Ben Vincent
e9c7fbc2b5
- wait for the enc_role fact to be updated and match - move puppetdb db/api host values to common.yaml - add vault cert altnames for consul query/service addresses - add consul services/rules/checks
35 lines
850 B
YAML
35 lines
850 B
YAML
---
|
|
profiles::puppet::puppetdb_api::java_bin: /usr/lib/jvm/jre-11/bin/java
|
|
profiles::puppet::puppetdb_api::java_args:
|
|
'-Xmx': '512m'
|
|
'-Xms': '256m'
|
|
|
|
# additional altnames
|
|
profiles::pki::vault::alt_names:
|
|
- puppetdbapi.main.unkin.net
|
|
- puppetdbapi.service.consul
|
|
- puppetdbapi.query.consul
|
|
- puppetdbapi
|
|
|
|
consul::services:
|
|
puppetdbapi:
|
|
service_name: 'puppetdbapi'
|
|
tags:
|
|
- 'puppet'
|
|
- 'puppetdb'
|
|
- 'puppetdbapi'
|
|
address: "%{facts.networking.ip}"
|
|
port: 8080
|
|
checks:
|
|
- id: 'puppetdbapi_http_check'
|
|
name: 'PuppetDB API HTTP Check'
|
|
http: "http://%{facts.networking.fqdn}:8080"
|
|
method: 'GET'
|
|
tls_skip_verify: true
|
|
interval: '10s'
|
|
timeout: '1s'
|
|
profiles::consul::client::node_rules:
|
|
- resource: service
|
|
segment: puppetdbapi
|
|
disposition: write
|