Ben Vincent

unkinben pushed to benvin/rename-terraform-infra at unkin/terraform-vault

2026-08-06 23:09:19 +10:00

6e7a052293 Grant terraform-infra kv metadata read

ba5f49f358 ci: re-run (litellm provider transient 500 on prior plan)

92b8fdd0dd Rename terraform-ipam CI Vault access -> terraform-infra

Compare 3 commits »

unkinben created branch benvin/rename-terraform-infra in unkin/terraform-vault

2026-08-06 23:09:18 +10:00

unkinben pushed to benvin/initial-infra at unkin/terraform-infra

2026-08-06 23:09:01 +10:00

9bdf9ce9fc Fix vault provider auth in CI: skip_child_token + correct kv path

unkinben commented on issue unkin/terraform-infra#1

2026-08-06 22:51:15 +10:00

Automate PuppetDB reality backfill into NetBox

Per Ben: the backfill should query pdbmux (the PuppetDB multiplexer) rather than PuppetDB directly — use pdbmux's endpoint/auth as the fact source for the reality backfill. See unkin/pdbmux…

unkinben created pull request unkin/rpmbuilder#172

2026-08-06 22:50:49 +10:00

fix: require openvox-agent instead of puppet-agent in puppet-initial

unkinben pushed to benvin/puppet-initial-openvox-agent at unkin/rpmbuilder

2026-08-06 22:50:34 +10:00

5fb08937ba fix: require openvox-agent instead of puppet-agent in puppet-initial

unkinben created branch benvin/puppet-initial-openvox-agent in unkin/rpmbuilder

2026-08-06 22:50:34 +10:00

unkinben commented on issue unkin/terraform-vault#112

2026-08-06 22:42:26 +10:00

terraform-vault plan CI broken: litellm secret backend returns 500 (blocks all PRs)

Fix PR updated: puppet-prod#508 (tmpfiles exclude) is closed in favour of the permanent fix puppet-prod#509 — a vault.service drop-in that sets TMPDIR=/run/vault-plugins (RuntimeDirectory on…

unkinben created pull request unkin/puppet-prod#509

2026-08-06 22:42:13 +10:00

vault: move openbao plugin sockets off /tmp onto /run

unkinben pushed to benvin/vault-plugin-tmpdir at unkin/puppet-prod

2026-08-06 22:41:55 +10:00

26c5235d00 vault: move openbao plugin sockets off /tmp onto a /run RuntimeDirectory

unkinben created branch benvin/vault-plugin-tmpdir in unkin/puppet-prod

2026-08-06 22:41:55 +10:00

unkinben closed pull request unkin/puppet-prod#508

2026-08-06 22:40:32 +10:00

vault: stop systemd-tmpfiles reaping openbao plugin sockets

unkinben commented on pull request unkin/puppet-prod#508

2026-08-06 22:40:20 +10:00

vault: stop systemd-tmpfiles reaping openbao plugin sockets

Superseded by the permanent TMPDIR drop-in approach (per user): instead of excluding plugin sockets from the /tmp cleaner, move them off /tmp entirely onto /run (tmpfs, no age-based cleanup) via a…

unkinben commented on issue unkin/terraform-vault#112

2026-08-06 22:32:48 +10:00

terraform-vault plan CI broken: litellm secret backend returns 500 (blocks all PRs)

Root cause found (post-incident audit). The plugin never crashed: it was systemd-tmpfiles-clean on the bao nodes reaping the go-plugin control socket /tmp/pluginNNN out from under a still-runni…

unkinben created pull request unkin/puppet-prod#508

2026-08-06 22:32:17 +10:00

vault: stop systemd-tmpfiles reaping openbao plugin sockets

unkinben pushed to benvin/openbao-plugin-socket-tmpfiles at unkin/puppet-prod

2026-08-06 22:32:01 +10:00

5e8cff921c vault: keep systemd-tmpfiles from reaping openbao plugin sockets

unkinben created branch benvin/openbao-plugin-socket-tmpfiles in unkin/puppet-prod

2026-08-06 22:32:01 +10:00

unkinben created pull request unkin/bootapi-templates#6

2026-08-06 22:19:46 +10:00

Add inst.ks.sendmac to the iPXE boot script

unkinben created pull request unkin/bootapi#4

2026-08-06 22:19:44 +10:00

Add inst.ks.sendmac to the iPXE boot script

unkinben created branch benvin/ipxe-sendmac in unkin/bootapi-templates

2026-08-06 22:19:34 +10:00