unkin/puppet-prod
4
0
Fork 0
Code Issues 15 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

Drop grafana.unkin.net from halb haproxy #541

Closed
unkin-agent wants to merge 3 commits from benvin/halb-drop-grafana into develop
pull from: benvin/halb-drop-grafana
merge into: unkin:develop
Conversation 2 Commits 3 Files Changed 2
-7
unkin-agent commented 2026-10-05 00:33:15 +11:00
Member
Copy Link
Copy Source

grafana.unkin.net moves to traefik-external via a bind-operator A record, so halb no longer serves it. Pairs with argocd-apps #522. The vrrp CNAME is already gone via #542.

  • remove grafana host-map, ACL and X-Frame-Options entries from fe_http/fe_https
  • remove grafana letsencrypt cert from certlist and certbot domains
  • keep be_grafana
grafana.unkin.net moves to traefik-external via a bind-operator A record, so halb no longer serves it. Pairs with argocd-apps #522. The vrrp CNAME is already gone via #542. - remove grafana host-map, ACL and X-Frame-Options entries from fe_http/fe_https - remove grafana letsencrypt cert from certlist and certbot domains - keep be_grafana
unkin-agent added 1 commit 2026-10-05 00:33:16 +11:00
Drop grafana.unkin.net from halb haproxy
ci/woodpecker/pr/ruby-validate Pipeline was successful
Details
ci/woodpecker/pr/puppet-lint Pipeline was successful
Details
ci/woodpecker/pr/bolt-validate Pipeline was successful
Details
ci/woodpecker/pr/yamllint Pipeline was successful
Details
ci/woodpecker/pr/epp-validate Pipeline was successful
Details
ci/woodpecker/pr/erb-validate Pipeline was successful
Details
ci/woodpecker/pr/ruby-check Pipeline was canceled
Details
ci/woodpecker/pr/puppet-validate Pipeline was canceled
Details
069da56856
unkin-agent commented 2026-10-05 00:34:01 +11:00
Author
Member
Copy Link
Copy Source
  • hieradata/roles/infra/pki/certbot.yaml:17 — grafana.unkin.net still in the issuer certbot::domains (mirrors the halb client list you trimmed) → certbot keeps issuing/renewing a cert nothing consumes; remove it in this PR, or say in the body why it stays.
- hieradata/roles/infra/pki/certbot.yaml:17 — `grafana.unkin.net` still in the issuer `certbot::domains` (mirrors the halb client list you trimmed) → certbot keeps issuing/renewing a cert nothing consumes; remove it in this PR, or say in the body why it stays.
unkin-agent added 1 commit 2026-10-05 00:34:37 +11:00
Drop grafana.unkin.net from certbot issuer domains
ci/woodpecker/pr/yamllint Pipeline was successful
Details
ci/woodpecker/pr/ruby-validate Pipeline was successful
Details
ci/woodpecker/pr/bolt-validate Pipeline was successful
Details
ci/woodpecker/pr/puppet-lint Pipeline was successful
Details
ci/woodpecker/pr/erb-validate Pipeline was successful
Details
ci/woodpecker/pr/epp-validate Pipeline was successful
Details
ci/woodpecker/pr/ruby-check Pipeline was successful
Details
ci/woodpecker/pr/puppet-validate Pipeline was successful
Details
98032ae209
unkin-agent commented 2026-10-05 00:35:12 +11:00
Author
Member
Copy Link
Copy Source
  • hieradata/country/au/region/syd1/infra/halb/haproxy2.yaml:270 — nit: be_grafana backend is now unreferenced (no map/ACL routes to it) but still defined, and site/profiles/manifests/metrics/grafana.pp:126 still exports a balancermember to it → valid config, just dead; drop both in a follow-up once traefik cutover is confirmed, or leave deliberately.
- hieradata/country/au/region/syd1/infra/halb/haproxy2.yaml:270 — nit: `be_grafana` backend is now unreferenced (no map/ACL routes to it) but still defined, and site/profiles/manifests/metrics/grafana.pp:126 still exports a balancermember to it → valid config, just dead; drop both in a follow-up once traefik cutover is confirmed, or leave deliberately.
unkin-agent closed this pull request 2026-10-05 00:36:14 +11:00
unkin-agent reopened this pull request 2026-10-05 00:57:26 +11:00
unkin-agent added 1 commit 2026-10-05 01:36:27 +11:00
Merge remote-tracking branch 'origin/develop' into benvin/halb-drop-grafana
ci/woodpecker/pr/ruby-validate Pipeline was successful
Details
ci/woodpecker/pr/puppet-lint Pipeline was successful
Details
ci/woodpecker/pr/erb-validate Pipeline was successful
Details
ci/woodpecker/pr/yamllint Pipeline was successful
Details
ci/woodpecker/pr/bolt-validate Pipeline was successful
Details
ci/woodpecker/pr/epp-validate Pipeline was successful
Details
ci/woodpecker/pr/ruby-check Pipeline was successful
Details
ci/woodpecker/pr/puppet-validate Pipeline was successful
Details
c97c7d3a97 
# Conflicts:
#	hieradata/country/au/region/syd1/infra/halb/haproxy2.yaml
benvin closed this pull request 2026-10-05 12:04:44 +11:00
All checks were successful
ci/woodpecker/pr/ruby-validate Pipeline was successful
Required
Details
ci/woodpecker/pr/puppet-lint Pipeline was successful
Required
Details
ci/woodpecker/pr/erb-validate Pipeline was successful
Required
Details
ci/woodpecker/pr/yamllint Pipeline was successful
Required
Details
ci/woodpecker/pr/bolt-validate Pipeline was successful
Required
Details
ci/woodpecker/pr/epp-validate Pipeline was successful
Required
Details
ci/woodpecker/pr/ruby-check Pipeline was successful
Required
Details
ci/woodpecker/pr/puppet-validate Pipeline was successful
Required
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
benvin (BenVincent) unkin-agent (Unkin Agent) unkinben (Ben Vincent)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/puppet-prod#541
Delete Branch "benvin/halb-drop-grafana"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?