... | ... | @@ -1116,6 +1116,17 @@ A similar recipe could be applied to the git repository, as |
|
|
needed. Hopefully this will be resolved when we start deploying with a
|
|
|
role account instead.
|
|
|
|
|
|
### Puppet server CA renewal
|
|
|
|
|
|
TODO: no procedure established yet, some thoughts:
|
|
|
|
|
|
https://dev.to/betadots/extending-puppet-ca-38l8
|
|
|
|
|
|
The `installer/puppet-bootstrap-client` in `tsa-misc.git` must also be
|
|
|
updated.
|
|
|
|
|
|
This is not expected to happen before year 2039.
|
|
|
|
|
|
## Disaster recovery
|
|
|
|
|
|
Ideally, the main Puppet server would be deployable from Puppet
|
... | ... | |