puppet-prod/hieradata/roles/infra/puppetdb/api.yaml
Ben Vincent cb1d562cb0 feat: migrate pupeptdb sql to patroni (#318)
- change puppetdb::sql to using the patroni profile
- change puppetdb::api to use new patroni cluster
- remove references to puppetlabs-puppetdb managed database
- update consul rules to enable sessions

Reviewed-on: https://git.query.consul/unkinben/puppet-prod/pulls/318
2025-06-19 05:52:32 +10:00

52 lines
1.6 KiB
YAML

---
profiles::puppet::puppetdb_api::java_bin: /usr/lib/jvm/jre-11/bin/java
profiles::puppet::puppetdb_api::java_args:
'-Xmx': '2048m'
'-Xms': '256m'
profiles::puppet::puppetdb_api::read_database_host: 'replica.patroni-puppetdb-prod.service.consul'
profiles::puppet::puppetdb_api::read_database_port: 5432
profiles::puppet::puppetdb_api::read_database_username: 'puppetdb-read'
profiles::puppet::puppetdb_api::read_database_name: 'puppetdb'
profiles::puppet::puppetdb_api::read_database_validate: true
profiles::puppet::puppetdb_api::database_host: 'master.patroni-puppetdb-prod.service.consul'
profiles::puppet::puppetdb_api::database_port: 5432
profiles::puppet::puppetdb_api::database_username: 'puppetdb'
profiles::puppet::puppetdb_api::database_name: 'puppetdb'
profiles::puppet::puppetdb_api::database_validate: true
profiles::puppet::client::dns_alt_names:
- puppetdbapi.main.unkin.net
- puppetdbapi.service.consul
- puppetdbapi.query.consul
# additional altnames
profiles::pki::vault::alt_names:
- puppetdbapi.main.unkin.net
- puppetdbapi.service.consul
- puppetdbapi.query.consul
- puppetdbapi
consul::services:
puppetdbapi:
service_name: 'puppetdbapi'
tags:
- 'puppet'
- 'puppetdb'
- 'puppetdbapi'
address: "%{facts.networking.ip}"
port: 8080
checks:
- id: 'puppetdbapi_http_check'
name: 'PuppetDB API HTTP Check'
http: "http://%{facts.networking.fqdn}:8080"
method: 'GET'
tls_skip_verify: true
interval: '10s'
timeout: '1s'
profiles::consul::client::node_rules:
- resource: service
segment: puppetdbapi
disposition: write