unkin/rpmbuilder
4
0
Fork 0
Code Issues 9 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat: make puppet-initial CA endpoint configurable, default to k8s puppetca #171

Merged
benvin merged 1 commits from benvin/puppet-initial-puppetca into master 2026-07-29 21:36:48 +10:00
Conversation 0 Commits 1 Files Changed 6
+70 -4

1 Commits

Author SHA1 Message Date
Ben Vincent 57a472d24e feat: make puppet-initial CA endpoint configurable, default to k8s puppetca
ci/woodpecker/pr/build-fedora42 Pipeline was successful
Details
ci/woodpecker/pr/build-fedora44 Pipeline was successful
Details
ci/woodpecker/pr/build-fedora43 Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/build-almalinux9 Pipeline was successful
Details
ci/woodpecker/pr/build-almalinux8 Pipeline was successful
Details 
The puppet-initial firstrun bootstrap hardcoded the legacy Consul CA
endpoint puppetca.query.consul:8140. That VM-era CA is being replaced by
the in-cluster puppetserver CA service.

- Default the CA host to puppetca.k8s.syd1.au.unkin.net (still :8140,
  same /puppet-ca/v1/certificate/ca API; verified serving HTTP 200).
- Read PUPPETCA_HOST / PUPPETCA_PORT from the environment so a host can
  be pointed at a different CA without rebuilding the RPM.
- Wire the env through systemd via EnvironmentFile=-/etc/sysconfig/puppet-initial
  and ship a commented %config(noreplace) example at that path, so a
  kickstart %post can override per-host.
- Document the override (incl. a kickstart %post example) in a new README.
- Bump el8/el9 build version 1.0.3 -> 1.0.4 so a new RPM is published.

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
 2026-07-28 22:01:10 +10:00