coveo/k8s-puppet repository overview

⁠1. Presentation

This docker can only be used on K8S because it will use config maps and secret to define the whole configuration.

Foreman installer is used to install foreman-proxy, puppetmaster, puppetca. PuppetCA will create certificate for : puppet cluster foreman proxy foreman An NFS share is used to store all certificates from puppetCA

⁠2. Configuration

⁠Secret to set

• mountPath: /root/.ssh/id_rsa.cloudops_management_conf

⁠ConfigMap to set

• /etc/puppet/foreman.yaml
• /etc/puppet/autosign.conf
• /etc/puppet/puppet.conf
• /etc/foreman-proxy/settings.d/puppet.yml
• /etc/foreman-proxy/settings.d/puppet_proxy_puppet_api.yml
• /etc/foreman-proxy/settings.d/puppet_proxy_legacy.yml
• /etc/foreman-proxy/settings.d/puppetca.yml
• /etc/foreman-proxy/settings.d/puppet_proxy_puppetrun.yml
• /root/.ssh/config

⁠EFS Configuration

Create Persistent Volumes and Persistent Volumes claims. Mount volume on /var/lib/puppet/ssl