3 Commits (7ad8fff7c6ba8abfcc9a861a3e50a78d9db3caae)

Author	SHA1	Message	Date
Dustin	6e2cbeb102	ansible: Add service account for host-provisioner ... The _k8s-worker_ Ansible role in the configuration policy now uses the Kubernetes API to create bootstrap tokens for adding worker nodes to the cluster. For this to work, the pod running the host-provisioner must be associated with a service account that has the correct permissions to create secrets and access the `cluster-info` ConfigMap.	2025-06-30 16:16:28 -05:00
Dustin	8f5129cbef	dch-webhooks: Enable test hosts in provisioner ... By default, the _pyrocufflink_ Ansible inventory plugin ignores VMs whose names begin with `test-`. This prevents Jenkins from failing to apply policy to machines that it should not be managing. The host provisioner job, though, should apply policy to those machines, so we need to disable that filter.	2025-03-04 19:23:49 -06:00
Dustin	bed5ed5767	dch-webhooks: Enable host provisioning feature ... The *dch-webhooks* server now has a _POST /host/online_ hook that can be triggered by a new machine when it first comes online. This hook starts an automatic provisioning process by creating a Kubernetes Job to run Ansible and publishing information about the host to provision via AMQP. Thus, the server now needs access to the Kubernetes API in order to create the Job and access to RabbitMQ in order to publish the task parameters.	2025-02-08 16:59:26 -06:00