puppet-prod/site/profiles/manifests at 5345216b12b936da1332bd13875d5b2d7acdde16 - puppet-prod - Gitea

unkin/puppet-prod

Files

T

History

unkin-agent 343d645d24

ci/woodpecker/pr/ruby-validate Pipeline was successful

Details

ci/woodpecker/pr/erb-validate Pipeline was successful

Details

ci/woodpecker/pr/puppet-lint Pipeline was successful

Details

ci/woodpecker/pr/bolt-validate Pipeline was successful

Details

ci/woodpecker/pr/yamllint Pipeline was successful

Details

ci/woodpecker/pr/epp-validate Pipeline was successful

Details

ci/woodpecker/pr/ruby-check Pipeline was successful

Details

ci/woodpecker/pr/puppet-validate Pipeline was successful

Details

Adapt base classes for the mail edge gateway (#555 )

The edge gateways sit in BinaryLane VPCs with no consul datacentre and a public interface, so the consul agent cannot join and sshd must not serve the internet.

- add an enable toggle to profiles::consul::client, off for the gateway role
- disable node_exporter on the gateway role, as it registers via consul
- restrict sshd AllowUsers to the edge VPCs (198.18.30.0/24, 198.18.31.0/24) and the lab (198.18.0.0/16, 10.10.12.200/32)

Stacked on #554.

Reviewed-on: #555
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-10-13 21:48:03 +11:00

..

feat: enable managing root password (#429 )

2025-12-28 20:12:12 +11:00

feat: enable network manager on el9 (#189 )

2024-12-08 19:11:54 +11:00

feat: prepare puppet for debian

2024-04-13 22:34:28 +10:00

fix: manage git user (#339 )

2025-07-06 11:27:35 +10:00

ceph: manage /etc/ceph/ceph.conf on osd and mon/mgr/mds hosts (#515 )

2026-08-09 00:00:20 +10:00

feat: manage cloudinit

2023-11-17 22:17:24 +11:00

Fix cobbler.main.unkin.net CNAME to resolve on k8s DNS (#491 )

2026-07-20 23:17:12 +10:00

Adapt base classes for the mail edge gateway (#555 )

2026-10-13 21:48:03 +11:00

benvin/dhcp_failover (#327 )

2025-06-29 13:36:16 +10:00

Shorten metadata_expire on internal RPM repos (#526 )

2026-09-20 00:55:19 +10:00

feat: stop manage nginx repo (#312 )

2025-06-09 14:18:30 +10:00

fix: replace puppetdbquery with native PQL queries (#457 )

2026-03-21 22:35:42 +11:00

os/Fedora: add Fedora 44 support for the base role (#497 )

2026-07-28 21:42:32 +10:00

feat: add firewalld management profile

2023-10-22 19:54:10 +11:00

chore: add sysadmin user after first run (#242 )

2025-04-02 20:27:11 +11:00

feat: act runner updates (#432 )

2026-01-03 21:51:47 +11:00

haproxy::dns: fully-qualify halb CNAME targets (#489 )

2026-07-19 01:37:06 +10:00

Install certmanager and sshsignhost from RPM (#524 )

2026-10-04 15:07:54 +11:00

feat: update jupyterlab container (#209 )

2025-01-04 14:10:44 +11:00

feat: add users/services/groups

2024-07-01 22:54:22 +10:00

chore: minor jellyfin updates (#300 )

2025-05-27 19:55:55 +10:00

feat: upgrade grafana from default to 13.0.2 (#470 )

2026-06-06 23:46:16 +10:00

fix: replace puppetdbquery with native PQL queries (#457 )

2026-03-21 22:35:42 +11:00

fix: ensure nginx restarts on certificate changes (#402 )

2025-09-29 22:38:00 +10:00

feat: add node_pools (#317 )

2025-06-15 17:43:19 +10:00

fix: replace puppetdbquery with native PQL queries (#457 )

2026-03-21 22:35:42 +11:00

feat: add ovirt roles

2024-03-16 16:43:12 +11:00

feat: certbot reorg

2024-07-08 22:33:11 +10:00

Clarify postscreen dnswl bypass threshold comment

2026-10-13 20:35:59 +11:00

fix: replace puppetdbquery with native PQL queries (#457 )

2026-03-21 22:35:42 +11:00

Install encapic ENC client on puppet masters (#525 )

2026-09-20 00:32:40 +10:00

feat: manage qemu-agent

2023-11-17 22:25:43 +11:00

feat: stop manage nginx repo (#312 )

2025-06-09 14:18:30 +10:00

Decouple rspamd rule fetches from the service and verify repo signatures

2026-10-13 20:37:14 +11:00

feat: add rundeck runner user

2024-08-06 22:33:32 +10:00

neoloc/mpls_ldp_frr (#255 )

2025-04-24 16:51:31 +10:00

fix: replace puppetdbquery with native PQL queries (#457 )

2026-03-21 22:35:42 +11:00

feat: lxc updates (#258 )

2025-04-24 23:03:01 +10:00

feat: add SMTP submission listener and enhance stalwart configuration (#425 )

2025-11-09 18:48:06 +11:00

feat: update settings for ceph (#298 )

2025-05-25 20:22:00 +10:00

vault: move openbao plugin sockets off /tmp onto /run (#509 )

2026-08-09 12:14:02 +10:00

chore: centralise all yum repo configuration (#436 )

2026-01-15 21:35:13 +11:00

base.pp

Add profiles::puppet::migrate: repoint VM agents onto puppet-on-k8s (#493 )

2026-07-25 00:04:11 +10:00

defaults.pp

feat: migrate puppet-agent to openvox (#408 )

2025-10-18 19:11:38 +11:00

lldpd.pp

lldpd: run on physicals and expose neighbour topology as the lldp fact (#513 )

2026-08-08 18:41:50 +10:00

packages.pp

feat: add rundeck profile

2024-07-28 01:51:41 +10:00