- change puppetdb::sql to using the patroni profile - change puppetdb::api to use new patroni cluster - remove references to puppetlabs-puppetdb managed database - update consul rules to enable sessions Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/318
52 lines
1.6 KiB
YAML
52 lines
1.6 KiB
YAML
---
|
|
profiles::puppet::puppetdb_api::java_bin: /usr/lib/jvm/jre-11/bin/java
|
|
profiles::puppet::puppetdb_api::java_args:
|
|
'-Xmx': '2048m'
|
|
'-Xms': '256m'
|
|
|
|
profiles::puppet::puppetdb_api::read_database_host: 'replica.patroni-puppetdb-prod.service.consul'
|
|
profiles::puppet::puppetdb_api::read_database_port: 5432
|
|
profiles::puppet::puppetdb_api::read_database_username: 'puppetdb-read'
|
|
profiles::puppet::puppetdb_api::read_database_name: 'puppetdb'
|
|
profiles::puppet::puppetdb_api::read_database_validate: true
|
|
profiles::puppet::puppetdb_api::database_host: 'master.patroni-puppetdb-prod.service.consul'
|
|
profiles::puppet::puppetdb_api::database_port: 5432
|
|
profiles::puppet::puppetdb_api::database_username: 'puppetdb'
|
|
profiles::puppet::puppetdb_api::database_name: 'puppetdb'
|
|
profiles::puppet::puppetdb_api::database_validate: true
|
|
|
|
|
|
profiles::puppet::client::dns_alt_names:
|
|
- puppetdbapi.main.unkin.net
|
|
- puppetdbapi.service.consul
|
|
- puppetdbapi.query.consul
|
|
|
|
# additional altnames
|
|
profiles::pki::vault::alt_names:
|
|
- puppetdbapi.main.unkin.net
|
|
- puppetdbapi.service.consul
|
|
- puppetdbapi.query.consul
|
|
- puppetdbapi
|
|
|
|
consul::services:
|
|
puppetdbapi:
|
|
service_name: 'puppetdbapi'
|
|
tags:
|
|
- 'puppet'
|
|
- 'puppetdb'
|
|
- 'puppetdbapi'
|
|
address: "%{facts.networking.ip}"
|
|
port: 8080
|
|
checks:
|
|
- id: 'puppetdbapi_http_check'
|
|
name: 'PuppetDB API HTTP Check'
|
|
http: "http://%{facts.networking.fqdn}:8080"
|
|
method: 'GET'
|
|
tls_skip_verify: true
|
|
interval: '10s'
|
|
timeout: '1s'
|
|
profiles::consul::client::node_rules:
|
|
- resource: service
|
|
segment: puppetdbapi
|
|
disposition: write
|