unkin/puppet-prod
3
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

haproxy::dns: fully-qualify halb CNAME targets #489

Merged
benvin merged 1 commits from benvin/halb-cname-fqdn into develop 2026-07-19 01:37:06 +10:00
Conversation 0 Commits 1 Files Changed 1
+8 -2
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 318d30808c - Show all commits
site/profiles/manifests/haproxy/dns.pp
+8 -2
View File
@@ -21,7 +21,10 @@ class profiles::haproxy::dns (
$parts = split($cname, '\.') $parts = split($cname, '\.')
$domain = join($parts[1, $parts.length], '.') $domain = join($parts[1, $parts.length], '.')
profiles::dns::record { "${::facts['networking']['fqdn']}_${cname}_CNAME": profiles::dns::record { "${::facts['networking']['fqdn']}_${cname}_CNAME":
value => "${location_environment}-halb", # CNAME target must be a fully-qualified name (trailing dot): dns-updater
# parses the value with no $ORIGIN, so a bare label becomes root-absolute
# ("au-syd1-prod-halb.") and dead-ends in NXDOMAIN.
value => "${location_environment}-halb.${facts['networking']['domain']}.",
type => 'CNAME', type => 'CNAME',
record => "${cname}.", record => "${cname}.",
zone => $domain, zone => $domain,
@@ -58,7 +61,10 @@ class profiles::haproxy::dns (
$parts = split($cname, '\.') $parts = split($cname, '\.')
$domain = join($parts[1, $parts.length], '.') $domain = join($parts[1, $parts.length], '.')
profiles::dns::record { "${::facts['networking']['fqdn']}_${cname}_CNAME": profiles::dns::record { "${::facts['networking']['fqdn']}_${cname}_CNAME":
value => "${location_environment}-halb-vrrp", # Fully-qualified target (trailing dot); see the note on the non-vrrp
# cnames above. The matching A record is published in main.unkin.net
# and unkin.net just above.
value => "${location_environment}-halb-vrrp.${facts['networking']['domain']}.",
type => 'CNAME', type => 'CNAME',
record => "${cname}.", record => "${cname}.",
zone => $domain, zone => $domain,