puppet-prod

T

unkin-agent 1c01b7e6ca Allow k8s edge health checks on arrstack hosts (#532 )

The Kubernetes-hosted haproxy edge probes the arr/nzbget backends on `/consul/health`, but its traffic arrives SNATed from the node ranges rather than the DMZ edge, so nginx returns 403 and every backend health-checks down.

- Allow `198.18.21.0/24` (2.5gbe physical), `198.18.15.0/24` and `198.18.19.0/24` (node loopbacks) on the `arrstack_web_healthcheck` location.
- Keep `198.18.24.0/24` so the existing DMZ edge stays healthy through cutover.

---------

Co-authored-by: unkin-agent <agent@unkin.net>
Reviewed-on: #532
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-09-27 09:55:58 +10:00

.woodpecker

chore: reduce requsts for all jobs (#478 )

2026-07-06 22:22:51 +10:00

feat: improve ci performance (#455 )

2026-03-17 17:38:22 +11:00

doc

docs: add docs for cephfs (#445 )

2026-02-03 19:56:14 +11:00

hieradata

Allow k8s edge health checks on arrstack hosts (#532 )

2026-09-27 09:55:58 +10:00