puppet-prod

Files

T

unkin-agent 6c880d9794 Add consul server federation SANs to consul server certs (#547 )

WAN federation through mesh gateways makes Consul verify server certs against `server.<dc>.consul` and `<node_name>.server.<dc>.consul`. Node names are FQDNs, so each server needs its exact SAN. This adds the SANs ahead of Consul server TLS, which a stacked follow-up enables once the reissued certs are verified.

- add `server.<country>-<region>.consul` to consul server alt_names
- add `<fqdn>.server.<country>-<region>.consul` to consul server alt_names

Reviewed-on: #547
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-10-09 21:51:43 +11:00

country/au/region

consul: use static server list for clients (#544 )

2026-10-05 21:33:03 +11:00

nodes

Add router role for prodnxsr0020 (#536 )

2026-10-03 22:40:01 +10:00

Shorten metadata_expire on internal RPM repos (#526 )

2026-09-20 00:55:19 +10:00

roles

Add consul server federation SANs to consul server certs (#547 )

2026-10-09 21:51:43 +11:00