinben/puppet-prod#27
- add class to manage the /etc/hosts file
- add static hosts to /etc/hosts file via hiera array/hash
Reviewed-on: unkinben/puppet-prod#28
- change the puppetdb::master::config from include to class statement
- set the puppetdb_host value to match what is stored in hiera
- disable firewall management on the puppetdb host
Reviewed-on: unkinben/puppet-prod#29
Reviewed-on: unkinben/puppet-prod#30
- basic profile to enable/disable, and install/remove
- defaulting to enabled and installed, but set to disabled and removed
  in hiera
Reviewed-on: unkinben/puppet-prod#31
- add puppetdb_api and puppetdb_sql role
- add puppetdb_api and puppetdb_sql profile
- add prodinf01n05 to /etc/hosts file
- set listen_address for all services to be hosts ip
- set storeconfigs and storeconfigs_backend to be managed by puppetmaster profile
Reviewed-on: unkinben/puppet-prod#32
- reports, for sending reports to puppetdb
- usecacheonfailure, to show faulures in puppetboard (when set to false)
Reviewed-on: unkinben/puppet-prod#33
- add nginx module to manage reverse proxy on host level
- add puppetboard venv
- add gunicorn instance
- add script to start the gunicorn instance
- add nginx vhost
Reviewed-on: unkinben/puppet-prod#34
- manage the service
- manage the package, version lock it
- deploy the /etc/puppetlabs/puppet/puppet.conf from template for puppet
  clients only
Reviewed-on: unkinben/puppet-prod#35
- basic roles currently
- will allow build of ceph to begin
Reviewed-on: unkinben/puppet-prod#36
- change epel to read from aarnet
Reviewed-on: unkinben/puppet-prod#37
- change puppet_version to be set per-os in hieradata
Reviewed-on: unkinben/puppet-prod#38
- use parameters created by the enc to create external facts
- use external facts to generate the motd
- use features from unkinben/puppet-enc#22
Reviewed-on: unkinben/puppet-prod#41
- enc repository will download a specific tag
- defaults to master
- hiera set to release tag '0.1'
Reviewed-on: unkinben/puppet-prod#42
- included puppetlabs-lvm module
  - created profiles::base::datavol to:
    - create pv, vg, lv and format the filesystem and mount it
Reviewed-on: unkinben/puppet-prod#43
- create roles::infra::packagerepo
- bump enc version
Reviewed-on: unkinben/puppet-prod#44
unkinben/puppet-enc#24
Reviewed-on: unkinben/puppet-prod#45
- update the $size variant regex so it actually matches correctly
- default $size to undef, which results in 100%FREE
Reviewed-on: unkinben/puppet-prod#47
- add file resource to create the required mountpath
- add Array[Enum[]] for mount_options
- fix mount to ensure the mount_options are used
- remove pass and dump options, leave as defaults
- quality of life addition to all hosts
Reviewed-on: unkinben/puppet-prod#48
- add autosyncer/autopromoter scripts
- add timer and service to initial sync process
- add timer/service for daily/weekly/monthly autopromote
- add define to manage each repo
- add nginx webserver to share repos
- add favion.ico if enabled
- add selinux management, and packages for selinux
- cleanup package management, sorting package groups into package classes
Reviewed-on: unkinben/puppet-prod#49
- add ntp client and server class
- add ntp server role
- update hiera.yaml to work with enc_role
- cleanup base profile
Reviewed-on: unkinben/puppet-prod#50
Reviewed-on: unkinben/puppet-prod#51
- includes ntpservers in ntpserver role
- unkinben/puppet-enc#25
Reviewed-on: unkinben/puppet-prod#52
- roles are currently empty, this just exists so I can branch off it
  and start building test servers with this role
- bring up to speed with rest of repo
- change enc_role_path fact to be ruby
- add enc_role_tier1, enc_role_tier2 and enc_role_tier3
- add new paths to hiera.yaml
Reviewed-on: unkinben/puppet-prod#53
- add http://mirror.aarnet.edu.au/pub/almalinux/8.8/PowerTools/x86_64/os/ to
  be synced and mirrored by reposync tools
Reviewed-on: unkinben/puppet-prod#54
- move role specific hieradata into respective roles/* paths
- added the additional powertools repo
Reviewed-on: unkinben/puppet-prod#55
Reviewed-on: unkinben/puppet-prod#56
Reviewed-on: unkinben/puppet-prod#57
- add new dns hosts, update dns roles
Reviewed-on: unkinben/puppet-prod#58
- repodata was being created in the wrong location
- update script to create in the path where the new snap exists
Reviewed-on: unkinben/puppet-prod#59
- change repo.main.unkin.net to repos.main.unkin.net
Reviewed-on: unkinben/puppet-prod#60
- change almalinux and epel *.repo files on nodes to use local package mirror
- add option to purge yumrepo resources, default to true
- add versionlocking to yum, enable it for puppet-agent
Reviewed-on: unkinben/puppet-prod#61
Reviewed-on: unkinben/puppet-prod#62
- define resolver and master dns server
- export A and PTR records from dns clients
- collect exported resources for master
- create hiera structure for acls, zones and views
unkinben/puppet-enc#27
Reviewed-on: unkinben/puppet-prod#63
- add eyaml to hiera.yaml
- consolidate all paths into single tree
- change to new profiles::dns::client wrapper
- change to new profiles::dns::record wrapper
- change to use concat method to build zone file
Reviewed-on: unkinben/puppet-prod#64
- use puppetdbquery module to query puppetdb for resolvers
- move dns client config to profiles::dns::base
- manage the /etc/resolv.conf file
- add/remove cloud-init, default to remove
- set puppet::puppetdb_api class to export puppetdb
- set infra::dns::server class to export bind
- set all to export node and systemd metrics
Reviewed-on: unkinben/puppet-prod#65
Reviewed-on: unkinben/puppet-prod#66
Reviewed-on: unkinben/puppet-prod#67
Reviewed-on: unkinben/puppet-prod#68
- bump enc to match changes
- change ntp client to find servers through puppetdb query
- changed default ntp servers to publicly available nodes
Reviewed-on: unkinben/puppet-prod#69
- start creation on apps:: roles
- reorganise hieradata to match role changes
- remove tagging for enc repo
Reviewed-on: unkinben/puppet-prod#70
Reviewed-on: unkinben/puppet-prod#71
- add forward zone for 198.18.17.0/24 reverse dns zone
Reviewed-on: unkinben/puppet-prod#72
- bump enc, include prometheus server nodes
- add prometheus role and server class
Reviewed-on: unkinben/puppet-prod#73
- broken prometheus::server config, resolve conflicts
- move hieradata for role to match role, not profile
- include puppet-grafana module
- infra::metrics::grafana role is currently clone of base
Reviewed-on: unkinben/puppet-prod#74
Reviewed-on: unkinben/puppet-prod#75
- add a base galera cluster member role
- include mysql and galera modules
Reviewed-on: unkinben/puppet-prod#76
- mariadb 11.2
- puppet el8
Reviewed-on: unkinben/puppet-prod#78
- restorecon on each sync, to update selinux for new files/directories
- remove epel modular
- add postgresql 16 for rhel8
- add postgresql common for rhel8
Reviewed-on: unkinben/puppet-prod#79
Reviewed-on: unkinben/puppet-prod#80
- change gpg key for puppet7 from http:// to https://
Reviewed-on: unkinben/puppet-prod#81
Reviewed-on: unkinben/puppet-prod#82
- add mirrorlist param to reposyncer repos
- update almalinux 8.8 repos to use mirrorlist
- add almalinux 8.9 repos
Reviewed-on: unkinben/puppet-prod#83
- split package/service from config so puppetservers agents can be
  managed in the same was as clients
Reviewed-on: unkinben/puppet-prod#84
- add deepmerge lookup_options
- add packages to remove and packages to add to profiles::packages::base class
- create service to run dnf update
- create timer to call the service
- manage settings via params
Reviewed-on: unkinben/puppet-prod#85
Reviewed-on: unkinben/puppet-prod#86
- add facts generated from mysql's wsrep status variables
Reviewed-on: unkinben/puppet-prod#87
- change next's outside of a loop to a single if statement
Reviewed-on: unkinben/puppet-prod#88
- add eyaml support for role
- add /data volume for galera cluster members
- create profiles::selinux namespace for defining selinux configuration
  - create profiles::selinux::mysqld for managing specifics for mysqld
  - create profiles::selinux::setenforce to manage selinux mode
- parameterised options required in mysqld::server module
- add mariadb repo
- add additional facts for managing mysqld and galera
Reviewed-on: unkinben/puppet-prod#89
- add helper script to make quering puppetdb easier and more efficient
Reviewed-on: unkinben/puppet-prod#90
- manage installation of puppet_gem packages for puppetmasters
Reviewed-on: unkinben/puppet-prod#91
- required to allow nginx to reach puppetdb
Reviewed-on: unkinben/puppet-prod#92
- check for python3 version before attempting to setup node_lookup
Reviewed-on: unkinben/puppet-prod#93
Reviewed-on: unkinben/puppet-prod#94
- add datavol define to replace the datavol class, which has more
  flexibility through additional params, and the ability to call it
  multiple times for multiple datavolumes
- add fact that maps primary ip subnet to a region code
- defaults to 'lost' if there is no subnet to region mapping
Reviewed-on: unkinben/puppet-prod#95
Reviewed-on: unkinben/puppet-prod#96
- add country fact, change region to exclude country string
Reviewed-on: unkinben/puppet-prod#97
Reviewed-on: unkinben/puppet-prod#98
- default to the default set by the module
Reviewed-on: unkinben/puppet-prod#99
- replaced ${..} with %{..}
Reviewed-on: unkinben/puppet-prod#100
- add additional modules in Puppetfile
- update puppetlabs-lvm to 2.1.0
- add facts.d base path to hieradata
- add infra/storage and infra/storage/minio role data to hieradata
- add new facts for minio setup status
- add a static yaml minio-facts file to assist dynamic ruby facts
- updated hiera with additional directories (country/{role,region})
Reviewed-on: unkinben/puppet-prod#101
- change enum['string', undef] to an optional param so undef can be set
Reviewed-on: unkinben/puppet-prod#102
- add infra::halb section for highly available load balancers
Reviewed-on: unkinben/puppet-prod#103
Reviewed-on: unkinben/puppet-prod#105
- syncing almalinux 8.8 no longer required
- add basic vault role to begin building servers
Reviewed-on: unkinben/puppet-prod#106
- set reposync to restore selinux controls on all files in the new
  snap_path
Reviewed-on: unkinben/puppet-prod#107
- set puppet wrapper to replace '.' with '_' in the branch name
Reviewed-on: unkinben/puppet-prod#108
Reviewed-on: unkinben/puppet-prod#109
- add feature to /etc/reposync/conf.d to ensure the subfiles are cleaned
  up when they are not defined
Reviewed-on: unkinben/puppet-prod#110
- install/configure consul
- install/configure dnsmasq as dns proxy for consul
- add unkin yumrepo definition as source for consul
- update datavol to ensure the /data volume is mounted
Reviewed-on: unkinben/puppet-prod#111
Reviewed-on: unkinben/puppet-prod#112
- add vault module to puppetfile
- define class to manage the install and config of vault
- manage the datavol and raft storage
- manage the unzip and other compression tools
- define custom unseal script and service
- add documentation on initial setup of vault
Reviewed-on: unkinben/puppet-prod#113
- fixed fact name
- create a facts module, move all facts to this module
Reviewed-on: unkinben/puppet-prod#114
Reviewed-on: unkinben/puppet-prod#115
Reviewed-on: unkinben/puppet-prod#116
Reviewed-on: unkinben/puppet-prod#117
- add certmanager script and config.yaml file
- install into pyenv for certmanager
- deploy to puppet-masters only
Reviewed-on: unkinben/puppet-prod#118
- prepare certmanager for pki::vault class
- allow puppet to read certmanager config
Reviewed-on: unkinben/puppet-prod#119
- vault server fails on new servers
- move unseal class to be included after vault class
Reviewed-on: unkinben/puppet-prod#120
- rebuilt vault, updated root token and unseak keys
Reviewed-on: unkinben/puppet-prod#121
- restart vault-unseal when the unseal keys change
Reviewed-on: unkinben/puppet-prod#122
- updated vault policy for certificates
Reviewed-on: unkinben/puppet-prod#123
Reviewed-on: unkinben/puppet-prod#124
- remove ssl warning for certmanager temporarily
Reviewed-on: unkinben/puppet-prod#125
- certificate will be generated for:
  - fqdn
  - hostname
  - primary ip address
  - localhost
  - 127.0.0.1
- update base profile to generate vault certificate for all
- create facts for use with vault_certs
- update packagerepo webserver class to allow using ssl
- install the vault rootca on all nodes
- update ca-trust store on changes to the rootca certificate deployed
- set hiera to deep-merge alt_names and ip_sans for generating vault
  certificates
Reviewed-on: unkinben/puppet-prod#127
Reviewed-on: unkinben/puppet-prod#128
- add subscribe option to nginx resource dependent on nginx_listen_mode
- ensure nginx reloads when the ssl_cert or ssl_key changes, only if
  these values are not undef
- ensure the file resources are defined for certificates
Reviewed-on: unkinben/puppet-prod#129
- require vaultca on all repos on repos.main.unkin.net
Reviewed-on: unkinben/puppet-prod#130
Reviewed-on: unkinben/puppet-prod#131
- add fact for environment
- define 198.18.18.0/24 subnet
Reviewed-on: unkinben/puppet-prod#133
Reviewed-on: unkinben/puppet-prod#134
Reviewed-on: unkinben/puppet-prod#135
Reviewed-on: unkinben/puppet-prod#136
Reviewed-on: unkinben/puppet-prod#137
- add repositories for ovirt
- add role/profile for ovirt/engine and ovirt/node
- add deep-merge for managed_repos
- change repos to allow filesource (URL or file://)
- change reposync to use curl instead of wget
Reviewed-on: unkinben/puppet-prod#138
- add cobbler profile
- add dhcp server profile
Reviewed-on: unkinben/puppet-prod#139
Reviewed-on: unkinben/puppet-prod#140
Reviewed-on: unkinben/puppet-prod#141
Reviewed-on: unkinben/puppet-prod#142
- fixed merging of yum repos
- changed puppet7 to use local copy of repo
Reviewed-on: unkinben/puppet-prod#143
- add datavol to cobbler nodes
- add cobbler profile
- add cobbler role hieradata
- manage selinux where required for cobbler
- manage service cname
Reviewed-on: unkinben/puppet-prod#144
- include puppet-dhcp module
- manage dhcp pools
- manage dhcp classes (bios/uefi)
Reviewed-on: unkinben/puppet-prod#145
- add virtual tree to hiera
- add virtual/kvm and virtual/physical hiera sources
- add lm_sensors to be installed on hardware nodes
- install python3.11 on all nodes
- create python3.11 venv for cobbler-enc
- install requirements in cobbler-enc venv
- symlink to /usr/local/bin/
Reviewed-on: unkinben/puppet-prod#146
- created approle 'certmanager' using 'certmanager' policy
- update certmanager script to generate token based on roleid
Reviewed-on: unkinben/puppet-prod#148
- add haproxy server class
- add haproxy profile to role
- add hiera data for region specific haproxy
- add selinux configuration
- add certlist management
- add default http and https frontends
- add default stats listener
Reviewed-on: unkinben/puppet-prod#149
- add balancemember to puppetboard nodes
- add be_puppetboard to haproxxy
- add puppetboard.main.unkin.net to haproxy altnames
- add puppetboard to backend mapping
- change way backends are registered in haproxy
Reviewed-on: unkinben/puppet-prod#147
Reviewed-on: unkinben/puppet-prod#150
- add puppetdbapi backend to haproxy
- add puppetdbapi altname to the vault certificate
- add mapping for hostname to backend
- manage A records for haproxy
- manage cnames for services using haproxy
- update node_lookup to use new puppetdb URL
Reviewed-on: unkinben/puppet-prod#151
- specify the java_bin
- specify the java_args
Reviewed-on: unkinben/puppet-prod#152
- add a way to define frontends, backends and listeners through hieradata
Reviewed-on: unkinben/puppet-prod#153
- add debian, debian/pool locations to reposyncer
- add selinux fcontext rules
Reviewed-on: unkinben/puppet-prod#154
- set yum::versionlock to be only for redhat family
- set puppet-agent require statement to use apt or yum
- remove requirement of downloading puppet7-release-$dist.deb
- create all paths in $base_path for vault certificate
- set correct $PATH for update-ca-certificates
- dynamically set debian release name
- split packages to install from common.yaml to os-specific
- create groups profile to manage local groups
- change sysadmin to be a member of admins group
- setup admins sudo rules
Reviewed-on: unkinben/puppet-prod#155
Reviewed-on: unkinben/puppet-prod#156
- remove comma from certificate file
- add comments identifying each certificate
Reviewed-on: unkinben/puppet-prod#157
Reviewed-on: unkinben/puppet-prod#158
- change /etc/hosts to meet proxmox requirements
- add proxmox node role
- add init, params, repo, install, clusterjoin classes
Reviewed-on: unkinben/puppet-prod#159
- add timezone module
- set per-region timezone setting
- setup hiera_classes, set to deep merge, and set to include all in base profile
Reviewed-on: unkinben/puppet-prod#160
Reviewed-on: unkinben/puppet-prod#161
Reviewed-on: unkinben/puppet-prod#162
- ensure the list doesnt change every puppet run
Reviewed-on: unkinben/puppet-prod#165
- enable selecting nameservers to use by region, country or all
- set default for nameservers to be region
Reviewed-on: unkinben/puppet-prod#166
- sort the ntpservers array so it doesnt change each run of puppet
- allow the selection of all, region or country specific ntp servers
Reviewed-on: unkinben/puppet-prod#167
Reviewed-on: unkinben/puppet-prod#168
- enable selecting nameservers to use by region, country or all
- set default for nameservers to be region
- find all dns servers in $ns_use (region/country/all),
- or use the current node as the only nameserver
Reviewed-on: unkinben/puppet-prod#169
Reviewed-on: unkinben/puppet-prod#170
Reviewed-on: unkinben/puppet-prod#171
Reviewed-on: unkinben/puppet-prod#172
- wait for the enc_role fact to be correct, as this is required to find
  all keys in hiera
Reviewed-on: unkinben/puppet-prod#173
- moved members_role for consul to common yaml
Reviewed-on: unkinben/puppet-prod#174
- set syd1 as primary consul datacentre
- add consul.service.consul zone
- add nginx reverse proxy for consul webui
- set dns zones/acls/views/keys to be deep merged from hiera
- update default token
- add consul/consul.service.consul/consul.main.unkin.net to vault cert
Reviewed-on: unkinben/puppet-prod#175
- generate policy/token to add nodes
- generate policy/token for all nodes
- add base::root profile to manage aspects of the root user
Reviewed-on: unkinben/puppet-prod#176
- separate yaml between multiple regions
- add nginx frontend to vault
Reviewed-on: unkinben/puppet-prod#184
- merge consul/vault nginx proxy into single class
- replace nginx proxy classes for consul/vault with simpleproxy class
Reviewed-on: unkinben/puppet-prod#186
- change to http://
- change to localhost
- install the consul agent on all nodes, except consul servers
Reviewed-on: unkinben/puppet-prod#187
Reviewed-on: unkinben/puppet-prod#188
- install the consul agent on all nodes, except consul servers
- add vault.service.consul
- change to http://
- change to localhost
- change forward lookup zone for consul from consul.service.consul -> service.consul
- move policy rules to hiera array[hash]
- add node_token to agent as the default token
Reviewed-on: unkinben/puppet-prod#189
Conflicts:
	hieradata/common.yaml
	site/profiles/manifests/consul/client.pp
Reviewed-on: unkinben/puppet-prod#190
- add au-syd1 halb cluster
- add http-response to frontends
- manage haproxy after enc_role is correct
Reviewed-on: unkinben/puppet-prod#191
- configure deep merging in hiera
- move fe_http and fe_https to hiera
- configure pve backends for standard and api traffic
Reviewed-on: unkinben/puppet-prod#192
Reviewed-on: unkinben/puppet-prod#193
- manage puppetserver package
- set order for puppetserver classes
- for profiles::puppet::server class:
  - set param types using stdlib where possible
  - set default values for all params
- move configuration data to hieradata
- wait for enc_role fact to match role
- exclude puppet::client from puppermaster nodes
- add [agent] settings for puppetservers
- remove the excessive comments and notes at the top of the puppet classes
- manage the puppet ca.cfg
- distribute the crl.pem from the puppetca to masters
- add method to join multiple consul datacentres
- set syd1 as the primary datacentre
- use default token from au-syd1 cluster in all locations
- add replication token
- add prepared query for:
  - vault
  - puppet
  - puppetca
- add puppet service
- add puppetca service
- add ability to write to puppet/puppetca service in consul
- add puppet.(query,service).consul to dns_alt_names of all masters
- add puppetca.(query,service).consul to dns_alt_names of puppetca
- change forwarding for consul to be per-datacentre to local consul
- change domain from service.consul -> consul so query.consul can be resolved
Reviewed-on: unkinben/puppet-prod#194
- distribute the private/public pem for eyaml via eyaml
- change all clients/servers to use puppet from consul service mesh
Reviewed-on: unkinben/puppet-prod#195
Conflicts:
	hieradata/common.yaml
- wait for the enc_role fact to be updated and match
- move puppetdb db/api host values to common.yaml
- add vault cert altnames for consul query/service addresses
- add consul services/rules/checks
Reviewed-on: unkinben/puppet-prod#196
Reviewed-on: unkinben/puppet-prod#197
Reviewed-on: unkinben/puppet-prod#198
- split params into class
- split class into individual functions
- add facts to manage the /var/www/cobbler and /data/cobbler directories
- move /var/www/cobbler -> /data/cobbler
- create symlink from /var/www/cobbler -> /data/cobbler
- ensure that cobbler nodes are set to permissive selinux mode
Reviewed-on: unkinben/puppet-prod#199
- set prodinf01n48 as primary cobbler node
- ensure the cobbler DNS record is created
Reviewed-on: unkinben/puppet-prod#200
- only import the selinux enforce profile in cobbler
- install policycoreutils on all almalinux releases
Reviewed-on: unkinben/puppet-prod#201
- allow managing /etc/hosts on multiple levels of hiera
- add edge-caching role
- add mirror for debian, almalinux and epel repositories
- export service as edgecache in consul
- add edgecache as a prepared_query in consul
Reviewed-on: unkinben/puppet-prod#202
- promote ausyd1nxvm1017
Reviewed-on: unkinben/puppet-prod#203
- update nameservers for syd1 to use local dns resolvers
- update pxeserver to au-syd1 cobbler
Reviewed-on: unkinben/puppet-prod#204
- fixed name of cobbler host in yaml
Reviewed-on: unkinben/puppet-prod#205
- change defaults for yumrepo resources
Reviewed-on: unkinben/puppet-prod#206
- update role to wait for enc_role
- move hiera data to country/region/role specific location
Reviewed-on: unkinben/puppet-prod#207
- deep merge postgresql_config_entries in common.yaml
- add postgresql_config_entries into a new hieradata/roles/infra/puppetdb/sql.yaml
- set puppetdb role to import the options
Reviewed-on: unkinben/puppet-prod#208
- add bind-address to local_ip
- add consul service
Reviewed-on: unkinben/puppet-prod#209
- change edgecache service name from puppet -> edgecache
- add bind-address to local_ip
- add consul service
Reviewed-on: unkinben/puppet-prod#210
- add fact to record system resolvers
- add resolvers feature in /etc/nginx/conf.d/resolvers.conf
- add rewrite rules for postgres/yum/repodata
Reviewed-on: unkinben/puppet-prod#211
- add centos repo to edgecache
- deep merge yumrepo resources
- convert repos to direct yumrepo in hieradata
- change from repos.main.unkin.net to edgecache.query.consul
- create all yumrepo resources from $profiles:😋:global::repos
- change profiles::puppet::agent to require Yumrepo['puppet']
- remove managed repos hieradata
- remove profiles:😋:* classes that are not required
- remove missed rebase comment
Reviewed-on: unkinben/puppet-prod#212
- add fact to detect firstrun
- run a limited subset of classes on firstrun
- firstrun: includes:
  - vault ca certificates
  - yum/apt repositories
  - fast-install packages with an exec
Reviewed-on: unkinben/puppet-prod#213
- ensure the firstrun is processed before role specific class profiles
Reviewed-on: unkinben/puppet-prod#214
- use per-repo target files
Reviewed-on: unkinben/puppet-prod#215
- download gpg keys if gpgkey is defined
- ensure the profiles::defaults is called first
Reviewed-on: unkinben/puppet-prod#216
- change java args to use 2048mb of memory
Reviewed-on: unkinben/puppet-prod#217
- add consul support
- enable local script checks in consul agents
- add a test DB/User for consult to verify the psql instance is running
- manage the postgresql repo and gpg key
- merge to develop
- add prepared query for puppetdbapi
- changed to use puppetdbapi and puppetdbsql hiera keys
- updated all classes that referenced old values
- change syd1 puppetdb hosts to use consul serivce/query addresses
Reviewed-on: unkinben/puppet-prod#218
Reviewed-on: unkinben/puppet-prod#219
- updated nginx param types
- add nginx aliases, merge with vhost, use as server_names
- add additional vault alt-names
- add prepared query for puppetboard
Reviewed-on: unkinben/puppet-prod#220
- puppet clients can not request multiple dns alt_names
- set puppetdbapi hosts to request multiple certificates
Reviewed-on: unkinben/puppet-prod#221
Reviewed-on: unkinben/puppet-prod#222
- add puppetboard.service.au-{syd1|drw1}.consul to:
  - vault pki cert
  - nginx server aliases
Reviewed-on: unkinben/puppet-prod#223
- deploy syd1 vault ca certificates
- move vault certmanager tokens to drw1/syd1 specific eyaml
- add syd1 certmanger token for syd1 vault
- add nginx aliases for vault services
- add additional vault certificates
- change certmanager script to use vault.service.consul
- change vault to use vault ephemeral certificates
- remove nginx frontend to vault
Reviewed-on: unkinben/puppet-prod#224
Reviewed-on: unkinben/puppet-prod#226
- support access to vault from multiple datacentres for certmanager
Reviewed-on: unkinben/puppet-prod#227
- changing vault url to vault.query.consul forced puppetmasters in drw1
  to connect to syd1 vault hosts
- set drw1 puppetmasters to use syd1 approle_id
Reviewed-on: unkinben/puppet-prod#228
- move puppetca to ausyd1nxvm1036
Reviewed-on: unkinben/puppet-prod#229
- add gitea module
- add dependency extlib
- add basic gitea class
Reviewed-on: unkinben/puppet-prod#230
- update r10k source
- update enc source
- update source for puppet-bind module
Reviewed-on: https://git.service.au-syd1.consul/unkinben/puppet-prod/pulls/1
- remove https, use http backend as no authentication is required
- add -C option to count number of identical records
- sort responses from node_lookup
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/2
- update hieradata with client_max_body_size for git role
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/3
- change from 100m to 250m
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/4
Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/5
unkinben merged commit 4487551f62 into master 2024-06-01 14:48:48 +10:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: unkin/puppet-prod#6
No description provided.
Delete Branch "develop"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?