unkinben 8bfd768764 dns: exclude k8s/LB ranges from dns-updater; track latest ...

Sets DNS_UPDATER_DENY_RANGES so the daemon never publishes records whose
address is in the k8s pod CIDR (10.42.0.0/16), service CIDR (10.43.0.0/16), the
LB VIP pool (198.18.200.0/24) or 198.18.199.0/24 — keeping kube-lb0/flannel/etc.
and their reverse PTRs out of the authoritative zones and stopping NOTAUTH
updates for zones we do not host. Exposes deny/allow ranges+domains as class
params. Also bumps package_ensure to 'latest' so hosts pick up the filter
release (rpm-internal metadata_expire is 1h).

2026-07-18 02:01:47 +10:00

..

accounts

feat: enable managing root password (#429)

2025-12-28 20:12:12 +11:00

almalinux

feat: enable network manager on el9 (#189)

2024-12-08 19:11:54 +11:00

apt

feat: prepare puppet for debian

2024-04-13 22:34:28 +10:00

base

fix: manage git user (#339)

2025-07-06 11:27:35 +10:00

ceph

feat: add ceph service management profiles and facts (#459)

2026-04-07 19:02:17 +10:00

cloudinit

feat: manage cloudinit

2023-11-17 22:17:24 +11:00

cobbler

feat: add new cobbler master (#355)

2025-07-12 20:31:43 +10:00

consul

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

dhcp

benvin/dhcp_failover (#327)

2025-06-29 13:36:16 +10:00

dns

dns: exclude k8s/LB ranges from dns-updater; track latest

2026-07-18 02:01:47 +10:00

edgecache

feat: stop manage nginx repo (#312)

2025-06-09 14:18:30 +10:00

etcd

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

firewall

feat: add firewalld management profile

2023-10-22 19:54:10 +11:00

firstrun

chore: add sysadmin user after first run (#242)

2025-04-02 20:27:11 +11:00

gitea

feat: act runner updates (#432)

2026-01-03 21:51:47 +11:00

haproxy

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

helpers

feat: sign ssh host keys

2024-06-01 22:51:42 +10:00

jupyter

feat: update jupyterlab container (#209)

2025-01-04 14:10:44 +11:00

ldap

feat: add users/services/groups

2024-07-01 22:54:22 +10:00

media

chore: minor jellyfin updates (#300)

2025-05-27 19:55:55 +10:00

metrics

feat: upgrade grafana from default to 13.0.2 (#470)

2026-06-06 23:46:16 +10:00

minio

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

nginx

fix: ensure nginx restarts on certificate changes (#402)

2025-09-29 22:38:00 +10:00

nomad

feat: add node_pools (#317)

2025-06-15 17:43:19 +10:00

ntp

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

ovirt

feat: add ovirt roles

2024-03-16 16:43:12 +11:00

pki

feat: certbot reorg

2024-07-08 22:33:11 +10:00

postfix

refactor: recreate profiles::postfix::gateway with parameterization and templates (#416)

2025-11-01 17:26:00 +11:00

proxmox

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

puppet

feat: puppetboard 7 python (#453)

2026-03-16 23:53:52 +11:00

qemu

feat: manage qemu-agent

2023-11-17 22:25:43 +11:00

reposync

feat: stop manage nginx repo (#312)

2025-06-09 14:18:30 +10:00

rundeck

feat: add rundeck runner user

2024-08-06 22:33:32 +10:00

selinux

neoloc/mpls_ldp_frr (#255)

2025-04-24 16:51:31 +10:00

sql

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

ssh

feat: lxc updates (#258)

2025-04-24 23:03:01 +10:00

stalwart

feat: add SMTP submission listener and enhance stalwart configuration (#425)

2025-11-09 18:48:06 +11:00

storage

feat: update settings for ceph (#298)

2025-05-25 20:22:00 +10:00

vault

fix: replace puppetdbquery with native PQL queries (#457)

2026-03-21 22:35:42 +11:00

yum

chore: centralise all yum repo configuration (#436)

2026-01-15 21:35:13 +11:00

base.pp

feat: migrate puppet-agent to openvox (#408)

2025-10-18 19:11:38 +11:00

defaults.pp

feat: migrate puppet-agent to openvox (#408)

2025-10-18 19:11:38 +11:00

packages.pp

feat: add rundeck profile

2024-07-28 01:51:41 +10:00