puppet-prod

T

unkinben 4b8a720e0c dns: nsupdate host records to the authoritative server

Replaces the exported-resources -> puppet DNS master zone-file flow with
per-host RFC2136 dynamic updates against the k8s bind-authoritative write
endpoint (198.18.200.9), so the master no longer manages zone files.

- add profiles::dns::updater: assembles the host's records into a concat
  file and runs nsupdate via a systemd .path unit that watches it; the
  dns-update script sends only the delta and deletes removed records
- switch profiles::dns::record to write local concat fragments
  (zone|name|type|ttl|value) instead of exporting to the master
- include profiles::dns::updater from profiles::dns::base (all nodes)
- inert until profiles::dns::updater::key_secret (TSIG) is set in eyaml
- hiera: updater server/key_name/algorithm in common.yaml

2026-07-11 01:02:02 +10:00

.woodpecker

chore: reduce requsts for all jobs (#478 )

2026-07-06 22:22:51 +10:00

feat: improve ci performance (#455 )

2026-03-17 17:38:22 +11:00

doc

docs: add docs for cephfs (#445 )

2026-02-03 19:56:14 +11:00

hieradata

dns: nsupdate host records to the authoritative server

2026-07-11 01:02:02 +10:00