Skip to content

(openvpn) openvpn install with lets encrypt #1707

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: production
Choose a base branch
from
Open

(openvpn) openvpn install with lets encrypt #1707

wants to merge 1 commit into from

Conversation

@dtapiacl
Copy link
Contributor

@dtapiacl dtapiacl commented Apr 16, 2025 •
edited
Loading

Manages install of openvpn with lets encrypt and version control.

This PR goes well with: lsst-it/k8s-cookbook#959

@dtapiacl dtapiacl added the enhancement New feature or request label Apr 16, 2025
@dtapiacl dtapiacl self-assigned this Apr 16, 2025
@dtapiacl dtapiacl force-pushed the IT-5148_openvpn_install_w_db branch 11 times, most recently from 9b13b12 to a11e70c Compare April 23, 2025 16:35
@dtapiacl dtapiacl force-pushed the IT-5148_openvpn_install_w_db branch 5 times, most recently from 8682dc5 to 6daa69c Compare April 24, 2025 22:44
@dtapiacl dtapiacl changed the title It 5148 openvpn install w db (openvpn) openvpn install with lets encrypt Apr 24, 2025
@dtapiacl dtapiacl force-pushed the IT-5148_openvpn_install_w_db branch 9 times, most recently from ea6469f to 08931c5 Compare April 25, 2025 19:43
@dtapiacl dtapiacl marked this pull request as ready for review April 25, 2025 19:52
@dtapiacl dtapiacl marked this pull request as draft April 25, 2025 19:52
@dtapiacl dtapiacl force-pushed the IT-5148_openvpn_install_w_db branch 6 times, most recently from a360e2d to 8a54cde Compare May 8, 2025 15:28
@dtapiacl
Copy link
Contributor Author

dtapiacl commented May 8, 2025

This appears to install the openvpn packages. How is the service configured? Do we need to manage the service state?

I have updated the code to ensure that the service is always running and is enabled.

@dtapiacl dtapiacl force-pushed the IT-5148_openvpn_install_w_db branch from 8a54cde to 65c8be5 Compare May 9, 2025 15:30
@dtapiacl dtapiacl requested a review from jhoblitt May 12, 2025 16:28
@dtapiacl dtapiacl force-pushed the IT-5148_openvpn_install_w_db branch from 65c8be5 to 3ed0e75 Compare May 12, 2025 16:38
jhoblitt
jhoblitt reviewed May 12, 2025
View reviewed changes
Copy link
Member

@jhoblitt jhoblitt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In this repo, the () value is supposed to refer to the hiera layer or puppet class being modified.

What is the relationship between this PR and lsst-it/k8s-cookbook#917?

@jhoblitt jhoblitt mentioned this pull request May 12, 2025
Closed
@dtapiacl dtapiacl force-pushed the IT-5148_openvpn_install_w_db branch from 3ed0e75 to 5ecd93d Compare May 13, 2025 13:13
@dtapiacl dtapiacl force-pushed the IT-5148_openvpn_install_w_db branch from 5ecd93d to c4e30ac Compare May 20, 2025 18:32
@dtapiacl dtapiacl force-pushed the IT-5148_openvpn_install_w_db branch 3 times, most recently from 40a3646 to 836bec3 Compare August 19, 2025 17:58
@dtapiacl
Copy link
Contributor Author

dtapiacl commented Aug 20, 2025 •
edited
Loading

In this repo, the () value is supposed to refer to the hiera layer or puppet class being modified.

What is the relationship between this PR and lsst-it/k8s-cookbook#917?

This PR will handle the installation of the ovpn package with Let's Encrypt while giving us control of the versions installed. This PR relates directly to lsst-it/k8s-cookbook#959 and it supersedes (917).

PR (959) deploys the OVPN database with its operator in a galera setup. This is currently being tested in Ayekan and is working as expected at vpn.dev.lsst.org, and I have not run into any issues while linking the ovpn server to the Kubernetes database, i also updated the server from version 2.14 to 3.0 without problems.

@dtapiacl dtapiacl force-pushed the IT-5148_openvpn_install_w_db branch from 836bec3 to 204034d Compare August 25, 2025 18:18
@dtapiacl dtapiacl mentioned this pull request Sep 4, 2025
Open
@dtapiacl dtapiacl force-pushed the IT-5148_openvpn_install_w_db branch from 204034d to 01d9b42 Compare September 4, 2025 19:00
@dtapiacl dtapiacl requested review from a team and jhoblitt and removed request for cbarria, csilva-cl, gseriche and jhoblitt September 4, 2025 19:02
jhoblitt
jhoblitt reviewed Sep 26, 2025
View reviewed changes
Copy link
Member

@jhoblitt jhoblitt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What does this profile do that the a forge module such as https://forge.puppet.com/modules/puppet/openvpn/readme doesn't do?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jhoblitt jhoblitt jhoblitt requested changes

Requested changes must be addressed to merge this pull request.

Assignees

@dtapiacl dtapiacl

Labels

enhancement New feature or request

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@dtapiacl @jhoblitt